last executing test programs: 4m43.83069015s ago: executing program 3 (id=1451): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r5, 0xffff) lseek(0xffffffffffffffff, 0x8, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m38.914247313s ago: executing program 3 (id=1462): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000020101080000000000000020020000260c0019"], 0x20}}, 0x4004000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x10001000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000080)={0xc}) 4m37.905629069s ago: executing program 3 (id=1464): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000c73000/0x8000)=nil, 0x8000}, 0x1}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 4m37.683358947s ago: executing program 3 (id=1467): mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async, rerun: 32) chdir(&(0x7f0000000080)='./file1\x00') (rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) r4 = io_uring_setup(0x758a, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010084b0400034400000000000000cd0f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a800000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) 4m36.997186708s ago: executing program 3 (id=1469): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200ff00000005000300edc20000050004"], 0x44}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x5f, 0x4, 0x86, 0x21, 0x2a, 0x9, 0x7, 0x8, 0x7b, 0xf, 0x7, 0x1, 0x1, 0x5}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x26a, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x7d, 0x3, 0x6, [{@broadcast, 0xc8c}, {@private=0xa010101, 0x8}, {@broadcast, 0x2}, {@local, 0x6}, {@multicast2, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 4m36.842572939s ago: executing program 3 (id=1470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 4m36.696248753s ago: executing program 32 (id=1470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1m47.217171622s ago: executing program 5 (id=1976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) 1m46.569712178s ago: executing program 5 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) 1m46.507693623s ago: executing program 5 (id=1982): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') read$msr(r1, &(0x7f0000000040)=""/59, 0xffb5) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x4, "1eb65b07"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000002280)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r6 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r6, r6}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r11, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r10, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() flock(r5, 0x2) 1m43.142007089s ago: executing program 5 (id=1991): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000207481082505a3a4e8930102030109022400010000000009040000020fa6b00009058efd"], 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendfile(r1, r0, 0x0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2205080, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @private=0xa010101}, 0x4, 0x2, 0x2, 0x1}}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x7, 0x25cfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1m39.807970466s ago: executing program 5 (id=1999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[], [], 0x6b}}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r14, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) 1m39.258296732s ago: executing program 5 (id=2001): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') read$msr(r1, &(0x7f0000000040)=""/59, 0xffb5) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x4, "1eb65b07"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000002280)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r6 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r6, r6}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r11, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r10, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() flock(r5, 0x2) 1m38.281736183s ago: executing program 33 (id=2001): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') read$msr(r1, &(0x7f0000000040)=""/59, 0xffb5) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x4, "1eb65b07"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000002280)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r6 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r6, r6}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r11, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r10, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() flock(r5, 0x2) 11.972652145s ago: executing program 1 (id=2367): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x110, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) modify_ldt$write2(0x11, &(0x7f0000000080)={0x9, 0x4ccb81a52cadea07, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000000c0)=""/222, &(0x7f0000000200)=0xde) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x904, 0x0, 0x0, 0x2, 0x3}, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x7fffffff}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 11.483647786s ago: executing program 4 (id=2369): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union]}, {0x0, [0x61, 0x5f, 0x2e, 0x61, 0x61, 0x30]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 10.772806656s ago: executing program 1 (id=2370): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000240)=0x7) sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x2) syz_pidfd_open(r1, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20000, 0x50, 0x20}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xffff, 0x200, 0x7, 0x6}, 0x10) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043106aaaaaa98aa10e0fcb9ec2cbedd"], 0x9) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbbc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x188c0) r4 = mq_open(&(0x7f0000000200)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xd1\xde.G\xcb]0y\x00\x00\x00\x00\x00\x00\x006\xfb\xc5\xb6\x851\xe5\xb0uS\x9a\x00', 0x40, 0x0, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x57, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r6, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000113, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000004c0)={0x0, @ctrl}) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x980901, 0x8, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) read$nci(r0, &(0x7f00000000c0)=""/163, 0xa3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0494c2fffd00000001090224000100000000090400090103000000092100000301220600090581030000000440"], 0x0) 10.030874049s ago: executing program 4 (id=2374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) (async) mknod$loop(0x0, 0xfff, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="080216ee19f59c3d", @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0142, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) (async) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x7fffffff, {0x4, 0x20000000, 0x0, {0x0, 0x0, 0xffffffffff7ffffc, 0x0, 0x1, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) dup2(0xffffffffffffffff, r1) (async) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.488390384s ago: executing program 4 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x5) close(r3) write$cgroup_int(r4, &(0x7f0000000040)=0x7, 0x12) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)="ca", 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10040, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x7, 0xffffffff}, 0xd0, 0x9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xffffff7f) r10 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r10, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 8.565316954s ago: executing program 4 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) 8.491028063s ago: executing program 2 (id=2381): syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x28, 0x575ac7824d421509, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xc, 0xffc0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x90, 0x2, [@TCA_BPF_ACT={0x8c, 0x1, [@m_connmark={0x88, 0x20, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0xe698, 0x7}, 0x8}}]}, {0x3b, 0x6, "e8039879d8706abe7cfb65c507133d7af35f9312f8bb72aaf51d7f9ca1420ade3a0e42551ff85d03fb7561e6814010646db5ae27be3762"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xbc}}, 0x40) 8.441491292s ago: executing program 4 (id=2382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xec, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 8.401744801s ago: executing program 6 (id=2383): bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) getuid() 8.166389308s ago: executing program 6 (id=2384): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200ff00000005000300edc20000050004"], 0x44}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x5f, 0x4, 0x86, 0x21, 0x2a, 0x9, 0x7, 0x8, 0x7b, 0xf, 0x7, 0x1, 0x1, 0x5}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xd, 0xbfff, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x7800, 0x7, 0xffffffd1, 0x81}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x26a, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x7d, 0x3, 0x6, [{@broadcast, 0xc8c}, {@private=0xa010101, 0x8}, {@broadcast, 0x2}, {@local, 0x6}, {@multicast2, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 7.641020338s ago: executing program 1 (id=2386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r5, &(0x7f0000000280)=[{&(0x7f0000002340)=""/146, 0x92}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040084) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000300)={0x2, 0x7fffffff, 0x7a4, 0x1ff, 0x6, 0x5, "7e5b57eb72e861aa440f1b65c42735af", 0x3, 0x4, 0x8, 0xe6, 0x7, 0x8, 0x3}) 5.590515841s ago: executing program 0 (id=2387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x80000000, 0x0, 0x3, 0x0, [0x0], [0x3, 0xb]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r8, &(0x7f0000000040), &(0x7f0000000080), 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x121202, 0x0) 5.366885285s ago: executing program 2 (id=2388): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x402) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x2, 0x4, {0x2, @struct={0xb, 0x4}, 0x0, 0x3ff, 0x4, 0x4, 0xfff, 0x10, 0x0, @struct={0x0, 0x6}, 0x1, 0x0, [0x6, 0x6, 0x3, 0x3, 0x6, 0x100000001]}, {0x1ff, @usage=0x4, 0x0, 0x1d5, 0x6, 0x3, 0x0, 0xa, 0x8, @usage, 0x1000, 0x5, [0xa, 0xa28c, 0x8000000, 0xfffffffffffff0dc, 0x40, 0x3]}, {0x8000000000000001, @struct={0x800, 0xfffffffe}, 0x0, 0x5, 0xffff, 0x4, 0x4, 0x80000001, 0x400, @struct={0x7, 0x5c3f}, 0x7, 0x0, [0x9, 0x7b5, 0xff, 0x7fff, 0x6, 0x5]}, {0x81, 0x6, 0x40}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0), &(0x7f0000000040)=0xfffffffffffffff6) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0x6, 0x1, [0x1ff, 0x202c, 0xd, 0x5, 0x7], [0x4, 0x3, 0xc, 0x5, 0xf08, 0x7fffffff, 0x4, 0x1000, 0x100000000, 0x1ff, 0xffff, 0x3, 0x9, 0x3ff, 0xfffffffffffffff8, 0xffffffff80000001, 0xffffffffffffffff, 0x7fffffffffffffff, 0x10, 0x5, 0x3, 0x7fff, 0x0, 0x3, 0x10001, 0x200d, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff7, 0x8000000000000000, 0x5, 0x800, 0x7, 0x6, 0xaf5a, 0x2, 0x7, 0x7, 0x8, 0x9, 0x6, 0x1ff, 0x9, 0x2, 0x4, 0xd85, 0x3668, 0x5, 0x0, 0x3, 0xf, 0x4, 0x6, 0xc39c2a2, 0x7, 0x7, 0x5, 0x8, 0x2, 0xffffffffffffd754, 0xfffffffffffffbff, 0x80, 0x6, 0x8, 0xfff, 0x80000001, 0x2, 0x0, 0x100000000, 0x95, 0xc779, 0x2, 0xffffffffffff5a8a, 0x2, 0x80000000, 0xe, 0x7, 0x11, 0xcb3, 0x6, 0xd, 0x4, 0x3, 0x3, 0x7fffffffffffffff, 0xffffffff, 0x7a02, 0x3, 0x5, 0x4, 0x3, 0xffff, 0xfb7, 0x91bd, 0x5, 0x9, 0xc, 0xd40, 0x2, 0xb5, 0x101, 0x3, 0xfffffffffffffffa, 0x5, 0x7fffffffffffffff, 0x7, 0x0, 0x2, 0x7, 0xfff, 0x9, 0x3ff, 0x1000, 0x5, 0x9, 0x5, 0x4, 0xffffffffffffffff, 0x0, 0x1ff, 0x9]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced087a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5f89557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x10012, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r4, 0x10000, 0xfffffffb, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '/dev/i2c-#\x00'}, {0x20, '\x00'}, {0x20, '$@^+}-},:'}, {0x20, '\x00'}], 0xa, "148f4007a147cbca690bb62448fd8146d6bd5cd668f3ae90c28f74edb492c2bf9c992ad3d227f92515d7f0a5e4276665297e39e44e23a84a2b71734a8927c01a8ecf8ecc4d0b06a96337a4cab68343d535ede7ede85689a259adea"}, 0x80) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4092, 0xffc}], 0x1, 0x2, 0x7e) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) writev(r4, &(0x7f0000001b00)=[{&(0x7f0000001980)="339c560c15970cc2d22ab1d083969126bab57b3db387dbc1b10a2648814b83ce5e467b390c7ca31c550b2c0a04982247d44c060f5a3ec3aaa73b3bc3e171e97f16f69f1a927f012623e6d41624b00ef3ee0e4e9260052d7c5c6fd5eec6f391bd7f638dbfe213afa812712e6d7ec7c565ac9f306fec1d6bbcc254578fac203a8230de4a2f5bd9619b8ffe85ce482412e9c68cc02a541c01f27e3e4b2a136f21087495bb504d8d8c2ec538e63827578fb9a50dac4217df846684eb4ab5b70bdee82c8b6d0516ed5ded36c476e217c68cfa166af9bed07dacf91c05d5b70cce312be67c3722e984", 0xe6}, {&(0x7f0000001a80)="997670ca916d22c02e1510d6f4e5b22022fc341eea732f05cff2c4c4a7e56a4b4065bdf812b871561e1bc5d4d2e31a62da930d8961eb4638a0a9b42422479f3ad502d63509cb94cbc9ff6b6d787a1bc561c01ae59fe8127c21661d03b580acf3bf9cd5f9", 0x64}], 0x2) 4.612020156s ago: executing program 4 (id=2389): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') read$msr(r1, &(0x7f0000000040)=""/59, 0xffb5) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x4, "1eb65b07"}, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000002280)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r7 = add_key$user(&(0x7f00000006c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000440)="3118a062c5e6f9b332e2f3006a9a29fcaff672ae900d6fa95c321004ea8844c7a92ca02b058250a07854dcfb2951b8ea60e3c13305cb31f9a5493befc04fb0be50cc07b31ecfb1baf775d8efd3f847d3392d421fe46244c6886cbb9ad6077b29e5fa3bfdf07a4515d5588050fde3c0f03ddda2ebe8649cf2a473b5069866bd0d8a78cf92c40574dd50446db139d9723e0d3753eb94c0fac0c409d1f208c29e115fba14d1e378ef478508ae2e37b64ca1826d14e1209183948dc754c1d92fdebf", 0xc0, 0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)="8e", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r8, r7, r7}, &(0x7f0000000500)=""/82, 0x52, &(0x7f0000000340)={&(0x7f0000000080)={'sha512-avx\x00'}}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r10, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r12, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r11, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) flock(r6, 0x2) mq_timedsend(r6, &(0x7f0000000180)="94343f86eea464c1365927b920e6a9f53d9aeefe7e879766de12b1ee426c4f6fce7d5fc726c1675889602cbf0d077836d0f2aeaa11e864068d648abdfafd13c17096dac906de8d75bdb14c4312d384ec6fc66e73090f09d0843c794856977456ce307b2d59c9686ad25207ab3c6e998261ca34b124101ea67c7503f4", 0x7c, 0xfffffffffffffff5, &(0x7f0000002240)={0x77359400}) 4.501331297s ago: executing program 1 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}, 0x2404c041) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) 4.501018011s ago: executing program 2 (id=2391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) 4.292948002s ago: executing program 0 (id=2392): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c02, 0xffffffffffffffff) 4.162665169s ago: executing program 6 (id=2393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) 3.974319063s ago: executing program 2 (id=2394): bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) getuid() 3.694222319s ago: executing program 0 (id=2395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0, 0x3c00bb323bba7cc6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20ca80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000200)=0xff) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000240)=0xffff) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x118) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r3, r6, r1, r4, r2, r4, r0, r6, r2, r5], 0xa) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.643896608s ago: executing program 6 (id=2396): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40800) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3}) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) 3.55466536s ago: executing program 6 (id=2397): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x2600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000240)={@multicast2, @initdev}, &(0x7f00000002c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r8, 0xcccccccc}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x185}, "98b9b26fd72000", "2944d06e70ed4c9a4c08b3e49857275c", "e41f594b", "fb999268a76b46cf"}, 0x28) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000040), &(0x7f0000000600)=[r9], &(0x7f0000000140)}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0xfa7, 0x200, "0481a63cc205c4ab21926506f8bbea599c3ff9b95caaf6f3", {0x100, 0x6}, 0x2803}) 3.374556311s ago: executing program 1 (id=2398): syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0xbc, 0x28, 0x575ac7824d421509, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xc, 0xffc0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x90, 0x2, [@TCA_BPF_ACT={0x8c, 0x1, [@m_connmark={0x88, 0x20, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0xe698, 0x7}, 0x8}}]}, {0x3b, 0x6, "e8039879d8706abe7cfb65c507133d7af35f9312f8bb72aaf51d7f9ca1420ade3a0e42551ff85d03fb7561e6814010646db5ae27be3762"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xbc}}, 0x40) 1.021774108s ago: executing program 0 (id=2399): socket$caif_seqpacket(0x25, 0x5, 0x3) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd, 0x8000000000000001, 0x0, 0x7, 0x0, 0xfaf789293f023778}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa94, 0x0, 0x0, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x172, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x244480) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x208}}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0xd54}}, 0x1006) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r6, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 877.924435ms ago: executing program 6 (id=2400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r5, &(0x7f0000000280)=[{&(0x7f0000002340)=""/146, 0x92}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040084) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000300)={0x2, 0x7fffffff, 0x7a4, 0x1ff, 0x6, 0x5, "7e5b57eb72e861aa440f1b65c42735af", 0x3, 0x4, 0x8, 0xe6, 0x7, 0x8, 0x3}) 669.023955ms ago: executing program 0 (id=2401): r0 = socket(0x2b, 0x80801, 0x1) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d12, &(0x7f0000000180)=0x5b) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x32d2, @mcast2, 0x7ffffffe}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r0, 0x3) 149.948569ms ago: executing program 1 (id=2402): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x33, 0x4, {0x4, 0xe, "8453"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x10001, @local, 0x8}, 0x1c) 63.027779ms ago: executing program 2 (id=2403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 24.320651ms ago: executing program 0 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200ff00000005000300edc20000050004"], 0x44}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0x5f, 0x4, 0x86, 0x21, 0x2a, 0x9, 0x7, 0x8, 0x7b, 0xf, 0x7, 0x1, 0x1, 0x5}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xd, 0xbfff, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x7800, 0x7, 0xffffffd1, 0x81}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x26a, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x7d, 0x3, 0x6, [{@broadcast, 0xc8c}, {@private=0xa010101, 0x8}, {@broadcast, 0x2}, {@local, 0x6}, {@multicast2, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) 0s ago: executing program 2 (id=2405): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d3000000000000005000200ff00000005000300edc20000050004"], 0x44}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x5f, 0x4, 0x86, 0x21, 0x2a, 0x9, 0x7, 0x8, 0x7b, 0xf, 0x7, 0x1, 0x1, 0x5}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000580)={@private0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x3, 0xd, 0xbfff, 0x20, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x7800, 0x7, 0xffffffd1, 0x81}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010000000000000000f500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x700, 0x700, 0x26a, 0x0, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x7d, 0x3, 0x6, [{@broadcast, 0xc8c}, {@private=0xa010101, 0x8}, {@broadcast, 0x2}, {@local, 0x6}, {@multicast2, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0x64, 0x1, 0x6, [{@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): /usb6/6-1/6-1:0.0/rc/rc1/input50 [ 562.480017][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.539279][T13056] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 562.616893][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 562.694149][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 91 [ 563.227278][ C0] igorplugusb 6-1:0.0: receive overflow invalid: 91 [ 563.349450][ T5898] usb 1-1: USB disconnect, device number 55 [ 563.370567][ T24] usb 2-1: device descriptor read/64, error -71 [ 563.694080][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 563.841694][T13057] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 564.124954][ T24] usb 2-1: device descriptor read/64, error -71 [ 564.604103][T13057] bond2: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 564.617569][T13057] bond2: (slave ip6tnl1): making interface the new active one [ 564.634938][T13057] bond2: (slave ip6tnl1): Enslaving as an active interface with an up link [ 564.750796][ T24] usb usb2-port1: attempt power cycle [ 564.807569][T13068] netlink: 'syz.0.1989': attribute type 23 has an invalid length. [ 564.852186][ T912] usb 6-1: USB disconnect, device number 34 [ 564.949791][ T30] audit: type=1400 audit(1746259586.100:106724): avc: denied { create } for pid=13082 comm="syz.0.1992" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 565.001423][ T30] audit: type=1400 audit(1746259586.100:106725): avc: denied { rename } for pid=13082 comm="syz.0.1992" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 565.045226][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.053651][ T30] audit: type=1400 audit(1746259586.190:106726): avc: denied { map } for pid=13085 comm="syz.0.1993" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 565.078643][ T30] audit: type=1400 audit(1746259586.190:106727): avc: denied { mount } for pid=13085 comm="syz.0.1993" name="/" dev="ramfs" ino=39642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 565.107739][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 565.135234][ T24] usb 2-1: device descriptor read/8, error -71 [ 565.264139][ T5898] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 565.304217][ T912] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 565.374214][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 565.415895][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 565.422995][ T5898] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 565.432660][ T5898] usb 5-1: config 0 has no interface number 0 [ 565.433190][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 565.441749][ T5898] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 565.484286][ T912] usb 6-1: Using ep0 maxpacket: 8 [ 565.491460][ T912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.511905][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 565.534162][ T912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.552477][ T912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 565.569924][ T912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.605609][ T912] usb 6-1: Product: syz [ 565.609808][ T912] usb 6-1: Manufacturer: syz [ 565.624153][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 565.634197][ T912] usb 6-1: SerialNumber: syz [ 565.652808][ T912] usb 6-1: config 0 descriptor?? [ 565.670957][ T912] usbtest 6-1:0.0: Linux user mode ISO test driver [ 565.690697][ T912] usbtest 6-1:0.0: high-speed {control iso-in} tests (+alt) [ 565.750654][ T24] usb 2-1: device not accepting address 57, error -71 [ 565.758624][ T24] usb usb2-port1: unable to enumerate USB device [ 565.765777][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.775352][ T5898] usb 5-1: Product: syz [ 565.779511][ T5898] usb 5-1: Manufacturer: syz [ 565.784184][ T5898] usb 5-1: SerialNumber: syz [ 565.794657][ T5898] usb 5-1: config 0 descriptor?? [ 565.803522][ T5898] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 565.808720][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.932030][ T9] usb 1-1: config 0 has no interface number 0 [ 566.004513][ T912] Process accounting resumed [ 566.014827][ T5898] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 566.021472][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 566.037659][ T5898] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 566.069909][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 566.069922][ T30] audit: type=1400 audit(1746259587.210:106729): avc: denied { write } for pid=13080 comm="syz.5.1991" path="socket:[39655]" dev="sockfs" ino=39655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.104241][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.135178][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.154612][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.253716][ T9] usb 1-1: config 0 descriptor?? [ 566.259365][ T30] audit: type=1400 audit(1746259587.270:106730): avc: denied { create } for pid=13080 comm="syz.5.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 566.282566][ T9] usb 1-1: selecting invalid altsetting 1 [ 566.299462][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 566.308790][ T30] audit: type=1400 audit(1746259587.280:106731): avc: denied { connect } for pid=13080 comm="syz.5.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 566.426770][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 566.651925][ T30] audit: type=1400 audit(1746259587.569:106732): avc: denied { write } for pid=13080 comm="syz.5.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 566.679310][ T30] audit: type=1400 audit(1746259587.829:106733): avc: denied { read append } for pid=13090 comm="syz.0.1994" name="i2c-1" dev="devtmpfs" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.704036][ T10] usb 6-1: USB disconnect, device number 35 [ 566.917425][ T30] audit: type=1400 audit(1746259587.829:106734): avc: denied { open } for pid=13090 comm="syz.0.1994" path="/dev/i2c-1" dev="devtmpfs" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 567.103346][ T30] audit: type=1400 audit(1746259587.829:106735): avc: denied { read } for pid=13103 comm="syz.1.1998" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 567.272510][ T30] audit: type=1400 audit(1746259587.829:106736): avc: denied { open } for pid=13103 comm="syz.1.1998" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 567.581230][ T30] audit: type=1400 audit(1746259587.859:106737): avc: denied { append } for pid=5169 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 567.747203][ T30] audit: type=1400 audit(1746259587.869:106738): avc: denied { ioctl } for pid=13103 comm="syz.1.1998" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 567.831187][ T9] DVB: Unable to find symbol cx22700_attach() [ 568.627091][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 568.627366][ T10] usb 5-1: USB disconnect, device number 63 [ 568.667265][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 568.688624][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 568.699825][ T9] DVB: Unable to find symbol tda10046_attach() [ 568.706613][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 568.721809][ T10] quatech2 5-1:0.51: device disconnected [ 568.729601][ T9] usb 1-1: USB disconnect, device number 56 [ 569.003863][T13115] FAULT_INJECTION: forcing a failure. [ 569.003863][T13115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.017108][T13115] CPU: 1 UID: 0 PID: 13115 Comm: syz.4.2000 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 569.017132][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 569.017142][T13115] Call Trace: [ 569.017148][T13115] [ 569.017155][T13115] dump_stack_lvl+0x16c/0x1f0 [ 569.017181][T13115] should_fail_ex+0x512/0x640 [ 569.017206][T13115] _copy_from_user+0x2e/0xd0 [ 569.017229][T13115] copy_msghdr_from_user+0x98/0x160 [ 569.017246][T13115] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 569.017267][T13115] ? kfree+0x252/0x4d0 [ 569.017290][T13115] ? rcu_is_watching+0x12/0xc0 [ 569.017319][T13115] ___sys_recvmsg+0xdb/0x1a0 [ 569.017335][T13115] ? __pfx____sys_recvmsg+0x10/0x10 [ 569.017365][T13115] ? __pfx___might_resched+0x10/0x10 [ 569.017391][T13115] do_recvmmsg+0x2fe/0x740 [ 569.017411][T13115] ? __pfx_do_recvmmsg+0x10/0x10 [ 569.017432][T13115] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 569.017461][T13115] ? __fget_files+0x20e/0x3c0 [ 569.017492][T13115] __x64_sys_recvmmsg+0x22a/0x280 [ 569.017511][T13115] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 569.017535][T13115] do_syscall_64+0xcd/0x260 [ 569.017559][T13115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.017576][T13115] RIP: 0033:0x7f18ec78e969 [ 569.017590][T13115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.017606][T13115] RSP: 002b:00007f18ed679038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 569.017623][T13115] RAX: ffffffffffffffda RBX: 00007f18ec9b6160 RCX: 00007f18ec78e969 [ 569.017634][T13115] RDX: 0000000000000500 RSI: 000020000000a6c0 RDI: 0000000000000007 [ 569.017644][T13115] RBP: 00007f18ed679090 R08: 0000000000000000 R09: 0000000000000000 [ 569.017655][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.017664][T13115] R13: 0000000000000000 R14: 00007f18ec9b6160 R15: 00007ffc9d92c018 [ 569.017687][T13115] [ 569.649072][ T82] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.075639][ T82] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.134713][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 570.234022][ T82] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.266974][ T9] usb 3-1: device descriptor read/64, error -71 [ 570.284934][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.298414][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.308512][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.327719][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.337098][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 570.346385][ T82] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.514793][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 570.655514][ T9] usb 3-1: device descriptor read/64, error -71 [ 570.777757][T13135] chnl_net:caif_netlink_parms(): no params data found [ 570.777784][ T9] usb usb3-port1: attempt power cycle [ 570.862333][ T82] bridge_slave_1: left allmulticast mode [ 570.871304][ T82] bridge_slave_1: left promiscuous mode [ 571.018750][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.064115][ T82] bridge_slave_0: left allmulticast mode [ 571.093702][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 571.093715][ T30] audit: type=1400 audit(1746259592.239:106805): avc: denied { read } for pid=13146 comm="syz.4.2009" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 571.124849][ T82] bridge_slave_0: left promiscuous mode [ 571.130571][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.344861][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 571.440757][ T30] audit: type=1400 audit(1746259592.239:106806): avc: denied { open } for pid=13146 comm="syz.4.2009" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 571.482365][ T9] usb 3-1: device descriptor read/8, error -71 [ 571.489521][ T30] audit: type=1400 audit(1746259592.359:106807): avc: denied { bind } for pid=13146 comm="syz.4.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 571.522633][ T30] audit: type=1400 audit(1746259592.369:106808): avc: denied { create } for pid=13146 comm="syz.4.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.578604][ T30] audit: type=1400 audit(1746259592.389:106809): avc: denied { ioctl } for pid=13146 comm="syz.4.2009" path="socket:[40907]" dev="sockfs" ino=40907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.603440][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.617782][ T30] audit: type=1400 audit(1746259592.409:106810): avc: denied { bind } for pid=13146 comm="syz.4.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 571.643305][ T30] audit: type=1400 audit(1746259592.639:106811): avc: denied { read } for pid=13150 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.666577][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.683395][ T30] audit: type=1400 audit(1746259592.639:106812): avc: denied { open } for pid=13150 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.729750][ T30] audit: type=1400 audit(1746259592.639:106813): avc: denied { getattr } for pid=13150 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.766857][ T30] audit: type=1400 audit(1746259592.829:106814): avc: denied { read } for pid=13153 comm="syz.1.2010" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 571.769342][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 572.249921][ T9] usb 3-1: device descriptor read/8, error -71 [ 572.396208][ T5815] Bluetooth: hci2: command tx timeout [ 572.476673][ T9] usb usb3-port1: unable to enumerate USB device [ 572.740450][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.761740][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.771694][ T82] bond0 (unregistering): Released all slaves [ 573.116525][ T5866] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 573.955345][T13135] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.976653][T13135] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.984934][T13135] bridge_slave_0: entered allmulticast mode [ 573.987975][ T5866] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.998207][T13135] bridge_slave_0: entered promiscuous mode [ 574.335366][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 574.449132][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.455222][ T5866] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.476025][ T5815] Bluetooth: hci2: command tx timeout [ 574.481527][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 574.495009][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 574.496813][T13135] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.511476][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 574.514817][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.531848][T13135] bridge_slave_1: entered allmulticast mode [ 574.533106][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 574.538533][ T5866] usb 2-1: config 0 descriptor?? [ 574.563459][T13135] bridge_slave_1: entered promiscuous mode [ 574.566199][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.619013][ T9] usb 5-1: config 0 descriptor?? [ 574.788546][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.791986][ T9] as10x_usb: device has been detected [ 574.801889][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 574.839125][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.855358][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 574.937567][ T24] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 574.951230][ T9] as10x_usb: error during firmware upload part1 [ 574.982815][ T9] Registered device nBox DVB-T Dongle [ 574.987440][T13135] team0: Port device team_slave_0 added [ 575.009333][ T9] usb 5-1: USB disconnect, device number 64 [ 575.062436][ T9] Unregistered device nBox DVB-T Dongle [ 575.069932][ T9] as10x_usb: device has been disconnected [ 575.088876][ T82] hsr_slave_0: left promiscuous mode [ 575.108490][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 575.122143][ T82] hsr_slave_1: left promiscuous mode [ 575.124905][ T24] usb 3-1: config 0 has no interface number 0 [ 575.137943][ T82] batman_adv: batadv0: Interface deactivated: dummy0 [ 575.159282][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 575.165294][ T82] batman_adv: batadv0: Removing interface: dummy0 [ 575.184996][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.185549][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.215427][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.235514][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.236174][ T24] usb 3-1: config 0 descriptor?? [ 575.253111][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.265981][ T82] batman_adv: batadv0: Removing interface: macvtap0 [ 575.284565][ T24] usb 3-1: selecting invalid altsetting 1 [ 575.302083][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 575.314233][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 575.319675][ T82] veth1_macvtap: left promiscuous mode [ 575.341225][ T82] veth1_vlan: left promiscuous mode [ 575.355551][ T82] veth0_vlan: left promiscuous mode [ 575.472634][ T24] DVB: Unable to find symbol cx22700_attach() [ 575.526952][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 575.599840][ T24] DVB: Unable to find symbol tda10046_attach() [ 575.619418][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 575.709421][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 575.729558][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 575.747200][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.763852][ T9] usb 5-1: config 0 descriptor?? [ 575.786874][ T9] as10x_usb: device has been detected [ 575.791632][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 575.803476][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 575.809206][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 575.842659][ T5866] usb 2-1: USB disconnect, device number 58 [ 575.849698][ T9] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 575.908604][ T9] as10x_usb: error during firmware upload part1 [ 575.925789][ T9] Registered device nBox DVB-T Dongle [ 576.060192][ T9] usb 5-1: USB disconnect, device number 65 [ 576.110241][ T9] Unregistered device nBox DVB-T Dongle [ 576.117158][ T9] as10x_usb: device has been disconnected [ 576.426946][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 576.427027][ T30] audit: type=1400 audit(1746259597.568:106833): avc: denied { write } for pid=13190 comm="syz.4.2016" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 576.553104][ T7286] Bluetooth: hci5: Frame reassembly failed (-84) [ 576.559256][ T5830] Bluetooth: hci2: command tx timeout [ 576.603703][ T82] team0 (unregistering): Port device team_slave_1 removed [ 576.641773][ T82] team0 (unregistering): Port device team_slave_0 removed [ 576.708578][ T912] usb 3-1: USB disconnect, device number 55 [ 576.805597][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 576.862276][ T30] audit: type=1400 audit(1746259598.008:106834): avc: denied { bind } for pid=13225 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.882993][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.968305][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.992190][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.060326][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 577.072427][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.090280][ T24] usb 2-1: config 0 descriptor?? [ 577.833999][T13135] team0: Port device team_slave_1 added [ 578.009374][ T30] audit: type=1400 audit(1746259599.158:106835): avc: denied { setopt } for pid=13236 comm="syz.2.2023" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 578.029910][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.059506][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 578.069575][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.101363][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.195632][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.341673][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 578.525022][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.535026][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.552271][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.556033][ T5830] Bluetooth: hci5: command 0xfc11 tx timeout [ 578.578488][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 578.597260][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 578.599999][ T30] audit: type=1400 audit(1746259599.748:106836): avc: denied { create } for pid=13243 comm="syz.2.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 578.627653][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 578.636782][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 578.637003][ T30] audit: type=1400 audit(1746259599.778:106837): avc: denied { bind } for pid=13243 comm="syz.2.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 578.652616][ T5815] Bluetooth: hci2: command tx timeout [ 578.673174][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.683767][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.699341][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 578.708564][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.716709][ T10] usb 5-1: Product: syz [ 578.721570][ T10] usb 5-1: Manufacturer: syz [ 578.726284][ T10] usb 5-1: SerialNumber: syz [ 578.740029][ T10] usb 5-1: config 0 descriptor?? [ 578.784408][ T10] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input51 [ 578.811021][ T30] audit: type=1400 audit(1746259599.948:106838): avc: denied { write } for pid=13243 comm="syz.2.2025" path="socket:[41145]" dev="sockfs" ino=41145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 578.834784][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.848506][ T30] audit: type=1400 audit(1746259599.958:106839): avc: denied { mounton } for pid=13243 comm="syz.2.2025" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 578.874144][ T30] audit: type=1400 audit(1746259599.958:106840): avc: denied { mount } for pid=13243 comm="syz.2.2025" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 578.917432][ T30] audit: type=1400 audit(1746259599.998:106841): avc: denied { read } for pid=5172 comm="acpid" name="mouse1" dev="devtmpfs" ino=3755 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.982247][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 578.983640][T13135] hsr_slave_0: entered promiscuous mode [ 578.990452][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 579.004763][ T24] usb 2-1: USB disconnect, device number 59 [ 579.020981][T13135] hsr_slave_1: entered promiscuous mode [ 579.061152][T13135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.093894][T13135] Cannot create hsr debugfs directory [ 579.099705][ T30] audit: type=1400 audit(1746259599.998:106842): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3755 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 579.333445][ T10] imon:send_packet: packet tx failed (-71) [ 579.356062][ T10] imon 5-1:0.0: panel buttons/knobs setup failed [ 579.427755][ T10] rc_core: IR keymap rc-imon-pad not found [ 579.974407][ T10] Registered IR keymap rc-empty [ 579.992106][ T10] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 580.135445][ T10] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 580.154745][ T10] imon:send_packet: packet tx failed (-71) [ 580.406398][ T10] imon 5-1:0.0: remote input dev register failed [ 580.413268][ T10] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 580.438861][ T10] imon 5-1:0.0: unable to initialize intf0, err 0 [ 580.455705][ T10] imon:imon_probe: failed to initialize context! [ 580.462625][ T10] imon 5-1:0.0: unable to register, err -19 [ 580.479251][ T10] usb 5-1: USB disconnect, device number 66 [ 580.718440][T13135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 580.860572][T13135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 580.892879][T13135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 580.913955][T13135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 581.472684][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 581.472697][ T30] audit: type=1400 audit(1746259602.618:106849): avc: denied { connect } for pid=13288 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.498438][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.508998][ T30] audit: type=1400 audit(1746259602.618:106850): avc: denied { read } for pid=13288 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 581.543272][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 581.553835][ T30] audit: type=1400 audit(1746259602.688:106851): avc: denied { write } for pid=13288 comm="syz.1.2032" name="fib_trie" dev="proc" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 581.587364][T13135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.669084][T13135] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.679844][ T24] usb 5-1: device descriptor read/64, error -71 [ 581.690647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.697828][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.712767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.719938][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.811582][T13135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.822630][T13135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.996282][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 582.090742][ T30] audit: type=1400 audit(1746259603.238:106852): avc: denied { create } for pid=13303 comm="syz.0.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 582.164467][T13135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.186665][ T24] usb 5-1: device descriptor read/64, error -71 [ 582.264200][ T30] audit: type=1400 audit(1746259603.278:106853): avc: denied { write } for pid=13303 comm="syz.0.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 582.288932][ T30] audit: type=1400 audit(1746259603.408:106854): avc: denied { mounton } for pid=13309 comm="syz.0.2037" path="/400/file0" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 582.366478][ T24] usb usb5-port1: attempt power cycle [ 582.416212][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 582.424478][ T30] audit: type=1400 audit(1746259603.568:106855): avc: denied { map } for pid=13323 comm="syz.0.2039" path="socket:[42606]" dev="sockfs" ino=42606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.447937][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.454813][T13324] IPVS: stopping backup sync thread 13327 ... [ 582.462521][T13327] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 582.480230][ T30] audit: type=1400 audit(1746259603.568:106856): avc: denied { read accept } for pid=13323 comm="syz.0.2039" path="socket:[42606]" dev="sockfs" ino=42606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.591482][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 582.602162][ T30] audit: type=1400 audit(1746259603.758:106857): avc: denied { read write } for pid=13332 comm="syz.0.2040" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 582.625978][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.626002][ T9] usb 3-1: Product: syz [ 582.626017][ T9] usb 3-1: Manufacturer: syz [ 582.626031][ T9] usb 3-1: SerialNumber: syz [ 582.628598][ T9] usb 3-1: config 0 descriptor?? [ 582.641481][ T5866] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 582.673852][T13135] veth0_vlan: entered promiscuous mode [ 582.686623][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 056 [ 582.716349][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 582.719333][T13135] veth1_vlan: entered promiscuous mode [ 582.724298][ T5866] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.742390][ T30] audit: type=1400 audit(1746259603.758:106858): avc: denied { open } for pid=13332 comm="syz.0.2040" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 582.765998][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.774350][ T24] usb 5-1: device descriptor read/8, error -71 [ 582.920562][T13135] veth0_macvtap: entered promiscuous mode [ 583.008331][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.008755][T13135] veth1_macvtap: entered promiscuous mode [ 583.030595][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.044199][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.054801][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.066361][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 583.084208][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.099950][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.110081][ T24] usb 5-1: device descriptor read/8, error -71 [ 583.121426][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.134234][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.147442][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.159613][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.172632][T13135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.202903][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.217372][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.228780][ T24] usb usb5-port1: unable to enumerate USB device [ 583.240427][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.253785][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.265336][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.265509][ T9] (null): failure reading functionality [ 583.277307][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.295715][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.308954][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.325025][T13135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.346093][T13135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.365191][T13135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.375125][T13135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.476805][ T9] i2c i2c-1: failure reading functionality [ 583.496585][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 583.501652][T13135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.536638][ T9] usb 3-1: USB disconnect, device number 56 [ 584.002679][ T7286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.015003][ T7286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.069993][ T7286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.081939][ T7286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.613659][T13371] netlink: 'syz.6.2002': attribute type 23 has an invalid length. [ 585.286824][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 585.728694][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.770014][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 585.859155][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.907358][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.934431][T13379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 585.963202][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.526331][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 586.526347][ T30] audit: type=1400 audit(1746259607.667:106882): avc: denied { watch watch_reads } for pid=13435 comm="syz.0.2066" path="/407" dev="tmpfs" ino=2164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 586.611622][ T30] audit: type=1400 audit(1746259607.757:106883): avc: denied { mount } for pid=13438 comm="syz.6.2067" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 586.702940][ T30] audit: type=1400 audit(1746259607.797:106884): avc: denied { search } for pid=13438 comm="syz.6.2067" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 586.769852][ T30] audit: type=1400 audit(1746259607.877:106885): avc: denied { write } for pid=13446 comm="syz.4.2071" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 586.868029][ T30] audit: type=1400 audit(1746259607.877:106886): avc: denied { open } for pid=13446 comm="syz.4.2071" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 586.968136][ T30] audit: type=1400 audit(1746259607.987:106887): avc: denied { mount } for pid=13451 comm="syz.6.2073" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 587.059211][ T30] audit: type=1400 audit(1746259607.987:106888): avc: denied { search } for pid=13451 comm="syz.6.2073" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 587.107174][ T30] audit: type=1400 audit(1746259607.987:106889): avc: denied { read } for pid=13451 comm="syz.6.2073" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 587.130469][ T30] audit: type=1400 audit(1746259607.987:106890): avc: denied { open } for pid=13451 comm="syz.6.2073" path="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 587.156080][ T30] audit: type=1400 audit(1746259608.007:106891): avc: denied { mount } for pid=13455 comm="syz.4.2074" name="/" dev="ramfs" ino=43024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 587.496317][ T5898] usb 3-1: USB disconnect, device number 57 [ 588.276939][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 588.437050][ T9] usb 3-1: device descriptor read/64, error -71 [ 588.597141][ T5866] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 588.677178][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 588.809389][ T5866] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 588.817017][ T9] usb 3-1: device descriptor read/64, error -71 [ 588.824904][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.834693][ T5866] usb 5-1: config 0 descriptor?? [ 588.864664][ T5866] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 588.872596][ T5866] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 588.949687][ T9] usb usb3-port1: attempt power cycle [ 589.069440][ T5898] usb 5-1: USB disconnect, device number 71 [ 589.264334][T13561] netlink: 'syz.6.2104': attribute type 3 has an invalid length. [ 589.310329][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 589.346290][ T5866] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 589.357920][ T9] usb 3-1: device descriptor read/8, error -71 [ 589.606567][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 589.658833][ T9] usb 3-1: device descriptor read/8, error -71 [ 589.678428][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 589.705919][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 589.755965][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 589.788858][ T9] usb usb3-port1: unable to enumerate USB device [ 589.815549][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.844768][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.874807][ T5866] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 589.934393][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.987092][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 590.051390][ T5866] usb 2-1: Product: syz [ 590.061956][ T5866] usb 2-1: Manufacturer: syz [ 590.066624][ T5866] usb 2-1: SerialNumber: syz [ 590.078487][ T5866] usb 2-1: config 0 descriptor?? [ 590.822260][ T5866] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input53 [ 590.834709][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 590.847543][ T24] usb 5-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 590.862164][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 590.874035][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 182, changing to 11 [ 591.210898][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.589321][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 591.629136][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.670982][ T24] usb 5-1: Product: syz [ 591.687328][ T24] usb 5-1: Manufacturer: syz [ 591.719655][ T24] usb 5-1: SerialNumber: syz [ 591.775912][ T24] usb 5-1: config 0 descriptor?? [ 591.784373][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 591.784387][ T30] audit: type=1400 audit(1746259612.926:106914): avc: denied { getopt } for pid=13593 comm="syz.0.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.810779][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.915229][ T30] audit: type=1400 audit(1746259612.956:106915): avc: denied { ioctl } for pid=13587 comm="syz.2.2109" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43431 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 592.007343][ T24] rc_core: IR keymap rc-xbox-dvd not found [ 592.033505][ T24] Registered IR keymap rc-empty [ 592.041511][ T24] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 592.083875][ T30] audit: type=1400 audit(1746259613.226:106916): avc: denied { bind } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.109233][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 592.123824][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 592.139248][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 592.246380][ T30] audit: type=1400 audit(1746259613.226:106917): avc: denied { listen } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.798032][ T30] audit: type=1400 audit(1746259613.226:106918): avc: denied { accept } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.827278][ T30] audit: type=1400 audit(1746259613.276:106919): avc: denied { setopt } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 592.859088][ T30] audit: type=1400 audit(1746259613.276:106920): avc: denied { write } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 592.859130][ T30] audit: type=1400 audit(1746259613.286:106921): avc: denied { read } for pid=13572 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 593.630975][ T912] usb 5-1: USB disconnect, device number 72 [ 593.631113][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 593.896671][T13630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.970714][ T5866] imon:send_packet: packet tx failed (-71) [ 593.997598][ T5866] imon 2-1:0.0: panel buttons/knobs setup failed [ 594.138087][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 594.260162][ T5866] rc_core: IR keymap rc-imon-pad not found [ 594.266522][ T5866] Registered IR keymap rc-empty [ 594.267609][ T912] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 594.278988][ T5866] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 594.279087][ T5866] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 594.280951][ T5866] imon:send_packet: packet tx failed (-71) [ 594.317787][ T5866] imon 2-1:0.0: remote input dev register failed [ 594.324417][ T5866] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 594.672990][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 594.697949][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 594.708582][ T912] usb 5-1: Using ep0 maxpacket: 8 [ 594.715245][ T912] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 594.730050][ T5866] imon 2-1:0.0: unable to initialize intf0, err 0 [ 594.736586][ T5866] imon:imon_probe: failed to initialize context! [ 594.739368][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 594.743526][ T5866] imon 2-1:0.0: unable to register, err -19 [ 594.766968][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.769683][ T5866] usb 2-1: USB disconnect, device number 60 [ 594.779473][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.803740][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 594.816729][ T912] usb 5-1: config 0 descriptor?? [ 594.824439][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 594.842393][ T9] usb 3-1: Manufacturer: syz [ 594.855895][ T9] usb 3-1: config 0 descriptor?? [ 594.937724][ T9] rc_core: IR keymap rc-hauppauge not found [ 594.961305][ T9] Registered IR keymap rc-empty [ 594.973413][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 594.986733][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56 [ 595.284857][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 595.292801][ T5866] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 595.735779][ C0] igorplugusb 3-1:0.0: receive overflow invalid: 91 [ 595.742676][ T912] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 595.752950][ T912] asix 5-1:0.0: probe with driver asix failed with error -61 [ 595.767842][ T5898] usb 7-1: device descriptor read/64, error -71 [ 595.799443][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.811682][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.822129][ T5866] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 595.833738][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.844383][ T5866] usb 2-1: config 0 descriptor?? [ 596.018119][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 596.108282][T12903] usb 3-1: USB disconnect, device number 62 [ 596.158844][ T5898] usb 7-1: device descriptor read/64, error -71 [ 596.269955][ T5898] usb usb7-port1: attempt power cycle [ 596.367873][ T912] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 596.519391][ T912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.530894][ T912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.541329][ T912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 596.552352][ T912] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 596.562731][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.576509][T13650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.589523][ T912] hub 1-1:1.0: bad descriptor, ignoring hub [ 596.600037][ T912] hub 1-1:1.0: probe with driver hub failed with error -5 [ 596.608643][ T5898] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 596.609051][ T912] cdc_wdm 1-1:1.0: skipping garbage [ 596.634618][ T912] cdc_wdm 1-1:1.0: skipping garbage [ 596.666654][ T912] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 596.678844][ T5898] usb 7-1: device descriptor read/8, error -71 [ 596.690889][ T912] cdc_wdm 1-1:1.0: Unknown control protocol [ 596.718136][ T5830] Bluetooth: hci5: command 0xfc11 tx timeout [ 596.718636][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 596.785538][T13662] FAULT_INJECTION: forcing a failure. [ 596.785538][T13662] name failslab, interval 1, probability 0, space 0, times 0 [ 596.840033][T13662] CPU: 1 UID: 0 PID: 13662 Comm: syz.2.2123 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 596.840063][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 596.840073][T13662] Call Trace: [ 596.840084][T13662] [ 596.840091][T13662] dump_stack_lvl+0x16c/0x1f0 [ 596.840116][T13662] should_fail_ex+0x512/0x640 [ 596.840141][T13662] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 596.840172][T13662] should_failslab+0xc2/0x120 [ 596.840188][T13662] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 596.840215][T13662] ? proc_alloc_inode+0x25/0x200 [ 596.840235][T13662] ? __pfx_proc_alloc_inode+0x10/0x10 [ 596.840250][T13662] proc_alloc_inode+0x25/0x200 [ 596.840266][T13662] alloc_inode+0x61/0x240 [ 596.840287][T13662] new_inode+0x22/0x1c0 [ 596.840308][T13662] proc_pid_make_inode+0x22/0x160 [ 596.840325][T13662] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 596.840347][T13662] proc_pid_instantiate+0x51/0x1e0 [ 596.840365][T13662] proc_pid_lookup+0x1fc/0x500 [ 596.840383][T13662] proc_root_lookup+0x23/0x70 [ 596.840403][T13662] lookup_one_qstr_excl_raw.part.0+0xec/0x160 [ 596.840422][T13662] ? lookup_dcache+0x66/0x170 [ 596.840441][T13662] lookup_one_qstr_excl+0x3e/0x120 [ 596.840462][T13662] do_rmdir+0x245/0x3c0 [ 596.840479][T13662] ? __pfx_do_rmdir+0x10/0x10 [ 596.840502][T13662] ? getname_flags.part.0+0x1c5/0x550 [ 596.840524][T13662] __x64_sys_rmdir+0xc5/0x110 [ 596.840540][T13662] do_syscall_64+0xcd/0x260 [ 596.840563][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.840580][T13662] RIP: 0033:0x7fb84998e969 [ 596.840594][T13662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.840610][T13662] RSP: 002b:00007fb84a7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 596.840627][T13662] RAX: ffffffffffffffda RBX: 00007fb849bb5fa0 RCX: 00007fb84998e969 [ 596.840638][T13662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 596.840647][T13662] RBP: 00007fb84a7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 596.840657][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.840666][T13662] R13: 0000000000000000 R14: 00007fb849bb5fa0 R15: 00007ffd5a7c0988 [ 596.840689][T13662] [ 597.071221][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.148287][ T5898] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 597.168534][ T5898] usb 7-1: device descriptor read/8, error -71 [ 597.278426][ T5898] usb usb7-port1: unable to enumerate USB device [ 597.318957][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 597.324966][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 597.343028][ T5866] usb 2-1: USB disconnect, device number 61 [ 597.388156][ T30] audit: type=1400 audit(1746259618.506:106922): avc: denied { write } for pid=13649 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 597.471958][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 597.478588][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 597.484915][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 597.491513][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 597.497990][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 597.504571][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 597.510845][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 597.517436][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 597.523895][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 597.530493][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 597.545448][ T912] usb 5-1: USB disconnect, device number 73 [ 597.868480][ T5862] usb 1-1: USB disconnect, device number 57 [ 598.781657][T13699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.839004][T13702] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 598.921129][ T30] audit: type=1326 audit(1746259620.046:106923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.6.2128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe37818e969 code=0x0 [ 598.956535][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 599.270984][ T5898] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 599.470288][ T5898] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.538533][ T5898] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.620822][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 599.637715][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 599.659267][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.675827][ T30] audit: type=1400 audit(1746259620.815:106924): avc: denied { read } for pid=13724 comm="syz.6.2132" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 599.708558][ T5898] usb 5-1: config 0 descriptor?? [ 599.738276][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 599.749629][ T30] audit: type=1400 audit(1746259620.845:106925): avc: denied { connect } for pid=13724 comm="syz.6.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 599.928640][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 600.055201][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 600.067883][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024 [ 600.080540][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 600.089620][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.946637][ T9] usb 1-1: config 0 descriptor?? [ 601.040021][T13718] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.094731][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 601.128587][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 601.142487][ T5898] usb 5-1: USB disconnect, device number 74 [ 601.329833][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 601.788199][T13750] CUSE: unknown device info "ÿ" [ 601.793413][T13750] CUSE: unknown device info "€" [ 601.798560][T13750] CUSE: DEVNAME unspecified [ 601.909197][ T5898] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 601.910746][ T30] audit: type=1400 audit(1746259623.045:106926): avc: denied { setopt } for pid=13717 comm="syz.0.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.937500][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.951886][ T912] usb 1-1: USB disconnect, device number 58 [ 603.022182][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2141'. [ 603.032955][ T5862] IPVS: starting estimator thread 0... [ 603.068956][T13756] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 603.132991][ T5898] usb 5-1: device descriptor read/64, error -71 [ 603.363090][T13760] IPVS: using max 78 ests per chain, 187200 per kthread [ 603.808767][ T5898] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 603.988829][ T5898] usb 5-1: device descriptor read/64, error -71 [ 604.107233][ T81] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 604.116509][ T5898] usb usb5-port1: attempt power cycle [ 604.158204][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 604.183077][T13790] macvlan0: entered promiscuous mode [ 604.264756][T13790] batadv_slave_1: entered promiscuous mode [ 604.276748][ T30] audit: type=1400 audit(1746259625.415:106927): avc: denied { listen } for pid=13789 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 604.350310][ T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.402621][ T81] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 604.432619][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.466826][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 604.478572][ T81] usb 1-1: config 0 descriptor?? [ 604.484164][ T5898] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 604.484897][ T30] audit: type=1400 audit(1746259625.605:106928): avc: denied { setopt } for pid=13799 comm="syz.2.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.635470][ T5898] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 604.759612][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 604.789079][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 604.809052][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 604.869813][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.903492][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.935030][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'. [ 604.946578][ T81] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 604.957488][ T30] audit: type=1400 audit(1746259626.095:106929): avc: denied { create } for pid=13815 comm="syz.2.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 604.970450][ T5898] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 605.003904][ T81] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input57 [ 605.038678][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.079568][ T30] audit: type=1400 audit(1746259626.225:106930): avc: denied { map } for pid=13817 comm="syz.6.2153" path="socket:[43762]" dev="sockfs" ino=43762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 605.202954][ T5898] usb 5-1: Product: syz [ 605.208888][ T5898] usb 5-1: Manufacturer: syz [ 605.213644][ T5898] usb 5-1: SerialNumber: syz [ 605.225945][ T5898] usb 5-1: config 0 descriptor?? [ 605.237199][ T5898] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 605.537494][ T5862] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 605.899054][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 605.992746][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.136446][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.253793][ T5862] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.342426][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.425928][ T5862] usb 3-1: Product: syz [ 606.455625][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.465376][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.504995][ T5862] usb 3-1: Manufacturer: syz [ 606.554496][T13833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.564455][T13833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.583027][ T5862] usb 3-1: SerialNumber: syz [ 606.657091][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.666474][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.171966][ T5862] usb 3-1: 0:2 : does not exist [ 608.269501][ T5866] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 608.436756][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.894874][ T3523] Bluetooth: hci5: Frame reassembly failed (-84) [ 609.205536][ T81] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 609.219967][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.231315][ T5898] imon:send_packet: packet tx failed (-71) [ 609.241012][ T5866] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 609.251404][ T5898] imon 5-1:0.0: panel buttons/knobs setup failed [ 609.258370][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.280025][ T5866] usb 7-1: config 0 descriptor?? [ 609.319646][ T5898] rc_core: IR keymap rc-imon-pad not found [ 609.330554][ T5898] Registered IR keymap rc-empty [ 609.335728][ T912] usb 3-1: USB disconnect, device number 63 [ 609.349524][ T5898] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 609.369383][ T5898] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 609.389663][ T5898] imon:send_packet: packet tx failed (-71) [ 609.433417][ T5898] imon 5-1:0.0: remote input dev register failed [ 609.441255][ T5898] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 609.518544][ T9] usb 1-1: USB disconnect, device number 59 [ 609.550683][ T5898] imon 5-1:0.0: unable to initialize intf0, err 0 [ 609.577831][ T5898] imon:imon_probe: failed to initialize context! [ 609.614874][ T5898] imon 5-1:0.0: unable to register, err -19 [ 609.684704][ T5898] usb 5-1: USB disconnect, device number 78 [ 610.040674][T13861] ubi31: attaching mtd0 [ 610.064303][T13861] ubi31: scanning is finished [ 610.069066][T13861] ubi31: empty MTD device detected [ 610.540376][ T5830] Bluetooth: hci5: command 0xfc11 tx timeout [ 610.542819][ T912] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 610.558032][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 610.620770][T13861] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 610.759648][ T912] usb 3-1: Using ep0 maxpacket: 8 [ 610.780399][ T912] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 610.808888][ T912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.826914][ T5866] usbhid 7-1:0.0: can't add hid device: -71 [ 610.835219][ T5866] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 610.846136][ T5866] usb 7-1: USB disconnect, device number 6 [ 610.888398][ T912] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 610.892607][T13876] openvswitch: netlink: Missing key (keys=40, expected=80) [ 610.916503][ T912] usb 3-1: config 0 has no interface number 0 [ 610.930397][ T912] usb 3-1: config 0 interface 33 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.112797][ T912] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 611.129593][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.145645][ T912] usb 3-1: Product: syz [ 611.289768][ T5898] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 611.372067][ T30] audit: type=1400 audit(1746259632.524:106931): avc: denied { read } for pid=13888 comm="syz.6.2165" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 611.559626][ T912] usb 3-1: Manufacturer: syz [ 611.564422][ T912] usb 3-1: SerialNumber: syz [ 611.574371][ T912] usb 3-1: config 0 descriptor?? [ 611.579385][ T5898] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 611.579527][ T30] audit: type=1400 audit(1746259632.554:106932): avc: denied { open } for pid=13888 comm="syz.6.2165" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 611.599469][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.631221][ T912] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 611.667704][T13889] bio_check_eod: 2 callbacks suppressed [ 611.667719][T13889] syz.6.2165: attempt to access beyond end of device [ 611.667719][T13889] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 611.669405][ T5898] usb 1-1: config 0 descriptor?? [ 611.709760][ T30] audit: type=1400 audit(1746259632.614:106933): avc: denied { ioctl } for pid=13888 comm="syz.6.2165" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 611.738944][ T5898] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 611.757501][T13889] binder: 13888:13889 ioctl c0306201 200000000180 returned -14 [ 611.784632][ T5898] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 611.868317][ T30] audit: type=1400 audit(1746259632.794:106934): avc: denied { read } for pid=13888 comm="syz.6.2165" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 611.897788][ T2323] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 611.909926][ T30] audit: type=1400 audit(1746259632.794:106935): avc: denied { open } for pid=13888 comm="syz.6.2165" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 611.935332][ T2323] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 611.948052][ T30] audit: type=1400 audit(1746259632.904:106936): avc: denied { ioctl } for pid=13888 comm="syz.6.2165" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 612.030036][ T30] audit: type=1400 audit(1746259632.964:106937): avc: denied { create } for pid=13893 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 612.062959][T11216] usb 1-1: USB disconnect, device number 60 [ 612.072541][ T5898] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 612.113429][ T30] audit: type=1400 audit(1746259633.084:106938): avc: denied { firmware_load } for pid=2323 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 612.114354][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2168'. [ 612.163506][ T81] usb 3-1: USB disconnect, device number 64 [ 612.209608][T13910] netlink: 'syz.4.2170': attribute type 23 has an invalid length. [ 612.250155][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 612.262696][ T5898] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 612.277061][ T5898] usb 2-1: config 0 has no interface number 0 [ 612.283546][T13865] Bluetooth: hci3: unexpected event for opcode 0x200f [ 612.293621][ T5898] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 612.307974][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 612.321339][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.330403][ T5898] usb 2-1: Product: syz [ 612.334572][ T5898] usb 2-1: Manufacturer: syz [ 612.339161][ T5898] usb 2-1: SerialNumber: syz [ 612.357050][ T5898] usb 2-1: config 0 descriptor?? [ 612.372762][ T5898] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 612.583506][ T30] audit: type=1400 audit(1746259633.724:106939): avc: denied { connect } for pid=13893 comm="syz.1.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 613.298927][ T30] audit: type=1400 audit(1746259633.754:106940): avc: denied { create } for pid=13917 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 614.778273][ T912] usb 2-1: USB disconnect, device number 62 [ 614.918113][T13985] FAULT_INJECTION: forcing a failure. [ 614.918113][T13985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.937666][T13985] CPU: 1 UID: 0 PID: 13985 Comm: syz.1.2179 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 614.937694][T13985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 614.937704][T13985] Call Trace: [ 614.937710][T13985] [ 614.937717][T13985] dump_stack_lvl+0x16c/0x1f0 [ 614.937743][T13985] should_fail_ex+0x512/0x640 [ 614.937768][T13985] _copy_from_iter+0x2a4/0x15b0 [ 614.937793][T13985] ? __alloc_skb+0x200/0x380 [ 614.937821][T13985] ? __pfx__copy_from_iter+0x10/0x10 [ 614.937841][T13985] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 614.937862][T13985] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 614.937892][T13985] netlink_sendmsg+0x829/0xdd0 [ 614.937916][T13985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.937944][T13985] ____sys_sendmsg+0xa95/0xc70 [ 614.937966][T13985] ? copy_msghdr_from_user+0x10a/0x160 [ 614.937982][T13985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.938014][T13985] ___sys_sendmsg+0x134/0x1d0 [ 614.938032][T13985] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.938078][T13985] __sys_sendmsg+0x16d/0x220 [ 614.938095][T13985] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.938118][T13985] ? rcu_is_watching+0x12/0xc0 [ 614.938145][T13985] do_syscall_64+0xcd/0x260 [ 614.938168][T13985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.938185][T13985] RIP: 0033:0x7f0518d8e969 [ 614.938200][T13985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.938215][T13985] RSP: 002b:00007f0519b93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.938231][T13985] RAX: ffffffffffffffda RBX: 00007f0518fb5fa0 RCX: 00007f0518d8e969 [ 614.938243][T13985] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 614.938253][T13985] RBP: 00007f0519b93090 R08: 0000000000000000 R09: 0000000000000000 [ 614.938263][T13985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.938273][T13985] R13: 0000000000000000 R14: 00007f0518fb5fa0 R15: 00007ffeaf898ff8 [ 614.938295][T13985] [ 615.301169][T13987] netlink: 'syz.6.2181': attribute type 23 has an invalid length. [ 615.558998][T13995] kAFS: unable to lookup cell ' [ 615.558998][T13995] >.€·?](<â›' [ 615.558998][T13995] Ø¡—§P!×0Ä^O¹œ[àÆZéøvMTölÆAèÉß/H=9.äÜb>9ðF9ºÙ*‰ŒmªTS¶û' [ 615.666161][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 616.020445][ T912] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 616.510241][ T912] usb 2-1: Using ep0 maxpacket: 8 [ 616.516694][ T912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.545005][ T912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 616.656271][ T912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.816282][ T912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.867607][ T912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.907614][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.939465][T14023] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 616.968194][T14023] netlink: 'syz.6.2192': attribute type 1 has an invalid length. [ 617.160442][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 617.360642][ T912] usb 2-1: GET_CAPABILITIES returned 0 [ 617.366137][ T912] usbtmc 2-1:16.0: can't read capabilities [ 617.560933][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 617.581273][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 617.615522][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.660678][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.678921][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.688039][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.697109][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.706150][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.715188][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.724261][ T9] usb 5-1: SerialNumber: syz [ 617.724927][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.738088][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.747166][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.756230][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.765294][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.774354][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.783418][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.792492][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.801553][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.810609][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.819664][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 617.839049][ T9] usb 5-1: bad CDC descriptors [ 617.869354][ T5866] usb 2-1: USB disconnect, device number 63 [ 617.910235][T14029] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 617.936335][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.957275][T14029] CIFS mount error: No usable UNC path provided in device string! [ 617.957275][T14029] [ 617.968816][T14029] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 617.978892][T14029] FAULT_INJECTION: forcing a failure. [ 617.978892][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.998795][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.6.2195 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 617.998817][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 617.998827][T14029] Call Trace: [ 617.998833][T14029] [ 617.998840][T14029] dump_stack_lvl+0x16c/0x1f0 [ 617.998865][T14029] should_fail_ex+0x512/0x640 [ 617.998889][T14029] _copy_to_user+0x32/0xd0 [ 617.998913][T14029] simple_read_from_buffer+0xcb/0x170 [ 617.998940][T14029] proc_fail_nth_read+0x197/0x270 [ 617.998964][T14029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.998990][T14029] ? rw_verify_area+0xcf/0x680 [ 617.999011][T14029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.999035][T14029] vfs_read+0x1de/0xc70 [ 617.999061][T14029] ? __pfx___mutex_lock+0x10/0x10 [ 617.999083][T14029] ? __pfx_vfs_read+0x10/0x10 [ 617.999112][T14029] ? __fget_files+0x20e/0x3c0 [ 617.999145][T14029] ksys_read+0x12a/0x240 [ 617.999168][T14029] ? __pfx_ksys_read+0x10/0x10 [ 617.999189][T14029] ? rcu_is_watching+0x12/0xc0 [ 617.999217][T14029] do_syscall_64+0xcd/0x260 [ 617.999239][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.999257][T14029] RIP: 0033:0x7fe37818d37c [ 617.999271][T14029] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 617.999286][T14029] RSP: 002b:00007fe378fd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.999302][T14029] RAX: ffffffffffffffda RBX: 00007fe3783b5fa0 RCX: 00007fe37818d37c [ 617.999313][T14029] RDX: 000000000000000f RSI: 00007fe378fd70a0 RDI: 0000000000000003 [ 617.999323][T14029] RBP: 00007fe378fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 617.999332][T14029] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000002 [ 617.999342][T14029] R13: 0000000000000000 R14: 00007fe3783b5fa0 R15: 00007ffea67b8c28 [ 617.999365][T14029] [ 618.185755][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.245374][ T9] usb 5-1: USB disconnect, device number 79 [ 618.306403][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2197'. [ 618.316658][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 618.316672][ T30] audit: type=1400 audit(1746259639.453:106951): avc: denied { create } for pid=14034 comm="syz.6.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 618.404384][ T30] audit: type=1400 audit(1746259639.453:106952): avc: denied { write } for pid=14034 comm="syz.6.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 618.542963][T14035] netlink: 788 bytes leftover after parsing attributes in process `syz.6.2197'. [ 619.025141][ T30] audit: type=1400 audit(1746259640.173:106953): avc: denied { bind } for pid=14048 comm="syz.0.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 619.060748][ T30] audit: type=1400 audit(1746259640.193:106954): avc: denied { write } for pid=14048 comm="syz.0.2202" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 619.060790][ T30] audit: type=1400 audit(1746259640.193:106955): avc: denied { open } for pid=14048 comm="syz.0.2202" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 619.060826][ T30] audit: type=1400 audit(1746259640.193:106956): avc: denied { ioctl } for pid=14048 comm="syz.0.2202" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 619.060864][ T30] audit: type=1400 audit(1746259640.203:106957): avc: denied { append } for pid=14048 comm="syz.0.2202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 619.442096][ T30] audit: type=1400 audit(1746259640.583:106958): avc: denied { read write } for pid=14065 comm="syz.1.2206" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 619.467678][ T30] audit: type=1400 audit(1746259640.593:106959): avc: denied { open } for pid=14065 comm="syz.1.2206" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 619.578920][ T30] audit: type=1400 audit(1746259640.643:106960): avc: denied { write } for pid=14057 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 619.607577][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 619.730699][ T5908] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 619.904770][ T5908] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.921450][ T5908] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.933645][ T5908] usb 7-1: config 0 interface 0 has no altsetting 0 [ 619.941179][ T5908] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 619.950322][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.967149][ T5908] usb 7-1: config 0 descriptor?? [ 620.460806][ T5866] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 620.530544][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'. [ 620.588339][T14091] bridge_slave_1: left allmulticast mode [ 620.596298][T14091] bridge_slave_1: left promiscuous mode [ 621.029702][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.068660][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 621.076949][T14091] bridge_slave_0: left allmulticast mode [ 621.083310][T14091] bridge_slave_0: left promiscuous mode [ 621.089074][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.101730][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.102412][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.119940][ T5866] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 621.139772][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.161047][ T5866] usb 1-1: config 0 descriptor?? [ 621.516663][T14107] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 621.525733][T14107] pim6reg0: persist disabled [ 621.604816][ T5866] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2 [ 621.627978][T14103] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 621.628275][T11216] IPVS: starting estimator thread 0... [ 621.642014][ T5866] ft260 0003:0403:6030.000E: failed to parse HID [ 621.648564][ T5866] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -22 [ 621.763743][T14115] IPVS: using max 77 ests per chain, 184800 per kthread [ 621.896686][T14089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.915292][T14089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.930184][T11216] usb 1-1: USB disconnect, device number 61 [ 622.054372][T14121] netlink: 'syz.2.2220': attribute type 3 has an invalid length. [ 622.276161][ T5908] usbhid 7-1:0.0: can't add hid device: -71 [ 622.344756][ T5908] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 622.454171][ T5908] usb 7-1: USB disconnect, device number 7 [ 622.782620][T14135] syz.4.2225 (14135): drop_caches: 2 [ 622.903678][T14135] syz.4.2225 (14135): drop_caches: 2 [ 623.923251][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.642737][T14167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.741913][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 624.801325][ T5908] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 624.891605][ T9] usb 7-1: device descriptor read/64, error -71 [ 625.151546][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 625.301338][ T9] usb 7-1: device descriptor read/64, error -71 [ 625.341307][ T5908] usb 1-1: device descriptor read/64, error -71 [ 625.422802][ T9] usb usb7-port1: attempt power cycle [ 625.462109][T14171] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 625.586994][ T5908] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 625.731565][ T5908] usb 1-1: device descriptor read/64, error -71 [ 625.854555][ T5908] usb usb1-port1: attempt power cycle [ 626.143956][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 626.201248][ T9] usb 7-1: device descriptor read/8, error -71 [ 626.441451][ T5908] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 626.451517][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 626.472106][ T5908] usb 1-1: device descriptor read/8, error -71 [ 626.485698][ T9] usb 7-1: device descriptor read/8, error -71 [ 626.700484][ T9] usb usb7-port1: unable to enumerate USB device [ 626.868688][ T5908] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 626.891264][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 626.891275][ T30] audit: type=1400 audit(1746259648.032:106982): avc: denied { bind } for pid=14188 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 627.029603][ T30] audit: type=1400 audit(1746259648.062:106983): avc: denied { listen } for pid=14188 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 627.051818][ T30] audit: type=1400 audit(1746259648.062:106984): avc: denied { accept } for pid=14188 comm="syz.0.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 627.091162][ T5908] usb 1-1: device not accepting address 65, error -71 [ 627.107508][ T5908] usb usb1-port1: unable to enumerate USB device [ 627.296421][ T30] audit: type=1400 audit(1746259648.442:106985): avc: denied { create } for pid=14193 comm="syz.1.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 627.405687][ T30] audit: type=1400 audit(1746259648.552:106986): avc: denied { append } for pid=14193 comm="syz.1.2242" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 627.439029][ T30] audit: type=1400 audit(1746259648.552:106987): avc: denied { ioctl } for pid=14193 comm="syz.1.2242" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 627.464682][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.474146][ T30] audit: type=1804 audit(1746259648.612:106988): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2242" name="file0" dev="ramfs" ino=45804 res=1 errno=0 [ 627.496400][ T30] audit: type=1804 audit(1746259648.612:106989): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2242" name="file0" dev="ramfs" ino=45804 res=1 errno=0 [ 627.800498][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2244'. [ 627.902915][T14207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.811810][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 628.961745][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 628.968881][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.983197][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.995424][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 629.007482][ T5866] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 629.016200][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 629.028942][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.046905][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 629.053265][T14219] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 629.056340][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 629.079609][ T30] audit: type=1400 audit(1746259650.212:106990): avc: denied { mount } for pid=14218 comm="syz.4.2252" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 629.103209][ T24] usb 2-1: Manufacturer: syz [ 629.109740][ T24] usb 2-1: config 0 descriptor?? [ 629.193563][ T5866] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 629.203630][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.215044][ T5866] usb 1-1: config 0 descriptor?? [ 629.226904][ T5866] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 629.234871][ T5866] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 629.327239][ T30] audit: type=1400 audit(1746259650.462:106991): avc: denied { write } for pid=14222 comm="syz.6.2255" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 629.351040][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.422314][ T24] rc_core: IR keymap rc-hauppauge not found [ 629.428207][ T9] usb 1-1: USB disconnect, device number 66 [ 629.432572][ T24] Registered IR keymap rc-empty [ 629.439746][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.471863][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.493066][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 629.506799][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 629.522330][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.546019][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.572057][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.601902][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.631849][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.656506][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.685776][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.712004][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.741936][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.772065][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 629.802695][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 629.811745][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 629.854578][ T9] usb 2-1: USB disconnect, device number 64 [ 631.918234][ T30] audit: type=1400 audit(1746259653.062:106992): avc: denied { create } for pid=14267 comm="syz.0.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 633.298719][ T30] audit: type=1400 audit(1746259654.441:106993): avc: denied { create } for pid=14274 comm="syz.2.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 633.407409][ T30] audit: type=1400 audit(1746259654.461:106994): avc: denied { connect } for pid=14274 comm="syz.2.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 633.889794][ T30] audit: type=1400 audit(1746259655.031:106995): avc: denied { create } for pid=14299 comm="syz.6.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 634.099261][ T30] audit: type=1400 audit(1746259655.091:106996): avc: denied { ioctl } for pid=14299 comm="syz.6.2278" path="socket:[46232]" dev="sockfs" ino=46232 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 635.084916][ T3558] Bluetooth: hci5: Frame reassembly failed (-84) [ 635.243143][T14312] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 635.294298][ T5866] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 635.369866][ T30] audit: type=1400 audit(1746259656.511:106997): avc: denied { open } for pid=14311 comm="syz.2.2282" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 635.475279][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.493825][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 635.528879][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2284'. [ 635.541596][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.555286][ T5866] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 635.605097][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.652053][ T5866] usb 2-1: config 0 descriptor?? [ 635.920952][ T30] audit: type=1400 audit(1746259657.061:106998): avc: denied { connect } for pid=14327 comm="syz.6.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.942589][ T30] audit: type=1400 audit(1746259657.091:106999): avc: denied { setopt } for pid=14327 comm="syz.6.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.375487][ T30] audit: type=1400 audit(1746259657.091:107000): avc: denied { write } for pid=14327 comm="syz.6.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 636.570042][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 636.580394][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 636.685922][ T5866] usb 2-1: USB disconnect, device number 65 [ 637.122897][ T5128] Bluetooth: hci5: command 0xfc11 tx timeout [ 637.131082][T13865] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 637.175453][ T5862] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 637.247915][ T30] audit: type=1400 audit(1746259658.391:107001): avc: denied { listen } for pid=14352 comm="syz.6.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 637.364684][ T5862] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.380142][ T5862] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.421574][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 637.428568][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 637.437785][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.458547][ T5862] usb 5-1: config 0 descriptor?? [ 637.492128][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2298'. [ 637.508757][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2298'. [ 637.525555][T14361] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 637.550374][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 637.742240][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.792872][ T24] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 637.964451][ T24] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 637.980472][ T24] usb 1-1: config 0 has no interface number 0 [ 638.003522][ T24] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 638.013195][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.021417][ T24] usb 1-1: Product: syz [ 638.025685][ T24] usb 1-1: Manufacturer: syz [ 638.030354][ T24] usb 1-1: SerialNumber: syz [ 638.037411][ T24] usb 1-1: config 0 descriptor?? [ 638.050172][ T24] net1080 1-1:0.183: probe with driver net1080 failed with error -22 [ 638.248432][ T24] usb 1-1: USB disconnect, device number 67 [ 638.469999][T13865] Bluetooth: hci2: SCO packet for unknown connection handle 3840 [ 638.655150][T14370] sp0: Synchronizing with TNC [ 639.087597][ T30] audit: type=1400 audit(1746259660.161:107002): avc: denied { ioctl } for pid=14376 comm="syz.0.2304" path="socket:[46377]" dev="sockfs" ino=46377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 639.269564][ T5862] usbhid 5-1:0.0: can't add hid device: -71 [ 639.308128][ T5862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 639.343747][ T5862] usb 5-1: USB disconnect, device number 80 [ 639.369340][ T30] audit: type=1400 audit(1746259660.511:107003): avc: denied { create } for pid=14381 comm="syz.4.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 639.461878][ T30] audit: type=1400 audit(1746259660.511:107004): avc: denied { accept } for pid=14381 comm="syz.4.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 639.548504][ T30] audit: type=1400 audit(1746259660.511:107005): avc: denied { write } for pid=14381 comm="syz.4.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 639.643376][ T30] audit: type=1400 audit(1746259660.511:107006): avc: denied { read } for pid=14381 comm="syz.4.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 639.664361][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 639.846394][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.858390][ T9] usb 2-1: New USB device found, idVendor=dd6c, idProduct=8554, bcdDevice=f3.71 [ 639.870632][ T9] usb 2-1: New USB device strings: Mfr=17, Product=217, SerialNumber=97 [ 639.975607][ T9] usb 2-1: Product: syz [ 640.333588][ T9] usb 2-1: Manufacturer: syz [ 640.338549][ T9] usb 2-1: SerialNumber: syz [ 640.354208][ T9] usb 2-1: config 0 descriptor?? [ 640.385791][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 640.598449][ T30] audit: type=1400 audit(1746259661.741:107007): avc: denied { write } for pid=14383 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.766113][ T30] audit: type=1400 audit(1746259661.911:107008): avc: denied { getopt } for pid=14401 comm="syz.0.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 640.904296][ T30] audit: type=1400 audit(1746259662.041:107009): avc: denied { ioctl } for pid=14399 comm="syz.6.2313" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 640.982083][T14417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.991048][T14417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.086392][T14420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.293244][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 641.357255][ T30] audit: type=1400 audit(1746259662.500:107010): avc: denied { set_context_mgr } for pid=14383 comm="syz.1.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 641.379368][T14423] binder: 14383:14423 ioctl 80189439 2000000001c0 returned -22 [ 641.389670][T14423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.424744][T14423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.465099][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.489355][T14423] overlayfs: missing 'lowerdir' [ 641.499607][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.514387][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 641.526219][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 641.536207][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.551142][ T24] usb 1-1: config 0 descriptor?? [ 642.820403][ T5898] usb 2-1: USB disconnect, device number 66 [ 643.193983][ T5866] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 643.530428][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 644.000143][ T5866] usb 5-1: config 0 has no interfaces? [ 644.422154][ T5866] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 644.482378][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 644.580544][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 644.589264][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.622794][ T24] usb 1-1: USB disconnect, device number 68 [ 644.634404][ T5866] usb 5-1: config 0 descriptor?? [ 644.725257][ T5908] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 644.868606][ T5866] usb 5-1: USB disconnect, device number 81 [ 644.920938][ T5908] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.931570][ T5908] usb 2-1: config 0 has no interface number 0 [ 644.945406][ T5908] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 644.954905][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.974477][ T5908] usb 2-1: config 0 descriptor?? [ 644.991636][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 644.991650][ T30] audit: type=1326 audit(1746259666.130:107014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.2326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84998e969 code=0x0 [ 645.023302][ T5908] usb 2-1: selecting invalid altsetting 1 [ 645.030030][ T5908] dvb_ttusb_budget: ttusb_init_controller: error [ 645.037233][ T5908] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 645.153813][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 645.200609][ T5908] DVB: Unable to find symbol cx22700_attach() [ 645.233522][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 645.263106][ T5908] DVB: Unable to find symbol tda10046_attach() [ 645.272725][T14466] macsec0: left allmulticast mode [ 645.275617][ T5908] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 645.284109][T14466] veth1_macvtap: left allmulticast mode [ 645.291420][T14466] macsec0: left promiscuous mode [ 645.296920][T14466] bridge0: port 3(macsec0) entered disabled state [ 645.314735][T14466] bridge_slave_1: left allmulticast mode [ 645.326032][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 645.330689][T14466] bridge_slave_1: left promiscuous mode [ 645.333146][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 645.337424][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.357193][ T24] usb 1-1: config 0 has no interface number 0 [ 645.357476][T14466] bridge_slave_0: left allmulticast mode [ 645.370130][T14466] bridge_slave_0: left promiscuous mode [ 645.376109][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.391940][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 645.410567][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.419412][ T24] usb 1-1: Product: syz [ 645.424984][ T24] usb 1-1: Manufacturer: syz [ 645.429701][ T24] usb 1-1: SerialNumber: syz [ 645.450393][ T24] usb 1-1: config 0 descriptor?? [ 645.460648][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 646.088098][ T3523] Bluetooth: hci5: Frame reassembly failed (-84) [ 646.104490][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 646.133169][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 646.263866][ T5908] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 646.435438][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.446366][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.456322][ T5908] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 646.465474][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.485739][ T5908] usb 5-1: config 0 descriptor?? [ 646.947611][ T9] usb 2-1: USB disconnect, device number 67 [ 647.221938][T14485] overlayfs: failed to resolve './file1': -2 [ 647.736911][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 647.746275][ T24] usb 1-1: USB disconnect, device number 69 [ 647.757872][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 647.773996][T13865] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 648.157479][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 648.204538][ T24] quatech2 1-1:0.51: device disconnected [ 648.523460][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 648.552230][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 648.599327][ T5908] usb 5-1: USB disconnect, device number 82 [ 648.657735][T14502] binder: 14501:14502 ioctl c0306201 2000000001c0 returned -22 [ 648.834999][ T30] audit: type=1400 audit(1746259669.980:107015): avc: denied { setopt } for pid=14507 comm="syz.6.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.858196][ T30] audit: type=1400 audit(1746259670.000:107016): avc: denied { write } for pid=14507 comm="syz.6.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.884553][T12903] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 649.022886][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 649.094299][T12903] usb 1-1: Using ep0 maxpacket: 16 [ 649.109743][T12903] usb 1-1: config 0 has no interfaces? [ 649.116323][T12903] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.128103][T12903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.174833][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 649.246335][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 649.341350][T12903] usb 1-1: config 0 descriptor?? [ 649.403270][ T24] usb 2-1: config 0 has no interface number 0 [ 649.469472][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 649.482920][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 649.501343][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 649.510796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 649.522899][ T24] usb 2-1: Product: syz [ 649.534677][ T5908] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 649.542555][ T24] usb 2-1: SerialNumber: syz [ 649.552376][ T24] usb 2-1: config 0 descriptor?? [ 649.561219][ T24] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 649.570282][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input61 [ 649.682191][ T10] usb 1-1: USB disconnect, device number 70 [ 649.697013][ T5908] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 649.702524][T14522] veth0: entered promiscuous mode [ 649.727333][ T5908] usb 7-1: config 0 has no interface number 0 [ 649.728495][T14519] veth0: left promiscuous mode [ 649.733459][ T5908] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 649.757938][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.776652][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 649.806087][ T5908] usb 7-1: config 0 descriptor?? [ 649.836310][ T5908] usb 7-1: selecting invalid altsetting 1 [ 649.849900][ T5908] dvb_ttusb_budget: ttusb_init_controller: error [ 649.857209][ T5908] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 649.917382][ T5908] DVB: Unable to find symbol cx22700_attach() [ 649.964441][ T5908] DVB: Unable to find symbol tda10046_attach() [ 649.970973][ T5908] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 649.985037][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 649.992389][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 649.999544][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 650.006981][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 650.024284][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 650.032172][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 650.039436][ T24] usb 2-1: USB disconnect, device number 68 [ 650.045408][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 650.045431][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 650.073480][ T24] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 650.084525][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 650.256935][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 650.266684][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 650.279220][ T9] usb 5-1: config 0 has no interface number 0 [ 650.300549][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 650.328460][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.359301][ T9] usb 5-1: Product: syz [ 650.370741][ T9] usb 5-1: Manufacturer: syz [ 650.386898][ T9] usb 5-1: SerialNumber: syz [ 650.403945][ T9] usb 5-1: config 0 descriptor?? [ 650.437073][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 651.163299][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 651.188956][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 651.578927][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 651.579228][ T24] usb 5-1: USB disconnect, device number 83 [ 651.618596][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 651.637408][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 651.650293][ T24] quatech2 5-1:0.51: device disconnected [ 652.429359][ T9] usb 7-1: USB disconnect, device number 12 [ 653.357038][ T3523] Bluetooth: hci5: Frame reassembly failed (-84) [ 653.476542][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 653.484133][ T30] audit: type=1400 audit(1746259674.569:107017): avc: denied { create } for pid=14567 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 653.582685][T14571] random: crng reseeded on system resumption [ 653.591314][ T30] audit: type=1400 audit(1746259674.719:107018): avc: denied { append } for pid=14567 comm="syz.0.2358" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 653.595890][T14570] SELinux: failed to load policy [ 653.614969][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 653.646420][ T30] audit: type=1400 audit(1746259674.719:107019): avc: denied { open } for pid=14567 comm="syz.0.2358" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 653.670820][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 653.676952][ T30] audit: type=1400 audit(1746259674.739:107020): avc: denied { load_policy } for pid=14569 comm="syz.6.2359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 653.699568][ T10] usb 5-1: config 0 has no interfaces? [ 653.705322][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.714541][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.732494][ T10] usb 5-1: config 0 descriptor?? [ 653.786263][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.831308][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.843801][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 653.854389][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.914450][ T24] usb 2-1: config 0 descriptor?? [ 653.998328][ T10] usb 5-1: USB disconnect, device number 84 [ 655.364992][T13865] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 655.960358][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 655.976583][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 656.016081][ T24] usb 2-1: USB disconnect, device number 69 [ 656.185960][T14599] netlink: 'syz.1.2367': attribute type 10 has an invalid length. [ 656.193850][T14599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2367'. [ 656.203000][T14599] batadv0: entered promiscuous mode [ 656.208349][T14599] batadv0: entered allmulticast mode [ 656.217329][T14599] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 656.440343][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 656.650384][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.728706][ T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 656.825486][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.992778][ T10] usb 7-1: config 0 descriptor?? [ 657.527901][ T10] holtek_kbd 0003:04D9:A055.000F: item fetching failed at offset 1/3 [ 657.541072][ T10] holtek_kbd 0003:04D9:A055.000F: probe with driver holtek_kbd failed with error -22 [ 657.687208][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 657.772801][ T5866] usb 7-1: USB disconnect, device number 13 [ 657.857592][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.868884][ T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.880237][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 657.887371][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice=fd.ff [ 657.897466][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.907474][ T24] usb 2-1: config 0 descriptor?? [ 658.031949][T14628] kernel profiling enabled (shift: 7) [ 658.093130][ T5908] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 658.366125][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 658.381710][ T5908] usb 1-1: config 0 has no interfaces? [ 658.390791][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.401215][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.431670][ T5908] usb 1-1: config 0 descriptor?? [ 658.537827][ T30] audit: type=1400 audit(1746259679.668:107021): avc: denied { setopt } for pid=14632 comm="syz.2.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 658.921756][ T30] audit: type=1400 audit(1746259680.048:107022): avc: denied { create } for pid=14640 comm="syz.6.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 658.944791][ T5908] usb 1-1: USB disconnect, device number 71 [ 659.000722][ T30] audit: type=1400 audit(1746259680.048:107023): avc: denied { ioctl } for pid=14640 comm="syz.6.2378" path="socket:[48275]" dev="sockfs" ino=48275 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 660.294324][T14665] batman_adv: batadv0: Adding interface: dummy0 [ 660.306128][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 660.313445][T14665] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.364913][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 660.371700][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 660.379523][T14665] batman_adv: batadv0: Interface activated: dummy0 [ 660.388872][ T24] usb 2-1: USB disconnect, device number 70 [ 660.615467][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 660.648484][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 661.505834][ T10] usb 5-1: config 0 has no interface number 0 [ 661.525444][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 661.540522][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.559968][ T10] usb 5-1: Product: syz [ 661.566697][ T10] usb 5-1: Manufacturer: syz [ 661.571955][ T10] usb 5-1: SerialNumber: syz [ 661.577379][ T5862] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 662.409689][ T10] usb 5-1: config 0 descriptor?? [ 662.419686][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 662.565831][ T24] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 662.683061][ T5862] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 662.695253][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.716161][ T5862] usb 7-1: config 0 descriptor?? [ 662.742167][ T5862] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 662.751812][ T5862] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 663.002955][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 663.029211][ T5862] usb 7-1: USB disconnect, device number 14 [ 663.055276][ T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 663.171531][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.183610][ T30] audit: type=1400 audit(1746259684.228:107024): avc: denied { setopt } for pid=14682 comm="syz.2.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 663.313919][ T10] usb 5-1: USB disconnect, device number 85 [ 663.665212][ T24] usb 2-1: config 0 has no interface number 0 [ 663.672709][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 663.681826][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.692437][ T24] usb 2-1: config 0 descriptor?? [ 663.698075][ T24] usb 2-1: can't set config #0, error -71 [ 663.709191][ T24] usb 2-1: USB disconnect, device number 71 [ 664.045976][ T30] audit: type=1400 audit(1746259685.118:107025): avc: denied { append } for pid=14691 comm="syz.0.2392" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.446665][ T30] audit: type=1400 audit(1746259685.588:107026): avc: denied { write } for pid=14701 comm="syz.6.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 664.648929][ T5862] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 664.656905][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 664.876054][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 665.232711][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 665.248377][ T5862] usb 1-1: config 0 has no interfaces? [ 665.270303][ T5862] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 665.280415][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.290898][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.300242][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 665.310028][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 665.318879][ T5862] usb 1-1: config 0 descriptor?? [ 665.326774][ T10] usb 5-1: Manufacturer: syz [ 665.352207][ T10] usb 5-1: config 0 descriptor?? [ 665.437730][ T10] rc_core: IR keymap rc-hauppauge not found [ 665.446818][ T10] Registered IR keymap rc-empty [ 665.461631][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 665.487007][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 665.582042][ T10] usb 1-1: USB disconnect, device number 72 [ 667.104942][ T30] audit: type=1400 audit(1746259688.237:107027): avc: denied { create } for pid=14716 comm="syz.0.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 667.180676][ T10] usb 5-1: USB disconnect, device number 86 [ 667.280630][ T30] audit: type=1400 audit(1746259688.417:107028): avc: denied { read } for pid=14716 comm="syz.0.2399" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 667.302949][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.826390][ T30] audit: type=1400 audit(1746259688.417:107029): avc: denied { open } for pid=14716 comm="syz.0.2399" path="/481/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 667.946388][ T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 667.963599][ T30] audit: type=1400 audit(1746259689.087:107030): avc: denied { connect } for pid=14724 comm="syz.0.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 667.997697][ T30] audit: type=1400 audit(1746259689.097:107031): avc: denied { listen } for pid=14724 comm="syz.0.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 668.097869][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.105698][T14733] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 668.109295][ T24] usb 7-1: config 0 has no interface number 0 [ 668.117909][T14733] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 668.117932][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.2.2405 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 668.117955][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 668.117966][T14733] RIP: 0010:find_match+0x136/0x15d0 [ 668.117988][T14733] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 84 12 50 01 [ 668.118006][T14733] RSP: 0018:ffffc9000b986ba0 EFLAGS: 00010206 [ 668.118021][T14733] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000bda9000 [ 668.118033][T14733] RDX: 0000000000000018 RSI: ffffffff8a1c83bf RDI: 00000000000000c0 [ 668.127391][ T24] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 668.132450][T14733] RBP: ffffc9000b986ca8 R08: 0000000000000001 R09: 0000000000000000 [ 668.144800][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.154514][T14733] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888141b36737 [ 668.154532][T14733] R13: ffff888141b36720 R14: 1ffff92001730d83 R15: 0000000000000000 [ 668.154543][T14733] FS: 00007fb84a7d16c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 668.154559][T14733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.154570][T14733] CR2: 00002000000084c0 CR3: 000000002b15d000 CR4: 00000000003526f0 [ 668.154580][T14733] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 668.154591][T14733] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 668.154602][T14733] Call Trace: [ 668.154609][T14733] [ 668.154618][T14733] ? nf_hook+0x48d/0x780 [ 668.161940][ T24] usb 7-1: config 0 descriptor?? [ 668.179369][T14733] ? __pfx_find_match+0x10/0x10 [ 668.179395][T14733] ? ip6_mtu+0x1a3/0x4a0 [ 668.179410][T14733] rt6_nh_find_match+0xfa/0x1a0 [ 668.179426][T14733] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 668.179449][T14733] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 668.179468][T14733] __find_rr_leaf+0x6e5/0xe00 [ 668.179487][T14733] ? __pfx___find_rr_leaf+0x10/0x10 [ 668.179506][T14733] ? fib6_node_lookup+0x12d/0x190 [ 668.179522][T14733] ? __pfx_fib6_node_lookup+0x10/0x10 [ 668.179542][T14733] fib6_table_lookup+0x57c/0xa30 [ 668.179563][T14733] ? __pfx_fib6_table_lookup+0x10/0x10 [ 668.179585][T14733] ip6_pol_route+0x1cc/0x1230 [ 668.189358][ T24] usb 7-1: selecting invalid altsetting 1 [ 668.193580][T14733] ? __pfx_ip6_pol_route+0x10/0x10 [ 668.201987][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 668.210515][T14733] ? __lock_acquire+0x5ca/0x1ba0 [ 668.210551][T14733] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 668.210571][T14733] fib6_rule_lookup+0x386/0x720 [ 668.210588][T14733] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 668.210606][T14733] ? __lock_acquire+0x5ca/0x1ba0 [ 668.210635][T14733] ip6_route_output_flags+0x1d0/0x640 [ 668.210651][T14733] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 668.219418][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 668.226560][T14733] ? is_bpf_text_address+0x94/0x1a0 [ 668.226584][T14733] ? chacha_permute+0x5ae/0x6d0 [ 668.226604][T14733] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 668.226628][T14733] ? __lock_acquire+0x5ca/0x1ba0 [ 668.226658][T14733] ip6_dst_lookup_flow+0x99/0x1d0 [ 668.226676][T14733] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 668.226694][T14733] ? find_held_lock+0x2b/0x80 [ 668.226711][T14733] ? sctp_v6_get_dst+0x65e/0x2050 [ 668.226729][T14733] sctp_v6_get_dst+0x6a2/0x2050 [ 668.226748][T14733] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 668.226770][T14733] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 668.288622][ T24] DVB: Unable to find symbol cx22700_attach() [ 668.292401][T14733] ? lockdep_init_map_type+0x5c/0x280 [ 668.312740][ T24] DVB: Unable to find symbol tda10046_attach() [ 668.316777][T14733] ? sctp_transport_route+0x12f/0x350 [ 668.316801][T14733] sctp_transport_route+0x12f/0x350 [ 668.316818][T14733] sctp_assoc_add_peer+0x741/0x1550 [ 668.316847][T14733] sctp_connect_new_asoc+0x208/0x790 [ 668.316865][T14733] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 668.316885][T14733] ? selinux_sctp_bind_connect+0x112/0x2c0 [ 668.323194][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 668.327000][T14733] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 668.327032][T14733] sctp_sendmsg+0x15f9/0x1ee0 [ 668.327050][T14733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 668.327067][T14733] ? __pfx_sock_has_perm+0x10/0x10 [ 668.327089][T14733] ? __import_iovec+0x1c8/0x660 [ 668.327113][T14733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 668.327129][T14733] inet_sendmsg+0x119/0x140 [ 668.327152][T14733] ____sys_sendmsg+0x973/0xc70 [ 668.476433][ T5908] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 668.478812][T14733] ? copy_msghdr_from_user+0x10a/0x160 [ 668.589004][T14733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.594273][T14733] ? kfree+0x252/0x4d0 [ 668.598322][T14733] ? schedule+0x2d7/0x3a0 [ 668.602629][T14733] ___sys_sendmsg+0x134/0x1d0 [ 668.607289][T14733] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.612467][T14733] ? __pfx___might_resched+0x10/0x10 [ 668.617733][T14733] __sys_sendmmsg+0x200/0x420 [ 668.622385][T14733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 668.627571][T14733] ? __pfx_do_futex+0x10/0x10 [ 668.627580][ T5908] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 668.627605][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.632250][T14733] ? xfd_validate_state+0x5d/0x180 [ 668.632271][T14733] ? rcu_is_watching+0x12/0xc0 [ 668.632292][T14733] __x64_sys_sendmmsg+0x9c/0x100 [ 668.632308][T14733] ? lockdep_hardirqs_on+0x7c/0x110 [ 668.632330][T14733] do_syscall_64+0xcd/0x260 [ 668.632351][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.632367][T14733] RIP: 0033:0x7fb84998e969 [ 668.632382][T14733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.632399][T14733] RSP: 002b:00007fb84a7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 668.632417][T14733] RAX: ffffffffffffffda RBX: 00007fb849bb5fa0 RCX: 00007fb84998e969 [ 668.632430][T14733] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 668.648236][ T5908] usb 1-1: config 0 descriptor?? [ 668.649363][T14733] RBP: 00007fb849a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 668.659473][ T5908] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 668.664120][T14733] R10: 0000000024040040 R11: 0000000000000246 R12: 0000000000000000 [ 668.669821][ T5908] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 668.673759][T14733] R13: 0000000000000000 R14: 00007fb849bb5fa0 R15: 00007ffd5a7c0988 [ 668.771952][T14733] [ 668.774949][T14733] Modules linked in: [ 668.778895][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.785279][T14733] ---[ end trace 0000000000000000 ]--- [ 668.802947][T14733] RIP: 0010:find_match+0x136/0x15d0 [ 668.814399][T14733] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 84 12 50 01 [ 668.834676][T14733] RSP: 0018:ffffc9000b986ba0 EFLAGS: 00010206 [ 668.840937][T14733] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000bda9000 [ 668.849194][T14733] RDX: 0000000000000018 RSI: ffffffff8a1c83bf RDI: 00000000000000c0 [ 668.861761][T14733] RBP: ffffc9000b986ca8 R08: 0000000000000001 R09: 0000000000000000 [ 668.866426][ T10] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 668.870127][T14733] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888141b36737 [ 668.885354][T14733] R13: ffff888141b36720 R14: 1ffff92001730d83 R15: 0000000000000000 [ 668.893510][T14733] FS: 00007fb84a7d16c0(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 668.902469][T14733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.910361][T14733] CR2: 000000110c44d6dc CR3: 000000002b15d000 CR4: 00000000003526f0 [ 668.918492][T14733] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 668.926484][T14733] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 668.934450][T14733] Kernel panic - not syncing: Fatal exception [ 668.940685][T14733] Kernel Offset: disabled [ 668.944989][T14733] Rebooting in 86400 seconds..