last executing test programs: 5m50.094156062s ago: executing program 3 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) symlink(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x80c1) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000340)=0x14c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffffffff, 0x5, 0xd, 0x1, 0x7, 0x4, 0xd}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x20004005) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000640)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000000), 0x4) 5m49.886296064s ago: executing program 3 (id=546): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000640)=""/187, 0xbb) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x1, 0x58, 0x40}, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) 5m48.946483626s ago: executing program 3 (id=548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedreceive(r4, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x280182, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x3, 0x40, 0x40, 0x0, 0x10001, 0x2004cc, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0x6, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m42.725672679s ago: executing program 3 (id=562): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x169b85273c6f8108, 0x5, 0x0) getsockname$netrom(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001ac0)={'syz1\x00', {0x4, 0xc, 0x4, 0x7}, 0x50, [0x28, 0x9, 0xfffffffa, 0x8000, 0x0, 0xd2, 0x100, 0x7fff, 0x4, 0x37, 0x6, 0x3, 0x9, 0x0, 0x2, 0x1ff, 0x2, 0x5, 0x56d, 0x100, 0x1, 0x7fffffff, 0xffff8001, 0x3, 0x4, 0x7, 0x2, 0x0, 0x4, 0x0, 0xfffffffe, 0x5, 0x7, 0x7540, 0x4, 0x10, 0x3, 0x5, 0x4, 0x8, 0x7, 0x1, 0x1, 0xf, 0x9, 0x80000000, 0x1, 0x0, 0x74, 0x1, 0x10001, 0xffff, 0x5, 0x7, 0x3, 0x200, 0xd, 0x10000, 0x43cb, 0x80000000, 0x5, 0xfffffff7, 0x6, 0x3], [0x81, 0x8, 0x5, 0xdba, 0xfffffff7, 0x1000, 0x1, 0x63, 0x400, 0x2, 0x4, 0x5, 0x8, 0x1, 0x0, 0x1b9c, 0x6, 0x3, 0x4, 0x7, 0xf, 0x8, 0x4, 0x9, 0x5, 0x0, 0x8, 0x4, 0x0, 0x6, 0x83, 0x2, 0x2, 0x9, 0x6, 0x0, 0x5, 0x401, 0x9, 0x3, 0xfd, 0x0, 0x0, 0x566e, 0x6, 0x4, 0x9962, 0x3658, 0x3, 0x3, 0x100, 0x8, 0x0, 0x200, 0x9, 0x8, 0x3, 0x20000, 0x3, 0x10001, 0x0, 0x6, 0x9, 0x2b], [0x3ff, 0x5, 0x5d, 0x80000000, 0x1, 0x0, 0x0, 0x10001, 0x5, 0x8, 0x9, 0xa14, 0xeb, 0x1, 0xf225, 0x5, 0xbd, 0x100, 0x3, 0x4, 0xa7af, 0x5, 0x100, 0x3dc1, 0x1, 0x0, 0x3, 0x6, 0x2, 0x1ad, 0x2, 0x1000, 0x5, 0x200, 0x401, 0xff, 0x1, 0x6, 0xfffffff9, 0xee3, 0x4, 0x8, 0x2, 0x1, 0x4, 0x3, 0x5, 0x8001, 0x3ff, 0xe, 0x4, 0x4, 0x40, 0x9, 0xfffffbff, 0x5, 0x80000000, 0xe4e, 0x1, 0x10001, 0x14d, 0xe, 0xffff8001, 0x7], [0x76, 0x3, 0x80, 0x10000, 0x6, 0x7, 0xe0000, 0x7f, 0x9, 0x117, 0x8, 0x4, 0x8, 0x9dfc, 0x5, 0x2, 0x3, 0x4, 0x7, 0x5, 0xffff, 0x7, 0xffffff80, 0x3, 0x3, 0xb, 0x8b2, 0x9, 0x80000001, 0x7, 0x80000001, 0xffffffff, 0x9, 0x8000, 0x7, 0x8, 0x3, 0x5, 0x20, 0x9, 0x9, 0x6, 0x1, 0x401, 0xb, 0x8, 0x6, 0xcfba, 0x1, 0x36ab, 0x0, 0xf5b, 0x8, 0xf2e, 0xae5, 0x6, 0x0, 0x400040, 0xe, 0x0, 0x7ff, 0x8, 0x54b3]}, 0x45c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0xc020) recvmsg$can_raw(r5, &(0x7f0000000340)={0x0, 0xf500, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5m40.926313305s ago: executing program 3 (id=565): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0xac, 0x2f, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x99, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0xac}], 0x1, 0x0, 0x0, 0x400c1}, 0x4008080) 5m40.831771242s ago: executing program 3 (id=568): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200000000000000000000000000000000000000000000000000027f97f66aba0c3"], 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r7}, 0x38) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r8, 0x80045010, &(0x7f0000000040)) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000004000000002e2e00e7a937668c52fc95b36da995705ab4e277f59192f6686effdcbea621dcc4fe82847e843063850505d18f731096b17b8027723f0d1bde537b621fbdaec3f61d99e8d52e17b444bdc58fdaa2077387ca735b8942acbc8b0d4a976560102a20f4a6ccd2f01ea629a3bb569c43bd6bd5a06cba10"], 0x0, 0x1c, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) 5m25.711612529s ago: executing program 32 (id=568): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200000000000000000000000000000000000000000000000000027f97f66aba0c3"], 0x66) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r7}, 0x38) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r8, 0x80045010, &(0x7f0000000040)) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000004000000002e2e00e7a937668c52fc95b36da995705ab4e277f59192f6686effdcbea621dcc4fe82847e843063850505d18f731096b17b8027723f0d1bde537b621fbdaec3f61d99e8d52e17b444bdc58fdaa2077387ca735b8942acbc8b0d4a976560102a20f4a6ccd2f01ea629a3bb569c43bd6bd5a06cba10"], 0x0, 0x1c, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) 13.625155154s ago: executing program 4 (id=1549): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000900)=ANY=[], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000006000000cc041e00215d6946b0a45ac07bf4e46e7cac5a15b00f989aa096a82fcaf0a0f88c7519b312e7997dca9d12d0d62522df03"], 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$usbip_server(r4, &(0x7f0000001600)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x6}, 0xa86f, 0x23, 0x0, 0x0, 0x6, 0x0, "a765dbb92e95e37168d50a1a110bb840ade99da1f7d07155093c48e97726d9f16999b2"}, 0x53) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, 'pim6reg\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x168, 0xc8, 0x8, 0x168, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x9, 0x1}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x8001, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) recvfrom$rxrpc(r3, &(0x7f00000004c0)=""/218, 0xda, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) 11.131413923s ago: executing program 1 (id=1555): syz_open_dev$I2C(&(0x7f0000000080), 0x100000001, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfd, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c1}, 0x4008080) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)={0xd, 0xfffff000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 10.132397728s ago: executing program 4 (id=1556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffe4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}}, 0x48090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) 10.117929444s ago: executing program 1 (id=1557): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 8.467511274s ago: executing program 5 (id=1563): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e00, @remote}}}, 0x9) 8.288260377s ago: executing program 2 (id=1564): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.934232311s ago: executing program 4 (id=1565): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 7.32547191s ago: executing program 5 (id=1566): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x31) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x400, 0x52) r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x6270c2, 0x0) ftruncate(r1, 0x8800000) (async) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x41) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r3, 0xd5) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) close(r2) accept(r3, 0x0, 0x0) (async) sendfile(r2, r1, 0x0, 0x578410ed) (async) shutdown(r4, 0x0) 7.16380397s ago: executing program 4 (id=1567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdd3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 7.075484433s ago: executing program 0 (id=1568): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) read$ptp(r6, &(0x7f0000000500)=""/81, 0x51) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x14, 0x0, r0, &(0x7f0000000680), &(0x7f0000000340)='./file0\x00', 0x2, 0x6000, 0x1}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f00000000c0)=0x56e02a3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r10, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xfce1) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="a0ad3052c9d4d2ec1233f787d4fbc6ca41fc80719c0aa6707465df0bf863bf41041a507cfd8c7064fd2293526fadb72ea7b99d1be6e8b66b7f7ab7892a71831b65330d14bf7d9a669ef79556c72c83decd0fe86cbcb9ae0e6dddabb3d7b68d2a6569d8233b9d6b720ffbaec8eb9a7221a66e2a1f8d20c0fde2ef0b038142b7abf094aad9c9f8385240be59ede1ed7f7b108d66e618a00d99c49aeba64a99de90c2bf949856c1aa08084d21445c502ffd5cc4b5b639ad0d5983bf"], 0x5) 6.665977028s ago: executing program 5 (id=1569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x2, 0x13, 0xff, 0x7fffffff}, {0x8001, 0x7, 0x9, 0x7}, {0x8001, 0xb, 0x0, 0x8}, {0x5, 0xec, 0x0, 0x3}, {0x9, 0x4, 0xc8, 0x100}, {0x0, 0x1, 0x4, 0x5}, {0xd, 0x1, 0x8, 0x7fffffff}, {0x8, 0x9, 0x8, 0x5}]}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a40)={0x9, 0x5, 0x9, 0x5, 0xffff, 0x4, 0x8, 0x7fffffff}, &(0x7f0000000a80)=0x20) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000d00)={[{@huge_advise}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}], [{@uid_gt={'uid>', r4}}]}) 6.560826223s ago: executing program 4 (id=1570): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 6.4849071s ago: executing program 1 (id=1571): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@polexpire={0xd4, 0x1b, 0x31d, 0x70bd28, 0x25dfdbfc, {{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e20, 0x1, 0x4e24, 0x400, 0x2, 0x80, 0xa0, 0x87}, {0x8, 0x7, 0xfffffffffffffff4, 0x4, 0x2, 0x41ba, 0x4, 0x80000000}, {0x7fffffff, 0x3, 0xff08, 0x8}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075d, 0x40}}]}, 0xd4}}, 0x4000) 6.450382911s ago: executing program 2 (id=1572): mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1231060, 0x0) 6.370561356s ago: executing program 2 (id=1573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = getpid() r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x6, 0x204, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r11 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x30d715adfdb2c41b, 0xfffffffd, '\x00', @value=0x80000001}}) io_uring_enter(r9, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5.515095717s ago: executing program 5 (id=1574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6]}, 0x8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) r9 = openat$cgroup_type(r8, 0x0, 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.219376174s ago: executing program 1 (id=1575): syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 5.193252923s ago: executing program 2 (id=1576): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e00, @remote}}}, 0x9) 4.753026719s ago: executing program 0 (id=1577): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 3.484755019s ago: executing program 2 (id=1578): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x8, &(0x7f0000000a00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x8c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000b80)={'#! ', '', [], 0xa, "55bf0450cf730ec59c35c42829dd15964b11e65315c9f7bac990be9c9bd8a9c652fc269447a36765ab509e17e0c576a2388cc9033e2f35c69fdd630e15793859a64eb330db74a97ba9027c5b00dfe5946b3f47641746bdd1bf2d2926152706f56ccef5868346285fd78ef92df99312"}, 0x73) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x110, r3, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/124, 0x7c}], 0xa, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmmsg$unix(r3, &(0x7f0000000980)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000f80)="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", 0x152}, {&(0x7f00000005c0)="d8f53cdec7ea5b2de3ca45db471d47274699f837d988f16a9b9b34294812559e0e705995d3543d27e3cf94c1a2094815f889d32f0a1bf5b82f537558d56f46ae53a49c24c6068737237d2ec93d7c3c6b38f91af50a4ced350c5d05a8359af670f5bfe929a7d725a0739a8d68584ffd7c4633d19ea8c595a1588071cb04665bac88a3c3a0547a18175b6ef8e329a84d874e4a0942b4c42c3b17a8411fb7ff650a2f36ce2d171ba145a9cd4ec90c008fe88c5b9728755683797219e460fb6ab50f496365d8d455c3a9d7c5ef093a7c40d627cde6a639666bdd99922b140859938153b67a16444fd37e", 0xe8}, {&(0x7f00000004c0)="a696ba654a366bfcedb628db29674f829bd8bb023c83892880ea208cd7924a8a25fc66c02235b5b2a1f2237f84e8c654529c92b3659779efd3d1aaa5766e2951f7a9dc5a9125df720a02171d77b6e9b52766b75aaad26ad503a9f6862e96bb7e169c8ca120f0028a5e3797bc4ee7f520e39f364dfc2b93826433dfd003978c4118ad00afa2df01851810fec89b0e015bd2ed981a9c3f8b1eea709b10bac647f1cceafe34cba6d266f41fc70f13d5459c0f2d9c7b144b9959f76a042ecce4179a8e119e22ef826680e7249fc18254f4f23c03fb0adef7fbdd609c7c98c6c7568b50817396c37cef41", 0xe8}, {&(0x7f00000007c0)="0fb949a74736cd4a8194bd9e9e27a7ee572965e315745294b97c83bd59aca30c321c7cebbb6c23c0f1b3f8405d10baeabb1fdffb3755248633ee91ad6c9be96f9604685629700c91453930d166492ee10996243b58aa29554e7e21d3af477c3a895e", 0x62}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000840)="a9f914c6e6a1ad90e047d30250fae2447b2d3f", 0x13}, {&(0x7f0000000880)="8c993ee8c7953de016a512a848ea86aec0174c7892e48138f6d11280239fa84a14273a6d2aa2552b7581f6ec9f6af60d594ab903bb5720a9a3f1a24b81fdaabd9e07a153ae86feb1c6ba862c72cee4e28b30cdcdb292996016f08f4ba8b1d8f96039bc7c4549d9778287e75be08cef953707500b4bbf7d8dd3eef8057138a909cac484048e418dc663a1ff7c35d1ede0a3594a18819a2136419a1e532083233dfc1cf296b06c90954060b7630d35cbb67c027dc1ed6ac1fb3525ff162947c8fe9a20c54ae61c872382106f943e4baa605274987a6e", 0xd5}, {&(0x7f0000001100)="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", 0x10e}], 0x8, 0x0, 0x0, 0x4000004}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000001240)="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", 0x167}], 0x1, 0x0, 0x0, 0x81}}], 0x4000000000003ba, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000240)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}, {&(0x7f0000000ec0)="dd5522918d00b9494901f115b55eeee10cd4a1669f69d6a2eb84c8bc4d5417ee8aa66f48a334eded7c3e72ef8aa8156fb0cc23de788eae552f4b3e82d7d304601907d5de5095a164637f875f50298a024fc851fee29b0cdc449fb58c3c4c6cc30c29bde961f2e31c6872cd8d776cf45c5b4f1a2d06ae5f9e2c526cfc992782d268e30ff8ee6388ec913f3db40f133a", 0x8f}], 0x3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00002cc000/0x1000)=nil, 0x1000, 0x2, 0x10, r5, 0x34214000) r6 = fsopen(&(0x7f00000006c0)='romfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.355377271s ago: executing program 5 (id=1579): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000540)={0x0, 0x1b, r9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="6130400000000600000000000000000e"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x34, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) 2.058669154s ago: executing program 0 (id=1580): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvfrom$rxrpc(r0, &(0x7f00000004c0)=""/218, 0xda, 0x10000, 0x0, 0x0) 2.031084511s ago: executing program 4 (id=1581): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) 1.918059972s ago: executing program 0 (id=1582): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast1, 0xa, r4}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) clock_gettime(0xfffffff2, &(0x7f0000000000)) openat$cgroup_type(r0, 0x0, 0x2, 0x0) 1.89737242s ago: executing program 5 (id=1583): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) gettid() syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r1, &(0x7f0000000200)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000100)="a0834d67f1721892ce615b4a5e5ecb14b931ed1072c0902dd874d46cb44cfdcd865fa1fa7ed748e0898fc88d9b314ace812a87136dc6be4f17ac7287137283c8e3a714716eeb497bc0379dfdaab0c375cb3dd9061ab81e937cbaae7d883034c130775414fc740efd8ede81dda2bcd1225c7d9b2ad5523664e68a62ee514006e3b6ae96c2984907347ad3313174ec23c1a16ef162d93e304240cc8a3d8038e1329f44b933f63f84edf18fb444330903726bc32038c883670dc49c4bfd153d4e3294ca8bb4a4d3cc522daa604fc7830434c3a401055e2ce55411beb10ba4242cb6", 0xe0}, {&(0x7f0000000000)="5df57670ca9c5bedde655bba683f5f93eb4c557a96fae5812571da7b80a9f03bb89b41311d5ab302221917b8608d", 0x2e}], 0x3) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f9c3aedd38e8aaca61829b372f00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r6}, 0x38) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000002c0)={0x8dd, {0x20, 0x8b1, 0x4515, 0x113, 0x4}}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa16a0000000000000000000000b8000000000000000000", 0x28) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x40000024) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@code={0xa, 0x63, {"470f01cbb9330000000f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d521f18aefb9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x63}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 958.812489ms ago: executing program 0 (id=1584): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) openat$cgroup_ro(r1, &(0x7f0000000580)='devices.list\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="ec76b36ad85b815cdd8bc66b83d2d656e011e6bb48942c0f5bc40dccc0c570e1f0e34a0d4cd9d082686098f6b3c71ddde04897af62fb0a866a275785d2f4ca661d5c49d2136af39c5eef11556f4b53f5bdaf830706d1d41a02a5b37365ee3dc5efcaaec72be3cd18e5660721e3fe52d2deb9f55c400443afded30df9daedadfa893f7a41e78b29b92451a56f7f1fd16a52bba6c0d215ed6b860e3c8e2dab6495bf37a9d09560902947e23ff2bda88c99bf5a1669a4fe75a8bb24d0dfdc38980c8eb0012c2151de92a9137f57e16ed97f", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000a00)="00d1c2dc4943a772e270807db0d5f2cc3ca997105a4ae45aea02b03d5cf6bfc4ed80af24f2872bf9b623a6ebec30ae0dac1af13ef0b7db722e49c42f1d5618c0ec69bf9ad1cabc7c3953645e7de1b83e2c4861c2fdb65b1afac07fe8e60e334cbc9400f6dddcb185e64b41894b0039f2697dc0443a1c9e0d3f9fb9668ece9258eeaf97ca66296d44cda7e9b71b2c839e9aefde6736b928a7cf44563cf74c439c4efeb8e1cf4440e779cdf2adad2f5cedcac3d6f544", 0xb5}], 0x2}}], 0x2, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 797.941717ms ago: executing program 0 (id=1585): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000900)=ANY=[], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000006000000cc041e00215d6946b0a45ac07bf4e46e7cac5a15b00f989aa096a82fcaf0a0f88c7519b312e7997dca9d12d0d62522df03"], 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$usbip_server(r4, &(0x7f0000001600)=@ret_submit={{0x3, 0x2, 0x0, 0x1, 0x6}, 0xa86f, 0x23, 0x0, 0x0, 0x6, 0x0, "a765dbb92e95e37168d50a1a110bb840ade99da1f7d07155093c48e97726d9f16999b2"}, 0x53) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, 'pim6reg\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x168, 0xc8, 0x8, 0x168, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x9, 0x1}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x8001, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) recvfrom$rxrpc(r3, &(0x7f00000004c0)=""/218, 0xda, 0x10000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) 429.573756ms ago: executing program 2 (id=1586): r0 = socket(0x1a, 0x6, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000140)="012f9fdf13d2dc2d60f754f89cf4", 0xfffffffffffffe02, r1) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x800002) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$inet6(0x10, 0x3, 0xf) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000f553f41dc5528551b29c517b00000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000240012800b00010062726964676500001400028005002c000000000005002b0003000000"], 0x44}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001006dc261110300000000000000000000000000000000000001fe8000000000000000000000000000bb0000fffd000000000a00000026000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000080000000000000000000000000000000000000000000000000000000000000000000000000000400000000008400050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000043500000000210000000000000000000000000020010000000000000000000000000000bffffffd3c0000000a000000e0000001000000000000000000000000033500000000070007000000000000000e000000"], 0x13c}}, 0x4040000) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbcaf66222e6aa86dd6043009300103afffe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000f100000000006bb9ae6237d21975858d122f0ee24641fae943b73adbf73c5b3230bf"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @bcast, @default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000040024555e36f05f086ef72e118581f01e27e9c23df8bc93fe9f416dae4be15151fa80f28dd08d692d4641302e1375d88acdc4325165593996dfe1298f8d860c4d321a3abab8acd8eb8b1ef51532a85a70b694f9432ed5ded8663b6a9ea9c8634b82be9be47ab08e5059f99345c660c7971e7a492858a0ba78"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r8, 0x0, 0xa0028000}, 0x38) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x0, 0x300, 0x340, &(0x7f00000003c0)=[0x3, 0x8009, 0x14, 0x7f, 0x5a2da748, 0x81, 0x1, 0x2, 0xfffffffffffffffb, 0x8001, 0x349, 0xf55, 0x4, 0xffc0000000000000, 0xde8, 0x9, 0x100003, 0x8, 0x4, 0x1, 0x0, 0x5, 0x1, 0x0, 0x3, 0x10003, 0x8, 0x4, 0xe, 0x8000, 0x6, 0x5, 0x4, 0x1, 0xde, 0x5, 0x5af, 0x7, 0x2, 0x3, 0x4, 0x0, 0x2, 0x6, 0x401, 0x0, 0x80000000, 0x0, 0xfffffffffffffffb, 0x80000000000000, 0xffffffffffffff00, 0x9, 0xf, 0x2, 0x7, 0x6, 0x0, 0x10, 0xa, 0x2, 0x4, 0xa335, 0x9, 0x8, 0x40, 0x1000, 0x40000f, 0x20000000000000, 0x2, 0x6, 0x7ffffffb, 0x9, 0x4, 0x1, 0x5, 0x9, 0x28000000, 0x34c, 0x8, 0x9, 0x500000, 0x81d, 0xbd, 0x2, 0xfffffffffffff800, 0x4b, 0x5, 0xfffffffffffffffc, 0xffffffffffff8000, 0xfffffffffffffffd, 0x2, 0x6, 0x6, 0x9, 0xfffffffffffffff6, 0x6, 0x1000, 0x5, 0x4, 0x5, 0x98, 0x4, 0xea, 0x5, 0x71, 0xdd, 0x1, 0xe, 0xfffffffffffffffd, 0x80000000000004, 0x10001, 0x5, 0x7, 0x17d, 0x410, 0xe962, 0x400, 0x3, 0x4, 0xffffd, 0x5, 0x3, 0x9, 0x100000001, 0x0, 0x7fffffff, 0x0, 0x9]}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 261.929458ms ago: executing program 1 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a64001280110001006272696467655f736c617665000000004c000580080025000700000006001f0001000000050009000000000008002200", @ANYRES32, @ANYBLOB="05001e000100000006000200ff030000080008000000000008000300090000000800250009000000140003006272696467655f736c6176655f3000"], 0x98}, 0x1, 0x0, 0x0, 0x200cc010}, 0x4040) 0s ago: executing program 1 (id=1588): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003c00)={0x2020}, 0x2020) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000006c0)}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)=@arm64={0x1d, 0x6, 0x7f, '\x00', 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x9, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x4, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0xde7, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x10, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000004, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x3, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x54, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xb, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1266, 0xb490, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x203, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x2, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x5, 0x40, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x100, 0x6, 0x6, 0x0, 0xb9, 0xb, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000004, 0x6, 0x4, 0xc8, 0x9, 0x401, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x3, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0xb7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xffffffff, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r7, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ync page read [ 369.469046][ T9920] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.478061][ T9920] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.486566][ T9920] ldm_validate_partition_table(): Disk read failed. [ 369.511063][ T9920] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.636839][ T9920] Buffer I/O error on dev loop6, logical block 0, async page read [ 369.718237][ T9920] Dev loop6: unable to read RDB block 0 [ 369.730084][ T9920] loop6: unable to read partition table [ 369.739123][ T9920] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 370.814818][ T9946] syz2: rxe_newlink: already configured on ipvlan0 [ 370.985953][ T9950] FAULT_INJECTION: forcing a failure. [ 370.985953][ T9950] name failslab, interval 1, probability 0, space 0, times 0 [ 370.998781][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.0.896 Not tainted syzkaller #0 PREEMPT(full) [ 370.998806][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.998821][ T9950] Call Trace: [ 370.998827][ T9950] [ 370.998834][ T9950] dump_stack_lvl+0x16c/0x1f0 [ 370.998857][ T9950] should_fail_ex+0x512/0x640 [ 370.998878][ T9950] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 370.998907][ T9950] should_failslab+0xc2/0x120 [ 370.998928][ T9950] kmem_cache_alloc_noprof+0x75/0x6e0 [ 370.998955][ T9950] ? alloc_empty_file+0x55/0x1e0 [ 370.998982][ T9950] ? alloc_empty_file+0x55/0x1e0 [ 370.999003][ T9950] alloc_empty_file+0x55/0x1e0 [ 370.999026][ T9950] path_openat+0xda/0x2cb0 [ 370.999053][ T9950] ? __pfx_path_openat+0x10/0x10 [ 370.999079][ T9950] do_filp_open+0x20b/0x470 [ 370.999098][ T9950] ? __pfx_do_filp_open+0x10/0x10 [ 370.999135][ T9950] ? alloc_fd+0x471/0x7d0 [ 370.999161][ T9950] do_sys_openat2+0x11b/0x1d0 [ 370.999184][ T9950] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.999208][ T9950] ? __pfx___schedule+0x10/0x10 [ 370.999233][ T9950] ? __fget_files+0x20e/0x3c0 [ 370.999256][ T9950] __x64_sys_openat+0x174/0x210 [ 370.999280][ T9950] ? __pfx___x64_sys_openat+0x10/0x10 [ 370.999302][ T9950] ? ksys_write+0x1ac/0x250 [ 370.999328][ T9950] do_syscall_64+0xcd/0xfa0 [ 370.999347][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.999365][ T9950] RIP: 0033:0x7f32c0f8f749 [ 370.999380][ T9950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.999397][ T9950] RSP: 002b:00007f32c1ea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.999415][ T9950] RAX: ffffffffffffffda RBX: 00007f32c11e6180 RCX: 00007f32c0f8f749 [ 370.999426][ T9950] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 370.999437][ T9950] RBP: 00007f32c1ea2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.999447][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.999457][ T9950] R13: 00007f32c11e6218 R14: 00007f32c11e6180 R15: 00007ffceead3a38 [ 370.999482][ T9950] [ 371.206966][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.428801][ T9956] fuse: Unknown parameter 'Y Ô0x000000000000000800000000000000000008' [ 371.814522][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 371.852912][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.900'. [ 372.014595][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 372.057171][ T10] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 372.079481][ T30] audit: type=1400 audit(4141796662.730:839): avc: denied { bind } for pid=9964 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.129646][ T10] usb 5-1: config 4 has no interface number 0 [ 372.146006][ T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.164410][ T30] audit: type=1400 audit(4141796662.810:840): avc: denied { ioctl } for pid=9964 comm="syz.1.901" path="socket:[32445]" dev="sockfs" ino=32445 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.188750][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.194951][ T10] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.204991][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 372.214104][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.231613][ T10] hub 5-1:4.128: USB hub found [ 372.280524][ T30] audit: type=1400 audit(4141796662.930:841): avc: denied { write } for pid=9964 comm="syz.1.901" path="socket:[32445]" dev="sockfs" ino=32445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.303769][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.429252][ T10] hub 5-1:4.128: 2 ports detected [ 372.441485][ T10] hub 5-1:4.128: Using single TT (err -22) [ 372.535678][ T30] audit: type=1400 audit(4141796663.190:842): avc: denied { read write } for pid=9969 comm="syz.0.902" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 372.558962][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.614436][ T30] audit: type=1400 audit(4141796663.220:843): avc: denied { open } for pid=9969 comm="syz.0.902" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 372.637669][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.404474][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 373.494457][ T1539] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 373.538665][ T10] hub 5-1:4.128: hub_hub_status failed (err = -32) [ 373.558783][ T10] hub 5-1:4.128: config failed, can't get hub status (err -32) [ 373.588803][ T42] usb 1-1: config index 0 descriptor too short (expected 8225, got 59) [ 373.607358][ T42] usb 1-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 373.634563][ T42] usb 1-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 373.654514][ T1539] usb 6-1: Using ep0 maxpacket: 32 [ 373.660858][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.671331][ T1539] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 373.684468][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.702300][ T1539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.713094][ T42] usb 1-1: SerialNumber: syz [ 373.720951][ T1539] usb 6-1: config 0 descriptor?? [ 373.867339][ T30] audit: type=1400 audit(4141796664.520:844): avc: denied { create } for pid=9980 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 373.949814][ T1539] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 374.064677][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.466236][ T1539] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 374.468474][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.904'. [ 374.508191][ T5903] usb 5-1: USB disconnect, device number 17 [ 374.563078][ T1539] usb 6-1: media controller created [ 374.854077][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.669586][ T9999] syz2: rxe_newlink: already configured on ipvlan0 [ 375.734580][ T5903] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 375.864644][ T42] usb 1-1: USB disconnect, device number 19 [ 375.886308][ T5903] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 375.894781][ T5903] usb 3-1: config 5 has no interface number 0 [ 375.901033][ T5903] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 375.912967][ T5903] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.924494][ T5903] usb 3-1: config 5 interface 123 has no altsetting 0 [ 375.933941][ T5903] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 375.945261][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.953365][ T5903] usb 3-1: Product: syz [ 375.957780][ T5903] usb 3-1: Manufacturer: syz [ 375.962452][ T5903] usb 3-1: SerialNumber: syz [ 376.263823][ T1539] az6027: usb out operation failed. (-71) [ 376.275841][ T5903] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 376.286378][ T1539] az6027: usb out operation failed. (-71) [ 376.292122][ T1539] stb0899_attach: Driver disabled by Kconfig [ 376.317645][ T5903] usb 3-1: USB disconnect, device number 19 [ 376.323870][ T1539] az6027: no front-end attached [ 376.323870][ T1539] [ 376.343837][ T1539] az6027: usb out operation failed. (-71) [ 376.418113][ T1539] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 376.451742][ T1539] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 376.503154][ T1539] dvb-usb: schedule remote query interval to 400 msecs. [ 376.617304][ T1539] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 376.644272][ T1539] usb 6-1: USB disconnect, device number 4 [ 377.146097][ T1539] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 377.399868][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.917'. [ 377.454986][ T5903] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 377.508840][T10024] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 377.606960][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 377.688342][ T5903] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 377.703489][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.735793][ T5903] usb 5-1: config 0 descriptor?? [ 378.181076][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.225524][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 378.250826][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.270752][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 378.286391][ T5903] usb 5-1: media controller created [ 378.312976][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.349111][ T10] IPVS: starting estimator thread 0... [ 378.366884][T10030] netlink: 'syz.0.920': attribute type 8 has an invalid length. [ 378.422702][T10024] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 378.464453][T10036] IPVS: using max 40 ests per chain, 96000 per kthread [ 378.949080][T10045] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 379.035873][ T30] audit: type=1400 audit(4141796669.680:845): avc: denied { connect } for pid=10044 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 379.074745][T10045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.084456][ T1539] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.101894][T10049] bond1: (slave geneve2): making interface the new active one [ 379.116939][T10049] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 379.141519][T10050] bond1: entered promiscuous mode [ 379.149304][ T30] audit: type=1400 audit(4141796669.790:846): avc: denied { accept } for pid=10040 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.168967][T10050] geneve2: entered promiscuous mode [ 379.336261][T10053] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 379.894445][ T1539] usb 6-1: Using ep0 maxpacket: 32 [ 379.958817][ T1539] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 379.968376][ T1539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.986884][ T1539] usb 6-1: config 0 descriptor?? [ 380.202368][ T1539] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 380.211477][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.221402][ T1539] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 380.234807][ T1539] usb 6-1: media controller created [ 380.251161][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.364968][ T5903] az6027: usb out operation failed. (-71) [ 380.385907][ T5903] az6027: usb out operation failed. (-71) [ 380.650864][ T5903] stb0899_attach: Driver disabled by Kconfig [ 380.792561][ T5903] az6027: no front-end attached [ 380.792561][ T5903] [ 380.800173][ T5903] az6027: usb out operation failed. (-71) [ 380.805956][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.813925][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 380.867667][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 380.887237][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.898278][ T5903] usb 5-1: USB disconnect, device number 18 [ 382.194925][ T5903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 382.203582][ T1539] az6027: usb out operation failed. (-71) [ 382.209832][ T1539] az6027: usb out operation failed. (-71) [ 382.216893][ T1539] stb0899_attach: Driver disabled by Kconfig [ 382.224869][ T1539] az6027: no front-end attached [ 382.224869][ T1539] [ 382.232312][ T1539] az6027: usb out operation failed. (-71) [ 382.278062][ T1539] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 382.292120][ T1539] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 382.304674][ T1539] dvb-usb: schedule remote query interval to 400 msecs. [ 382.311656][ T1539] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 382.731898][ T1539] usb 6-1: USB disconnect, device number 5 [ 382.778583][ T1539] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 382.779589][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 382.920346][ T5903] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 383.474421][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 383.491367][ T5903] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 383.510900][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.533064][ T5903] usb 5-1: config 0 descriptor?? [ 384.004240][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 384.053963][ T5903] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 384.075526][ T5903] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 384.110361][ T30] audit: type=1400 audit(4141796674.720:847): avc: denied { firmware_load } for pid=5903 comm="kworker/1:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 385.012198][ T30] audit: type=1400 audit(4141796675.470:848): avc: denied { ioctl } for pid=10110 comm="syz.2.940" path="socket:[33833]" dev="sockfs" ino=33833 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 385.287960][T10120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10120 comm=syz.4.942 [ 385.304812][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 385.814799][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 385.821768][ T42] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 385.834496][ T42] usb 1-1: config 4 has no interface number 0 [ 385.840648][ T42] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.863265][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 385.891980][ T42] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.924378][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 385.955786][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.986599][ T42] hub 1-1:4.128: USB hub found [ 386.016577][T10137] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 386.050640][T10137] netlink: 228 bytes leftover after parsing attributes in process `syz.2.948'. [ 386.089854][T10140] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 386.099351][T10140] netlink: 228 bytes leftover after parsing attributes in process `syz.4.949'. [ 386.185470][ T42] hub 1-1:4.128: 2 ports detected [ 386.192751][ T42] hub 1-1:4.128: Using single TT (err -22) [ 387.358086][ T42] hub 1-1:4.128: hub_hub_status failed (err = -32) [ 387.376476][ T42] hub 1-1:4.128: config failed, can't get hub status (err -32) [ 387.407372][T10161] program syz.4.955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.481703][ T30] audit: type=1400 audit(4141796678.130:849): avc: denied { create } for pid=10157 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.502663][ T30] audit: type=1400 audit(4141796678.150:850): avc: denied { setopt } for pid=10157 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.713786][ T30] audit: type=1400 audit(4141796678.230:851): avc: denied { bind } for pid=10157 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.790892][ T30] audit: type=1400 audit(4141796678.440:852): avc: denied { name_bind } for pid=10175 comm="syz.5.961" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 387.814768][ T42] usb 1-1: USB disconnect, device number 20 [ 387.824117][ T30] audit: type=1400 audit(4141796678.460:853): avc: denied { node_bind } for pid=10175 comm="syz.5.961" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 387.874283][ T30] audit: type=1400 audit(4141796678.500:854): avc: denied { write } for pid=10175 comm="syz.5.961" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 387.928236][T10179] FAULT_INJECTION: forcing a failure. [ 387.928236][T10179] name failslab, interval 1, probability 0, space 0, times 0 [ 387.952239][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.0.959 Not tainted syzkaller #0 PREEMPT(full) [ 387.952265][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.952274][T10179] Call Trace: [ 387.952280][T10179] [ 387.952286][T10179] dump_stack_lvl+0x16c/0x1f0 [ 387.952308][T10179] should_fail_ex+0x512/0x640 [ 387.952329][T10179] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 387.952358][T10179] should_failslab+0xc2/0x120 [ 387.952380][T10179] kmem_cache_alloc_noprof+0x75/0x6e0 [ 387.952411][T10179] ? __lock_acquire+0x622/0x1c90 [ 387.952427][T10179] ? fuse_request_alloc+0x22/0x200 [ 387.952450][T10179] ? fuse_request_alloc+0x22/0x200 [ 387.952465][T10179] fuse_request_alloc+0x22/0x200 [ 387.952482][T10179] fuse_get_req+0x748/0xfd0 [ 387.952507][T10179] ? __pfx_fuse_get_req+0x10/0x10 [ 387.952528][T10179] ? __lock_acquire+0x622/0x1c90 [ 387.952551][T10179] __fuse_simple_request+0xb5/0xe10 [ 387.952577][T10179] fuse_getxattr+0x255/0x420 [ 387.952594][T10179] ? __pfx_fuse_getxattr+0x10/0x10 [ 387.952615][T10179] ? __lock_acquire+0x622/0x1c90 [ 387.952644][T10179] ? find_held_lock+0x2b/0x80 [ 387.952669][T10179] ? __pfx_fuse_xattr_get+0x10/0x10 [ 387.952684][T10179] fuse_xattr_get+0x7b/0xb0 [ 387.952702][T10179] __vfs_getxattr+0x13d/0x1a0 [ 387.952721][T10179] ? __pfx___vfs_getxattr+0x10/0x10 [ 387.952739][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 387.952759][T10179] cap_inode_need_killpriv+0x40/0x60 [ 387.952787][T10179] security_inode_need_killpriv+0x1b9/0x1e0 [ 387.952809][T10179] file_remove_privs_flags+0x32d/0x580 [ 387.952834][T10179] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 387.952858][T10179] ? __pfx___might_resched+0x10/0x10 [ 387.952879][T10179] ? generic_write_check_limits+0x1f1/0x290 [ 387.952908][T10179] ? generic_write_checks+0x311/0x480 [ 387.952935][T10179] ? __pfx_generic_write_checks+0x10/0x10 [ 387.952966][T10179] kiocb_modified+0x8b/0x2c0 [ 387.952990][T10179] fuse_file_write_iter+0x34d/0x990 [ 387.953016][T10179] aio_write+0x3b9/0x910 [ 387.953039][T10179] ? __pfx_aio_write+0x10/0x10 [ 387.953059][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 387.953090][T10179] ? __might_fault+0xe3/0x190 [ 387.953115][T10179] ? __might_fault+0x13b/0x190 [ 387.953147][T10179] ? io_submit_one+0x1243/0x1df0 [ 387.953167][T10179] io_submit_one+0x1243/0x1df0 [ 387.953190][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 387.953211][T10179] ? __pfx_io_submit_one+0x10/0x10 [ 387.953241][T10179] ? __might_fault+0xe3/0x190 [ 387.953265][T10179] ? __might_fault+0x13b/0x190 [ 387.953294][T10179] ? __x64_sys_io_submit+0x1a9/0x350 [ 387.953315][T10179] __x64_sys_io_submit+0x1a9/0x350 [ 387.953340][T10179] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 387.953374][T10179] do_syscall_64+0xcd/0xfa0 [ 387.953394][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.953418][T10179] RIP: 0033:0x7f32c0f8f749 [ 387.953433][T10179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.953450][T10179] RSP: 002b:00007f32c1ee4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 387.953468][T10179] RAX: ffffffffffffffda RBX: 00007f32c11e5fa0 RCX: 00007f32c0f8f749 [ 387.953479][T10179] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007f32c1e9a000 [ 387.953490][T10179] RBP: 00007f32c1ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 387.953500][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.953510][T10179] R13: 00007f32c11e6038 R14: 00007f32c11e5fa0 R15: 00007ffceead3a38 [ 387.953535][T10179] [ 388.295556][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.130844][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 390.395890][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 390.446719][ T10] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 390.455579][T10212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.464283][ T10] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 390.474266][ T10] usb 1-1: config 2 has no interface number 1 [ 390.480803][ T10] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.499545][ T10] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 390.534956][ T10] usb 1-1: config 2 interface 0 has no altsetting 0 [ 390.638675][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 390.648262][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.659931][ T10] usb 1-1: Product: syz [ 390.664412][ T10] usb 1-1: Manufacturer: syz [ 390.670312][ T10] usb 1-1: SerialNumber: syz [ 390.680648][ T10] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 390.995681][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.965'. [ 391.075614][ T10] pwc: Failed to set LED on/off time (-71) [ 391.082144][ T10] pwc: send_video_command error -71 [ 391.087455][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 391.106455][ T10] Philips webcam 1-1:2.0: probe with driver Philips webcam failed with error -71 [ 391.118049][ T10] usb 1-1: USB disconnect, device number 21 [ 391.291417][ T5941] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 391.367834][T10236] FAULT_INJECTION: forcing a failure. [ 391.367834][T10236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.381254][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.5.975 Not tainted syzkaller #0 PREEMPT(full) [ 391.381279][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.381288][T10236] Call Trace: [ 391.381293][T10236] [ 391.381299][T10236] dump_stack_lvl+0x16c/0x1f0 [ 391.381313][T10236] should_fail_ex+0x512/0x640 [ 391.381328][T10236] strncpy_from_user+0x3b/0x2e0 [ 391.381341][T10236] getname_flags.part.0+0x8f/0x550 [ 391.381359][T10236] getname_flags+0x93/0xf0 [ 391.381369][T10236] __x64_sys_execve+0x74/0xb0 [ 391.381379][T10236] do_syscall_64+0xcd/0xfa0 [ 391.381390][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.381401][T10236] RIP: 0033:0x7fc7e7d8f749 [ 391.381410][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.381420][T10236] RSP: 002b:00007fc7e8bea038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 391.381434][T10236] RAX: ffffffffffffffda RBX: 00007fc7e7fe5fa0 RCX: 00007fc7e7d8f749 [ 391.381440][T10236] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000200000019140 [ 391.381446][T10236] RBP: 00007fc7e8bea090 R08: 0000000000000000 R09: 0000000000000000 [ 391.381452][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.381458][T10236] R13: 00007fc7e7fe6038 R14: 00007fc7e7fe5fa0 R15: 00007ffec0d02158 [ 391.381472][T10236] [ 391.545156][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 391.552296][ T5941] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 391.560805][ T5941] usb 2-1: config 4 has no interface number 0 [ 391.567043][ T5941] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.578270][ T5941] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.588390][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 391.603817][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.619636][ T5941] hub 2-1:4.128: USB hub found [ 391.824519][ T5941] hub 2-1:4.128: 2 ports detected [ 391.860048][ T5941] hub 2-1:4.128: Using single TT (err -22) [ 392.618022][ T30] audit: type=1400 audit(4141796683.270:855): avc: denied { name_connect } for pid=10250 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 392.898945][ T5941] hub 2-1:4.128: hub_hub_status failed (err = -32) [ 392.918762][ T5941] hub 2-1:4.128: config failed, can't get hub status (err -32) [ 393.109836][T10254] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.134833][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.142825][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.163523][T10254] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 393.323509][ T30] audit: type=1400 audit(4141796683.840:856): avc: denied { ioctl } for pid=10253 comm="syz.5.980" path="socket:[34073]" dev="sockfs" ino=34073 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 393.457291][ T30] audit: type=1400 audit(4141796684.110:857): avc: denied { write } for pid=10253 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 394.155455][ T42] usb 2-1: USB disconnect, device number 27 [ 394.421991][ T30] audit: type=1400 audit(4141796685.060:858): avc: denied { setopt } for pid=10270 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.676895][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 394.691454][T10275] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 394.844457][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 394.892596][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 394.904089][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 394.920366][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.927706][T10277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10277 comm=syz.0.986 [ 394.931318][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.955158][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.965326][ T10] usb 6-1: string descriptor 0 read error: -22 [ 394.972771][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.984182][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.999906][ T10] usb 6-1: 0:2 : does not exist [ 395.006254][T10277] veth3: entered promiscuous mode [ 395.012086][T10277] veth3: entered allmulticast mode [ 395.020575][T10277] bridge1: port 1(veth3) entered blocking state [ 395.027151][T10277] bridge1: port 1(veth3) entered disabled state [ 395.038650][T10277] bridge1: port 1(veth3) entered blocking state [ 395.045315][T10277] bridge1: port 1(veth3) entered forwarding state [ 395.055807][ T6695] bridge1: port 1(veth3) entered disabled state [ 395.123062][T10278] veth5: entered promiscuous mode [ 395.129983][T10278] veth5: entered allmulticast mode [ 395.148989][T10278] bridge1: port 2(veth5) entered blocking state [ 395.156628][T10278] bridge1: port 2(veth5) entered disabled state [ 395.167063][T10278] bridge1: port 2(veth5) entered blocking state [ 395.173490][T10278] bridge1: port 2(veth5) entered forwarding state [ 395.208265][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.236792][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.262461][ T6695] bridge1: port 2(veth5) entered disabled state [ 395.269387][ T30] audit: type=1400 audit(4141796685.920:859): avc: denied { mount } for pid=10270 comm="syz.5.984" name="/" dev="ramfs" ino=33578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 395.302155][ T5941] usb 6-1: USB disconnect, device number 6 [ 396.070092][T10299] syz2: rxe_newlink: already configured on ipvlan0 [ 398.134571][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 398.279476][T10327] ubi: mtd0 is already attached to ubi0 [ 398.296085][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 398.318549][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 398.340690][ T42] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 398.357519][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.375239][ T42] usb 6-1: Product: syz [ 398.379718][ T42] usb 6-1: Manufacturer: syz [ 398.384497][ T42] usb 6-1: SerialNumber: syz [ 398.391118][ T30] audit: type=1400 audit(4141796689.040:860): avc: denied { bind } for pid=10332 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 398.419826][ T42] usb 6-1: config 0 descriptor?? [ 398.435896][ T42] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 398.452628][ T42] usb 6-1: Detected SIO [ 398.462104][ T42] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 398.478227][ T42] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 398.501295][ T42] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 398.687474][ T5896] usb 6-1: USB disconnect, device number 7 [ 398.698277][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 398.708123][ T5896] ftdi_sio 6-1:0.0: device disconnected [ 398.748599][ T1539] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 398.904567][ T1539] usb 2-1: Using ep0 maxpacket: 8 [ 398.911868][ T1539] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.922403][ T1539] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 398.934020][ T1539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 398.945692][ T1539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 398.957019][ T1539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.971893][ T1539] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 398.981768][ T1539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 398.992302][ T1539] usb 2-1: Product: syz [ 398.996613][ T1539] usb 2-1: Manufacturer: syz [ 399.011238][ T1539] usb 2-1: SerialNumber: syz [ 399.026880][ T1539] usb 2-1: config 0 descriptor?? [ 399.037459][T10343] sp0: Synchronizing with TNC [ 399.047971][T10329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 399.475450][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.607961][ T1539] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 399.639067][ T1539] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 399.657320][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.536162][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 400.582982][T10356] binder: 10355:10356 ioctl c0046209 0 returned -22 [ 400.592917][ T30] audit: type=1400 audit(4141796691.250:861): avc: denied { read } for pid=10355 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 400.694407][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 400.701510][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.711897][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.756249][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.768216][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.782055][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.791253][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.160956][ T30] audit: type=1400 audit(4141796691.690:862): avc: denied { unlink } for pid=10355 comm="syz.2.1007" name="#5" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.311756][ T30] audit: type=1400 audit(4141796691.700:863): avc: denied { mount } for pid=10355 comm="syz.2.1007" name="/" dev="overlay" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 401.418939][ T5971] usb 2-1: USB disconnect, device number 28 [ 401.607780][ T5941] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 401.616241][T10365] syz2: rxe_newlink: already configured on ipvlan0 [ 401.684750][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 401.695871][ T10] usbtmc 6-1:16.0: can't read capabilities [ 401.855248][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 401.868253][ T42] usb 6-1: USB disconnect, device number 8 [ 401.881733][ T30] audit: type=1400 audit(4141796692.520:864): avc: denied { ioctl } for pid=10348 comm="syz.5.1005" path="socket:[34268]" dev="sockfs" ino=34268 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.946283][ T5941] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 401.983124][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.997987][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 402.004467][ T30] audit: type=1400 audit(4141796692.630:865): avc: denied { setopt } for pid=10377 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 402.062635][ T5941] usb 1-1: config 0 descriptor?? [ 402.159161][ T30] audit: type=1400 audit(4141796692.690:866): avc: denied { map } for pid=10377 comm="syz.1.1014" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.302602][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 402.317492][ T30] audit: type=1400 audit(4141796692.690:867): avc: denied { execute } for pid=10377 comm="syz.1.1014" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 402.389346][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.429925][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 402.520483][ T5941] usb 1-1: media controller created [ 402.585733][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'. [ 402.836856][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.862119][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 404.458752][T10404] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 404.595230][T10404] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1018'. [ 404.614475][ T5941] az6027: usb out operation failed. (-71) [ 404.623675][ T5941] az6027: usb out operation failed. (-71) [ 404.629556][ T5941] stb0899_attach: Driver disabled by Kconfig [ 405.030334][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 405.204557][ T5941] az6027: no front-end attached [ 405.204557][ T5941] [ 405.216276][ T5941] az6027: usb out operation failed. (-71) [ 405.226466][T10413] netlink: 'syz.0.1021': attribute type 27 has an invalid length. [ 405.244375][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 405.455817][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 405.477815][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 405.497681][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 405.545882][ T5941] usb 1-1: USB disconnect, device number 22 [ 406.278452][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 406.415083][ T5896] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 406.516797][ T5896] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.154591][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 407.913582][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1031'. [ 409.970664][T10457] sp0: Synchronizing with TNC [ 410.068107][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 411.000325][ T30] audit: type=1400 audit(4141796700.700:868): avc: denied { append } for pid=10461 comm="syz.4.1035" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 411.127561][T10467] Invalid option length (1047412) for dns_resolver key [ 416.415566][T10525] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 416.801515][T10531] sp0: Synchronizing with TNC [ 417.102988][ T30] audit: type=1400 audit(4141796707.720:869): avc: denied { map } for pid=10534 comm="syz.4.1054" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.164416][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 418.314408][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 418.325345][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 418.338832][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.360342][ T42] usb 3-1: config 0 descriptor?? [ 418.599866][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 418.607803][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.622643][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 418.630468][ T42] usb 3-1: media controller created [ 418.696183][T10561] syz_tun: entered allmulticast mode [ 418.708207][T10561] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 418.755283][ T30] audit: type=1400 audit(4141796709.330:870): avc: denied { ioctl } for pid=10558 comm="syz.0.1062" path="/dev/input/mouse0" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 419.096082][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'. [ 419.099378][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.125997][T10558] syz_tun: left allmulticast mode [ 419.724485][ T5941] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 419.874818][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 419.881495][ T5941] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 419.890807][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.900583][ T5941] usb 1-1: config 0 descriptor?? [ 420.104462][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 420.115774][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 420.124299][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.134243][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 420.141562][ T5941] usb 1-1: media controller created [ 420.157535][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.264384][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 420.271242][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.281579][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.297159][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 420.306684][ T10] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 420.314842][ T10] usb 6-1: Manufacturer: syz [ 420.391047][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 420.511702][ T10] usb 6-1: config 0 descriptor?? [ 420.731382][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 421.192443][ T42] az6027: usb out operation failed. (-71) [ 421.214206][ T42] az6027: usb out operation failed. (-71) [ 421.244206][ T42] stb0899_attach: Driver disabled by Kconfig [ 421.275445][ T42] az6027: no front-end attached [ 421.275445][ T42] [ 421.292071][ T30] audit: type=1400 audit(4141796711.940:871): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 421.313163][ T42] az6027: usb out operation failed. (-71) [ 421.320022][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 421.329187][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 421.343466][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 421.354267][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 421.364954][ T42] usb 3-1: USB disconnect, device number 20 [ 422.183546][ T5941] az6027: usb out operation failed. (-110) [ 422.189951][ T5941] az6027: usb out operation failed. (-32) [ 422.195937][ T5941] stb0899_attach: Driver disabled by Kconfig [ 422.202097][ T5941] az6027: no front-end attached [ 422.202097][ T5941] [ 422.209704][ T5941] az6027: usb out operation failed. (-32) [ 422.215612][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 422.224749][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 422.241028][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 422.249841][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 422.472175][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 422.495737][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 422.504866][ T5896] usb 1-1: USB disconnect, device number 23 [ 422.578017][ T5896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 422.920461][ T5941] usb 6-1: USB disconnect, device number 9 [ 422.994496][ T42] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 423.265339][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 423.280949][ T42] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 423.290165][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.304306][ T42] usb 2-1: config 0 descriptor?? [ 423.430349][T10609] ubi: mtd0 is already attached to ubi0 [ 423.567724][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 423.623657][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.648006][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 423.667557][ T42] usb 2-1: media controller created [ 423.711085][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.921882][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 424.834415][ T5971] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 425.016470][ T5971] usb 1-1: config index 0 descriptor too short (expected 8225, got 59) [ 425.028452][ T5971] usb 1-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 425.055648][ T5971] usb 1-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 425.076632][ T5971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.088403][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 425.097685][ T5971] usb 1-1: SerialNumber: syz [ 425.222894][ T30] audit: type=1326 audit(4141796715.870:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.323327][ T30] audit: type=1326 audit(4141796715.970:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.355322][ T30] audit: type=1326 audit(4141796715.970:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.388569][ T30] audit: type=1326 audit(4141796715.970:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.413016][ T30] audit: type=1326 audit(4141796716.000:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.438182][ T30] audit: type=1326 audit(4141796716.000:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.464608][ T30] audit: type=1326 audit(4141796716.000:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.489562][ T30] audit: type=1326 audit(4141796716.000:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.515404][ T30] audit: type=1326 audit(4141796716.000:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.540003][ T30] audit: type=1326 audit(4141796716.000:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f838178f749 code=0x7ffc0000 [ 425.762897][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 425.788923][ T42] az6027: usb out operation failed. (-110) [ 425.804017][ T42] az6027: usb out operation failed. (-32) [ 425.829324][ T42] stb0899_attach: Driver disabled by Kconfig [ 425.841877][ T42] az6027: no front-end attached [ 425.841877][ T42] [ 425.857263][ T42] az6027: usb out operation failed. (-32) [ 425.869915][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 425.887014][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 425.922802][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 425.948310][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 425.975449][ T42] usb 2-1: USB disconnect, device number 29 [ 426.023377][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 426.127260][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 426.733594][T10638] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 427.162232][T10652] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 428.065547][ T5971] usb 1-1: USB disconnect, device number 24 [ 429.809975][T10673] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 430.430466][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 430.874967][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 431.184422][ T42] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 431.497512][ T42] usb 1-1: config 0 has no interfaces? [ 431.508311][ T42] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 431.542107][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.623402][ T42] usb 1-1: config 0 descriptor?? [ 432.102050][ T5941] usb 1-1: USB disconnect, device number 25 [ 432.334439][ T42] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 432.438093][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 432.496441][ T42] usb 2-1: config index 0 descriptor too short (expected 8225, got 59) [ 432.512963][ T42] usb 2-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 432.524246][ T42] usb 2-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 432.536173][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.545982][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 432.554091][ T42] usb 2-1: SerialNumber: syz [ 434.463506][T10732] ubi: mtd0 is already attached to ubi0 [ 434.672618][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1113'. [ 434.918321][ T42] usb 2-1: USB disconnect, device number 30 [ 435.014031][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 435.014047][ T30] audit: type=1326 audit(4141796725.650:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.104710][ T30] audit: type=1326 audit(4141796725.650:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.155727][ T30] audit: type=1326 audit(4141796725.650:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.255416][ T30] audit: type=1326 audit(4141796725.650:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.514454][ T30] audit: type=1326 audit(4141796725.650:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.684714][ T30] audit: type=1326 audit(4141796725.650:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.791128][ T30] audit: type=1326 audit(4141796725.650:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 435.870053][ T30] audit: type=1326 audit(4141796725.650:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 436.104527][ T30] audit: type=1326 audit(4141796725.650:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 436.212265][ T30] audit: type=1326 audit(4141796725.650:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 437.920221][T10770] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 438.460845][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 438.637493][T10778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.035725][T10795] sp0: Synchronizing with TNC [ 439.617590][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.389240][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 442.978629][T10842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.671079][T10844] sp0: Synchronizing with TNC [ 444.736793][ T5903] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 444.771455][ T5903] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 444.794243][ T5903] usb 5-1: USB disconnect, device number 19 [ 445.085799][ T5903] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 445.244421][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 445.251056][ T5903] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 445.259359][ T5903] usb 5-1: config 4 has no interface number 0 [ 445.265912][ T5903] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.277538][ T5903] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.287575][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 445.296720][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.307713][ T5903] hub 5-1:4.128: USB hub found [ 445.454476][ T1539] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 445.520059][ T5903] hub 5-1:4.128: 2 ports detected [ 445.529645][ T5903] hub 5-1:4.128: Using single TT (err -22) [ 445.536610][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 445.604525][ T1539] usb 6-1: Using ep0 maxpacket: 32 [ 445.611279][ T1539] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 445.619732][ T1539] usb 6-1: config 4 has no interface number 0 [ 445.626768][ T1539] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.638011][ T1539] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.648848][ T1539] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 445.658241][ T1539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.671384][ T1539] hub 6-1:4.128: USB hub found [ 445.823302][T10881] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 445.873868][ T1539] hub 6-1:4.128: 2 ports detected [ 445.879574][ T1539] hub 6-1:4.128: Using single TT (err -22) [ 446.075298][ T1539] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 446.082004][ T1539] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 446.105507][ T1539] usb 6-1: USB disconnect, device number 10 [ 446.577579][ T5903] hub 5-1:4.128: hub_hub_status failed (err = -32) [ 446.586549][ T5903] hub 5-1:4.128: config failed, can't get hub status (err -32) [ 446.854615][ T5903] usb 5-1: USB disconnect, device number 20 [ 448.583317][T10916] ubi: mtd0 is already attached to ubi0 [ 448.669232][ T5971] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 449.374478][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 449.421746][ T5971] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 449.445308][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.497170][ T5971] usb 5-1: config 0 descriptor?? [ 449.819276][T10923] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 450.574029][T10925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.688082][ T5971] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 450.727667][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.264381][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 451.476889][ T5971] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 451.484613][ T5971] usb 5-1: media controller created [ 451.660224][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.244461][ T5880] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.394409][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 452.401212][ T5880] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 452.409505][ T5880] usb 2-1: config 4 has no interface number 0 [ 452.415656][ T5880] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.426781][ T5880] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.436809][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 452.446033][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.458220][ T5880] hub 2-1:4.128: USB hub found [ 452.746764][ T5880] hub 2-1:4.128: 2 ports detected [ 452.752491][ T5880] hub 2-1:4.128: Using single TT (err -22) [ 452.947468][ T5971] az6027: usb out operation failed. (-71) [ 452.954848][ T5971] az6027: usb out operation failed. (-71) [ 452.961157][ T5971] stb0899_attach: Driver disabled by Kconfig [ 452.967818][ T5971] az6027: no front-end attached [ 452.967818][ T5971] [ 452.975429][ T5971] az6027: usb out operation failed. (-71) [ 452.981302][ T5971] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 453.004231][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 453.017936][ T5971] dvb-usb: schedule remote query interval to 400 msecs. [ 453.025987][ T5971] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 453.037402][ T5971] usb 5-1: USB disconnect, device number 21 [ 453.076464][ T5971] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 453.484406][ T5971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 453.654456][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 453.661309][ T5971] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 453.670709][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.681330][ T5971] usb 5-1: config 0 descriptor?? [ 453.776784][ T5880] hub 2-1:4.128: hub_hub_status failed (err = -32) [ 453.783466][ T5880] hub 2-1:4.128: config failed, can't get hub status (err -32) [ 453.890714][ T5971] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 453.899244][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.909648][ T5971] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 453.916957][ T5971] usb 5-1: media controller created [ 453.930369][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.148867][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 454.951489][ T5903] usb 2-1: USB disconnect, device number 31 [ 456.249309][ T5971] az6027: usb out operation failed. (-110) [ 456.351492][ T5971] az6027: usb out operation failed. (-71) [ 456.392149][ T5971] stb0899_attach: Driver disabled by Kconfig [ 456.447368][ T5971] az6027: no front-end attached [ 456.447368][ T5971] [ 456.454809][ T5971] az6027: usb out operation failed. (-71) [ 456.460528][ T5971] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 456.469335][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 456.504448][ T5941] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 456.545519][ T5971] dvb-usb: schedule remote query interval to 400 msecs. [ 456.597165][T10968] sp0: Synchronizing with TNC [ 456.630880][ T5971] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 456.664034][ T5971] usb 5-1: USB disconnect, device number 22 [ 456.694396][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 456.728469][ T5941] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 456.745178][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.819144][ T5941] usb 6-1: config 0 descriptor?? [ 456.888937][ T5971] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 457.127615][T10979] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 457.146388][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 457.164019][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 457.253013][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 457.272491][ T5941] usb 6-1: media controller created [ 457.339835][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.408160][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 459.404590][ T5941] az6027: usb out operation failed. (-71) [ 459.424696][ T5941] az6027: usb out operation failed. (-71) [ 459.446880][ T5941] stb0899_attach: Driver disabled by Kconfig [ 459.562821][ T5941] az6027: no front-end attached [ 459.562821][ T5941] [ 459.600331][ T5941] az6027: usb out operation failed. (-71) [ 460.054738][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 460.071957][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 460.098634][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 460.100988][T11018] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 460.114141][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 460.149771][ T5941] usb 6-1: USB disconnect, device number 11 [ 460.192726][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 462.114677][ T5971] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 462.324479][ T5971] usb 1-1: Using ep0 maxpacket: 32 [ 462.353757][ T5971] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 462.380478][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.654616][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 464.114607][ T5971] usb 1-1: config 0 descriptor?? [ 464.444467][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 464.506451][ T42] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 464.554476][ T5971] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 464.556338][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.578005][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 464.578039][ T42] usb 3-1: config 0 descriptor?? [ 464.596866][ T5971] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 465.197335][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 465.215337][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.222905][ T5971] usb 1-1: media controller created [ 465.554782][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 465.815001][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 465.964871][ T42] usb 3-1: media controller created [ 465.970439][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.068608][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.189362][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 466.759476][ T42] az6027: usb out operation failed. (-71) [ 466.765825][ T42] az6027: usb out operation failed. (-71) [ 466.772135][ T42] stb0899_attach: Driver disabled by Kconfig [ 466.821285][ T42] az6027: no front-end attached [ 466.821285][ T42] [ 467.014450][ T42] az6027: usb out operation failed. (-71) [ 467.020197][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 467.856478][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 467.902526][ T5971] az6027: usb out operation failed. (-71) [ 467.916397][ T5971] az6027: usb out operation failed. (-71) [ 467.932359][ T5971] stb0899_attach: Driver disabled by Kconfig [ 467.952753][ T5971] az6027: no front-end attached [ 467.952753][ T5971] [ 468.067075][ T5971] az6027: usb out operation failed. (-71) [ 468.072822][ T5971] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 468.112188][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 468.127380][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 468.149298][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.178340][ T5971] dvb-usb: schedule remote query interval to 400 msecs. [ 468.188143][ T42] usb 3-1: USB disconnect, device number 21 [ 468.332896][ T5971] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.353315][ T5971] usb 1-1: USB disconnect, device number 26 [ 468.468715][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 468.565406][ T5971] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 469.934565][ T5971] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 470.009718][T11096] ubi: mtd0 is already attached to ubi0 [ 470.114635][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 470.130321][ T5971] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 470.157461][ T5971] usb 6-1: config 4 has no interface number 0 [ 470.177310][ T5971] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.213428][ T5971] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.250260][ T5971] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 470.284980][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.323026][ T5971] hub 6-1:4.128: USB hub found [ 470.523686][ T5971] hub 6-1:4.128: 2 ports detected [ 470.558102][ T5971] hub 6-1:4.128: Using single TT (err -22) [ 471.645256][ T5971] hub 6-1:4.128: hub_hub_status failed (err = -32) [ 471.669808][ T5971] hub 6-1:4.128: config failed, can't get hub status (err -32) [ 471.719031][T11105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.091192][T11113] sp0: Synchronizing with TNC [ 472.104368][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 472.104385][ T30] audit: type=1326 audit(4141796762.750:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 472.178914][ T30] audit: type=1326 audit(4141796762.750:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 472.233355][ T30] audit: type=1326 audit(4141796762.750:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 472.300682][ T30] audit: type=1326 audit(4141796762.750:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 472.418900][T11120] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 472.426793][T11120] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1221'. [ 472.440591][ T30] audit: type=1326 audit(4141796762.750:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 472.614428][ T30] audit: type=1326 audit(4141796762.750:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 473.177650][ T30] audit: type=1326 audit(4141796762.750:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 473.238240][ T30] audit: type=1326 audit(4141796762.750:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 473.334927][ T9] usb 6-1: USB disconnect, device number 12 [ 473.504369][ T30] audit: type=1326 audit(4141796762.750:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 473.601494][ T30] audit: type=1326 audit(4141796762.750:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c0f8f749 code=0x7ffc0000 [ 474.615678][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 476.847225][T11162] netlink: 'syz.5.1235': attribute type 8 has an invalid length. [ 478.685144][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 478.713837][T11191] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 478.724172][T11191] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1242'. [ 478.782077][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 478.782088][ T30] audit: type=1326 audit(4141796769.420:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 478.884470][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 478.912658][ T5880] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 478.944092][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.953633][ T5880] usb 6-1: config 0 descriptor?? [ 478.958867][ T30] audit: type=1326 audit(4141796769.420:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 478.993198][ T30] audit: type=1326 audit(4141796769.420:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.020071][ T30] audit: type=1326 audit(4141796769.420:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.045797][ T30] audit: type=1326 audit(4141796769.420:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.124558][ T30] audit: type=1326 audit(4141796769.420:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.183812][ T30] audit: type=1326 audit(4141796769.420:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.294382][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 479.313844][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.350397][ T30] audit: type=1326 audit(4141796769.420:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.475955][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 479.484664][ T5880] usb 6-1: media controller created [ 479.507854][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.528356][ T30] audit: type=1326 audit(4141796769.420:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.552982][ T30] audit: type=1326 audit(4141796769.420:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.1.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3270b8f749 code=0x7ffc0000 [ 479.992832][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 480.313176][ T5880] az6027: usb out operation failed. (-71) [ 480.336856][ T5880] az6027: usb out operation failed. (-71) [ 480.342586][ T5880] stb0899_attach: Driver disabled by Kconfig [ 480.384406][ T5880] az6027: no front-end attached [ 480.384406][ T5880] [ 480.395641][ T5880] az6027: usb out operation failed. (-71) [ 480.401499][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 480.422720][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 481.606306][ T5880] dvb-usb: schedule remote query interval to 400 msecs. [ 481.616231][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 481.626381][ T5880] usb 6-1: USB disconnect, device number 13 [ 481.690905][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 482.288452][T11218] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.786354][T11218] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 482.863192][T11231] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.940138][T11232] syz2: rxe_newlink: already configured on ipvlan0 [ 483.580042][T11231] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 484.334417][T11244] ubi: mtd0 is already attached to ubi0 [ 484.960730][T11257] sp0: Synchronizing with TNC [ 486.594971][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 487.195154][T11284] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 487.377502][T11284] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 488.371495][T11294] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 488.393302][T11294] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1271'. [ 488.500994][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 488.644080][T11301] syz2: rxe_newlink: already configured on ipvlan0 [ 492.203144][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 493.545756][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 493.784475][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 493.812192][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 493.832443][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.862982][ T24] usb 6-1: config 0 descriptor?? [ 493.884426][ T5941] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 494.077032][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 494.089311][ T5941] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 494.170071][ T5941] usb 5-1: config 4 has no interface number 0 [ 494.179503][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 494.186334][ T5941] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.186363][ T5941] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.186397][ T5941] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 494.186418][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.189888][ T5941] hub 5-1:4.128: USB hub found [ 494.307900][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.352750][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 494.430637][ T5941] hub 5-1:4.128: 2 ports detected [ 494.434403][ T24] usb 6-1: media controller created [ 494.437233][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1282'. [ 494.704405][ T5941] hub 5-1:4.128: Using single TT (err -22) [ 494.918319][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.788218][ T5941] hub 5-1:4.128: hub_hub_status failed (err = -32) [ 495.918288][ T5941] hub 5-1:4.128: config failed, can't get hub status (err -32) [ 496.020943][T11356] syz2: rxe_newlink: already configured on ipvlan0 [ 496.238817][ T24] az6027: usb out operation failed. (-71) [ 496.267508][ T24] az6027: usb out operation failed. (-71) [ 496.283471][ T24] stb0899_attach: Driver disabled by Kconfig [ 496.293034][ T24] az6027: no front-end attached [ 496.293034][ T24] [ 496.316950][ T24] az6027: usb out operation failed. (-71) [ 496.322705][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 496.361785][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 496.402807][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 496.424483][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 496.456999][ T24] usb 6-1: USB disconnect, device number 14 [ 496.861893][ T5941] usb 5-1: USB disconnect, device number 23 [ 496.986432][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 500.499223][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 500.965037][T11425] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 501.069101][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.204521][ T5941] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 501.380203][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 501.437961][ T5941] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 501.526458][ T5941] usb 3-1: config 4 has no interface number 0 [ 501.603303][ T5941] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.669475][ T5941] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.789650][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 501.843823][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.852896][T11425] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 501.916245][ T5941] hub 3-1:4.128: USB hub found [ 502.104554][ T5941] hub 3-1:4.128: 2 ports detected [ 502.109678][ T5941] hub 3-1:4.128: Using single TT (err -22) [ 503.222548][ T5941] hub 3-1:4.128: hub_hub_status failed (err = -32) [ 503.247684][ T5941] hub 3-1:4.128: config failed, can't get hub status (err -32) [ 504.274859][ T24] usb 3-1: USB disconnect, device number 22 [ 504.305931][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1311'. [ 506.554070][T11474] syz2: rxe_newlink: already configured on ipvlan0 [ 507.977356][ T1539] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 508.206378][ T1539] usb 3-1: Using ep0 maxpacket: 32 [ 508.244835][ T1539] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 508.292443][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.426171][ T1539] usb 3-1: config 0 descriptor?? [ 508.719016][ T1539] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 508.738036][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.884750][ T1539] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 508.904444][ T1539] usb 3-1: media controller created [ 509.383674][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.465443][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 509.865620][T11492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.890053][ T1539] az6027: usb out operation failed. (-71) [ 509.905052][ T1539] az6027: usb out operation failed. (-71) [ 509.920974][ T1539] stb0899_attach: Driver disabled by Kconfig [ 509.934355][ T1539] az6027: no front-end attached [ 509.934355][ T1539] [ 509.949058][ T1539] az6027: usb out operation failed. (-71) [ 509.963403][ T1539] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 509.986949][ T1539] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 510.053671][ T1539] dvb-usb: schedule remote query interval to 400 msecs. [ 510.083360][ T1539] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 510.556593][ T1539] usb 3-1: USB disconnect, device number 23 [ 510.598503][ T1539] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 511.983582][T11514] sp0: Synchronizing with TNC [ 512.241378][T11525] ubi: mtd0 is already attached to ubi0 [ 512.787258][T11532] netlink: 'syz.2.1334': attribute type 8 has an invalid length. [ 513.026332][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 517.984562][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 523.761188][T11622] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.588741][T11622] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 524.810736][T11638] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 525.003258][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1359'. [ 528.291616][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 528.415276][T11673] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 530.134516][ T1539] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 530.428371][ T1539] usb 3-1: Using ep0 maxpacket: 32 [ 530.464268][ T1539] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 530.502731][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.533431][ T1539] usb 3-1: config 0 descriptor?? [ 530.840916][ T1539] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 530.875313][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.962514][ T1539] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 531.031352][ T1539] usb 3-1: media controller created [ 531.233730][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 531.457261][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.755288][ T1539] az6027: usb out operation failed. (-71) [ 531.765072][ T1539] az6027: usb out operation failed. (-71) [ 531.775769][ T1539] stb0899_attach: Driver disabled by Kconfig [ 531.788606][ T1539] az6027: no front-end attached [ 531.788606][ T1539] [ 531.797905][ T1539] az6027: usb out operation failed. (-71) [ 531.807069][ T1539] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 531.837793][ T1539] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 531.872899][ T1539] dvb-usb: schedule remote query interval to 400 msecs. [ 531.883259][ T1539] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 531.939530][ T1539] usb 3-1: USB disconnect, device number 24 [ 532.121707][ T1539] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 534.694539][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 537.244283][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1386'. [ 538.060983][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 538.934442][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 539.783580][T11773] netlink: 'syz.1.1393': attribute type 8 has an invalid length. [ 540.281646][T11790] netlink: 'syz.5.1397': attribute type 1 has an invalid length. [ 540.293531][T11790] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1397'. [ 541.396292][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'. [ 543.973030][T11817] sp0: Synchronizing with TNC [ 544.033403][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1405'. [ 544.944396][ T5971] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 545.045777][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 546.004359][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 546.027823][ T5971] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 546.047219][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.158239][ T5971] usb 6-1: config 0 descriptor?? [ 546.621272][ T5971] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 546.672564][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.733173][ T5971] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 546.759586][ T5971] usb 6-1: media controller created [ 546.828393][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.932946][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1409'. [ 547.275168][ T5971] az6027: usb out operation failed. (-71) [ 547.283149][ T5971] az6027: usb out operation failed. (-71) [ 547.288935][ T5971] stb0899_attach: Driver disabled by Kconfig [ 547.295173][ T5971] az6027: no front-end attached [ 547.295173][ T5971] [ 547.302515][ T5971] az6027: usb out operation failed. (-71) [ 547.308477][ T5971] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 547.317096][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 547.338251][ T5971] dvb-usb: schedule remote query interval to 400 msecs. [ 547.345373][ T5971] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 547.398427][ T5971] usb 6-1: USB disconnect, device number 15 [ 547.549620][ T5971] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 549.536960][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'. [ 549.954395][ T1539] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 550.124398][ T1539] usb 6-1: Using ep0 maxpacket: 32 [ 550.133420][ T1539] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 550.177259][ T1539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.221928][ T1539] usb 6-1: config 0 descriptor?? [ 550.479298][ T1539] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 550.494550][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 550.505354][ T1539] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 551.337978][ T1539] usb 6-1: media controller created [ 551.511312][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.663412][ T1539] az6027: usb out operation failed. (-71) [ 551.694652][ T1539] az6027: usb out operation failed. (-71) [ 551.700423][ T1539] stb0899_attach: Driver disabled by Kconfig [ 551.918075][ T1539] az6027: no front-end attached [ 551.918075][ T1539] [ 551.936484][ T1539] az6027: usb out operation failed. (-71) [ 551.942234][ T1539] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 551.956958][ T1539] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 552.020552][ T1539] dvb-usb: schedule remote query interval to 400 msecs. [ 552.048454][ T1539] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 552.056777][T11905] ubi: mtd0 is already attached to ubi0 [ 552.106506][ T1539] usb 6-1: USB disconnect, device number 16 [ 552.177774][ T1539] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 552.324385][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 552.624896][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 552.632190][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 552.656291][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.675180][ T24] usb 5-1: config 0 descriptor?? [ 553.039124][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 553.078637][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 553.120817][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 553.168277][ T24] usb 5-1: media controller created [ 553.229892][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 554.535182][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.656192][ T24] az6027: usb out operation failed. (-71) [ 554.674067][ T24] az6027: usb out operation failed. (-71) [ 554.689004][ T24] stb0899_attach: Driver disabled by Kconfig [ 554.724391][ T24] az6027: no front-end attached [ 554.724391][ T24] [ 554.752402][ T24] az6027: usb out operation failed. (-71) [ 554.764362][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 554.793366][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 554.981562][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 554.993178][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 555.015588][ T24] usb 5-1: USB disconnect, device number 24 [ 555.565563][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 556.297782][ T5971] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 556.917748][ T5971] usb 3-1: config index 0 descriptor too short (expected 8225, got 59) [ 556.955508][ T5971] usb 3-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 556.983656][ T5971] usb 3-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 557.042948][ T5971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.061387][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.079040][T11949] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 557.100576][ T5971] usb 3-1: SerialNumber: syz [ 557.548773][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 557.729763][T11956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 558.629791][ T5971] usb 3-1: USB disconnect, device number 25 [ 558.824426][ T5941] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 558.994367][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 559.091409][ T5941] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 559.107655][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.232579][T11975] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 560.095851][ T5941] usb 5-1: config 0 descriptor?? [ 561.089659][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 561.181663][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 561.468077][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 561.485924][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 561.514899][ T5941] usb 5-1: media controller created [ 561.793645][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 562.551793][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.572081][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.665484][ T5941] az6027: usb out operation failed. (-71) [ 562.733636][ T5941] az6027: usb out operation failed. (-71) [ 562.754375][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 562.762970][ T5941] stb0899_attach: Driver disabled by Kconfig [ 562.778913][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 562.795786][ T5941] az6027: no front-end attached [ 562.795786][ T5941] [ 562.877006][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.898132][ T24] usb 3-1: config 0 descriptor?? [ 562.927824][ T5941] az6027: usb out operation failed. (-71) [ 562.929320][T12005] FAULT_INJECTION: forcing a failure. [ 562.929320][T12005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.935144][T12004] netlink: 'syz.4.1453': attribute type 6 has an invalid length. [ 562.951442][T12005] CPU: 1 UID: 0 PID: 12005 Comm: syz.0.1454 Not tainted syzkaller #0 PREEMPT(full) [ 562.951475][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.951484][T12005] Call Trace: [ 562.951491][T12005] [ 562.951497][T12005] dump_stack_lvl+0x16c/0x1f0 [ 562.951517][T12005] should_fail_ex+0x512/0x640 [ 562.951540][T12005] _copy_to_user+0x32/0xd0 [ 562.951561][T12005] simple_read_from_buffer+0xcb/0x170 [ 562.951586][T12005] proc_fail_nth_read+0x197/0x240 [ 562.951606][T12005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.951625][T12005] ? rw_verify_area+0xcf/0x6c0 [ 562.951647][T12005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.951665][T12005] vfs_read+0x1e4/0xcf0 [ 562.951683][T12005] ? __pfx___mutex_lock+0x10/0x10 [ 562.951699][T12005] ? __pfx_vfs_read+0x10/0x10 [ 562.951719][T12005] ? __fget_files+0x20e/0x3c0 [ 562.951742][T12005] ksys_read+0x12a/0x250 [ 562.951756][T12005] ? __pfx_ksys_read+0x10/0x10 [ 562.951770][T12005] ? fput+0x9b/0xd0 [ 562.951792][T12005] do_syscall_64+0xcd/0xfa0 [ 562.951809][T12005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.951824][T12005] RIP: 0033:0x7f32c0f8e15c [ 562.951837][T12005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 562.951851][T12005] RSP: 002b:00007f32c1ee4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.951866][T12005] RAX: ffffffffffffffda RBX: 00007f32c11e5fa0 RCX: 00007f32c0f8e15c [ 562.951876][T12005] RDX: 000000000000000f RSI: 00007f32c1ee40a0 RDI: 0000000000000003 [ 562.951884][T12005] RBP: 00007f32c1ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 562.951893][T12005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.951901][T12005] R13: 00007f32c11e6038 R14: 00007f32c11e5fa0 R15: 00007ffceead3a38 [ 562.951922][T12005] [ 563.335847][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 563.359208][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 563.391763][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 563.402343][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 563.412391][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 563.415604][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.438508][T12009] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 563.476491][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 563.487991][ T5941] usb 5-1: USB disconnect, device number 25 [ 563.493913][ T24] usb 3-1: media controller created [ 563.516330][T12003] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 563.867324][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.091806][ T24] az6027: usb out operation failed. (-71) [ 564.101098][ T24] az6027: usb out operation failed. (-71) [ 564.113044][ T24] stb0899_attach: Driver disabled by Kconfig [ 564.132223][ T24] az6027: no front-end attached [ 564.132223][ T24] [ 564.136621][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 564.676514][ T24] az6027: usb out operation failed. (-71) [ 564.682819][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 564.691503][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 564.733743][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 564.744143][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 564.892173][ T24] usb 3-1: USB disconnect, device number 26 [ 565.203580][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 565.340642][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 565.340687][ T30] audit: type=1400 audit(4141796855.980:924): avc: denied { read } for pid=12030 comm="syz.2.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 565.366028][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.384472][ T5941] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 565.428605][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1463'. [ 565.740899][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 565.750052][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.766057][ T5941] usb 2-1: Product: syz [ 565.779636][ T5941] usb 2-1: Manufacturer: syz [ 565.794980][ T5941] usb 2-1: SerialNumber: syz [ 566.089404][ T30] audit: type=1400 audit(4141796856.740:925): avc: denied { create } for pid=12024 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 566.116005][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 566.214784][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 566.281911][ T30] audit: type=1400 audit(4141796856.770:926): avc: denied { bind } for pid=12024 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 566.313388][ T5941] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 566.368463][ T5941] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 566.470301][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1465'. [ 566.649325][ T30] audit: type=1400 audit(4141796856.810:927): avc: denied { setopt } for pid=12024 comm="syz.1.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 566.897266][ T30] audit: type=1400 audit(4141796857.460:928): avc: denied { map } for pid=12044 comm="syz.0.1466" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 566.920214][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.927068][ T30] audit: type=1400 audit(4141796857.460:929): avc: denied { execute } for pid=12044 comm="syz.0.1466" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 566.950387][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.962013][ T5941] usb 2-1: USB disconnect, device number 32 [ 568.714615][ T30] audit: type=1400 audit(4141796859.220:930): avc: denied { create } for pid=12059 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 570.064498][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 570.244753][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 570.578542][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 570.587749][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.606501][ T9] usb 6-1: config 0 descriptor?? [ 570.825430][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 570.863176][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.884244][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 570.903825][ T9] usb 6-1: media controller created [ 570.921024][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.924384][ T5863] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 571.065369][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 572.004784][ T9] az6027: usb out operation failed. (-71) [ 572.011574][ T9] az6027: usb out operation failed. (-71) [ 572.014350][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 572.017521][ T9] stb0899_attach: Driver disabled by Kconfig [ 572.029259][ T9] az6027: no front-end attached [ 572.029259][ T9] [ 572.041279][ T9] az6027: usb out operation failed. (-71) [ 572.047144][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 572.056295][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 572.072521][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 572.075419][ T5863] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 572.079827][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 572.101899][ T9] usb 6-1: USB disconnect, device number 17 [ 572.131998][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 572.168524][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.210474][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 572.222739][ T5863] usb 2-1: config 0 descriptor?? [ 572.410452][T12085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.464434][ T5863] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.487376][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.634719][ T5863] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 572.663937][ T5863] usb 2-1: media controller created [ 572.865467][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.918946][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1475'. [ 575.194710][ T5863] az6027: usb out operation failed. (-71) [ 575.202766][ T5863] az6027: usb out operation failed. (-71) [ 575.208942][ T5863] stb0899_attach: Driver disabled by Kconfig [ 575.217423][ T5863] az6027: no front-end attached [ 575.217423][ T5863] [ 575.236307][ T5863] az6027: usb out operation failed. (-71) [ 575.244513][ T5863] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 575.272960][ T5863] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 575.320263][ T5863] dvb-usb: schedule remote query interval to 400 msecs. [ 575.348290][ T5863] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 575.410805][ T5863] usb 2-1: USB disconnect, device number 33 [ 575.628104][ T5863] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 575.629785][T12123] netlink: 'syz.0.1486': attribute type 12 has an invalid length. [ 575.775053][T12123] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1486'. [ 575.864368][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 575.931634][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1490'. [ 576.015074][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 576.021517][ T24] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 576.030130][ T24] usb 5-1: config 0 has no interface number 0 [ 576.037572][ T24] usb 5-1: config 0 interface 96 has no altsetting 0 [ 576.047607][ T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 576.056765][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.064933][ T24] usb 5-1: Product: syz [ 576.069071][ T24] usb 5-1: Manufacturer: syz [ 576.073634][ T24] usb 5-1: SerialNumber: syz [ 576.079918][ T24] usb 5-1: config 0 descriptor?? [ 576.104385][ T5863] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 576.224397][ T5941] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 576.255274][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 576.261746][ T5863] usb 2-1: config index 0 descriptor too short (expected 12569, got 18) [ 576.270215][ T5863] usb 2-1: config 55 has too many interfaces: 187, using maximum allowed: 32 [ 576.279228][ T5863] usb 2-1: config 55 has an invalid descriptor of length 240, skipping remainder of the config [ 576.290844][ T5863] usb 2-1: config 55 has 0 interfaces, different from the descriptor's value: 187 [ 576.302209][ T5863] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 576.311386][ T24] usbhid 5-1:0.96: couldn't find an input interrupt endpoint [ 576.325332][ T5863] usb 2-1: New USB device strings: Mfr=196, Product=2, SerialNumber=3 [ 576.334655][ T24] usb 5-1: USB disconnect, device number 26 [ 576.341037][ T5863] usb 2-1: Product: syz [ 576.347440][ T5863] usb 2-1: Manufacturer: syz [ 576.353485][ T5863] usb 2-1: SerialNumber: syz [ 576.368014][ T5863] r8152-cfgselector 2-1: Unknown version 0x0000 [ 576.384458][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 576.391527][ T5941] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 576.405212][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.415565][ T5941] usb 6-1: config 0 descriptor?? [ 576.493624][T12140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.586251][ T5863] r8152-cfgselector 2-1: USB disconnect, device number 34 [ 576.682540][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 576.695414][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.705994][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 576.713113][ T5941] usb 6-1: media controller created [ 576.725199][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.156874][ T5941] az6027: usb out operation failed. (-71) [ 577.163393][ T5941] az6027: usb out operation failed. (-71) [ 577.169362][ T5941] stb0899_attach: Driver disabled by Kconfig [ 577.175442][ T5941] az6027: no front-end attached [ 577.175442][ T5941] [ 577.182940][ T5941] az6027: usb out operation failed. (-71) [ 577.188734][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 577.197519][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 577.647158][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 577.654240][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 577.748414][ T5941] usb 6-1: USB disconnect, device number 18 [ 578.008995][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 578.656564][T12161] mmap: syz.1.1498 (12161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 578.756559][T12170] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 581.458666][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'. [ 581.724459][ T5941] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 581.894862][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 581.955932][ T5880] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 581.973870][ T5941] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 582.004377][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.028445][ T5941] usb 1-1: config 0 descriptor?? [ 582.169076][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 582.177351][ T5880] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 582.352081][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 582.364332][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.376547][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.388542][ T5880] usb 6-1: config 0 descriptor?? [ 582.405171][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 582.412375][ T5941] usb 1-1: media controller created [ 582.541925][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.464211][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 583.486761][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.541073][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 583.585326][ T5880] usb 6-1: media controller created [ 583.634257][ T5941] az6027: usb out operation failed. (-71) [ 583.651322][ T5941] az6027: usb out operation failed. (-71) [ 583.671592][ T5941] stb0899_attach: Driver disabled by Kconfig [ 583.685404][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.703914][ T5941] az6027: no front-end attached [ 583.703914][ T5941] [ 583.734261][ T5941] az6027: usb out operation failed. (-71) [ 583.740072][ T5941] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 583.754486][ T5880] az6027: usb out operation failed. (-71) [ 583.765894][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input48 [ 583.777223][ T5880] az6027: usb out operation failed. (-71) [ 583.782944][ T5880] stb0899_attach: Driver disabled by Kconfig [ 583.798300][ T5880] az6027: no front-end attached [ 583.798300][ T5880] [ 583.825246][ T5941] dvb-usb: schedule remote query interval to 400 msecs. [ 583.833435][ T5880] az6027: usb out operation failed. (-71) [ 583.842562][ T5941] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 583.852876][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 583.868713][ T5941] usb 1-1: USB disconnect, device number 27 [ 583.882886][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 583.947626][ T5880] dvb-usb: schedule remote query interval to 400 msecs. [ 583.977275][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 584.005545][ T5941] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 584.030608][ T5880] usb 6-1: USB disconnect, device number 19 [ 584.122743][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 584.343947][T12223] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 585.911276][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1523'. [ 586.559635][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1526'. [ 587.275734][T12267] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 587.392298][T12267] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1529'. [ 587.441224][T12272] syzkaller0: entered promiscuous mode [ 587.460339][T12272] syzkaller0: entered allmulticast mode [ 587.773262][T12274] sp0: Synchronizing with TNC [ 588.293833][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'. [ 589.184381][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 589.364377][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 589.388822][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 589.416082][ T24] usb 6-1: config 0 has no interface number 0 [ 589.446654][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.493762][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 589.538873][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 589.588059][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.632201][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 589.665563][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.690274][ T24] usb 6-1: config 0 descriptor?? [ 589.767572][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 589.911232][ T5941] usb 6-1: USB disconnect, device number 20 [ 589.931878][ T5941] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 590.058380][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 590.411851][T12308] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 591.742734][ T30] audit: type=1400 audit(4141796882.390:931): avc: denied { connect } for pid=12305 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 591.817731][T12313] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 591.835485][T12313] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1543'. [ 592.036563][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 592.135911][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 593.286270][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.300211][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.313166][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.331410][T12330] ubi: mtd0 is already attached to ubi0 [ 593.332653][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.361648][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.457369][ T24] usb 1-1: config 0 descriptor?? [ 594.081815][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.119974][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.155061][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.207496][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.244368][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.294358][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.326739][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.357446][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.395791][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.434441][ T5941] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 594.452351][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 594.501860][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 594.553236][ T24] usb 1-1: USB disconnect, device number 28 [ 594.596662][ T5941] usb 5-1: config index 0 descriptor too short (expected 8225, got 59) [ 594.605488][ T5941] usb 5-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 594.685609][ T5941] usb 5-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 594.756183][ T5941] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.775737][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 594.869039][ T5941] usb 5-1: SerialNumber: syz [ 595.804558][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 595.907314][T12358] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 595.960421][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 595.971198][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 595.972621][T12358] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1555'. [ 595.988336][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.024540][ T9] usb 3-1: config 0 descriptor?? [ 596.248190][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 596.304819][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 596.359599][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 596.379110][ T9] usb 3-1: media controller created [ 596.445536][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.818373][ T5941] usb 5-1: USB disconnect, device number 27 [ 596.860495][ T9] az6027: usb out operation failed. (-71) [ 596.879289][ T9] az6027: usb out operation failed. (-71) [ 596.892702][ T9] stb0899_attach: Driver disabled by Kconfig [ 596.911871][ T9] az6027: no front-end attached [ 596.911871][ T9] [ 596.929287][ T9] az6027: usb out operation failed. (-71) [ 596.944246][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 596.966564][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 597.101803][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 597.120368][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 597.137464][ T9] usb 3-1: USB disconnect, device number 27 [ 597.281849][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 599.274707][ T1539] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 599.435325][ T1539] usb 3-1: Using ep0 maxpacket: 8 [ 599.463127][ T1539] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 599.496221][ T1539] usb 3-1: config 0 has no interface number 0 [ 599.502923][ T1539] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.555104][ T1539] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 599.589081][ T1539] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.616284][ T1539] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.645437][ T1539] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 599.656872][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.667561][ T1539] usb 3-1: config 0 descriptor?? [ 599.676496][ T1539] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 599.725243][ T30] audit: type=1400 audit(4141796890.380:932): avc: denied { listen } for pid=12393 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.882159][T12399] FAT-fs (nullb0): bogus number of reserved sectors [ 599.917603][ T24] usb 3-1: USB disconnect, device number 28 [ 599.927499][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 599.934842][T12399] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 600.362894][T12402] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 600.724566][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 600.920129][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 600.931685][T12402] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 600.942104][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 600.961629][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.031839][T12414] IPv6: NLM_F_CREATE should be specified when creating new route [ 601.243059][ T24] usb 5-1: config 0 descriptor?? [ 601.771188][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 602.293571][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.358206][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 602.399006][ T24] usb 5-1: media controller created [ 602.581632][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.549250][ T24] az6027: usb out operation failed. (-71) [ 603.560476][ T24] az6027: usb out operation failed. (-71) [ 603.568610][ T24] stb0899_attach: Driver disabled by Kconfig [ 603.574761][ T24] az6027: no front-end attached [ 603.574761][ T24] [ 603.583022][ T24] az6027: usb out operation failed. (-71) [ 603.592306][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 603.613790][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 603.629382][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 603.637630][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 603.652133][ T24] usb 5-1: USB disconnect, device number 28 [ 603.734386][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 603.762650][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 603.782704][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 604.944363][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 604.964815][ T9] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 604.983292][ T9] usb 2-1: config 4 has no interface number 0 [ 604.999918][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.032429][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.066801][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 605.082132][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.207307][ T9] hub 2-1:4.128: USB hub found [ 605.524601][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 605.612823][ T9] hub 2-1:4.128: 2 ports detected [ 605.622468][ T9] hub 2-1:4.128: Using single TT (err -22) [ 605.744759][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 605.757672][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 605.775319][ T24] usb 6-1: config 0 has no interface number 0 [ 605.787800][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.881601][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 605.893764][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.027655][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 606.059152][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 606.069995][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.081011][ T24] usb 6-1: config 0 descriptor?? [ 606.093891][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 606.315706][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.339244][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.604340][ T5941] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 606.660580][ T9] hub 2-1:4.128: hub_hub_status failed (err = -32) [ 606.722678][ T9] hub 2-1:4.128: config failed, can't get hub status (err -32) [ 606.740235][T12470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21493 sclass=netlink_route_socket pid=12470 comm=syz.2.1586 [ 606.775388][ T9] usb 2-1: USB disconnect, device number 35 [ 606.795703][ T5941] usb 1-1: config index 0 descriptor too short (expected 8225, got 59) [ 606.808680][ T5941] usb 1-1: config 47 has an invalid descriptor of length 117, skipping remainder of the config [ 606.859772][ T5941] usb 1-1: config 47 has 0 interfaces, different from the descriptor's value: 10 [ 606.884305][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.906912][T12473] netlink: 'syz.1.1587': attribute type 8 has an invalid length. [ 606.909007][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 606.933722][ T5941] usb 1-1: SerialNumber: syz [ 607.113708][T12479] ================================================================== [ 607.121798][T12479] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.130363][T12479] Write of size 1280 at addr ffffc90004277b40 by task vivid-000-vid-c/12479 [ 607.139017][T12479] [ 607.141334][T12479] CPU: 1 UID: 0 PID: 12479 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 607.141349][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.141355][T12479] Call Trace: [ 607.141361][T12479] [ 607.141366][T12479] dump_stack_lvl+0x116/0x1f0 [ 607.141388][T12479] print_report+0xcd/0x630 [ 607.141408][T12479] ? __virt_addr_valid+0x81/0x610 [ 607.141431][T12479] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.141448][T12479] kasan_report+0xe0/0x110 [ 607.141462][T12479] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.141474][T12479] kasan_check_range+0x100/0x1b0 [ 607.141488][T12479] __asan_memcpy+0x3c/0x60 [ 607.141503][T12479] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.141527][T12479] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 607.141549][T12479] vivid_fillbuff+0x8d2/0x4250 [ 607.141574][T12479] ? stack_trace_save+0x8e/0xc0 [ 607.141596][T12479] ? __pfx_stack_trace_save+0x10/0x10 [ 607.141615][T12479] ? __pfx_vivid_fillbuff+0x10/0x10 [ 607.141635][T12479] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 607.141648][T12479] ? lockdep_hardirqs_on+0x7c/0x110 [ 607.141659][T12479] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 607.141683][T12479] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 607.141710][T12479] vivid_thread_vid_cap+0x454/0xda0 [ 607.141737][T12479] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 607.141763][T12479] ? do_raw_spin_lock+0x12c/0x2b0 [ 607.141781][T12479] ? find_held_lock+0x2b/0x80 [ 607.141800][T12479] ? rcu_is_watching+0x12/0xc0 [ 607.141813][T12479] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 607.141836][T12479] ? lockdep_hardirqs_on+0x7c/0x110 [ 607.141852][T12479] ? __kthread_parkme+0x19e/0x250 [ 607.141875][T12479] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 607.141899][T12479] kthread+0x3c5/0x780 [ 607.141909][T12479] ? __pfx_kthread+0x10/0x10 [ 607.141919][T12479] ? rcu_is_watching+0x12/0xc0 [ 607.141932][T12479] ? __pfx_kthread+0x10/0x10 [ 607.141942][T12479] ret_from_fork+0x675/0x7d0 [ 607.141952][T12479] ? __pfx_kthread+0x10/0x10 [ 607.141963][T12479] ret_from_fork_asm+0x1a/0x30 [ 607.141991][T12479] [ 607.141996][T12479] [ 607.344207][T12479] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc90004275000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 607.357565][T12479] The buggy address belongs to the physical page: [ 607.363955][T12479] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x3549a [ 607.374016][T12479] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 607.381112][T12479] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 607.389668][T12479] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 607.398235][T12479] page dumped because: kasan: bad access detected [ 607.404623][T12479] page_owner tracks the page as allocated [ 607.410309][T12479] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 12478, tgid 12476 (syz.1.1588), ts 607109127854, free_ts 607109052213 [ 607.429646][T12479] post_alloc_hook+0x1af/0x220 [ 607.435082][T12479] get_page_from_freelist+0x10a3/0x3a30 [ 607.440646][T12479] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 607.446546][T12479] alloc_pages_mpol+0x1fb/0x550 [ 607.451402][T12479] alloc_pages_noprof+0x131/0x390 [ 607.456413][T12479] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 607.462301][T12479] vmalloc_user_noprof+0x9e/0xe0 [ 607.467227][T12479] vb2_vmalloc_alloc+0x135/0x3f0 [ 607.472148][T12479] __vb2_queue_alloc+0x8c9/0x1280 [ 607.477156][T12479] vb2_core_reqbufs+0xa90/0xfe0 [ 607.481995][T12479] __vb2_init_fileio+0x3f1/0x1100 [ 607.487010][T12479] vb2_core_poll+0x5ec/0x700 [ 607.491587][T12479] vb2_poll+0x4b/0xe0 [ 607.495551][T12479] vb2_fop_poll+0x10f/0x2c0 [ 607.500037][T12479] v4l2_poll+0x163/0x320 [ 607.504262][T12479] do_sys_poll+0x55c/0xdf0 [ 607.508659][T12479] page last free pid 12478 tgid 12476 stack trace: [ 607.515128][T12479] __free_frozen_pages+0x7df/0x1160 [ 607.520322][T12479] kasan_populate_vmalloc+0x1eb/0x2d0 [ 607.525672][T12479] alloc_vmap_area+0x960/0x29e0 [ 607.530496][T12479] __get_vm_area_node+0x1ca/0x330 [ 607.535501][T12479] __vmalloc_node_range_noprof+0x271/0x1480 [ 607.541379][T12479] vmalloc_user_noprof+0x9e/0xe0 [ 607.546289][T12479] vb2_vmalloc_alloc+0x135/0x3f0 [ 607.551211][T12479] __vb2_queue_alloc+0x8c9/0x1280 [ 607.556219][T12479] vb2_core_reqbufs+0xa90/0xfe0 [ 607.561061][T12479] __vb2_init_fileio+0x3f1/0x1100 [ 607.566069][T12479] vb2_core_poll+0x5ec/0x700 [ 607.570639][T12479] vb2_poll+0x4b/0xe0 [ 607.574622][T12479] vb2_fop_poll+0x10f/0x2c0 [ 607.579132][T12479] v4l2_poll+0x163/0x320 [ 607.583372][T12479] do_sys_poll+0x55c/0xdf0 [ 607.587784][T12479] __x64_sys_ppoll+0x254/0x2d0 [ 607.592532][T12479] [ 607.594847][T12479] Memory state around the buggy address: [ 607.600450][T12479] ffffc90004277f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 607.608495][T12479] ffffc90004277f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 607.616581][T12479] >ffffc90004278000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 607.624615][T12479] ^ [ 607.628658][T12479] ffffc90004278080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 607.636699][T12479] ffffc90004278100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 607.644743][T12479] ================================================================== [ 607.652881][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.678978][T12479] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 607.686198][T12479] CPU: 0 UID: 0 PID: 12479 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 607.695984][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.706018][T12479] Call Trace: [ 607.709274][T12479] [ 607.712204][T12479] dump_stack_lvl+0x3d/0x1f0 [ 607.716779][T12479] vpanic+0x640/0x6f0 [ 607.720750][T12479] panic+0xca/0xd0 [ 607.724456][T12479] ? __pfx_panic+0x10/0x10 [ 607.728860][T12479] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.735082][T12479] ? preempt_schedule_common+0x44/0xc0 [ 607.740529][T12479] ? preempt_schedule_thunk+0x16/0x30 [ 607.745888][T12479] ? check_panic_on_warn+0x1f/0xb0 [ 607.750982][T12479] check_panic_on_warn+0xab/0xb0 [ 607.755903][T12479] end_report+0x107/0x170 [ 607.760225][T12479] kasan_report+0xee/0x110 [ 607.764629][T12479] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.770247][T12479] kasan_check_range+0x100/0x1b0 [ 607.775172][T12479] __asan_memcpy+0x3c/0x60 [ 607.779583][T12479] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 607.785033][T12479] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 607.790827][T12479] vivid_fillbuff+0x8d2/0x4250 [ 607.795580][T12479] ? stack_trace_save+0x8e/0xc0 [ 607.800765][T12479] ? __pfx_stack_trace_save+0x10/0x10 [ 607.806128][T12479] ? __pfx_vivid_fillbuff+0x10/0x10 [ 607.811321][T12479] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 607.816939][T12479] ? lockdep_hardirqs_on+0x7c/0x110 [ 607.822119][T12479] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 607.828001][T12479] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 607.833726][T12479] vivid_thread_vid_cap+0x454/0xda0 [ 607.838918][T12479] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 607.844626][T12479] ? do_raw_spin_lock+0x12c/0x2b0 [ 607.849632][T12479] ? find_held_lock+0x2b/0x80 [ 607.854295][T12479] ? rcu_is_watching+0x12/0xc0 [ 607.859054][T12479] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 607.864848][T12479] ? lockdep_hardirqs_on+0x7c/0x110 [ 607.870025][T12479] ? __kthread_parkme+0x19e/0x250 [ 607.875036][T12479] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 607.880746][T12479] kthread+0x3c5/0x780 [ 607.884795][T12479] ? __pfx_kthread+0x10/0x10 [ 607.889366][T12479] ? rcu_is_watching+0x12/0xc0 [ 607.894113][T12479] ? __pfx_kthread+0x10/0x10 [ 607.898687][T12479] ret_from_fork+0x675/0x7d0 [ 607.903266][T12479] ? __pfx_kthread+0x10/0x10 [ 607.907878][T12479] ret_from_fork_asm+0x1a/0x30 [ 607.912648][T12479] [ 607.915756][T12479] Kernel Offset: disabled [ 607.920065][T12479] Rebooting in 86400 seconds..