last executing test programs: 13.470849024s ago: executing program 2 (id=1939): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x9, 0xfffd, 0x0, 0xfffc}, 'syz1\x00', 0x36}) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x24000) chmod(&(0x7f00000001c0)='./file0\x00', 0x80) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r7) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r8, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff00}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8f) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup2(r2, r10) ioctl$NBD_SET_SIZE(r11, 0xab02, 0xffffffffffffffdf) umount2(&(0x7f0000000040)='./file0\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) 11.210793469s ago: executing program 1 (id=1943): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) unshare(0x22020400) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13584, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r2, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000180)=r6, 0x1) io_uring_enter(r2, 0x0, 0x3, 0x7, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5", 0x4) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=[@op={0x18}], 0x18, 0x4000000}], 0x1, 0x20040040) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 10.702982764s ago: executing program 4 (id=1944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, @win={{0x2, 0x0, 0x0, 0x1}, 0x7, 0xef, &(0x7f0000000040)={{0x0, 0x0, 0x3fc}}, 0x62, 0x0}}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1000010002"], 0x101000) r1 = io_uring_setup(0xf02, &(0x7f0000000080)={0x0, 0xd9d8, 0x8}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) getdents64(r0, &(0x7f0000000340)=""/102, 0x66) 10.644706333s ago: executing program 1 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000, 0x6, &(0x7f0000692000/0x3000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000280)=0x1e51, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 10.623205104s ago: executing program 4 (id=1946): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x5d11], [0x10000, 0x6b43, 0x0, 0x2, 0x3a3], [0x7, 0x0, 0x7ff]], '\x00', [{0x0, 0x3}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x5f, 0x5f}, {}, {0x0, 0x7}, {0x8, 0x9}, {0x0, 0xfffffffe}, {0x0, 0xbcf}, {0x3, 0x2}], '\x00', 0x1000}) listen(r1, 0x131) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r4, 0x0, 0x8}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 9.683238383s ago: executing program 1 (id=1948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfffffff0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="d0a5cbeb84ef04ac673f294592144e0046a6937d51c09010055f15b413faab4d5e5e9f84f0afab29f431525e58aaf1e1059b8c8d2d322a94c67662626d47c98ec22bf6a5358a43ee8f59e4ab0b20e98586ea49d7dde9d62f07343ca08057aed48940795c786be7b0edf9a56954cee2b7972d500a884ae27fe2d76c52786c2b1a34bb322d0ed6a236640de0e660a74e25d877200562feb49f5900cb96ec992d0f558cef533fc2a9b518deeaefd2afd5fe2344ba63155b3fb93c0cc688920db4d2bfc8a7923cebf4", 0xc7}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0xe942, @mcast1, 0x253}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000d00)="4972c84bddde8d6ae6afd07dbf664cb853d1eaf687fab42a27223485d7077962dcd602418e651105be883cd25675c7907f6692d8a0da4bba5bb3c48c90fa971b8bbf49ed3b4091d5d14f5e65025638708f755db961a815fe9cc6eb51c774272cdd57fc243aca5ee2ada82adebd442ff628cc5bf811e87316b01da3f9e0e00d89ee81b67e4fc4f612fcefbf358b7625305e01b69622aff0fd402a8798810e98ceeca66a657700341672d45982df5ae28c020d4cdd76b3840c18d658f7a57ede7e80f8b65d43344f1d", 0xc8}, {0x0}], 0x2}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000006c0)="934ec8a63fdf961c58833301fa06835321d39f91f286a7d54e72e6cd39a6d0105707dcfb4bc4e7c337bc7b1aff424782c46bc8268c96c6275a36e860ede35fb3808a9c678c0227eefc991f032691330bc76aafd3098511", 0x57}, {&(0x7f0000000740)}, {&(0x7f0000000780)="cf9456aad700b2dcd74995e66b4db3fda6af7fc77e281b56b0a986f61d8be647c05a5e467ff868fb38af78e91426b77221105937945e7577e968fecadc0dc482f3102ac815fb52e72602a605b565fade4b97fdf15d9607cc35c8defcc4d75615aa522d5c4bab63124601b640a4b7838baa5545aa895e6e14dda8566438c599480a47fc9c7b792aaf67be1704bea5a6582ffa13943c040bb784ad77011c384bc955599d88cc215271ff3c9a2629f956f5656ca1e1e5ea5a79fd7ee86d145ee72616143502060cb5356f5b032211ce2f4e946ebdf3881a967d4a2d905ed09238", 0xdf}, {&(0x7f0000000880)="aa3866689a7eca48bf76fae4d0cb29c60d15bb36b83ed1bfd67a68611a35467c3f49869dde12877b", 0x28}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="280000000000010000000100390000003202020000000000fe80000000000000010000000000320000000000", @ANYRES32=0x0, @ANYBLOB="00000000380000000000000029000000040000002b03000000000000070800000000000b0000c013f811cac2772a29b07c44776d"], 0x88}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x750, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b00)="173e50c6d30e74844125e55cb1e12c548ef35e2ab64015b5dcb51a3e511a4a61edc8648507d1a48fc5fd209b42c1f465cb9a06c267533db2e816d47761c182dd5baed25d63c9369430f97dc475cf18fa316153194c5385e91a9a304b6491fec153107789788d77f023d068c0c60c395e2b42bd579f56fd71ac32b533d641fcc8def20e3ce64f0b9331af96a6a294f7bf424cdcf728650f4d0234152b328e2001b18e81d47a6fc0213ee8af38d5338be7e25b9bd814f7f50cefc3e8ce5f9153cdbea71a0460e5a445b997542ab60d690f3578885315edd4465a7845ea016af6ddec98a659e1a7238d6458881e93f1e92dc89aa8", 0xf3}], 0x1, &(0x7f0000000d00)}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x178}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf8f3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000002900000034494031d6ac68d17efc937f8966a8c9000000050000000000000073e7638c5ab953adc3def39a618e9b9c8eb80aa6f0188c8a0abe1d692ecde7fa28f4fcf432c84bd7c67e571163618a943888b39dbc13362089fe1086b704e909f2680ad366a0caa37e9c06f88bbb626b822fe585862f89c4c2f2da2e227a0fc52831febb28e9b3d27c46bd0b8f1dd1451dd7256e985a09fd9fd4afd4ed1d8804bdc306c9652e0faed860a15c09d7a8951854773c80cf5ddb2118c6b5a6a72d8a1ce22b33b30e18bdb208c4c1342ad99e3901c285daee9c523362fb8616a4fb2db559d2c2bb3d61fcdffcb1e40fbcced414593f4c59a0dc8e4ff051d8d16323"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="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"], 0x1f0}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x6, @empty, 0x1}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001900)="d12b78be7dd252ed1bf5b69cc8a4f820540d9df44165c4c110b9884c6dc1be98790dd61854", 0x25}, {0x0}], 0x2, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1400000000000000290000003400000008000000000000001400000000000000290000003e0000000700000000000000140000000000000029000000430000000000000000000000380000000000000029000000390003000000000000000000fe8000000000000000000000000000aafe800000000000000000000000000014140000000000000029000000080000000080000000000000280000000000000029000000370000008901000000000000070800000002000f090000010000000014000000000000002900000008000000f400000000000000"], 0xd8}}], 0x8, 0x4000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd3f, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) 8.880936319s ago: executing program 0 (id=1951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8000000000000e1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x41a500, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000340)={0x18, 0x1, 0x1, 0x0, r7, 0x81}) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 8.564224827s ago: executing program 2 (id=1952): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 7.563328219s ago: executing program 0 (id=1954): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) 7.488730396s ago: executing program 3 (id=1955): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$cec(0x0, 0x0, 0x1179c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) openat$cgroup_type(r1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x181002, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount$fuse(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x10, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="d2203a34ed3d3dd94a2bc1834ed509007d3c0bcceb4ea509d458db26445417e7500c7b1ed0840e943f90a54ecbd99015305ca368a06cf1352b600e6dbe7373aab544eec8227c3f8ec62a39d55639776ae92b96e1e44e8dd4d7233931aad5c484af74443bba83f78acfefc1021e19b64dfe75a76fc8b932d7ac6deba925a76bc36325be83b7b3d9ed8a3b8d9bbe33ee7cf221504281ca41840b5c4188db7c9ff97d82", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000c00,obj_role=0,silent,euid<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=root,smackfsdef=^)^-,\x00']) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x1) r4 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 6.598027813s ago: executing program 0 (id=1956): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) io_setup(0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f631c688388cd"], 0x8) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) close(r0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x2001a) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="928b5c778a2d388841a271dd8211c5621a2ffb5593aebcd3e9f4e991f3a2077a31b1aa12df52"], 0x20}}, 0x2) (async) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0009040c000000000000000a000000020000c20e000000fb1aaf1b4f7b754a45573866359f00af08001e0001000800b6ca95aea82c41c510a2645ed1469066346055a072ab7bb30fd5460e132561dc6d4af022d8712306f86dc9"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000100400120008000100", @ANYRES32=r5, @ANYBLOB="15749c616dd8cd721b6eb4d8c5051e73a40cac6355d6e20e1988b2e3ddded2c6cd2dba8d4823f100"/50], 0x6c}}, 0x6008) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 6.58791835s ago: executing program 4 (id=1957): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x50010) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) request_key(&(0x7f0000000100)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffe) read(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x207af8b8bd80393, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="b758855dab0330d138140000000000020029000000080000"], 0x18}}], 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2080, 0x0, 0x0, 0x9}, 0x10) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x4a4, 0x9}, 0xb, 0x5}}) 6.458945405s ago: executing program 3 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) write(r0, &(0x7f0000000140)="3eedce98f5b7e2cc7a93c1c2170cb5f7b119f0a15d0b74c1d302872193c9335f8ca66d00c0c110890e1150fc66e47326139b9589f3e3ac0ad86ef5de438d4c081236d99f9af4cc74cc10e4bbcdffca2f2bdde4d5ec6cd377d0f12f402487973d9599b0facb4a0103816e24001949912f986b67e8e5a893dda1b1fed3d31141294c591adc9343287de2fff6fe9151468751912a59d6d2cded15c46730e93cf7157c605f8fbaf59c703e9cd349e2e4f2e9", 0xb0) close(r0) 6.281686863s ago: executing program 0 (id=1959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020301090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x9, 0xfffd, 0x0, 0xfffc}, 'syz1\x00', 0x36}) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x24000) chmod(&(0x7f00000001c0)='./file0\x00', 0x80) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r7) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008044) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r8, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff00}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8f) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup2(r2, r10) ioctl$NBD_SET_SIZE(r11, 0xab02, 0xffffffffffffffdf) umount2(&(0x7f0000000040)='./file0\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) 6.226672494s ago: executing program 3 (id=1960): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r6 = eventfd2(0x0, 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) setpriority(0x1, 0xffffffffffffffff, 0xb) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r7, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2, 0x4], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 5.459740955s ago: executing program 4 (id=1961): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)='sysv\x00', 0x4000, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r0, 0x0, 0x7, &(0x7f0000000440)='cgrowp\x00'}, 0x30) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r6, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x3, 0xfffffffffffffffa, 0x3fff}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4c4581) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) r8 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) tkill(r4, 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700f00000000000000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f00000000000000000073696d3000000c00a6000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) 5.345092689s ago: executing program 2 (id=1962): mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000180)={0x0, 0x1, 0x80000}, 0xffffffffffffff3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x4, 0xf, 0x50, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x8001, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfffffff0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000002c0)="d0a5cbeb84ef04ac673f294592144e0046a6937d51c09010055f15b413faab4d5e5e9f84f0afab29f431525e58aaf1e1059b8c8d2d322a94c67662626d47c98ec22bf6a5358a43ee8f59e4ab0b20e98586ea49d7dde9d62f07343ca08057aed48940795c786be7b0edf9a56954cee2b7972d500a884ae27fe2d76c52786c2b1a34bb322d0ed6a236640de0e660a74e25d877200562feb49f5900cb96ec992d0f558cef533fc2a9b518deeaefd2afd5fe2344ba63155b3fb93c0cc688920db4d2bfc8a7923cebf4", 0xc7}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0xe942, @mcast1, 0x253}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000d00)="4972c84bddde8d6ae6afd07dbf664cb853d1eaf687fab42a27223485d7077962dcd602418e651105be883cd25675c7907f6692d8a0da4bba5bb3c48c90fa971b8bbf49ed3b4091d5d14f5e65025638708f755db961a815fe9cc6eb51c774272cdd57fc243aca5ee2ada82adebd442ff628cc5bf811e87316b01da3f9e0e00d89ee81b67e4fc4f612fcefbf358b7625305e01b69622aff0fd402a8798810e98ceeca66a657700341672d45982df5ae28c020d4cdd76b3840c18d658f7a57ede7e80f8b65d43344f1d", 0xc8}, {0x0}], 0x2}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000006c0)="934ec8a63fdf961c58833301fa06835321d39f91f286a7d54e72e6cd39a6d0105707dcfb4bc4e7c337bc7b1aff424782c46bc8268c96c6275a36e860ede35fb3808a9c678c0227eefc991f032691330bc76aafd3098511", 0x57}, {&(0x7f0000000740)}, {&(0x7f0000000780)="cf9456aad700b2dcd74995e66b4db3fda6af7fc77e281b56b0a986f61d8be647c05a5e467ff868fb38af78e91426b77221105937945e7577e968fecadc0dc482f3102ac815fb52e72602a605b565fade4b97fdf15d9607cc35c8defcc4d75615aa522d5c4bab63124601b640a4b7838baa5545aa895e6e14dda8566438c599480a47fc9c7b792aaf67be1704bea5a6582ffa13943c040bb784ad77011c384bc955599d88cc215271ff3c9a2629f956f5656ca1e1e5ea5a79fd7ee86d145ee72616143502060cb5356f5b032211ce2f4e946ebdf3881a967d4a2d905ed09238", 0xdf}, {&(0x7f0000000880)="aa3866689a7eca48bf76fae4d0cb29c60d15bb36b83ed1bfd67a68611a35467c3f49869dde12877b", 0x28}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="280000000000010000000100390000003202020000000000fe80000000000000010000000000320000000000", @ANYRES32=0x0, @ANYBLOB="00000000380000000000000029000000040000002b03000000000000070800000000000b0000c013f811cac2772a29b07c44776d"], 0x88}}, {{&(0x7f0000000ac0)={0xa, 0x4e22, 0x750, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b00)="173e50c6d30e74844125e55cb1e12c548ef35e2ab64015b5dcb51a3e511a4a61edc8648507d1a48fc5fd209b42c1f465cb9a06c267533db2e816d47761c182dd5baed25d63c9369430f97dc475cf18fa316153194c5385e91a9a304b6491fec153107789788d77f023d068c0c60c395e2b42bd579f56fd71ac32b533d641fcc8def20e3ce64f0b9331af96a6a294f7bf424cdcf728650f4d0234152b328e2001b18e81d47a6fc0213ee8af38d5338be7e25b9bd814f7f50cefc3e8ce5f9153cdbea71a0460e5a445b997542ab60d690f3578885315edd4465a7845ea016af6ddec98a659e1a7238d6458881e93f1e92dc89aa8", 0xf3}], 0x1, &(0x7f0000000d00)}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x178}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf8f3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="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"], 0x1f0}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x6, @empty, 0x1}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000001900)="d12b78be7dd252ed1bf5b69cc8a4f820540d9df44165c4c110b9884c6dc1be98790dd61854", 0x25}, {0x0}], 0x2, &(0x7f0000002bc0)=ANY=[@ANYBLOB="1400000000000000290000003400000008000000000000001400000000000000290000003e0000000700000000000000140000000000000029000000430000000000000000000000380000000000000029000000390003000000000000000000fe8000000000000000000000000000aafe800000000000000000000000000014140000000000000029000000080000000080000000000000280000000000000029000000370000008901000000000000070800000002000f090000010000000014000000000000002900000008000000f400000000000000"], 0xd8}}], 0x8, 0x4000041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0xd3f, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) 5.252831346s ago: executing program 3 (id=1963): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000680)=[0x0]) setpriority(0x1, 0xffffffffffffffff, 0xb) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r4, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2, 0x4], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2d, 'cpu'}]}, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 4.727104621s ago: executing program 1 (id=1964): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x50010) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) request_key(&(0x7f0000000100)='trusted\x00', 0x0, 0x0, 0xfffffffffffffffe) read(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x207af8b8bd80393, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="b758855dab0330d138140000000000020029000000080000"], 0x18}}], 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2080, 0x0, 0x0, 0x9}, 0x10) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x4a4, 0x9}, 0xb, 0x5}}) 4.70983399s ago: executing program 4 (id=1965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8000000000000e1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x41a500, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000340)={0x18, 0x1, 0x1, 0x0, r7, 0x81}) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 4.356804473s ago: executing program 2 (id=1966): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0xa}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, 0x0, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$caif_stream(0x25, 0x1, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x9d) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00') write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @note={0x8, 0x7, 0x40, 0x40, 0xdc1}}], 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') 2.091916119s ago: executing program 2 (id=1967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x20007fffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) exit(0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x3f, &(0x7f00000000c0)=0xa) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0xe07, 0x4}, 0x6b}, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000340)=[{}], 0x8, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {0x3}}) socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000002800)="6aeac22eb5908b43fa832aea956defa5a2214597447a487abdd2d713a76191105ebffc29aff68bd2ffba83db809e76dd21d97e0722ff1b03ddc336fbdf0cd7f8cb057ba8496da2eb271d2168d69fa02c29720255587fc9bddd739d21eb8ceaf1d30d19c73bb68552157508b506f53e052eff4ab7739043474b4c49ea00ca1588692c0892cecd90781d8d0ef27d5cd4e1e70b80e6ddd52d4fe25f9211a1ca28b0006f82e5f2bf3361b80e985b54c8a8eb4b0b036a1402aabcd79c538ae613cf8eb8ef49e5c1f3d31451c2abe2fff1e0e40d409578fe8107e701a2e305990ffeaf3a80bda589726ffd6cf79213ba9b161e1713acd8a4a6c86d0cfd4c05793597fc2907b981becaec2511e38af7a607e9576d44bb818fc4d18e13a3df9a3ab8af25ceedd6c8ee0f4b97c6e8c65196d78094b1de61a1b27d75402ceacf6f22017789552a0fbbd53fa545fb162eb14781beb87c26e01ce756b6e67653c9d4ec2d44d5e5bff601a4503426b2807328e30e9e214ea265cf8be397e333632c76da7da8295e298adce7b4c1bd9879579e9f28837b3e0df54e0585fb623fa3a8e49bfcf1424e2bf434d74b72a3d6f7290d126a32ba9a07ff5be6936bd66dce7d718d77822ddd164918f6f22c4b42e2deed05e28c13b868c93852d697f6976f329ffe1f45b81c8dc7a3c024a9ba21741e47b75a29c04ecb20fccd217dc2524f6fb0550cd6e71949c7c027eb11cb8786bb3142d5322a6e694b07c2af75c7daf7dba50bb326476619b11f958934dd26f611e5f5d6ca31b70cc6378c180ff6ac6e7e71a6f4d2601111974c373a210b62608323f6d5def58c37fcd27d5efd837e50b03157f52328a33f5495ac739ab069a13d5e42dcd2e7f72a563b7beccbf1f889941a8a741ffce04acc15c617b5969db73ead14505bca02dc30acdc03b79e80cf7436ab76204e81bab63fbca871237f600c7e833c291ab451814db4a1084f177319149afc5c05c7b3ce3a116ce6804c76848366cb7db12d27cdbda93a3978978ccddeb71b6bf63fc1fb9705e34fb583a561affcd2012dc39c74a478ee738c1ab485c012df0b2930d1b012bb008336d1eaaac478fdf822f21cb3dcc2d2a8e967db11a1441163ea19b84f0cfb95c4c78985d9db96ec983387fc92afa09d71367f0afcaaf4f48604b275b24faafb167ced3f81390dbd13ea73bdea3bf2ffa72d08af65fd598ed207fd46b8ba9d69830e6609485739404c916c5fc0e45a7e01ad54493b7817f201a0d4cdf3454ac78391d9bfdb2af20a09d1da42ec7e923b58e1806d2761ae8cdab1f4129806ec8148b3b5af80bcb8692f9d7461d69e95738ee7764835f9abc8120edaab52259de8c7bbd08a9cfc23381daba82d835a1da84f19e378ed5e010ef4dcdab804b4716af7d1f2ef2a6c063a97a904350f011d01458e592b89fdaced144f58b7d14befeb914a8443c1982b4599a5302f2c97a527d6f1044e5b373cfa2bd5383c35aaceef1eeacb45c91684d1241c52e3f1a1e3938c5b36bc25d7fbdca4b4c14e9f52d34a5793aa9e52b3041eb4d5cfd2717f7128bd69cc5defd746e3a42c333b7d122704cb2fb4c3e0a7d38bb84071484d7b6a12305d0542ae540b5f87b3ab1e7e566d8e5b28a3652f314fe123b8ad9b05805d5abd30005830821ec46b1ae2718e23b9b346ba4104911d368c8266e8f0e41565e905c70466e1d7b1db91d3dcc9f783112f24f888b4a778d57daf093931e6cd1168dac04564a527714234fef575424971d33eedd0222501ae5dd8f7b90b65e0b7290978a06625d5e327891963ba75cca98e24c5ef65a90d39d608c9a0d90485ecf83aa9bd9d585b95874b6159ff693d038ca8226888d2c203baab59fc05f9dfe50868b57698248032efc764dd4d7af68432480f00986c21aafc09675135f3184146d67247305e64931047e4a680e42d80f45e8f53762167d43e069749e71840e5cfed320bc56525b93675d2f9c05548102edabae3df1e4540a3930faf3dcd1ff3dfc5da329f0f2325d5e6d62e5feaaf7b74d6aa6f81923d3f31aedfd7cdad812361e14f69a702ebac08937faca1ab817fe8f86bd14dbe1a18fe6dfe329cad510113dd7841c42dbf6ad61e84d72d76319495f9b37f218f97317a140e40e1f3d484c9b5bf5bf783d38e890ecc0a5111526200ddbf282123dd3e13c4fe7a39590b3f38759b0e245f54d54ce5e274f2ffa26eb3b40b335a997b93b232f48edc5987e553a58c9a55e6d3d0f796861100ba6b4adcda5aa4a0052bbaca99cb9aed4e97f8cac0a23a8a95190fbe4c621e2380e203d3905bb608c889aa2db67814d2178a5456e562ddafae5d6200133ed47f92e63003b9b978d4dce9f6de53c8b5ea6139db9c8a107708b71921e458545e4f90a16a4b726f7885531442daaab6a8a0df5bd739dda2075e58d921e45ee21b55dfd485ee9096134a4ed576644905c8fa1c1694b046fdae7fa1c97aa0b1181cb1f31be05d3b80dd70f67ca08e8fcb1fddadd48b52c5f90cafa3ad5c9d94f680cf05ad88cb84f7c3ec15ba6010eff6bdee67763c67c8e22509f8d5b9d0e6a0c771bc6a3b6431fe50b59c34d285561e145ac0110a4873fa70d8810bbec7b12869d026cb5b234176aec0579531a8ef4f9277e0729554557bc1ca76e95244e3fc860fbaf8261d8fb008e497cfef1787ec3c23a86ddb3e7c4ef80e645d11f58e0f777d101b16fc794debb072b1170d5a0f44cd5e77ef99b830519d550ed9be42311630e1e66b24ac8ba9e32a61152b4baa895168d1e840bebaa0d7eae72489be50368dcd5f4f35c9311928c62d17277ba7ca3396c4a373219c5b786f080cec3742c51d432c446e6b2addccc5e16d0daf6155ead0e6fba5376e20ec941b518764bd2b0a8d294862fd357b9fede2df0a7d6cc42d50280e6a1aee9ec5d7c1c3f4909c976970e65f34d3992fe42311d427ce193d75c3be7d18dc72c37d74070af0092d4c8a8b55a704fcf31bff70b385d2d6f20a5da5ab9510e39c6d3194e51e3f75f9a1a4c9437272137d9ce5a8b4fc17425e36df1af9319bb89dd467396d1bd4fafcdf3cc516208f49afa9928af71044e91decd105f66ebc8814a2d18442a9ae946b0ffe39a954c9f45dd057c80fd9728add1e64c7d9b02cc6e7153efc391f618e6acd0a346ba4799b74c368609414da01d2234e1822b63498a6e1c886282e2b6650275d1ac7c75d2c9a70386265e65fb5ec2c26561fc9cf7fe23394e5e6c5c6610db1e68c3a326d15b0f37401d7f6fc3d0d5e0b65646325050494d4780fc63eed98c2a402d6169e002d38ec9b4e260cf95997b37f0596a6328119d0ad9eb1863febca3191a31bb998b9e3b9fa15959abc290bfa5f17a76cfe09a2beaccc511ac956c10f0a2d761a07a68983ebf4f60e3633e8081b05aa3b54398695ba6284e3b80ad0f34a555d629a0853719b0bf271f20e57a04dd05f948ab9882b9d49bfc26c52ed129d601ab03237d4f967b5eb99fe26e3f070cefda944b52846401b54bc6f11ecd85dedf640dccecbad0deb51a74eca8d76770faa20c8948327c6728aa3e9795033692f1e30828356537a9e36883baa1d85d40a60808d7e37c5473b242990cb1d0d0dc243765a28c55df5fb121071eb5f19b7757bf028b587dd5b2560b44c749b2b6bb59a2c571f2d5a02903742e6b7cc5969a649383b5ca6a7f5a73b5d4fbe77dae0c47401d00f4ddeb21bab60e895d69b178c495328b9a678d54b9dfa57e8339823a779a4a27aa890a18cd7ce868e84113718979108a56c6144aee987aacd9c59ee7a397dd4841daaa68e8953fdf67f93b1c86e3ad55d86c878a6fcfc9f3f99e2f5f4d45b87a5b8f9de221b95b477b092be3271fd4c9f6869de85f461939fcaac34e3411027e09ad1fb3d32961aa5f107d28e89aeddb135051a29bf4ba42e06538d989ff3d072260e1ed7b673c0d64a5629d8eba7442455da96244ccaf44ba8572e29d354de5ed5ffd520adae06af30e4e7bdef0a5d7067c297155ca07b3ff593855cef1764eb1ee8727000628770c2b34d22e933d338e7b48331bb9d920d15e720300475d2ac94080ddb06f04a7ce5cef9aa93f4e304a432c577e10d6e997c63d64afa5f031b2da74fcb47da07b5f398fd87cd7fa9364f219f67cac467493287e84eb798bf419207af6abbe2e041811c5f85216bffee55ca485714c93fc7271137cd8207f4b81780de0e40b926aa39f8fa9d61d3642a6465c52f3de5ec7586bac0354d79a3d522545ed5932a947ca7e5b1de1e9649ae7655348021eba0ea993b5d30f124b73123d1110d9bb25afbce5423ec2d29ad599dc457dd9a23c6aee9e7b743881ddf191dbc9081bd4af0d73b19252bd2170a07a5151a29dc1dbff3888dd2ddfdccd8291d75aee8bdab6b08b56da32f7db7ace812e55bfc13eadbd8a32be26c526bb62a8b6252b9b9f647b093e9f181b191f30971db44310497bb678af2903c20ee1da961992dd88852f8cdb333d8523a22148bf989cdb080944fa3e15f4d97b3249ed79151b1d6aab17c33a29b2d3187f2f466e987aeebc80ba1571c62e0d487f27b4ccd07e6f4b8fc5f16633f9d8120aac09a30eccc7b0897a159425da07442034d0cbb05f29dfec4737187bed357c6551e10366703475c3ef831d59660eb5cf31a66581ce3bdd41ee1207e4b04cb6bc6823df99b770d0a3af2f4dec448f847b5cf66527be772734e9a7640a71a2940d5bd4783fc4284e251e9bb8370fc663cfaf8a4d8a0534dc0f7c2b0fb5a1c5c8cdb7d0e2e389e6e3461da725c430642234d29d3f631bd1270d4c0262fcd04cd1497900c0521869e84ae41f007c112c4d590f0c80947fcf2e00b46eb4c71b080477e5f846cf9af8a780391ee603990c76a9f0e33746cf9cd12080411572e8137ca875c868b15836d743dbe911ac3cc31a7599e896ef663b5dc13878625150d74c86bf61f7f937fc8012796db793a8998e024c6ee4280b81455104d95f23fe46df3ec3a9c2d5b6dbd61650da5f86f0d8bf08697b117e6d2bf293c807a4d351c81575ce16f31a174f88714e60832b51886d25f7e99bdd7a9b7c730e52becd861a9cbace033cc18ab24585fc4213100dc67a2e4aae09ce1d2d6af77cd91a0354e1afc85a86efa0c21743861e25bec588b0d81440ca0e03f4639208f5ca8c6802f336cd1a7c7974d0f57353782a90de7118cebf3b1aec995a344e974857d092dede5dce09795de2471d90fa0ffce791f4fae4c20a77df91ae26d36e40c475c03680d7f16872018cf680db7eee1a83d399bd3a381b1e8e8dece3c63bbee517b0b447dc39a631065b228684c987a1279b6522e62e51458b9ac6b081afaf4490f518cc3baf5afbf78103038a8a4b32ff440d7989292c3cceedf32176ede98b04026a1947ee5ec8039c6d29acacb949cdd2d09a374d2a8ae7717962cf5e62a4947cf37383093faaf868a52b24f698a27888d4da4ad19b89b38bfb5aae8cbd04be00558a3bdc0f4e147a0282e14a8a8a3280020ab0e16ec018bddcaf592198260a6f124f6d30381053c574d517413833a6d0f7877e93c37f9427fc082a5d0aec35128105261a83b34ab0b1a8695d22f09ed05932ae0d5857036317132d0d151fa29967cdc89ca2ed6b5978816ce1056698a62468c5aa9e97e52d5e1d9e2781510764107af6b348eb6096e7c52eaa5acf6138ed01a0eb4636c5862a509739284c783293799acc26981526837e40cace855829f19f662c828242c72de4340adb60a5e7678a21fee184fe1714ca6552d6fb3", &(0x7f0000000600)=""/88, &(0x7f0000000680)="6e5b769c7baead5252bab2eaa1d10e6af22742f7df97538bc2a383d1", &(0x7f0000003800)="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", 0x5, r5, 0x4}, 0x38) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7fff, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020) 2.090873023s ago: executing program 4 (id=1968): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x5d11], [0x10000, 0x6b43, 0x0, 0x2, 0x3a3], [0x7, 0x0, 0x7ff]], '\x00', [{0x0, 0x3}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x5f, 0x5f}, {}, {0x0, 0x7}, {0x8, 0x9}, {0x0, 0xfffffffe}, {0x0, 0xbcf}, {0x3, 0x2}], '\x00', 0x1000}) listen(r1, 0x131) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r4, 0x0, 0x8}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 2.053849546s ago: executing program 1 (id=1969): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x214000) write$P9_RLERROR(r1, &(0x7f0000000100)={0x11, 0x7, 0x2, {0x8, 'upperdir'}}, 0x11) syz_create_resource$binfmt(&(0x7f0000000180)='./bus\x00') 2.043311116s ago: executing program 3 (id=1970): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0xa}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, 0x0, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$caif_stream(0x25, 0x1, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$sndseq(r2, 0x0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x9d) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00') write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @note={0x8, 0x7, 0x40, 0x40, 0xdc1}}], 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') 1.68671894s ago: executing program 1 (id=1971): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) accept$unix(r3, &(0x7f0000000180), &(0x7f00000000c0)=0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480), 0x0, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88e3901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xaa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x6c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4a21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x67665}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x6c}}, 0x0) 1.430687665s ago: executing program 0 (id=1972): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x5d11], [0x10000, 0x6b43, 0x0, 0x2, 0x3a3], [0x7, 0x0, 0x7ff]], '\x00', [{0x0, 0x3}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x5f, 0x5f}, {}, {0x0, 0x7}, {0x8, 0x9}, {0x0, 0xfffffffe}, {0x0, 0xbcf}, {0x3, 0x2}], '\x00', 0x1000}) listen(r1, 0x131) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r4, 0x0, 0x8}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 975.99047ms ago: executing program 3 (id=1973): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r6 = eventfd2(0x0, 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) setpriority(0x1, 0xffffffffffffffff, 0xb) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r7, 0xe, 0x7f, 0x0, 0x0, [0x0], [0x0, 0x29, 0x2, 0x4], [], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 0s ago: executing program 0 (id=1974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b [ 553.533584][T11528] dump_stack_lvl+0x16c/0x1f0 [ 553.533611][T11528] should_fail_ex+0x50a/0x650 [ 553.533640][T11528] _copy_from_user+0x2e/0xd0 [ 553.533660][T11528] copy_msghdr_from_user+0x99/0x160 [ 553.533684][T11528] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 553.533721][T11528] ___sys_sendmsg+0xff/0x1e0 [ 553.533746][T11528] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.533798][T11528] ? __fget_files+0x206/0x3a0 [ 553.533823][T11528] __sys_sendmsg+0x16e/0x220 [ 553.533847][T11528] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.533888][T11528] do_syscall_64+0xcd/0x250 [ 553.533911][T11528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.533935][T11528] RIP: 0033:0x7f939ef8d169 [ 553.533949][T11528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.533967][T11528] RSP: 002b:00007f939fe05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.533985][T11528] RAX: ffffffffffffffda RBX: 00007f939f1a6160 RCX: 00007f939ef8d169 [ 553.533997][T11528] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000009 [ 553.534009][T11528] RBP: 00007f939fe05090 R08: 0000000000000000 R09: 0000000000000000 [ 553.534020][T11528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.534031][T11528] R13: 0000000000000000 R14: 00007f939f1a6160 R15: 00007ffd765653a8 [ 553.534056][T11528] [ 553.735487][T11511] fuse: Unknown parameter 'group_id00000000000000000000' [ 553.922531][ T8] usb 4-1: USB disconnect, device number 48 [ 554.495677][ T29] audit: type=1400 audit(1740227752.121:645): avc: denied { listen } for pid=11534 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 554.858008][ T29] audit: type=1400 audit(1740227752.151:646): avc: denied { create } for pid=11534 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 554.966363][ T29] audit: type=1400 audit(1740227752.221:647): avc: denied { ioctl } for pid=11534 comm="syz.1.1430" path="socket:[29581]" dev="sockfs" ino=29581 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 555.864065][ T5931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.974170][T11565] netlink: 'syz.3.1436': attribute type 62 has an invalid length. [ 557.203715][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 557.220391][ T5824] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 557.220444][ T5824] Bluetooth: hci2: Malformed LE Event: 0x02 [ 557.280992][ T29] audit: type=1400 audit(1740227754.881:648): avc: denied { write } for pid=11564 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 557.334795][T11572] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 557.389811][ T5900] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 557.619814][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 557.748997][ T5900] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 557.782142][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.964134][ T5900] usb 1-1: Product: syz [ 557.974567][ T5900] usb 1-1: Manufacturer: syz [ 557.986339][ T5900] usb 1-1: SerialNumber: syz [ 558.003117][ T5900] usb 1-1: config 0 descriptor?? [ 558.033252][ T5900] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 558.149728][T11579] 9pnet_fd: Insufficient options for proto=fd [ 558.423044][ T5881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.187321][ T5900] gspca_stk1135: reg_w 0x0 err -110 [ 559.233262][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.250910][T11569] netlink: 'syz.0.1438': attribute type 16 has an invalid length. [ 559.260914][ T5900] gspca_stk1135: Sensor write failed [ 559.276367][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.286228][T11569] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1438'. [ 559.305974][ T5900] gspca_stk1135: Sensor write failed [ 559.316148][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.336401][ T5900] gspca_stk1135: Sensor read failed [ 559.356608][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.406482][ T5900] gspca_stk1135: Sensor read failed [ 559.429691][ T5900] gspca_stk1135: Detected sensor type unknown (0x0) [ 559.441267][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.454698][ T5900] gspca_stk1135: Sensor read failed [ 559.468584][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.494487][ T5900] gspca_stk1135: Sensor read failed [ 559.512513][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.525450][ T5900] gspca_stk1135: Sensor write failed [ 559.531221][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 559.784281][ T5900] gspca_stk1135: Sensor write failed [ 559.789674][ T5900] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 559.799591][ T5900] usb 1-1: USB disconnect, device number 49 [ 559.851373][ T5826] udevd[5826]: setting mode of /dev/bus/usb/001/049 to 020664 failed: No such file or directory [ 559.910291][ T972] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 559.949933][ T5826] udevd[5826]: setting owner of /dev/bus/usb/001/049 to uid=0, gid=0 failed: No such file or directory [ 560.140260][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 560.314173][ T972] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 560.334900][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.639735][ T972] usb 4-1: Product: syz [ 560.741279][ T972] usb 4-1: Manufacturer: syz [ 560.745873][ T972] usb 4-1: SerialNumber: syz [ 560.796633][ T972] usb 4-1: config 0 descriptor?? [ 560.824296][ T972] gspca_main: se401-2.14.0 probing 047d:5003 [ 561.129746][ T5900] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 561.245566][ T972] gspca_se401: ExtraFeatures: 104 [ 561.346978][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.365408][ T972] gspca_se401: Too many frame sizes [ 561.392157][ T5900] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.514371][ T5900] usb 3-1: config 1 interface 0 has no altsetting 0 [ 561.550206][T11589] fuse: Unknown parameter 'group_id00000000000000000000' [ 561.648264][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.40 [ 561.652565][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.785543][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.811881][ T5900] usb 3-1: Manufacturer: Л [ 561.818626][ T5900] usb 3-1: SerialNumber: о [ 561.831919][ T9] usb 4-1: USB disconnect, device number 49 [ 562.134733][ T5900] usbhid 3-1:1.0: can't add hid device: -71 [ 562.141015][ T5900] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 562.161004][ T5900] usb 3-1: USB disconnect, device number 39 [ 562.179024][ T6192] udevd[6192]: setting owner of /dev/bus/usb/003/039 to uid=0, gid=0 failed: No such file or directory [ 562.887808][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.894304][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.103795][T11635] 9pnet_fd: Insufficient options for proto=fd [ 564.202068][ T8142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.338798][T11637] 9pnet_fd: Insufficient options for proto=fd [ 564.558349][T11638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 564.999781][ T5865] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 565.469675][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 565.559993][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 565.652840][ T5865] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.662023][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.817162][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.862094][ T5865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.878434][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.923313][ T5865] usb 5-1: Product: syz [ 565.927705][ T5865] usb 5-1: Manufacturer: syz [ 565.939647][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 565.959337][ T5865] usb 5-1: SerialNumber: syz [ 565.959907][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.993762][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.013061][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.024233][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.037290][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.063060][ T9] usb 2-1: Product: syz [ 566.067264][ T9] usb 2-1: Manufacturer: syz [ 566.079787][ T9] usb 2-1: SerialNumber: syz [ 566.245000][ T5900] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 566.423819][ T5865] usb 5-1: 0:2 : does not exist [ 566.428898][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 566.438004][ T5900] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 566.453957][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.485797][ T5900] usb 1-1: Product: syz [ 566.501885][ T5900] usb 1-1: Manufacturer: syz [ 566.516890][ T5900] usb 1-1: SerialNumber: syz [ 566.541417][ T5900] usb 1-1: config 0 descriptor?? [ 566.554387][ T5900] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 566.856866][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.883066][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.341243][ T5931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.422466][ T5865] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 567.456810][ T9] usb 2-1: 0:2 : does not exist [ 567.458999][ T5865] usb 5-1: USB disconnect, device number 43 [ 567.902338][T11668] netlink: 'syz.0.1463': attribute type 16 has an invalid length. [ 568.000961][T11668] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1463'. [ 568.068984][ T9] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 568.179613][ T9] usb 2-1: USB disconnect, device number 41 [ 568.255249][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 569.091750][T11685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 569.560701][T11690] loop2: detected capacity change from 0 to 7 [ 569.623206][T11690] Dev loop2: unable to read RDB block 7 [ 569.630069][ T5900] gspca_stk1135: reg_w 0x300 err -110 [ 569.642982][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 569.695448][ T5900] gspca_stk1135: Sensor write failed [ 569.698717][T11690] loop2: AHDI p2 p3 [ 569.833119][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 569.837338][T11690] loop2: partition table partially beyond EOD, [ 569.840226][ T5900] gspca_stk1135: Sensor write failed [ 569.853083][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 569.859471][ T5900] gspca_stk1135: Sensor read failed [ 569.863660][T11690] truncated [ 569.877528][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 569.879201][T11690] loop2: p3 start 335544320 is beyond EOD, truncated [ 569.997811][ T5900] gspca_stk1135: Sensor read failed [ 570.003471][ T5900] gspca_stk1135: Detected sensor type unknown (0x0) [ 570.010155][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 570.016495][ T5900] gspca_stk1135: Sensor read failed [ 570.021741][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 570.028067][ T5900] gspca_stk1135: Sensor read failed [ 570.033387][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 570.047400][T11630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.079886][ T5900] gspca_stk1135: Sensor write failed [ 570.585807][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 570.594063][ T5900] gspca_stk1135: Sensor write failed [ 570.599419][ T5900] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 570.618428][ T5900] usb 1-1: USB disconnect, device number 50 [ 570.677364][T11706] netlink: 'syz.0.1477': attribute type 62 has an invalid length. [ 570.712519][ T5824] Bluetooth: hci4: unknown advertising packet type: 0x6e [ 570.714044][ T5824] Bluetooth: hci4: Malformed LE Event: 0x02 [ 570.728228][T11709] netlink: 'syz.4.1478': attribute type 72 has an invalid length. [ 572.187174][T11721] 9pnet_fd: Insufficient options for proto=fd [ 572.514258][T11723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 573.152467][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.389635][ T5898] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 573.415475][T11711] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 573.463565][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 573.484880][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 573.515656][T11736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.540573][ T5898] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 573.559369][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.568392][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.593700][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.613792][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.628741][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.646026][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.656895][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.679250][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.719596][ T5866] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 573.737254][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.762488][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.773650][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.802722][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.812738][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.829168][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.844424][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.858900][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.874750][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.886653][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.147037][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 574.223517][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.232918][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.244967][ T5866] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 574.261699][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.275769][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.282568][ T5866] usb 4-1: Product: syz [ 574.289773][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 574.298693][ T5866] usb 4-1: Manufacturer: syz [ 574.306035][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 574.324023][ T5866] usb 4-1: SerialNumber: syz [ 574.332334][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.340136][ T5866] usb 4-1: config 0 descriptor?? [ 574.352874][ T5866] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 574.377377][ T5898] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 574.408218][ T5898] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 574.436619][ T5898] usb 5-1: Product: syz [ 574.451491][ T5898] usb 5-1: Manufacturer: syz [ 574.460573][ T5898] usb 5-1: SerialNumber: syz [ 574.467858][ T5898] usb 5-1: config 0 descriptor?? [ 574.485744][ T5898] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 574.497964][T11753] netlink: 'syz.2.1492': attribute type 72 has an invalid length. [ 574.755969][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 574.756691][ T25] usb 5-1: USB disconnect, device number 44 [ 574.788665][ T25] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 574.847972][T11739] netlink: 'syz.3.1488': attribute type 16 has an invalid length. [ 574.892373][ T5898] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 574.902875][T11739] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1488'. [ 575.286483][ T5866] gspca_stk1135: reg_w 0x300 err -71 [ 575.295694][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.302215][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 575.308006][ T5866] gspca_stk1135: Sensor write failed [ 575.317747][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.330106][ T5898] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 575.339487][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.348509][ T5866] gspca_stk1135: Sensor write failed [ 575.354361][ T5898] usb 3-1: Product: syz [ 575.358664][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.365341][ T5898] usb 3-1: Manufacturer: syz [ 575.370682][ T5866] gspca_stk1135: Sensor read failed [ 575.376055][ T5898] usb 3-1: SerialNumber: syz [ 575.380964][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.388312][ T5866] gspca_stk1135: Sensor read failed [ 575.396155][ T5898] usb 3-1: config 0 descriptor?? [ 575.404961][ T5898] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 575.411761][ T5866] gspca_stk1135: Detected sensor type unknown (0x0) [ 575.418570][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.425753][ T5866] gspca_stk1135: Sensor read failed [ 575.431207][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.437758][ T5866] gspca_stk1135: Sensor read failed [ 575.443523][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.455493][ T5866] gspca_stk1135: Sensor write failed [ 575.461678][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 575.468118][ T5866] gspca_stk1135: Sensor write failed [ 575.473828][ T5866] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 575.489826][ T5866] usb 4-1: USB disconnect, device number 50 [ 575.499972][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 576.184171][T11772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.193775][T11772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 576.621543][ T5898] gspca_stk1135: reg_w 0x0 err -110 [ 576.630326][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.636658][ T5898] gspca_stk1135: Sensor write failed [ 576.659861][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.666193][ T5898] gspca_stk1135: Sensor write failed [ 576.679388][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.686011][ T5898] gspca_stk1135: Sensor read failed [ 576.739600][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.751964][ T5898] gspca_stk1135: Sensor read failed [ 576.757455][ T5898] gspca_stk1135: Detected sensor type unknown (0x0) [ 576.764359][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.770739][ T5898] gspca_stk1135: Sensor read failed [ 576.775959][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.782441][ T5898] gspca_stk1135: Sensor read failed [ 576.787688][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.794119][ T5898] gspca_stk1135: Sensor write failed [ 576.799616][ T5898] gspca_stk1135: serial bus timeout: status=0x00 [ 576.805979][ T5898] gspca_stk1135: Sensor write failed [ 576.813400][ T5898] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 577.274730][ T29] audit: type=1400 audit(1740227774.891:649): avc: denied { setattr } for pid=11782 comm="syz.4.1501" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 577.538557][T11786] netem: incorrect ge model size [ 577.555012][T11786] netem: change failed [ 577.635138][ T29] audit: type=1400 audit(1740227774.901:650): avc: denied { append } for pid=11782 comm="syz.4.1501" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 577.681975][ T29] audit: type=1400 audit(1740227774.901:651): avc: denied { bind } for pid=11782 comm="syz.4.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 577.909968][ T25] usb 3-1: USB disconnect, device number 40 [ 578.459721][T11796] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 578.530106][T11803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.597378][T11804] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 578.605201][T11804] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1506'. [ 579.000240][T11630] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.025949][T11796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8211 sclass=netlink_route_socket pid=11796 comm=syz.4.1504 [ 580.209638][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 580.829290][T11828] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 580.838914][T11828] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 580.859919][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 580.897407][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 580.907441][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.288181][ T9] usb 3-1: Product: syz [ 581.366360][ T9] usb 3-1: Manufacturer: syz [ 581.383367][ T9] usb 3-1: SerialNumber: syz [ 581.393952][ T9] usb 3-1: config 0 descriptor?? [ 581.418954][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 581.439164][ T6092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.810882][T11843] bio_check_eod: 2 callbacks suppressed [ 581.810916][T11843] syz.4.1515: attempt to access beyond end of device [ 581.810916][T11843] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 581.829846][T11843] qnx6: unable to read the first superblock [ 581.837326][T11843] syz.4.1515: attempt to access beyond end of device [ 581.837326][T11843] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 581.850799][T11843] qnx6: unable to read the first superblock [ 581.856843][T11843] qnx6: unable to read the first superblock [ 581.905816][T11844] netlink: 'syz.4.1515': attribute type 4 has an invalid length. [ 581.979223][ T29] audit: type=1400 audit(1740227779.531:652): avc: denied { accept } for pid=11837 comm="syz.4.1515" lport=58695 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 582.006475][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.144688][ T29] audit: type=1400 audit(1740227779.531:653): avc: denied { setopt } for pid=11837 comm="syz.4.1515" lport=58695 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 582.779667][ T9] gspca_stk1135: reg_w 0x5 err -110 [ 582.788268][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 582.805189][ T9] gspca_stk1135: Sensor write failed [ 582.819646][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 582.827950][ T9] gspca_stk1135: Sensor write failed [ 582.876376][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 582.909658][ T9] gspca_stk1135: Sensor read failed [ 582.914902][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 582.954237][ T9] gspca_stk1135: Sensor read failed [ 582.959457][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 583.010071][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 583.041606][ T9] gspca_stk1135: Sensor read failed [ 583.046854][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 583.073620][ T9] gspca_stk1135: Sensor read failed [ 583.082660][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 583.225091][ T9] gspca_stk1135: Sensor write failed [ 583.560691][T11863] netlink: 'syz.2.1510': attribute type 16 has an invalid length. [ 583.568517][T11863] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1510'. [ 583.607670][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 583.667965][ T9] gspca_stk1135: Sensor write failed [ 583.678711][ T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 584.327174][T11882] netlink: 'syz.0.1525': attribute type 62 has an invalid length. [ 584.494613][ T5824] Bluetooth: hci4: unknown advertising packet type: 0x6e [ 584.494679][ T5824] Bluetooth: hci4: Malformed LE Event: 0x02 [ 584.686721][T11889] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 585.987064][ T5866] usb 3-1: USB disconnect, device number 41 [ 586.115756][T11909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 586.125277][T11909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 587.346835][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 587.385742][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 587.515148][T11922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.701768][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 589.346090][T11943] netlink: 'syz.0.1539': attribute type 62 has an invalid length. [ 589.360433][ T5824] Bluetooth: hci4: unknown advertising packet type: 0x6e [ 589.360502][ T5824] Bluetooth: hci4: Malformed LE Event: 0x02 [ 589.543052][ T5865] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 589.835714][T11948] loop2: detected capacity change from 0 to 7 [ 589.846629][T11943] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 589.846676][T11948] Dev loop2: unable to read RDB block 7 [ 589.867656][T11948] loop2: AHDI p2 p3 [ 589.872403][T11948] loop2: partition table partially beyond EOD, truncated [ 589.880757][T11948] loop2: p3 start 335544320 is beyond EOD, truncated [ 589.909718][ T5870] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 589.934225][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 589.946455][ T5865] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 589.959709][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.977980][ T5865] usb 4-1: Product: syz [ 589.993933][ T5865] usb 4-1: Manufacturer: syz [ 589.998843][ T5865] usb 4-1: SerialNumber: syz [ 590.009686][ T5865] r8152-cfgselector 4-1: Unknown version 0x0000 [ 590.015945][ T5865] r8152-cfgselector 4-1: config 0 descriptor?? [ 590.037497][ T29] audit: type=1400 audit(1740227787.661:654): avc: denied { getopt } for pid=11950 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 590.079675][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 590.086428][ T5870] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 590.097318][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.107839][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.121692][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.131033][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.140185][ T5870] usb 5-1: Product: syz [ 590.144691][ T5870] usb 5-1: Manufacturer: syz [ 590.146003][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 590.149372][ T5870] usb 5-1: SerialNumber: syz [ 590.170480][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.178982][ T9] usb 2-1: Product: syz [ 590.191233][ T9] usb 2-1: Manufacturer: syz [ 590.195856][ T9] usb 2-1: SerialNumber: syz [ 590.228616][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 590.242755][ T5865] r8152-cfgselector 4-1: Unknown version 0x0000 [ 590.250587][ T5865] r8152-cfgselector 4-1: bad CDC descriptors [ 590.251760][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 590.336662][ T5865] r8152-cfgselector 4-1: USB disconnect, device number 51 [ 590.598537][ T5870] usb 5-1: 0:2 : does not exist [ 591.119216][T11941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.222721][T11960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 591.231583][T11960] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 591.243250][T11960] overlayfs: missing 'lowerdir' [ 591.439945][T11941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.618736][ T5824] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 591.965253][T11964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 592.660473][ T5898] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 592.677571][ T5870] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 592.990509][ T9] r8152-cfgselector 2-1: USB disconnect, device number 42 [ 593.054925][ T5870] usb 5-1: USB disconnect, device number 45 [ 593.159784][ T5898] usb 4-1: device descriptor read/64, error -71 [ 593.447618][T11983] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 593.457249][T11983] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 593.478469][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.109670][ T5898] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 594.329139][T11990] netlink: 'syz.4.1553': attribute type 62 has an invalid length. [ 594.349707][ T5898] usb 4-1: device descriptor read/64, error -71 [ 594.599103][T11990] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 594.673455][ T5898] usb usb4-port1: attempt power cycle [ 595.052629][ T5898] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 595.089824][ T5898] usb 4-1: device descriptor read/8, error -71 [ 595.659673][ T5824] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 595.668784][ T5824] Bluetooth: hci2: Injecting HCI hardware error event [ 595.677736][ T5829] Bluetooth: hci2: hardware error 0x00 [ 596.422354][T12005] 9pnet_fd: Insufficient options for proto=fd [ 597.346327][T12018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.414590][T12019] netlink: 'syz.1.1560': attribute type 3 has an invalid length. [ 597.422463][T12019] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1560'. [ 597.811422][ T5829] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 598.229689][ T29] audit: type=1326 audit(1740227795.851:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 598.253181][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.611764][ T29] audit: type=1326 audit(1740227795.851:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 598.665933][ T29] audit: type=1326 audit(1740227795.851:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 598.689386][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.703640][ T29] audit: type=1326 audit(1740227795.851:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 598.761129][ T29] audit: type=1326 audit(1740227795.851:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.186362][ T29] audit: type=1326 audit(1740227795.851:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.315689][ T29] audit: type=1326 audit(1740227795.851:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.338974][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.345398][ T29] audit: type=1326 audit(1740227795.851:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.417792][ T29] audit: type=1326 audit(1740227795.851:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.467408][ T29] audit: type=1326 audit(1740227795.851:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12026 comm="syz.1.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c858d169 code=0x7ffc0000 [ 599.549850][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'. [ 599.561071][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 599.581806][T12044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.642394][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1568'. [ 599.780204][ T5898] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 600.262131][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 600.273876][ T5898] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 600.291390][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.299396][ T5898] usb 3-1: Product: syz [ 600.375485][ T5898] usb 3-1: Manufacturer: syz [ 600.389732][ T5898] usb 3-1: SerialNumber: syz [ 600.407252][ T5898] usb 3-1: config 0 descriptor?? [ 600.428383][ T5898] hub 3-1:0.0: bad descriptor, ignoring hub [ 600.439655][ T5898] hub 3-1:0.0: probe with driver hub failed with error -5 [ 600.495815][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.703838][ T5898] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 600.816155][ T5898] usb 3-1: USB disconnect, device number 42 [ 600.827320][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.609967][T12069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.677375][T12070] netlink: 'syz.2.1574': attribute type 3 has an invalid length. [ 601.685186][T12070] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1574'. [ 602.999776][ T972] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 603.971692][ T972] usb 2-1: unable to get BOS descriptor or descriptor too short [ 603.982086][ T972] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 604.010209][ T972] usb 2-1: can't read configurations, error -71 [ 605.775955][T12101] bridge1: entered promiscuous mode [ 605.781507][T12101] bridge1: entered allmulticast mode [ 605.864878][T12101] team0: Port device bridge1 added [ 606.099283][T12104] PKCS8: Unsupported PKCS#8 version [ 606.409909][ T972] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 606.573759][ T972] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 606.585963][ T972] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 606.598062][ T972] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 606.801062][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.257366][T12104] ucma_write: process 1105 (syz.2.1585) changed security contexts after opening file descriptor, this is not allowed. [ 607.301596][ T972] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 607.376822][ T972] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input52 [ 607.470256][ T972] input: failed to attach handler kbd to device input52, error: -5 [ 607.540155][ T972] usb 3-1: USB disconnect, device number 43 [ 607.756189][T12130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 607.765171][T12130] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 607.776863][T12130] overlayfs: missing 'lowerdir' [ 608.566611][T12133] 9pnet_fd: Insufficient options for proto=fd [ 611.069970][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 611.269773][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 611.354745][ T25] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 611.420849][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.811194][ T25] usb 3-1: Product: syz [ 611.833387][ T25] usb 3-1: Manufacturer: syz [ 612.118150][ T25] usb 3-1: SerialNumber: syz [ 612.237776][ T25] usb 3-1: config 0 descriptor?? [ 612.358860][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 612.703024][T12181] loop2: detected capacity change from 0 to 7 [ 612.724226][T12181] Dev loop2: unable to read RDB block 7 [ 612.730023][T12181] loop2: AHDI p2 p3 [ 612.733959][T12181] loop2: partition table partially beyond EOD, truncated [ 612.750426][T12181] loop2: p3 start 335544320 is beyond EOD, truncated [ 612.768277][ T25] gspca_se401: ExtraFeatures: 104 [ 612.773445][ T25] gspca_se401: Too many frame sizes [ 613.089839][T12164] fuse: Bad value for 'fd' [ 613.241974][T12186] 9pnet_fd: Insufficient options for proto=fd [ 613.323236][ T25] usb 3-1: USB disconnect, device number 44 [ 613.750590][ T5898] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 614.209437][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 614.264313][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'. [ 614.297247][T12203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.539816][ T25] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 614.725541][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 615.185825][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 615.395009][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.404962][ T25] usb 3-1: Product: syz [ 615.409198][ T25] usb 3-1: Manufacturer: syz [ 615.417435][ T25] usb 3-1: SerialNumber: syz [ 615.434074][ T25] r8152-cfgselector 3-1: Unknown version 0x0000 [ 615.445140][ T25] r8152-cfgselector 3-1: config 0 descriptor?? [ 615.706879][ T25] r8152-cfgselector 3-1: Unknown version 0x0000 [ 615.728572][ T25] r8152-cfgselector 3-1: bad CDC descriptors [ 615.774165][ T25] r8152-cfgselector 3-1: USB disconnect, device number 45 [ 616.276423][T12229] 9pnet_fd: Insufficient options for proto=fd [ 616.854508][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 616.885203][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 616.909709][ T5898] usb 1-1: can't read configurations, error -71 [ 617.245029][T12244] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 617.252885][T12244] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1624'. [ 618.042902][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 618.042916][ T29] audit: type=1400 audit(1740227814.831:670): avc: denied { getopt } for pid=12235 comm="syz.0.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 618.100850][ T5870] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 618.414015][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 618.440078][ T5870] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 618.450784][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.458788][ T5870] usb 3-1: Product: syz [ 618.463667][ T5870] usb 3-1: Manufacturer: syz [ 618.468273][ T5870] usb 3-1: SerialNumber: syz [ 618.475389][ T5870] usb 3-1: config 0 descriptor?? [ 618.484923][ T5870] gspca_main: se401-2.14.0 probing 047d:5003 [ 618.582411][ T29] audit: type=1400 audit(1740227816.211:671): avc: denied { read } for pid=12255 comm="syz.3.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 618.919808][ T5870] gspca_se401: ExtraFeatures: 104 [ 618.945947][ T5870] gspca_se401: Too many frame sizes [ 619.114263][T12234] fuse: Bad value for 'fd' [ 619.450773][ T5870] usb 3-1: USB disconnect, device number 46 [ 619.799786][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 624.339891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.591553][T12324] syz.1.1646: attempt to access beyond end of device [ 624.591553][T12324] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 624.606143][T12324] qnx6: unable to read the first superblock [ 624.613062][T12324] syz.1.1646: attempt to access beyond end of device [ 624.613062][T12324] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 624.625998][T12324] qnx6: unable to read the first superblock [ 624.631978][T12324] qnx6: unable to read the first superblock [ 625.327603][T12322] bridge2: entered promiscuous mode [ 625.333168][T12322] bridge2: entered allmulticast mode [ 625.382630][T12322] team0: Port device bridge2 added [ 625.605041][T12329] loop2: detected capacity change from 0 to 7 [ 625.615630][ T5814] Dev loop2: unable to read RDB block 7 [ 625.622165][ T5814] loop2: AHDI p2 p3 [ 625.626076][ T5814] loop2: partition table partially beyond EOD, truncated [ 625.647451][ T5814] loop2: p3 start 335544320 is beyond EOD, truncated [ 625.819999][T12329] Dev loop2: unable to read RDB block 7 [ 625.825771][T12329] loop2: AHDI p2 p3 [ 625.830082][T12329] loop2: partition table partially beyond EOD, truncated [ 625.837427][T12329] loop2: p3 start 335544320 is beyond EOD, truncated [ 627.501817][T12360] syz.1.1659: attempt to access beyond end of device [ 627.501817][T12360] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 627.515369][T12360] qnx6: unable to read the first superblock [ 627.522531][T12360] syz.1.1659: attempt to access beyond end of device [ 627.522531][T12360] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 627.535585][T12360] qnx6: unable to read the first superblock [ 627.541563][T12360] qnx6: unable to read the first superblock [ 627.591469][ T5898] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 627.884061][ T5898] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 627.981438][ T5898] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 627.991361][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.001741][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 628.010995][ T5898] usb 4-1: config 1 has no interface number 0 [ 628.017095][ T5898] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 628.029212][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.132254][T12366] bridge2: entered promiscuous mode [ 628.137560][T12366] bridge2: entered allmulticast mode [ 628.176741][T12366] team0: Port device bridge2 added [ 628.740371][ T5898] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 628.952628][ T5898] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 628.961472][ T5898] snd_usb_pod 4-1:1.1: invalid control EP [ 628.961848][T12371] loop2: detected capacity change from 0 to 7 [ 628.967300][ T5898] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 628.977679][T12371] Dev loop2: unable to read RDB block 7 [ 629.009870][ T5898] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 629.017112][T12371] loop2: AHDI p2 p3 [ 629.027249][T12371] loop2: partition table partially beyond EOD, truncated [ 629.039730][T12371] loop2: p3 start 335544320 is beyond EOD, truncated [ 629.069985][ T5898] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 629.223523][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 629.232334][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 629.283599][T12354] ceph: No mds server is up or the cluster is laggy [ 629.342886][ T29] audit: type=1400 audit(1740227826.951:672): avc: denied { connect } for pid=12353 comm="syz.3.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 629.903895][T12369] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 629.932484][T12369] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 630.525485][ T5898] usb 4-1: USB disconnect, device number 56 [ 630.658706][T12395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.726382][T12396] netlink: 'syz.4.1667': attribute type 3 has an invalid length. [ 630.734199][T12396] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1667'. [ 633.915994][T12419] bridge3: entered promiscuous mode [ 634.091894][T12419] bridge3: entered allmulticast mode [ 634.293216][T12419] team0: Port device bridge3 added [ 634.363066][T12422] overlayfs: missing 'lowerdir' [ 634.566162][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 634.856960][T12432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.149799][ T5870] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 636.165536][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 636.177716][T12448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 636.409782][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 636.601916][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.641010][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.673471][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.719639][ T5870] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 636.744777][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'. [ 636.745021][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.805099][ T5870] usb 1-1: config 0 descriptor?? [ 637.027365][T12456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 637.080627][T12456] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 637.087523][T12462] overlayfs: missing 'lowerdir' [ 637.306295][ T5870] koneplus 0003:1E7D:2E22.0019: item fetching failed at offset 0/2 [ 637.325014][ T5870] koneplus 0003:1E7D:2E22.0019: parse failed [ 637.353355][ T5870] koneplus 0003:1E7D:2E22.0019: probe with driver koneplus failed with error -22 [ 637.515754][ T5870] usb 1-1: USB disconnect, device number 53 [ 637.839630][ T5865] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 637.999648][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 638.012492][ T5865] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 638.049561][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.060529][ T5865] usb 3-1: Product: syz [ 638.064704][ T5865] usb 3-1: Manufacturer: syz [ 638.211008][T12474] tipc: Started in network mode [ 638.218383][T12474] tipc: Node identity 6, cluster identity 4711 [ 638.225942][T12474] tipc: Node number set to 6 [ 638.247081][ T5865] usb 3-1: SerialNumber: syz [ 638.261375][ T5865] usb 3-1: config 0 descriptor?? [ 638.271382][ T5865] gspca_main: se401-2.14.0 probing 047d:5003 [ 638.905032][ T5865] gspca_se401: ExtraFeatures: 104 [ 638.942582][ T5865] gspca_se401: Too many frame sizes [ 639.192657][T12468] fuse: Invalid rootmode [ 639.224022][T12484] syz.1.1695: attempt to access beyond end of device [ 639.224022][T12484] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 639.237060][T12484] qnx6: unable to read the first superblock [ 639.243896][T12484] syz.1.1695: attempt to access beyond end of device [ 639.243896][T12484] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 639.256878][T12484] qnx6: unable to read the first superblock [ 639.262906][T12484] qnx6: unable to read the first superblock [ 639.694262][ T8] usb 3-1: USB disconnect, device number 47 [ 640.349667][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 640.426129][T12499] overlayfs: missing 'lowerdir' [ 640.562431][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 640.591381][ T8] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 640.962820][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.051275][ T8] usb 2-1: Product: syz [ 641.059636][ T8] usb 2-1: Manufacturer: syz [ 641.079153][ T8] usb 2-1: SerialNumber: syz [ 641.161374][ T8] usb 2-1: config 0 descriptor?? [ 641.252584][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 641.354801][T12514] SELinux: Context } is not valid (left unmapped). [ 642.039685][ T8] gspca_se401: ExtraFeatures: 104 [ 642.044751][ T8] gspca_se401: Too many frame sizes [ 642.709643][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 642.756579][T12493] fuse: Bad value for 'fd' [ 642.805623][ T8] usb 2-1: USB disconnect, device number 45 [ 642.809020][ T29] audit: type=1804 audit(1740227840.431:673): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1708" name="/newroot/352/file0" dev="tmpfs" ino=1899 res=1 errno=0 [ 642.841447][ T29] audit: type=1804 audit(1740227840.461:674): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1708" name="/newroot/352/file0" dev="tmpfs" ino=1899 res=1 errno=0 [ 642.910107][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 642.927246][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 642.943806][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.139769][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.156944][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.166277][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.186095][ T9] usb 1-1: Product: syz [ 643.192617][ T9] usb 1-1: Manufacturer: syz [ 643.198447][ T9] usb 1-1: SerialNumber: syz [ 645.390313][ T9] usb 1-1: 0:2 : does not exist [ 645.710311][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.720404][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.729843][ T5866] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 646.589665][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 646.696409][ T5866] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 646.715762][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.727996][ T5866] usb 2-1: Product: syz [ 646.737075][ T5866] usb 2-1: Manufacturer: syz [ 646.748086][ T5866] usb 2-1: SerialNumber: syz [ 646.757735][ T5866] usb 2-1: config 0 descriptor?? [ 646.775052][ T5866] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 646.918040][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 646.931816][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 646.989164][ T9] usb 1-1: USB disconnect, device number 54 [ 647.242463][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 648.080389][ T5866] gspca_stk1135: reg_w 0x0 err -110 [ 648.086717][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.124788][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.159036][ T5866] gspca_stk1135: Sensor write failed [ 648.168817][ T8] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 648.170233][ T29] audit: type=1804 audit(1740227845.801:675): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1720" name="/newroot/332/file0" dev="tmpfs" ino=1772 res=1 errno=0 [ 648.200275][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200291][ T5866] gspca_stk1135: Sensor write failed [ 648.200320][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200329][ T5866] gspca_stk1135: Sensor read failed [ 648.200353][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200362][ T5866] gspca_stk1135: Sensor read failed [ 648.200370][ T5866] gspca_stk1135: Detected sensor type unknown (0x0) [ 648.200398][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200408][ T5866] gspca_stk1135: Sensor read failed [ 648.200433][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200442][ T5866] gspca_stk1135: Sensor read failed [ 648.200470][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200480][ T5866] gspca_stk1135: Sensor write failed [ 648.200507][ T5866] gspca_stk1135: serial bus timeout: status=0x00 [ 648.200517][ T5866] gspca_stk1135: Sensor write failed [ 648.200565][ T5866] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 648.213504][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.317792][ T8] usb 5-1: Product: syz [ 648.326221][ T8] usb 5-1: Manufacturer: syz [ 648.332296][ T8] usb 5-1: SerialNumber: syz [ 648.338760][ T8] usb 5-1: config 0 descriptor?? [ 648.353971][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 648.387404][ T29] audit: type=1804 audit(1740227845.841:676): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1720" name="/newroot/332/file0" dev="tmpfs" ino=1772 res=1 errno=0 [ 648.812005][ T5866] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 649.081498][ T8] gspca_se401: ExtraFeatures: 104 [ 649.086578][ T8] gspca_se401: Too many frame sizes [ 649.159215][ T972] usb 2-1: USB disconnect, device number 46 [ 649.198741][T12551] fuse: Invalid rootmode [ 649.233894][ T5866] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 649.243087][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.262711][ T5866] usb 4-1: Product: syz [ 649.268706][ T8] usb 5-1: USB disconnect, device number 46 [ 649.292926][ T5866] usb 4-1: Manufacturer: syz [ 649.304503][ T5866] usb 4-1: SerialNumber: syz [ 649.381614][ T5866] r8152-cfgselector 4-1: Unknown version 0x0000 [ 649.387900][ T5866] r8152-cfgselector 4-1: config 0 descriptor?? [ 649.410324][T12578] overlayfs: missing 'lowerdir' [ 650.671379][ T5866] r8152-cfgselector 4-1: Unknown version 0x0000 [ 650.716424][ T5866] r8152-cfgselector 4-1: bad CDC descriptors [ 650.754232][T12587] 9pnet_fd: Insufficient options for proto=fd [ 650.816661][ T5866] r8152-cfgselector 4-1: USB disconnect, device number 57 [ 651.492658][T12597] bridge4: entered promiscuous mode [ 651.498108][T12597] bridge4: entered allmulticast mode [ 651.649635][ T29] audit: type=1804 audit(1740227849.261:677): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1732" name="/newroot/337/file0" dev="tmpfs" ino=1799 res=1 errno=0 [ 651.698648][ T29] audit: type=1804 audit(1740227849.261:678): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1732" name="/newroot/337/file0" dev="tmpfs" ino=1799 res=1 errno=0 [ 651.870442][ T5870] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 652.739644][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 652.819691][ T5870] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 652.934855][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.054435][ T5870] usb 3-1: Product: syz [ 653.092496][ T5870] usb 3-1: Manufacturer: syz [ 653.118282][ T5870] usb 3-1: SerialNumber: syz [ 653.290069][ T5870] usb 3-1: config 0 descriptor?? [ 653.348856][ T5870] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 653.380768][T12623] syz.3.1738: attempt to access beyond end of device [ 653.380768][T12623] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 653.393829][T12623] qnx6: unable to read the first superblock [ 653.400956][T12623] syz.3.1738: attempt to access beyond end of device [ 653.400956][T12623] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 653.413935][T12623] qnx6: unable to read the first superblock [ 653.420214][T12623] qnx6: unable to read the first superblock [ 654.857465][T12600] netlink: 'syz.2.1733': attribute type 16 has an invalid length. [ 654.865849][T12600] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1733'. [ 654.868283][T12635] 9pnet_fd: Insufficient options for proto=fd [ 655.160176][ T5870] gspca_stk1135: reg_w 0xd err -110 [ 655.167117][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.215643][ T5870] gspca_stk1135: Sensor write failed [ 655.231821][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.254077][ T5870] gspca_stk1135: Sensor write failed [ 655.280579][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.286932][ T5870] gspca_stk1135: Sensor read failed [ 655.293687][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.299004][T12640] bridge2: entered promiscuous mode [ 655.309553][ T5870] gspca_stk1135: Sensor read failed [ 655.319647][ T5870] gspca_stk1135: Detected sensor type unknown (0x0) [ 655.323093][T12640] bridge2: entered allmulticast mode [ 655.329882][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.353554][ T5870] gspca_stk1135: Sensor read failed [ 655.386203][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.409615][ T5870] gspca_stk1135: Sensor read failed [ 655.420162][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.426501][ T5870] gspca_stk1135: Sensor write failed [ 655.469593][ T5870] gspca_stk1135: serial bus timeout: status=0x00 [ 655.480390][ T5870] gspca_stk1135: Sensor write failed [ 655.482628][ T29] audit: type=1804 audit(1740227853.101:679): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1746" name="/newroot/377/file0" dev="tmpfs" ino=2044 res=1 errno=0 [ 655.485708][ T5870] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 656.289690][ T29] audit: type=1804 audit(1740227853.111:680): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1746" name="/newroot/377/file0" dev="tmpfs" ino=2044 res=1 errno=0 [ 656.296930][ T5898] usb 3-1: USB disconnect, device number 48 [ 657.786406][T12668] netlink: 'syz.4.1754': attribute type 62 has an invalid length. [ 657.857510][T12673] bridge3: entered promiscuous mode [ 657.862987][T12673] bridge3: entered allmulticast mode [ 657.870055][T12673] team0: Port device bridge3 added [ 658.190774][T12678] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 659.825780][T12684] 9pnet_fd: Insufficient options for proto=fd [ 660.080800][ T29] audit: type=1804 audit(1740227857.701:681): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1759" name="/newroot/341/file0" dev="tmpfs" ino=1820 res=1 errno=0 [ 660.108030][ T29] audit: type=1804 audit(1740227857.701:682): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1759" name="/newroot/341/file0" dev="tmpfs" ino=1820 res=1 errno=0 [ 663.072287][T12712] bridge1: entered promiscuous mode [ 663.077664][T12712] bridge1: entered allmulticast mode [ 663.131895][T12712] team0: Port device bridge1 added [ 663.349937][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 664.128834][T12722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.194321][T12723] netlink: 'syz.3.1767': attribute type 3 has an invalid length. [ 664.202174][T12723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1767'. [ 664.578121][T12724] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 664.586454][T12724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1766'. [ 666.187867][T12739] 9pnet_fd: Insufficient options for proto=fd [ 666.723145][T12745] syz.1.1774: attempt to access beyond end of device [ 666.723145][T12745] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 666.736512][T12745] qnx6: unable to read the first superblock [ 666.743475][T12745] syz.1.1774: attempt to access beyond end of device [ 666.743475][T12745] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 666.756359][T12745] qnx6: unable to read the first superblock [ 666.762333][T12745] qnx6: unable to read the first superblock [ 666.842703][ T25] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 667.546521][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 667.570495][ T25] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 667.605666][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.204607][ T25] usb 1-1: Product: syz [ 668.208808][ T25] usb 1-1: Manufacturer: syz [ 668.217093][ T25] usb 1-1: SerialNumber: syz [ 668.227546][ T25] usb 1-1: config 0 descriptor?? [ 668.241595][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 668.978441][T12759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.514242][T12741] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -108 [ 669.550444][T12765] fuse: Invalid rootmode [ 669.699778][ T25] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 669.917905][ T25] usb 1-1: device descriptor read/64, error -32 [ 670.206644][T12772] bridge1: entered promiscuous mode [ 670.212094][T12772] bridge1: entered allmulticast mode [ 670.881224][T12778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.949323][T12779] netlink: 'syz.1.1781': attribute type 3 has an invalid length. [ 670.957102][T12779] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1781'. [ 671.790104][ T25] gspca_se401: read req failed req 0x06 error -19 [ 671.931663][ T25] usb 1-1: USB disconnect, device number 55 [ 674.290932][T12800] bridge4: entered promiscuous mode [ 674.296400][T12800] bridge4: entered allmulticast mode [ 674.759018][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 674.790847][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 674.850651][T12803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.233022][T12811] syz.0.1790: attempt to access beyond end of device [ 675.233022][T12811] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 675.245921][T12811] qnx6: unable to read the first superblock [ 675.253435][T12811] syz.0.1790: attempt to access beyond end of device [ 675.253435][T12811] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 675.266294][T12811] qnx6: unable to read the first superblock [ 675.272223][T12811] qnx6: unable to read the first superblock [ 676.462093][T12832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.489847][ T5900] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 676.530282][T12833] netlink: 'syz.2.1794': attribute type 3 has an invalid length. [ 676.538036][T12833] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1794'. [ 676.649802][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 676.962705][ T5900] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 677.015166][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.037760][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.162948][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.177755][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.186061][ T5900] usb 2-1: Product: syz [ 677.197869][ T5900] usb 2-1: Manufacturer: syz [ 677.203976][ T5900] usb 2-1: SerialNumber: syz [ 677.952961][ T5900] usb 2-1: 0:2 : does not exist [ 678.015520][T12839] bridge5: entered promiscuous mode [ 678.021036][T12839] bridge5: entered allmulticast mode [ 678.696257][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.719990][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.121285][T12852] bridge6: entered promiscuous mode [ 679.128099][T12852] bridge6: entered allmulticast mode [ 679.521376][ T5900] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 680.099727][ T5900] usb 2-1: USB disconnect, device number 47 [ 680.586447][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 680.689633][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 680.690348][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 680.785110][T12864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.329802][ T5900] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 684.629749][ T5900] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 684.671156][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.697346][ T5900] usb 3-1: Product: syz [ 684.709177][ T5900] usb 3-1: Manufacturer: syz [ 684.717027][ T5900] usb 3-1: SerialNumber: syz [ 684.776933][ T5900] r8152-cfgselector 3-1: Unknown version 0x0000 [ 684.785562][ T5900] r8152-cfgselector 3-1: config 0 descriptor?? [ 685.134376][T12918] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 685.142242][T12918] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1818'. [ 685.164802][ T5829] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 685.707957][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 685.744913][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.784754][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 685.933345][ T5900] r8152-cfgselector 3-1: Unknown version 0x0000 [ 686.096972][ T5900] r8152-cfgselector 3-1: bad CDC descriptors [ 686.107464][T12923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.117076][ T5900] r8152-cfgselector 3-1: USB disconnect, device number 49 [ 687.522933][T12949] bridge3: entered promiscuous mode [ 687.528305][T12949] bridge3: entered allmulticast mode [ 689.182879][T12956] bridge2: entered promiscuous mode [ 689.188299][T12956] bridge2: entered allmulticast mode [ 689.222019][T12956] team0: Port device bridge2 added [ 690.422826][T12974] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 690.430662][T12974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1830'. [ 691.195517][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 691.206569][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 691.216572][T12980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.450128][ T5824] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 691.549334][ T5865] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 691.824443][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 691.872057][ T5865] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 691.968402][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.986939][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.998150][ T5865] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.019613][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.028218][ T5865] usb 5-1: Product: syz [ 692.059860][ T5865] usb 5-1: Manufacturer: syz [ 692.064475][ T5865] usb 5-1: SerialNumber: syz [ 692.142841][ T5900] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 692.241032][T13004] bridge3: entered promiscuous mode [ 692.246435][T13004] bridge3: entered allmulticast mode [ 692.264500][T13004] team0: Port device bridge3 added [ 692.614579][ T5900] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 692.651208][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.659296][ T5900] usb 4-1: Product: syz [ 692.672631][ T5900] usb 4-1: Manufacturer: syz [ 692.677263][ T5900] usb 4-1: SerialNumber: syz [ 692.677617][T13007] syz.0.1838: attempt to access beyond end of device [ 692.677617][T13007] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 692.716455][ T5900] r8152-cfgselector 4-1: Unknown version 0x0000 [ 692.732237][ T5900] r8152-cfgselector 4-1: config 0 descriptor?? [ 692.739099][ T25] libceph: connect (1)[c::]:6789 error -101 [ 692.790455][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 692.800256][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 692.806313][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 692.813723][ T5865] usb 5-1: 0:2 : does not exist [ 692.828820][T13007] syz.0.1838: attempt to access beyond end of device [ 692.828820][T13007] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 692.841897][T13007] syz.0.1838: attempt to access beyond end of device [ 692.841897][T13007] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 692.856024][T13007] syz.0.1838: attempt to access beyond end of device [ 692.856024][T13007] loop0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 692.875272][T13010] ceph: No mds server is up or the cluster is laggy [ 692.890664][T13007] syz.0.1838: attempt to access beyond end of device [ 692.890664][T13007] loop0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 692.912413][T13007] syz.0.1838: attempt to access beyond end of device [ 692.912413][T13007] loop0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 692.931860][T13007] VFS: unable to find oldfs superblock on device loop0 [ 693.026885][ T5900] r8152-cfgselector 4-1: Unknown version 0x0000 [ 693.060303][ T5900] r8152-cfgselector 4-1: bad CDC descriptors [ 693.485264][ T5900] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 693.499783][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.605523][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.321769][ T5865] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 694.450796][T13022] bridge4: entered promiscuous mode [ 694.456175][T13022] bridge4: entered allmulticast mode [ 694.494139][T13022] team0: Port device bridge4 added [ 694.600010][ T5865] usb 5-1: USB disconnect, device number 47 [ 694.896913][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.646603][T13048] 9pnet_fd: Insufficient options for proto=fd [ 698.153640][ T5870] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 698.310303][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 698.637511][ T5870] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 698.643195][T13058] bridge7: entered promiscuous mode [ 698.660034][T13058] bridge7: entered allmulticast mode [ 698.716097][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.735212][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.751316][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.760744][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.772010][ T5870] usb 5-1: Product: syz [ 698.791453][ T5870] usb 5-1: Manufacturer: syz [ 698.796076][ T5870] usb 5-1: SerialNumber: syz [ 699.088571][T13066] netlink: 'syz.2.1856': attribute type 1 has an invalid length. [ 699.096818][T13066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1856'. [ 699.993811][ T5870] usb 5-1: 0:2 : does not exist [ 700.109256][T13071] bridge5: entered promiscuous mode [ 700.116697][T13071] bridge5: entered allmulticast mode [ 700.919837][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.239489][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.866838][ T5870] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 702.234512][ T5870] usb 5-1: USB disconnect, device number 48 [ 702.675874][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.611961][T13107] syz.0.1866: attempt to access beyond end of device [ 703.611961][T13107] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 703.624998][T13107] qnx6: unable to read the first superblock [ 703.631788][T13107] syz.0.1866: attempt to access beyond end of device [ 703.631788][T13107] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 703.644674][T13107] qnx6: unable to read the first superblock [ 703.650620][T13107] qnx6: unable to read the first superblock [ 703.719623][T13108] netlink: 'syz.0.1866': attribute type 4 has an invalid length. [ 704.634788][T13111] 9pnet_fd: Insufficient options for proto=fd [ 706.190113][T13127] bridge4: entered promiscuous mode [ 706.195552][T13127] bridge4: entered allmulticast mode [ 706.216855][T13127] team0: Port device bridge4 added [ 706.497894][T13129] netlink: 'syz.2.1873': attribute type 62 has an invalid length. [ 708.267037][T13153] trusted_key: encrypted_key: master key parameter 'defau"^syz0' is invalid [ 708.839009][T13156] bridge6: entered promiscuous mode [ 708.844512][T13156] bridge6: entered allmulticast mode [ 709.441001][T13160] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 709.448790][T13160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1881'. [ 711.594859][T13173] 9pnet_fd: Insufficient options for proto=fd [ 712.244379][T13180] bridge7: entered promiscuous mode [ 712.249962][T13180] bridge7: entered allmulticast mode [ 712.284140][T13180] team0: Port device bridge7 added [ 713.128602][T13190] bridge5: entered promiscuous mode [ 713.134162][T13190] bridge5: entered allmulticast mode [ 713.229863][ T5866] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 713.731103][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.746549][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.778980][ T5866] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 713.790880][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 713.876788][ T5866] usb 2-1: SerialNumber: syz [ 713.885239][T13197] bridge6: entered promiscuous mode [ 714.094104][T13197] bridge6: entered allmulticast mode [ 714.881110][ T5866] usb 2-1: 0:2 : does not exist [ 714.886139][ T5866] usb 2-1: unit 5: unexpected type 0x0b [ 715.013862][T13205] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 715.021757][T13205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1893'. [ 715.142677][ T5866] usb 2-1: USB disconnect, device number 48 [ 715.476399][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.714781][ T5900] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 716.031831][T13215] 9pnet_fd: Insufficient options for proto=fd [ 716.529680][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 716.541060][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.799652][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.119946][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 717.553041][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.563972][ T5900] usb 3-1: config 0 descriptor?? [ 718.046804][T13237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 718.099806][ T5900] appleir 0003:05AC:8241.001A: unknown main item tag 0x0 [ 718.278638][ T5900] appleir 0003:05AC:8241.001A: unknown main item tag 0x0 [ 718.476708][ T5900] appleir 0003:05AC:8241.001A: unknown main item tag 0x0 [ 718.618810][ T5900] appleir 0003:05AC:8241.001A: unknown main item tag 0x0 [ 718.828269][ T5900] appleir 0003:05AC:8241.001A: unknown main item tag 0x0 [ 718.841172][ T5900] appleir 0003:05AC:8241.001A: No inputs registered, leaving [ 719.451157][ T5900] appleir 0003:05AC:8241.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 719.471640][ T5900] usb 3-1: USB disconnect, device number 50 [ 719.916279][T13254] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 719.924132][T13254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1907'. [ 720.609816][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 720.900018][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 720.916764][ T25] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 721.392904][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.407710][ T25] usb 2-1: Product: syz [ 721.412393][ T25] usb 2-1: Manufacturer: syz [ 721.417817][ T25] usb 2-1: SerialNumber: syz [ 721.426610][ T25] usb 2-1: config 0 descriptor?? [ 721.450118][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 721.941748][T13283] bridge8: entered promiscuous mode [ 721.947066][T13283] bridge8: entered allmulticast mode [ 721.962269][T13283] team0: Port device bridge8 added [ 722.810827][T13277] netlink: 'syz.1.1906': attribute type 16 has an invalid length. [ 722.820339][T13277] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1906'. [ 723.150179][ T25] gspca_stk1135: reg_w 0x7 err -110 [ 723.159380][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 723.194972][ T25] gspca_stk1135: Sensor write failed [ 723.261727][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 723.293813][ T25] gspca_stk1135: Sensor write failed [ 723.514408][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 723.608203][T13301] syz.3.1915: attempt to access beyond end of device [ 723.608203][T13301] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 723.621315][T13301] qnx6: unable to read the first superblock [ 723.628027][T13301] syz.3.1915: attempt to access beyond end of device [ 723.628027][T13301] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 723.641003][T13301] qnx6: unable to read the first superblock [ 723.646975][T13301] qnx6: unable to read the first superblock [ 723.710905][T13301] netlink: 'syz.3.1915': attribute type 4 has an invalid length. [ 723.762490][ T25] gspca_stk1135: Sensor read failed [ 723.770111][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 723.790401][ T25] gspca_stk1135: Sensor read failed [ 723.795711][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 723.804566][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 723.811016][ T25] gspca_stk1135: Sensor read failed [ 723.816409][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 724.227513][ T25] gspca_stk1135: Sensor read failed [ 724.232819][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 724.239178][ T25] gspca_stk1135: Sensor write failed [ 724.244538][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 724.259609][ T25] gspca_stk1135: Sensor write failed [ 724.264950][ T25] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 724.729059][ T5866] usb 2-1: USB disconnect, device number 49 [ 725.139768][ T8] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 725.629646][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 725.974354][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.170347][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.321122][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 726.335501][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.359260][ T8] usb 5-1: config 0 descriptor?? [ 727.000505][ T8] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 727.023134][ T8] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 727.412987][ T8] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 727.435254][ T8] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 727.465699][ T8] appleir 0003:05AC:8241.001B: unknown main item tag 0x0 [ 727.488976][ T8] appleir 0003:05AC:8241.001B: No inputs registered, leaving [ 727.513063][ T8] appleir 0003:05AC:8241.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 727.561552][ T8] usb 5-1: USB disconnect, device number 49 [ 728.431464][T13364] bridge5: entered promiscuous mode [ 728.436795][T13364] bridge5: entered allmulticast mode [ 728.473006][T13364] team0: Port device bridge5 added [ 729.711119][T13383] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 729.718920][T13383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1927'. [ 729.737843][ T5824] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 729.737942][ T5900] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 730.499724][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 730.759797][ T5900] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 730.784080][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.808044][ T5900] usb 1-1: Product: syz [ 730.815604][ T5900] usb 1-1: Manufacturer: syz [ 730.833691][ T5900] usb 1-1: SerialNumber: syz [ 730.950151][ T5900] usb 1-1: config 0 descriptor?? [ 731.166122][ T5900] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 731.506662][ T29] audit: type=1400 audit(1740227929.131:683): avc: denied { getopt } for pid=13386 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 731.605137][T13402] bridge2: entered promiscuous mode [ 731.610589][T13402] bridge2: entered allmulticast mode [ 731.639117][T13402] team0: Port device bridge2 added [ 732.677015][T13373] netlink: 'syz.0.1928': attribute type 16 has an invalid length. [ 732.687608][T13373] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1928'. [ 734.019719][ T8] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 734.073975][ T29] audit: type=1400 audit(1740227931.701:684): avc: denied { lock } for pid=13439 comm="syz.1.1940" path="socket:[37934]" dev="sockfs" ino=37934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 734.140964][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 734.517085][ T5900] gspca_stk1135: reg_w 0x2ff err -71 [ 734.527892][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.534870][ T5900] gspca_stk1135: Sensor write failed [ 734.544917][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.553254][ T5900] gspca_stk1135: Sensor write failed [ 734.558775][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.565302][ T5900] gspca_stk1135: Sensor read failed [ 734.570905][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.570959][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 734.577337][ T5900] gspca_stk1135: Sensor read failed [ 734.587723][ T5900] gspca_stk1135: Detected sensor type unknown (0x0) [ 734.594667][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.601265][ T5900] gspca_stk1135: Sensor read failed [ 734.606862][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.613394][ T5900] gspca_stk1135: Sensor read failed [ 734.618875][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.634463][ T5900] gspca_stk1135: Sensor write failed [ 734.649515][ T5900] gspca_stk1135: serial bus timeout: status=0x00 [ 734.656083][ T5900] gspca_stk1135: Sensor write failed [ 734.737280][ T5900] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 734.753520][ T8] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 734.792816][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.806336][ T5900] usb 1-1: USB disconnect, device number 56 [ 734.967315][ T8] usb 3-1: Product: syz [ 735.189712][ T8] usb 3-1: Manufacturer: syz [ 735.194538][ T8] usb 3-1: SerialNumber: syz [ 735.725943][ T8] usb 3-1: config 0 descriptor?? [ 735.866740][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 736.326311][ T8] gspca_se401: ExtraFeatures: 104 [ 736.348560][ T8] gspca_se401: Too many frame sizes [ 736.532212][T13434] fuse: Unknown parameter 'user_id00000000000000000000' [ 736.915016][ T5900] usb 3-1: USB disconnect, device number 51 [ 737.026452][T13470] 9pnet_fd: Insufficient options for proto=fd [ 738.412583][T13489] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 738.422093][T13489] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 738.813251][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 739.549739][ T9] usb 3-1: device descriptor read/64, error -71 [ 739.789640][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 740.449641][ T9] usb 3-1: device descriptor read/64, error -71 [ 740.485191][T12919] Bluetooth: hci4: command 0x0405 tx timeout [ 740.556295][T13503] fuse: Unknown parameter '0xffffffffffffffff' [ 740.601869][ T9] usb usb3-port1: attempt power cycle [ 740.633440][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 740.635055][ T29] audit: type=1400 audit(1740227938.261:685): avc: denied { read write } for pid=13507 comm="syz.0.1956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 740.667029][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.756573][ T29] audit: type=1400 audit(1740227938.311:686): avc: denied { read } for pid=13507 comm="syz.0.1956" dev="sockfs" ino=37403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 740.779241][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.545695][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 741.570246][ T9] usb 3-1: device descriptor read/8, error -71 [ 741.679905][ T5866] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 741.715408][T13524] syz.4.1961: attempt to access beyond end of device [ 741.715408][T13524] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 741.733662][T13524] syz.4.1961: attempt to access beyond end of device [ 741.733662][T13524] loop4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 741.748179][T13524] syz.4.1961: attempt to access beyond end of device [ 741.748179][T13524] loop4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 741.766450][T13524] syz.4.1961: attempt to access beyond end of device [ 741.766450][T13524] loop4: rw=0, sector=18, nr_sectors = 2 limit=0 [ 741.784407][T13524] syz.4.1961: attempt to access beyond end of device [ 741.784407][T13524] loop4: rw=0, sector=30, nr_sectors = 2 limit=0 [ 741.812820][T13524] syz.4.1961: attempt to access beyond end of device [ 741.812820][T13524] loop4: rw=0, sector=36, nr_sectors = 2 limit=0 [ 741.859620][T13524] VFS: unable to find oldfs superblock on device loop4 [ 741.859711][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 741.876889][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 741.883457][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 742.230541][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 742.241147][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 742.253169][ T5866] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 742.265469][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.274930][ T5866] usb 1-1: Product: syz [ 742.293382][ T5866] usb 1-1: Manufacturer: syz [ 742.298207][ T5866] usb 1-1: SerialNumber: syz [ 742.309219][ T5866] usb 1-1: config 0 descriptor?? [ 742.316980][T13526] ceph: No mds server is up or the cluster is laggy [ 742.326471][ T5866] gspca_main: se401-2.14.0 probing 047d:5003 [ 742.687885][T13542] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 742.697508][T13542] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 742.764542][ T5866] gspca_se401: ExtraFeatures: 104 [ 742.804739][ T5866] gspca_se401: Too many frame sizes [ 742.999881][T13518] fuse: Unknown parameter 'user_id00000000000000000000' [ 743.780920][ T5870] usb 1-1: USB disconnect, device number 57 [ 745.113118][T13556] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 745.120584][T13556] overlayfs: failed to set xattr on upper [ 745.126825][T13556] overlayfs: ...falling back to redirect_dir=nofollow. [ 745.138019][T13556] overlayfs: ...falling back to index=off. [ 745.143973][T13556] overlayfs: ...falling back to uuid=null. [ 745.189890][T13562] 9pnet_fd: Insufficient options for proto=fd [ 747.048266][T13569] 9pnet_fd: Insufficient options for proto=fd [ 747.185351][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.451460][ T5153] sched: DL replenish lagged too much [ 852.189558][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 852.196549][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11630/1:b..l [ 852.205141][ C0] rcu: (detected by 0, t=10502 jiffies, g=53233, q=219 ncpus=2) [ 852.212866][ C0] task:kworker/u8:3 state:R running task stack:24112 pid:11630 tgid:11630 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 852.227591][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 852.235437][ C0] Call Trace: [ 852.238720][ C0] [ 852.241659][ C0] __schedule+0xf43/0x5890 [ 852.246087][ C0] ? __pfx_mark_lock+0x10/0x10 [ 852.250869][ C0] ? __pfx_mark_lock+0x10/0x10 [ 852.255648][ C0] ? find_held_lock+0x2d/0x110 [ 852.260425][ C0] ? __pfx___schedule+0x10/0x10 [ 852.265293][ C0] ? mark_held_locks+0x9f/0xe0 [ 852.270079][ C0] preempt_schedule_irq+0x51/0x90 [ 852.275115][ C0] irqentry_exit+0x36/0x90 [ 852.279540][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.285538][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 852.291448][ C0] Code: b8 ff ff ff ff 65 0f c1 05 f0 db 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 852.311066][ C0] RSP: 0018:ffffc9000c48fa10 EFLAGS: 00000206 [ 852.317146][ C0] RAX: 0000000000000046 RBX: 1ffff92001891f43 RCX: 000000009564a76e [ 852.325120][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cefa0 RDI: ffffffff8bd35600 [ 852.333096][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 852.341069][ C0] R10: ffffffff96ec2cc7 R11: 0000000000000003 R12: 0000000000000000 [ 852.349042][ C0] R13: ffffffff8e1bcc80 R14: 0000000000000000 R15: 0000000000000000 [ 852.357038][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 852.362699][ C0] ? rcu_is_watching+0x12/0xc0 [ 852.367472][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 852.372693][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 852.378780][ C0] ? lock_acquire+0x2f/0xb0 [ 852.383294][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 852.389380][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x14d0 [ 852.395291][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 852.401386][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 852.407734][ C0] ? batadv_send_skb_packet+0x5d7/0x770 [ 852.413294][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 852.420345][ C0] process_one_work+0x9c5/0x1ba0 [ 852.425311][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 852.432876][ C0] ? __pfx_process_one_work+0x10/0x10 [ 852.438289][ C0] ? assign_work+0x1a0/0x250 [ 852.442906][ C0] worker_thread+0x6c8/0xf00 [ 852.447528][ C0] ? __kthread_parkme+0x148/0x220 [ 852.452566][ C0] ? __pfx_worker_thread+0x10/0x10 [ 852.457706][ C0] kthread+0x3af/0x750 [ 852.461792][ C0] ? __pfx_kthread+0x10/0x10 [ 852.466396][ C0] ? lock_acquire+0x2f/0xb0 [ 852.470923][ C0] ? __pfx_kthread+0x10/0x10 [ 852.475539][ C0] ret_from_fork+0x45/0x80 [ 852.479976][ C0] ? __pfx_kthread+0x10/0x10 [ 852.484578][ C0] ret_from_fork_asm+0x1a/0x30 [ 852.489369][ C0] [ 852.492390][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10525 jiffies! g53233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 852.504732][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=41018 [ 852.512630][ C0] rcu: rcu_preempt kthread starved for 10531 jiffies! g53233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 852.524039][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 852.534018][ C0] rcu: RCU grace-period kthread stack dump: [ 852.539906][ C0] task:rcu_preempt state:I stack:28048 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 852.551863][ C0] Call Trace: [ 852.555145][ C0] [ 852.558086][ C0] __schedule+0xf43/0x5890 [ 852.562517][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 852.567778][ C0] ? __pfx___schedule+0x10/0x10 [ 852.572639][ C0] ? schedule+0x298/0x350 [ 852.576986][ C0] ? __pfx_lock_release+0x10/0x10 [ 852.582029][ C0] ? lock_acquire+0x2f/0xb0 [ 852.586555][ C0] ? schedule+0x1fd/0x350 [ 852.590896][ C0] schedule+0xe7/0x350 [ 852.594976][ C0] schedule_timeout+0x124/0x280 [ 852.599844][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 852.605235][ C0] ? __pfx_process_timeout+0x10/0x10 [ 852.610532][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 852.616349][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 852.621830][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 852.626613][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 852.631917][ C0] ? rcu_gp_init+0xc82/0x1630 [ 852.636613][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 852.641829][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 852.647645][ C0] rcu_gp_kthread+0x271/0x380 [ 852.652338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 852.657555][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 852.662764][ C0] ? __kthread_parkme+0x148/0x220 [ 852.667793][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 852.673008][ C0] kthread+0x3af/0x750 [ 852.677089][ C0] ? __pfx_kthread+0x10/0x10 [ 852.681693][ C0] ? __pfx_kthread+0x10/0x10 [ 852.686294][ C0] ret_from_fork+0x45/0x80 [ 852.690724][ C0] ? __pfx_kthread+0x10/0x10 [ 852.695326][ C0] ret_from_fork_asm+0x1a/0x30 [ 852.700123][ C0] [ 852.703143][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 852.709470][ C0] Sending NMI from CPU 0 to CPUs 1: [ 852.714681][ C1] NMI backtrace for cpu 1 [ 852.714694][ C1] CPU: 1 UID: 0 PID: 1293 Comm: aoe_tx0 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 852.714714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 852.714725][ C1] RIP: 0010:__kasan_check_read+0x8/0x20 [ 852.714755][ C1] Code: 60 48 c7 c7 20 e7 7f 8d 5b 5d 41 5c e9 c1 36 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f6 31 d2 e9 7f f0 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 852.714773][ C1] RSP: 0018:ffffc900045ef948 EFLAGS: 00000046 [ 852.714787][ C1] RAX: 0000000000000007 RBX: ffffffff9ab81280 RCX: ffffffff81971ed3 [ 852.714800][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9ab81280 [ 852.714811][ C1] RBP: 0000000000000293 R08: 0000000000000000 R09: fffffbfff20c4aa2 [ 852.714823][ C1] R10: ffffffff90625517 R11: 0000000000000002 R12: ffffffff8eeabfa0 [ 852.714834][ C1] R13: ffffffff9ab81388 R14: 0000000000000000 R15: ffffffff9ab813c0 [ 852.714846][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 852.714864][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.714877][ C1] CR2: 0000001b2f01fffc CR3: 00000000662a6000 CR4: 00000000003526f0 [ 852.714888][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 852.714899][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 852.714910][ C1] Call Trace: [ 852.714916][ C1] [ 852.714924][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 852.714954][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 852.714977][ C1] ? nmi_handle+0x1ac/0x5d0 [ 852.715004][ C1] ? __kasan_check_read+0x8/0x20 [ 852.715030][ C1] ? default_do_nmi+0x6a/0x160 [ 852.715057][ C1] ? exc_nmi+0x170/0x1e0 [ 852.715081][ C1] ? end_repeat_nmi+0xf/0x53 [ 852.715109][ C1] ? do_raw_spin_unlock+0x53/0x230 [ 852.715127][ C1] ? __kasan_check_read+0x8/0x20 [ 852.715154][ C1] ? __kasan_check_read+0x8/0x20 [ 852.715181][ C1] ? __kasan_check_read+0x8/0x20 [ 852.715208][ C1] [ 852.715214][ C1] [ 852.715219][ C1] do_raw_spin_unlock+0x53/0x230 [ 852.715237][ C1] _raw_spin_unlock_irqrestore+0x22/0x80 [ 852.715257][ C1] uart_write_room+0x2d9/0x940 [ 852.715280][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 852.715300][ C1] tty_write_room+0x63/0x90 [ 852.715327][ C1] handle_tx+0x151/0x630 [ 852.715359][ C1] dev_hard_start_xmit+0x9a/0x7b0 [ 852.715382][ C1] __dev_queue_xmit+0x7f0/0x43e0 [ 852.715407][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 852.715425][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 852.715454][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 852.715479][ C1] ? find_held_lock+0x2d/0x110 [ 852.715500][ C1] ? find_held_lock+0x2d/0x110 [ 852.715528][ C1] tx+0xcc/0x190 [ 852.715544][ C1] ? __pfx_tx+0x10/0x10 [ 852.715558][ C1] kthread+0x1e7/0x3c0 [ 852.715585][ C1] ? __pfx_kthread+0x10/0x10 [ 852.715610][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 852.715636][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 852.715662][ C1] ? __kthread_parkme+0x148/0x220 [ 852.715681][ C1] ? __pfx_kthread+0x10/0x10 [ 852.715706][ C1] kthread+0x3af/0x750 [ 852.715728][ C1] ? __pfx_kthread+0x10/0x10 [ 852.715752][ C1] ? __pfx_kthread+0x10/0x10 [ 852.715773][ C1] ret_from_fork+0x45/0x80 [ 852.715797][ C1] ? __pfx_kthread+0x10/0x10 [ 852.715818][ C1] ret_from_fork_asm+0x1a/0x30 [ 852.715844][ C1]