last executing test programs: 17m6.340160643s ago: executing program 32 (id=55): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x60, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000080)) tkill(r2, 0x7) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) 17m0.739600959s ago: executing program 33 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x206c0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000557588b9d789bb4498078e70a263c448f9110d408980c9cd6248acb6d645034238831fbe8c7bb490", @ANYRES16=r3, @ANYRES64=r4, @ANYRESHEX=0x0], 0x50) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a11875d0e83101f02653a3", 0x12}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340)=[{0x5a717210, 0x6, 0x401}, {0xffffffffffffc6f9, 0x8, 0x3ff}], 0x2, 0x3, 0x6, 0x8, 0x0, 0xb}) 17m0.409816367s ago: executing program 34 (id=79): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)='`', 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}], 0x18, 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xc}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x11, r7, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r6, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r7}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x70, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x8, 0x0, 0x0, r1, 0x4, 0x8, 0x3}, [@NDA_IFINDEX={0x8, 0x8, r4}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xdb}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}]}, @NDA_PROTOCOL={0x5, 0xc, 0xb5}, @NDA_IFINDEX={0x8, 0x8, r7}, @NDA_NH_ID={0x8, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x40011) 16m56.269757908s ago: executing program 3 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 16m55.145513215s ago: executing program 3 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/189) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000001640)={0xffffffff, 0x7, 0x81, 0x28d, 0x7fff, 0x3}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x3, 0x9f, 0xd) listen(0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000002b40), &(0x7f0000000380)=0x30) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVdx:D0', 0x0) mount$9p_unix(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x10000, &(0x7f0000000580)=ANY=[@ANYBLOB="060000000000000069782c00"]) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x80, &(0x7f0000000080)) r3 = socket(0x24, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001880)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001840)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="ae9800d788ec66374e2ca84f", @ANYRES32=r6, @ANYRES64=0x0], 0x20) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) 16m54.049507383s ago: executing program 3 (id=94): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @private}, &(0x7f0000000140)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0xaf, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 16m53.952708363s ago: executing program 35 (id=94): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @private}, &(0x7f0000000140)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0xaf, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 16m36.313720496s ago: executing program 36 (id=125): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120004000000, 0x2, 0x500, 0x1, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x20000080000002}, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf25010000000500040001000000c6ff05000100000000000b000200000008001800ac1414bb06000300070000000500220001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000dbdf250000000000000000000000ac15b445afe3803079c86c43755e3791ab17166e02a4858c3250552d7844e865f0ff264091056374e8c0c706b7d319544837ac7dafd3ae872673ef59e6905779b067680367948ea49f2f", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008001e00feffffff"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 16m24.890436664s ago: executing program 37 (id=161): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x126e, 0x1, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba8000000", 0xe}, {&(0x7f0000000840)="45eac3016ad1ee522b4982d395a7407831236a1613f36716c51d274b9a927b671c6f132a550ca56209e4277caec437c0d8b3cbf60927bdd46c9d6548e9d6701c59b386d73c9b6f915c41d8c7afbd7e279730", 0x52}], 0x2, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x20040800) recvmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/10, 0xa}, {&(0x7f0000000540)=""/139, 0x8b}], 0x2}}], 0x1, 0x21, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r8, &(0x7f0000002080)={0x2020}, 0x2020) 15m53.539589835s ago: executing program 38 (id=247): syz_open_dev$amidi(&(0x7f0000000000), 0x39b437ca, 0x6b6500) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x40003}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000020605000000000000000000070000000500010006000000050005000200000005000400000000000900020073797a31fdf88656d1920000000011000300686173683a69702c6d61"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000005080)=[{0x0}, {&(0x7f0000003c80)=""/26, 0x1a}], 0x2}, 0xaf}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 15m25.990527035s ago: executing program 39 (id=331): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x4, 0x80000000000, 0x0, 0x200000000000}, {0x0, 0x10}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 14m55.594525147s ago: executing program 40 (id=431): setreuid(0xffffffffffffffff, 0xee01) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0xc0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x400, 0x40, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @remote, 0x7}, 0x1c) socket(0xa, 0x3, 0x87) 14m55.077078346s ago: executing program 4 (id=438): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x56, 0x1, 0x0, 0x2, @local, @empty, 0x40, 0x8000, 0x1, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x9c, 0x4a, 0x200, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, r3, 0xfffffff8}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r1}, &(0x7f0000000ec0), &(0x7f0000000f00)=r5}, 0x20) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}]}, 0x18}}, 0x4004080) r8 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xfffffff9, 0x1000003, 0x0, "dd0400", 0x6, 0x9}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 14m54.698485672s ago: executing program 4 (id=440): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0xc, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/170, 0xaa}, {&(0x7f0000001500)=""/206, 0xce}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x5}, 0xd1}, {{&(0x7f0000001680)=@un=@abs, 0x80, &(0x7f0000001a00)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000001700)=""/90, 0x5a}, {&(0x7f0000001780)=""/240, 0xf0}, {&(0x7f0000001880)=""/59, 0x3b}, {&(0x7f0000004300)=""/173, 0xad}, {&(0x7f0000001980)=""/107, 0x6b}], 0x6, &(0x7f0000001a80)=""/47, 0x2f}, 0x80000000}, {{&(0x7f0000003c00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c80)=""/230, 0xe6}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003dc0)=""/121, 0x79}, {&(0x7f0000003e40)=""/249, 0xf9}, {&(0x7f0000003f40)=""/121, 0x79}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/228, 0xe4}, {&(0x7f0000004100)=""/34, 0x22}], 0x6, &(0x7f0000003fc0)=""/23, 0x17}, 0x7d79}], 0x4, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000300)={[], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc02, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000240)) lseek(r6, 0xc4, 0x0) 14m53.49436084s ago: executing program 4 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xec0}, {0xfff2, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14m52.157136952s ago: executing program 0 (id=448): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) sched_setscheduler(0x0, 0x2, 0x0) io_uring_setup(0x177f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000500)={0x0, 0x9, 0x7fffffff, 0xc000000, 0xef41, 0x6, 0x8a}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000540)={0x100, 0x0, 0x1, 0x0, 0x1, "facfa4d6139dd6504498efef1b6a8c67920e71", 0x56, 0xcfd}) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$FIONREAD(r3, 0x541b, 0x0) 14m51.729574977s ago: executing program 4 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 14m50.935114876s ago: executing program 0 (id=452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x80) openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x0, 0x10, 0x8e, 0x81, 0xae18, 0xb, 0x6, 0x8, 0x5}, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) 14m50.60132576s ago: executing program 4 (id=453): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) syz_io_uring_setup(0x29b0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 14m49.182749152s ago: executing program 41 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 14m49.179096443s ago: executing program 4 (id=457): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000040)=0x1f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 14m48.787811834s ago: executing program 42 (id=457): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000040)=0x1f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 14m48.771705052s ago: executing program 0 (id=458): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaab1336501aa5da2}, 0x4) 14m47.047540836s ago: executing program 0 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 14m46.067832385s ago: executing program 0 (id=464): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0xa0042, 0x0) r0 = socket$inet6(0xa, 0x2, 0x5) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3e, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000096e493fa343d68b60000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x20000023896) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000600dd2d", @ANYRES16=r10, @ANYBLOB="010035bd7000fddbdf2521000000050020000300000009001f007068793100000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xf}, {0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xa8}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x18, 0xd, 0x0, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$sock(r11, &(0x7f0000000280)={&(0x7f0000000080)=@caif=@util={0x25, "74aa74a4ee53ded1bd53e54395fab887"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="49f450323a673f60268d3d2906dfac21ddb8083288b6a0121ecf8d8e4d8eef7ea956a8c88801b0b62ea0d70048541b4607cfdb1f167c1f65a4a80487263d4937a23b8ec6a98689b17f84149a2085155b69011bbd2a87eebb98005bea0d4b3371a6da24e7692c4926a4609e17223fa2e40100439a8a223c7f88d0a2a03df3c2b129b74f1caf89816b7d59b64741d0e6149f266ef504c8449bc8a7890d36f192b5a6c7da4fac741b1020f77452fe8a9e2b30692302285e3c8eb6deb1afba7ddaa30065df68a7d319fb2bdd4e0c696e0444d7df9100084a8033251971cf88528b", 0xdf}], 0x1}, 0x0) 14m45.782244226s ago: executing program 0 (id=467): syz_usb_connect(0x5, 0x27, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) r2 = syz_io_uring_setup(0x890, &(0x7f0000000540)={0x0, 0x8d22, 0x800, 0x1, 0x9f}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r9, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) writev(r8, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000000080045c24c68b50c5a2f2aa32f93b50002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000576b0b5157cd3dc0c40000000000000000000000000000000000000000000000000000000000000000000000000000004000"/138], 0x90) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) 14m45.608359593s ago: executing program 43 (id=467): syz_usb_connect(0x5, 0x27, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) r2 = syz_io_uring_setup(0x890, &(0x7f0000000540)={0x0, 0x8d22, 0x800, 0x1, 0x9f}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r9, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) writev(r8, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000000080045c24c68b50c5a2f2aa32f93b50002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000576b0b5157cd3dc0c40000000000000000000000000000000000000000000000000000000000000000000000000000004000"/138], 0x90) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) 14m37.186784929s ago: executing program 3 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 14m36.155373858s ago: executing program 3 (id=481): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x0, 0xce, 0xe0, 0xa7, 0x4c}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0xd132fed4ca373e12) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) 14m35.073321097s ago: executing program 5 (id=482): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000006c0)={0x980000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @local, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010102, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x5, 0x2100, @void}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000070000880240007800800060048000000080005"], 0x164}}, 0x0) 14m34.881512696s ago: executing program 3 (id=483): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x7, 0x1, 0x9, 0xfffffff8, 0x5}) socket$inet(0x2, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x7, @private2, 0x7fffffff}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, @in6={0xa, 0x4e24, 0xfffffffc, @private0, 0x20f0}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x2, @remote, 0x7fff}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xb6d, @dev={0xfe, 0x80, '\x00', 0x18}, 0xd976}, @in6={0xa, 0x4e22, 0x1c0000, @remote, 0x10000}], 0xd8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x81, 0x42, 0x8, 0x6, 0x8, 0x7, 0x2d, 0x87, 0x3, 0x0, 0x8, 0x0, 0x6}, 0xe) shutdown(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) get_mempolicy(0x0, &(0x7f0000000140), 0x8001, &(0x7f0000ffa000/0x3000)=nil, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 14m34.176533489s ago: executing program 44 (id=483): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x7, 0x1, 0x9, 0xfffffff8, 0x5}) socket$inet(0x2, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x7, @private2, 0x7fffffff}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, @in6={0xa, 0x4e24, 0xfffffffc, @private0, 0x20f0}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x2, @remote, 0x7fff}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xb6d, @dev={0xfe, 0x80, '\x00', 0x18}, 0xd976}, @in6={0xa, 0x4e22, 0x1c0000, @remote, 0x10000}], 0xd8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x81, 0x42, 0x8, 0x6, 0x8, 0x7, 0x2d, 0x87, 0x3, 0x0, 0x8, 0x0, 0x6}, 0xe) shutdown(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) get_mempolicy(0x0, &(0x7f0000000140), 0x8001, &(0x7f0000ffa000/0x3000)=nil, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 14m33.937089847s ago: executing program 5 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000011000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000340)=0x9, 0x3a) 14m32.728400767s ago: executing program 5 (id=489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x48201, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14m31.617674908s ago: executing program 5 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) rename(0x0, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/51) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xe, {0xc1e2, 0x1, 0xea0, 0x1ff}, {0xfffffffc, 0x1, 0x7fffffff, 0x2c0000}, {0x4, 0x1dd}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 14m30.449550784s ago: executing program 5 (id=493): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000280)=ANY=[], 0xfe49, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14m29.605717128s ago: executing program 5 (id=496): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12", 0x4, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f81c0500004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 14m29.431450047s ago: executing program 45 (id=496): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12", 0x4, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f81c0500004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 14m19.480520401s ago: executing program 8 (id=514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x0) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000180)={r3}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000040)={r3, &(0x7f0000000000), &(0x7f00000000c0)}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r0, &(0x7f00000008c0)) 14m18.197151156s ago: executing program 8 (id=519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000300)={0x80000000, "65544000000000000000debd97c000", 0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x7cef7d7c, 0x9, 0x10004, r4, 0x5, '\x00', r5, r8, 0x1, 0x5, 0x2, 0x1, @void, @value, @value=r11}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd26, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x4041080) 14m17.864658534s ago: executing program 8 (id=523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x7) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, 0x0) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@iter={&(0x7f00000001c0)=@task={r1, r1}, 0x10}}, 0x20) ioctl$TIOCGSOFTCAR(r5, 0x4b46, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x30242, 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 14m16.853742871s ago: executing program 8 (id=524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcfffdff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r2 = syz_io_uring_setup(0x75b, &(0x7f0000000100)={0x0, 0xbd5, 0x2, 0x3, 0x9b}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000540)={0x8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/226, 0xe2}], &(0x7f0000000500)=[0x45be93dd], 0x3}, 0x20) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x24, &(0x7f0000000600)={0x20, 0x9, 0x1, "d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000a00)={0x0, 0x18, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 14m13.866527088s ago: executing program 8 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000002180)={0x8, @raw_data="7f94e8c35e43032ca8c1b37db90fb6cc03b055cf66eff0ffc2c4a1b8580065b0e2779c78acddb2c32a03c5b3897c3db963161386d0c96cd8310bbb81da5e34db5dce5aec20e6346eb952ed9e0dc651a87df2fd191b39b1eb9790983ab2a3ac6b0f58c8196d8e8889bc78c86ae31a9c91ed5bab6b10b6f364503213be864bc02b28e2d4245bd793b154252d829508060693802644a0b0fdb22b7db7db8115a2c839bafb14d77b382ed0dbb8d442f68acfbb4f68587f15f19dd6355a9e42e8fe8000e72cc8e680e247"}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r2, 0x0, 0xffda) setpgid(0x0, r1) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4, 0xfae4}, 0xc) socket$kcm(0x11, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES8=r4, @ANYRES16], 0x0) read$watch_queue(r3, &(0x7f0000000280)=""/235, 0xeb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r6, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x800) 14m10.733792594s ago: executing program 8 (id=548): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0xfec00000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 13m55.316724255s ago: executing program 46 (id=548): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0xfec00000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 14.158938754s ago: executing program 9 (id=3340): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x3, 0x400, 0x3, 0x2, 0x80, 0x5, 0x4}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0xa4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "609c297d4900"}]}}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0xee01) 12.997679158s ago: executing program 9 (id=3341): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x44800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000007050000000000000004000a00000a0900010073797a300000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004090) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634f1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 11.913561681s ago: executing program 7 (id=3345): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$FITHAW(r0, 0xc0045878) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x12) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) (async) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0xd4ce) (async) write$cgroup_pressure(r0, &(0x7f0000000140)={'some', 0x20, 0x1, 0x20, 0x8}, 0x2f) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x577080, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x36, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}], 0x3c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x57, "342d90a510c0dc28cfa5983f76d0c0f3c778b9329dc11200e1439df0a76cf63b07840b0ff299ad864e492e7ec6b974f5617e056b0e7e668ba10ae4a66d6f09ba0ed5dbb724e9d5399bf2b20c7e764de413d0d08fc17b1a"}, &(0x7f0000000280)=0x5f) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r5, 0xd01}, &(0x7f0000000300)=0x8) (async, rerun: 64) setsockopt(r3, 0x37, 0x9, &(0x7f0000000340)="b2ed4c366a33844121d9954e3542d0ac16e43bc9e43da9911499b341e1f1a201fd42814213cb75225c79ca401d5782aebc1b6b6894dfe622e91541b8027450f9c7ecc29e482fc0a679e73242814b0a87390a7b49c2e788bbc90b0b1cdf8b6cfddf75ff4f1528bbe82ee91da2c8bb8759837ced203eb1442ed501ec29befa163f77ff122cc807932da12d44b149ecc7a7c4f87f126179b792d46d763e3d236a7e", 0xa0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000440)=0x0) io_submit(r7, 0x3, &(0x7f00000006c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfff8, r3, &(0x7f0000000480)="d8c8a46a8d5c9c937a8e109d8ca95db448fe191c3733ffa3a171541a5ca2d7f36feedc3f703c6c966068a84d59606f91981217e969a5a8037d0fe9a33088939428", 0x41, 0x1, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000540)="daaab9dc1ecd813d451d62e5c697659f62fe7aa5d7d19f47ca8a42e60e390cfbdd43eb61a29c5a64ad1c331d52d81cfc3fb7b57118c63e86f5f688495fff58fadba28a0dcb5d3c8580893a070ce3eed175ac40d262f397c46ae076390a2fb2c3b14dfb2b40eb41bb0cf8eec5b95f2f2dbe577ad7f3a66a55a7ae98", 0x7b, 0xa, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x8, r4, &(0x7f0000000600)="7f68bf147c8a37a1fb509552a8c5a0ff7c6ccb57528e171eb20a20f86673a117a09e1d6065859f3347addd44bf7fc940f9b39b19a7b463b555f8a2d92da9614aebea4908db88d31a9bf4789742b1035e32d1af4f4d081e82f67413e788d9e45fac39159b814072491d9f1d8e", 0x6c, 0xf, 0x0, 0x0, r3}]) (async) r8 = dup2(r1, r2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000700)) (async) ioctl$KIOCSOUND(r6, 0x4b2f, 0x7) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x184, r9, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa05}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a93e770}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5fc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f7a2f20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4708476b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfcc2}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x84}, 0x44000040) (async, rerun: 64) r10 = syz_open_dev$audion(&(0x7f0000000a00), 0x7fff, 0x503500) (rerun: 64) ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r11, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random="025d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000000c80)={0x0, 0x9d, 0x6}) (rerun: 64) 11.8905867s ago: executing program 7 (id=3346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init1(0x800) fanotify_init(0x4, 0x40000) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x541b, 0xfffffffffffffffa) 11.058517223s ago: executing program 9 (id=3351): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2a9bf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) 10.921072147s ago: executing program 7 (id=3352): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x18}}], 0x1, 0x68034) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x8000004) io_setup(0x2, &(0x7f0000000040)=0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) iopl(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) listen(r4, 0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x59, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 10.132574142s ago: executing program 2 (id=3353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='fib6_table_lookup\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket(0x10, 0x80002, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0xfffffffd, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}}, 0x0) 9.129635575s ago: executing program 6 (id=3356): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xd7d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010025bd7000f7dbdf2500000000", @ANYRES32=r7, @ANYBLOB="330800002b9201001800058009000100626f6e64000000000800028004000880"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = dup2(r4, r2) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r9, 0xb, &(0x7f0000000480)={0x6, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x1, &(0x7f0000000500)={[], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x18}}, {@obj_role={'obj_role', 0x3d, 'bond0\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/cpu/#/msr\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '\xa6'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd'}}]}) r10 = getpgrp(0x0) syz_pidfd_open(r10, 0x0) 9.086120857s ago: executing program 9 (id=3358): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1020801}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8}, @val={0xc, 0x99, {0x1ff, 0x7f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000150001034083562fa3cd361005"], 0x14}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000200)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="9436def8f5fea63e5db56ceb4a2e7fed5d4e54e0edf9ca3fb37d6907782be677ad72df4c557dd1788580f4252696ff8774ac8493f7deca78f3d96ce9299c8ba3365601aa5f0602233dfedbaece62e175074aac329e29eb04649174e752e9746181e0f8374f565d3a85960532315b91f445b2173091d3d60e83eae7d7e1f0d933c3938d6d1cacf6097082de3a1bb9496f32d6127023877802cc4ed946f578b414dd72e16ce274ae0e3b2a131fcfce52d342752aa55fa120fd68a2150526d9042c1583b0324027dea38d2fd9f3702823d3", 0xd0}], 0x1}, 0x1014) getsockopt(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x4098, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@uid_gt}, {@pcr={'pcr', 0x3d, 0x28}}, {@dont_measure}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, 'port@I4\xdc\xb7\x8cbm\xbd\xcc\xb2K\x91\xf4B\xcb\x7f\x0e?i\xb3\xd7\xea\xb1\x8e\x8d\xfe\'\x8d\xf8U6\xb8\xf3f\xb3\xdb\xac\xd47\xdc\x8c%\x17\xd9nX\xa1n\xe8\xa2\xd9r\xf2Fw\xc3\xb4\xc17``Rj\\\xf7,qOi\xadY\xa4@\xdaE\x98\xe1\x96\x1f\xcd]\xdb\xee{\xda\xf8\x1a4prz\xc4%0jtN8\xfe\xc7'}}, {@smackfshat={'smackfshat', 0x3d, '/d\"v/vcsa\x00'}}]}}) 7.904615113s ago: executing program 9 (id=3361): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x44800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000007050000000000000004000a00000a0900010073797a300000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004090) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634f1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 7.801830302s ago: executing program 2 (id=3363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x204002, 0x0) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000001080)=""/27, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r5 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x9, 0x7, {0x7, 0x22, "fc91419d2d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 7.689595353s ago: executing program 7 (id=3364): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0x97e, 0x101080) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0xb, 0x43, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="e7fff3000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4}) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x404200) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0x20f, 0xc, 0x1000, 0x4, '\x00\a\x00'}) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r7, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b0601030000000000000000050000070500010007001d00100007800c00194000000000000000080900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) socket$phonet(0x23, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 7.579913143s ago: executing program 6 (id=3365): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x3c, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b42058"}], 0x1}) 6.665793636s ago: executing program 9 (id=3366): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe5e16000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.687679815s ago: executing program 1 (id=3367): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 4.668863846s ago: executing program 2 (id=3368): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2a9bf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0xc0000000, 0x1000000}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) 4.0772277s ago: executing program 6 (id=3369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000006540)={{0x2, 0x2, 0x0, 0x9, 0x5, 0x4}, 0x336, [0x34, 0x9, 0xfffffff7, 0x8, 0x5ff90, 0x1, 0x0, 0x9, 0x0, 0x5, 0x6, 0x81, 0x9, 0x4, 0x2, 0x2, 0x6, 0xd, 0x7, 0x1, 0x7, 0x40, 0x10, 0x299, 0x2, 0x8b, 0x8, 0x25, 0x7, 0x80, 0x9, 0x4, 0x3e, 0xffff, 0x3fa, 0x9, 0x99d, 0x7, 0x3, 0x5, 0xee0, 0xd8, 0xfffffffb, 0x1, 0x58, 0x8001, 0x80000000, 0x5, 0x5b6c, 0x6, 0x0, 0x9, 0x8, 0xc6c, 0x7fff, 0xff, 0x8000, 0x2, 0x1, 0x800, 0x3, 0x4, 0x7, 0x8, 0x1000, 0x5, 0xfffffffc, 0x1, 0x3ff, 0x5, 0xfff, 0x5, 0x7fffffff, 0xd, 0x4f67, 0x5b7f, 0xfffffffc, 0x6, 0x1, 0x6, 0x10000, 0x5, 0xfcb, 0x1800, 0xfff, 0xe0000000, 0x3, 0x2c1e, 0x1, 0x502, 0x2f147a22, 0x9, 0x831, 0x5, 0x0, 0x8000, 0xfffff43b, 0x8, 0x8001, 0x1, 0x10001, 0x1d800, 0x7, 0x0, 0x2, 0x3ff, 0xd3a, 0x0, 0x8, 0x10001, 0x3, 0x8, 0x86f8, 0x8, 0x4e19, 0x4, 0x17d2, 0x3, 0xd, 0x0, 0xc7fc, 0x4, 0xcbb, 0x7, 0xb, 0xb0, 0x0, 0x0, 0x10000, 0x5, 0x3, 0x1ff, 0xcc25, 0x4, 0x2, 0x7, 0x5, 0xfffffffb, 0x53bb, 0x4, 0x9, 0x4, 0xfffffe01, 0x9, 0x6, 0xa, 0x7, 0x1, 0xf, 0x80000001, 0x80000001, 0xfffffffe, 0x1ff, 0x0, 0x1, 0xd6, 0x8d34, 0x5d, 0x0, 0xd, 0x0, 0xffff, 0x5, 0xe2bf, 0x0, 0x2, 0x4, 0x9, 0xff, 0x6, 0x0, 0x8, 0x6, 0x4, 0x2, 0x1, 0x7, 0x8, 0x4f1, 0x0, 0x1, 0x8, 0x8, 0x0, 0x8001, 0x7, 0x4, 0x4, 0x8001, 0x7, 0x4, 0xff, 0x5, 0x5, 0xffffffc0, 0x2, 0x7f, 0x700, 0x48, 0x5, 0x1, 0x3, 0x44f, 0x2, 0xff3, 0x9, 0x0, 0x2, 0x3, 0x2, 0x7fffffff, 0x531, 0x2ed, 0x86c, 0x1d, 0x269, 0x6, 0x531e, 0x8, 0x2, 0x9, 0xb0000000, 0x5, 0x1, 0x4, 0xf, 0x9, 0x8, 0x7b22baff, 0x7, 0x2, 0x40, 0x1, 0xffffff17, 0x9, 0x80, 0x965, 0x2, 0x200, 0x3, 0x5, 0xafd1, 0x4, 0x3, 0x1, 0x1, 0x2, 0xfff, 0x4, 0x401, 0x57a, 0x9, 0x4, 0x7b3, 0x10001, 0x80000000, 0x6, 0x7, 0x8, 0x41b, 0x77, 0x101, 0x3, 0x2, 0x215, 0x39, 0x8, 0x9, 0x4, 0x1, 0xfffffffd, 0x5, 0x3, 0x3, 0x8, 0x2, 0x8, 0x0, 0x1000, 0x7d4a, 0xa, 0x8, 0x6, 0x1c0000, 0x3, 0xfff, 0x9d, 0x5, 0xb, 0x5, 0x2, 0x1, 0x1, 0x2, 0x4, 0xbda, 0x4, 0x100, 0x8, 0x1, 0xfffffff9, 0x7, 0x5, 0xffffffff, 0x6, 0x5, 0xada6, 0x6, 0x80000000, 0x5, 0x100, 0x5, 0xfac8, 0x8, 0x200, 0x7, 0x3, 0x81, 0x5, 0xe, 0x9, 0x200000, 0x7ff, 0x401, 0x0, 0x1, 0x1, 0xff, 0x4, 0x0, 0xd, 0xe, 0xf9, 0x526, 0x7ac5, 0x400, 0x1, 0x0, 0x10001, 0x8, 0x401, 0xc4a0, 0x6, 0x3, 0x3, 0x9, 0xf, 0x35, 0x0, 0x7fffffff, 0x4d, 0xfff, 0x4, 0x9, 0xb0be, 0xffff, 0x4, 0x268, 0x10000, 0x5, 0x962, 0x3, 0xe, 0x4, 0x8, 0x3, 0x8, 0x2, 0x1, 0xffffff30, 0x10000, 0x9, 0x10001, 0x9, 0x7, 0xf, 0xc, 0xffff, 0xf, 0xb2e, 0x7, 0x7fff, 0xa66a, 0xa, 0x6, 0x8001, 0xa, 0xb, 0x80000000, 0xd985, 0x10001, 0x8, 0x5, 0xfffffff9, 0x1, 0xf3d, 0xa54d, 0x1, 0x5, 0x0, 0x8001, 0x9, 0x4, 0xa23, 0x7ff, 0xec, 0x1ff, 0xc, 0x80000000, 0xb, 0x3, 0x9, 0x1, 0x36, 0x1, 0x8001, 0x7, 0x4e3, 0x200, 0x2, 0x6, 0x8000, 0x56f, 0x0, 0x8, 0x7f, 0x7, 0x7f, 0x7, 0x974, 0x0, 0x8, 0x4000400, 0x2, 0x5, 0x6, 0x3, 0x80, 0x6, 0x6, 0x4, 0x1, 0x8, 0x2, 0x7f, 0x100, 0xe, 0xb, 0x2, 0x1, 0x8, 0x66, 0x6, 0x6, 0x80000001, 0x8, 0x9, 0xe, 0x2, 0x10, 0x4, 0x7, 0x0, 0x4, 0x8, 0xf, 0xffff, 0x9, 0x8001, 0x1, 0x101, 0x2, 0x8, 0x6, 0x6, 0x9, 0x40, 0x0, 0x1, 0xfffffffe, 0xfffffffc, 0x1, 0x3f48, 0x7fff, 0x4, 0x400, 0xa85f, 0x41b86c96, 0x7f3b, 0x8001, 0x4, 0x7, 0x3, 0x8000, 0x3, 0x8001, 0x2, 0x100, 0x2, 0x8, 0x5, 0x3ff, 0x1, 0x1, 0x1, 0x94b, 0x80000000, 0x6, 0x100, 0x7, 0xb, 0x8, 0x7, 0x4, 0x6, 0x7fffffff, 0x3, 0xb3f, 0xe9b, 0x3, 0x6, 0x81, 0x5, 0xfb35, 0xfffffff7, 0xb, 0x800, 0x0, 0x6, 0x0, 0x8, 0x6, 0x9, 0x5251, 0x1, 0xe4c, 0x1, 0x42, 0x5, 0x1, 0x7, 0xfff, 0x3, 0x8, 0x1, 0x7, 0x4, 0x1, 0x0, 0xffff, 0x9, 0x10, 0x0, 0x2, 0x2, 0x0, 0x43, 0xc, 0x800, 0x6, 0x1, 0x6, 0xf, 0x12dd, 0x1, 0x7, 0x7f, 0x3, 0x9, 0x9, 0xfffffff8, 0x3, 0x7, 0x24bf, 0x4, 0x5, 0xde11, 0x7f, 0x2, 0x80000001, 0x81, 0x5, 0x200, 0xe, 0xf, 0x6, 0xffffffff, 0x6, 0x3, 0x8b54, 0xfffffff7, 0x7, 0x1, 0x8, 0x97a9, 0x4, 0x10000, 0x119, 0xedaa, 0x7fff, 0x6000, 0x1, 0xe, 0x0, 0x8, 0x2, 0x7fff, 0x70e, 0x5, 0x7, 0x10, 0x7, 0x81, 0x1, 0x1, 0x6, 0x1, 0x9, 0x5b1, 0x1, 0xffffffc0, 0x8, 0x6, 0x9, 0x5, 0x6, 0x7, 0x0, 0x3, 0x2, 0x9, 0x8001, 0x2, 0xff, 0x1, 0x3, 0xaa, 0x39a3e6e9, 0xfffffff7, 0x6, 0x8000, 0x8, 0x37, 0x400, 0x8001, 0x7, 0x3, 0x0, 0x7, 0x1fc00000, 0x4ab3, 0x1ad, 0x8, 0x0, 0x4, 0xb, 0x8, 0x8, 0x8, 0x4, 0x180, 0x10b0, 0x3, 0x6, 0x9, 0x1000, 0x40, 0xfffffffe, 0x7f, 0x6, 0xd, 0x0, 0x2, 0x1, 0x1, 0x4, 0xfff, 0x3, 0x3, 0x1, 0x2400, 0xfc, 0x37, 0x0, 0x3, 0xffffffff, 0x200, 0x74, 0x8, 0x1, 0x5, 0x8, 0x2, 0x80, 0x67, 0xfffffff8, 0x8, 0x0, 0xd13, 0x3, 0x5, 0x2, 0x8, 0xd6, 0x3, 0x10, 0x2, 0x9, 0x8, 0x7, 0x5, 0x8, 0x2d, 0x81, 0xfffffffd, 0x0, 0x9, 0x145b, 0x69e, 0xa, 0x3, 0x7ff, 0x80, 0xcfdf, 0x88, 0x9, 0xb5, 0x5, 0x101, 0x6, 0x1e00, 0x7, 0x1, 0x6, 0x8000, 0x7, 0x8, 0x0, 0x9, 0xfffffffe, 0x5, 0x5, 0xfffffff8, 0x101, 0x2, 0xfffffffc, 0x158, 0x140, 0x5, 0x8, 0xfffffffc, 0x4, 0x2, 0x5, 0x5, 0x7, 0x1, 0x80000000, 0x0, 0x2c95, 0x9, 0x2, 0x18000, 0x9, 0x200, 0xfff, 0x7f, 0x3, 0x4f, 0x6, 0x5ba51650, 0x9, 0x40, 0x64, 0x8, 0xfffffffa, 0x7f, 0x0, 0x1, 0xc0, 0x3, 0x5, 0x62e6c5a3, 0x2, 0xe2, 0x0, 0x7, 0x4, 0x9, 0x101, 0x0, 0x7fffffff, 0x9, 0x996, 0x5, 0x20000000, 0x80, 0x8, 0x65d6, 0x736, 0x8000, 0x8e, 0x7f, 0x6e95, 0x2, 0x8001, 0xf, 0x7, 0xc76, 0x1, 0xfffffff3, 0x7, 0x8, 0x5, 0x0, 0x2, 0x1661, 0x9ba, 0x2, 0xfffffff9, 0x8, 0x7, 0x6, 0x3ff, 0x9, 0x2, 0x0, 0x1, 0x5, 0x2, 0x0, 0x0, 0xff, 0x576, 0xffffffff, 0x6, 0x3c7d, 0x2, 0x0, 0x8, 0x3a309d23, 0xd0, 0x1, 0x8, 0xfffffbff, 0xffff, 0xc, 0x8001, 0x2, 0xe968, 0x2, 0x7, 0xeab, 0x9, 0xc, 0xff, 0x6, 0x0, 0x9, 0x5, 0xf2, 0x0, 0x3ff, 0x23f9, 0x6030, 0x101, 0xbe5, 0x2005e128, 0x80000000, 0x7ff, 0xc669, 0x80000000, 0xd, 0x400, 0xb9, 0x3, 0xc39, 0x105, 0x8, 0xd, 0x6, 0xfffffff8, 0x10001, 0x3622ae81, 0x0, 0x3, 0xc, 0x6, 0x40, 0xa5e, 0x8, 0x6, 0x4, 0xd6d, 0xa, 0x6, 0x0, 0x5, 0x3, 0x5, 0x2, 0x3, 0xfffffff7, 0xffffffff, 0x4, 0x4, 0x3, 0x7fff, 0x4, 0x6, 0x3, 0x5, 0x2, 0xfffffff2, 0x4, 0xfffff000, 0x7, 0x0, 0x163, 0xff, 0xff, 0x10000, 0x1, 0x7, 0xff, 0x80, 0x6, 0x2, 0x101, 0x6, 0x0, 0x0, 0x380000, 0x3, 0x0, 0x9, 0x7fffffff, 0x5, 0x5, 0x7, 0x0, 0x3, 0x602, 0x7, 0xdd3, 0x16, 0x6, 0x8, 0x0, 0xa, 0xb29, 0x3ff, 0xb7, 0x5, 0x80000000, 0x7, 0x2, 0x4, 0xa29, 0x7fffffff, 0x7, 0xac, 0x2, 0x0, 0xb0, 0x8, 0xcfd, 0x8000, 0x8, 0xe9b, 0x6, 0x868, 0xf, 0xd556, 0x0, 0x8, 0xfffffffd, 0x3ee0, 0x5, 0x6, 0xd6d0000, 0xe, 0x80000001, 0xfffff800, 0x5, 0x8, 0x7, 0xffffffff, 0x7, 0x2, 0x8, 0x4, 0x4, 0x9, 0xfff, 0x81, 0x0, 0x8, 0xc000000, 0x6, 0x1, 0x2, 0x3, 0x1, 0xd12, 0x7, 0x2, 0x0, 0x10, 0x1258, 0x401, 0x10, 0x1, 0x8, 0x7, 0x7, 0x8, 0x1, 0x0, 0x0, 0x5, 0x3, 0x7, 0x7fffffff]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socket(0x8000000010, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r4, &(0x7f0000001780)="554a90d13b76916fc6d3128119a043ac08d8a06420487eb9cc61f7855f159ce79c0bf4016420eed096db67d637922f8c8dcf8e6263d813c54a01c28047b9143ef49d5f29ecec2f3224b217e9e719add8bcae0e16b66bb4188e9562139244a952bf543ca1b90e844b0939d6abbb029ce0513525f0", 0x74, 0x24004800, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006240)=[{{&(0x7f0000000040)=@l2tp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/213, 0xd5}, {&(0x7f00000012c0)=""/165, 0xa5}], 0x4, &(0x7f00000013c0)=""/58, 0x3a}}, {{&(0x7f0000001400)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)=""/118, 0x76}, {&(0x7f00000063c0)=""/65, 0x41}], 0x2, &(0x7f00000015c0)=""/247, 0xf7}, 0x401}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/134, 0x86}, {0x0}], 0x2, &(0x7f00000027c0)=""/213, 0xd5}, 0xfb}, {{&(0x7f00000028c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002980)=[{0x0}], 0x1, &(0x7f0000002a00)=""/10, 0xa}, 0x10}, {{&(0x7f0000002a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/233, 0xe9}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/141, 0x8d}, {&(0x7f0000002c80)=""/60, 0x3c}], 0x6, &(0x7f0000005dc0)=""/104, 0x68}, 0x2}, {{&(0x7f0000005e40)=@can, 0x80, &(0x7f00000061c0)=[{0x0}, {&(0x7f00000060c0)=""/224, 0xe0}, {0x0}], 0x3, &(0x7f0000006200)=""/4, 0x4}, 0x9}], 0x6, 0x40012000, 0x0) 4.076476518s ago: executing program 7 (id=3370): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0x97e, 0x101080) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0xb, 0x43, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="e7fff3000000fa0fffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4}) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="02010000045c346e6cdf1f3482c543844d91406e7f5db731bae48061f9e09557cd45719ee621ca3dec73aa252159d0879f042cd48eb19d3a60e407f63f873e8443c4407498a02cdb9e6503b7587126add3fee2594f2c8ea672df1a892ed944f3a02cfc2bc0ba97b485fa1301c0b48a5bb86522562b765785b53128394c1936318a7a160a675bfdb9bb086447d22b2bf62eb0b761758232cdb4d4565b5f3565f55351b6c57b867c05e96d3c3e9d53dd2a5767c8fd8932b2011a20dd0dad0abc4e6c53555ac9e0ab7465d214fb4dcbed125486bbeec02a90560ebf09c32e56bc7848c6e9391bad3d2e6ed858855c0f024511eceaea13accad1f7b7f658493dae49565bee16a963da"]) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x404200) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0x20f, 0xc, 0x1000, 0x4, '\x00\a\x00'}) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r7, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b0601030000000000000000050000070500010007001d00100007800c00194000000000000000080900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) socket$phonet(0x23, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 3.713235646s ago: executing program 6 (id=3371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffdfffffffffff00}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}}, 0x0) 3.466033995s ago: executing program 6 (id=3372): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0x97e, 0x101080) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0xb, 0x43, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="e7fff3000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4}) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000045cec18d8cc63bb52030c053eac66e0b46a553046dd8e30008033f4b75d8de2ca1f4dce6ddf9b64deac8adff43e66a1143bef8320e65e5806a3c79aa43d56ece81e2363a8ab04d75a42d824656d57852e437f7abac76d0df1c9ec3f7e5124602244b5a42b71ccee9656008a22a8ed0e82780b46ce7c77cafaa9ce1c04ad63c8e97e48b9d1f4140a6c3dd73977bc46621c1ef0f0c691c68f0420a34a275b4993f00e0598794253ba2d2ecd192d5211d27db8f74a01cfd3f7a8972029efa4796119af9663622953627ff522b4427d030be888dc4c2d0b36f74b6e95c296afbbf3bf58bb956a13c99a6c738495e46fcea599ec1b40ad02e5b4148ca781acf5f21aadd181e5e10343a7956ee43fd5f935d1ff00fe9d4d26744e2a25a34dd1a72b62885b9535b8d411352e7606f89a5410180"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x404200) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0x20f, 0xc, 0x1000, 0x4, '\x00\a\x00'}) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r7, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b0601030000000000000000050000070500010007001d00100007800c00194000000000000000080900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) socket$phonet(0x23, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000140)={'veth1_to_hsr\x00'}) 3.465565446s ago: executing program 1 (id=3373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0xfc80}}, 0x0) (fail_nth: 9) 3.367752585s ago: executing program 1 (id=3375): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{0x7ff, 0xff, 0x6, 0x4}, {0x0, 0x40, 0x9, 0x8}, {0x401, 0xfb, 0xa, 0x8001}, {0x4, 0x5, 0x6, 0x8}, {0x81, 0xc1, 0x12, 0x5}, {0x1, 0x1, 0x0, 0x4}, {0x6, 0x3, 0x4, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=bind:0,;']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x13}}}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "c1db28461a1336cc53"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4024}, 0x44800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000440)='./file0\x00', 0x8811, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_submit(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000007050000000000000004000a00000a0900010073797a300000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004090) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634f1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 3.010590342s ago: executing program 1 (id=3376): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="200006"], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$cdc_ncm(0x4, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x50, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x2, 0xf86a7beb9ca925cc, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b4"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xc, 0x8001, 0x2}, {0x6, 0x24, 0x1a, 0x5, 0xb}, [@country_functional={0x12, 0x24, 0x7, 0xe, 0x2, [0x7, 0x0, 0x8, 0x6, 0xb4a7, 0xb]}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf9, 0x5d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xa, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x81, 0x7}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xa7, 0x81, 0x8, 0xff, 0x10}, 0x32, &(0x7f0000000140)={0x5, 0xf, 0x32, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x3, 0x8001}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x5, 0x7b2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xd31d035d20d35499, 0x4, 0xf, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x1, 0x9, 0x5}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_ep_read(r0, 0xfa, 0x8a, &(0x7f0000000280)=""/138) 2.966717444s ago: executing program 2 (id=3377): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) r1 = socket(0x27, 0x6, 0xff) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.349652504s ago: executing program 1 (id=3378): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000480)={0x1, 0x3, 0xfffffffe, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x42) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.070659812s ago: executing program 1 (id=3379): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x3c, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b42058"}], 0x1}) 1.930918079s ago: executing program 2 (id=3380): ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x87e8}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x20}], 0x3, &(0x7f00000005c0)={0x0, 0x3938700}, &(0x7f0000000600)={[0x6]}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$inet6(0xa, 0x80001, 0x0) (async) r3 = socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000030a010100000000000000000700000608000a4000000005c4000000050a01010000000000000000000000020900030073797a31000000000900030073797a3000000000640008800c00014000000000000000020c000240ffffffffffff5e390c00024000000000000000020c000140ffffffffffffff6c0c00014000000000000000040c00014000000000000000080c000240000000007fffffff0c00024000000000000000070900010073797a3000000000200004801400030076657468310000000000000000000000080002405ea390b808000540fffffff9"], 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x40400c6) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x7) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x7) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r1, 0x1}}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.53393773s ago: executing program 2 (id=3381): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='mm_shrink_slab_start\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r5, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) getpeername(r3, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 880.016419ms ago: executing program 7 (id=3382): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x0, 0x800) syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x129}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x3, 0x2, &(0x7f0000000340), 0x4, 0x0, 0x0, {0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r6 = shmat(r5, &(0x7f0000776000/0x4000)=nil, 0x5000) shmdt(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x778, 0x408400) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x81) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=3383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100a, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) sendmsg$unix(r7, &(0x7f0000001840)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x375}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4008104) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)=0x0) sched_setscheduler(r9, 0x6, &(0x7f00000004c0)=0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r10 = socket(0x11, 0x2, 0x0) setsockopt(r10, 0x107, 0x1, &(0x7f0000000040)="06000000030006000300000000000000", 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) close(0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040), 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r12, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081718374b58e8cb7e8d8a3956e424a7b2badbc941abffcab8fc534600de02f805c99a7f0fd6aae285b0e0e0af2151677dd0028592d8a67ab8426c5a5b8e51be34137cfecbd9d5f82fdb18f249152afcfe38d19b952a291555234d218ec8571aa32f1e4b66972f1ba3638c51042cab125d23ddb63fcba662fd4a3"]) kernel console output (not intermixed with test programs): 208882][T10383] usb 10-1: config 0 descriptor?? [ 950.669876][T10383] steelseries 0003:1038:12B6.0035: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 951.448812][T17459] binder: 17458:17459 unknown command 0 [ 951.454545][T17459] binder: 17458:17459 ioctl c0306201 200000000080 returned -22 [ 952.634542][ T6097] usb 10-1: USB disconnect, device number 97 [ 953.305037][ T6097] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 953.468456][ T6097] usb 10-1: Using ep0 maxpacket: 16 [ 953.487396][ T6097] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 953.505374][ T6097] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 953.514789][ T6097] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.530286][ T6097] usb 10-1: Product: syz [ 953.534647][ T6097] usb 10-1: Manufacturer: syz [ 953.541844][ T6097] usb 10-1: SerialNumber: syz [ 953.579119][ T6097] usb 10-1: config 0 descriptor?? [ 953.599964][ T6097] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 953.609834][ T6097] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 954.191176][T17494] binder: 17493:17494 unknown command 0 [ 954.197015][T17494] binder: 17493:17494 ioctl c0306201 200000000080 returned -22 [ 954.437681][ T6097] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 955.230704][ T6097] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 955.238866][ T6097] em28xx 10-1:0.0: board has no eeprom [ 955.562471][ T6097] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 955.570493][ T6097] em28xx 10-1:0.0: dvb set to bulk mode. [ 955.576242][ T5873] em28xx 10-1:0.0: Binding DVB extension [ 955.587684][ T6097] usb 10-1: USB disconnect, device number 98 [ 955.594759][ T6097] em28xx 10-1:0.0: Disconnecting em28xx [ 955.631428][ T5873] em28xx 10-1:0.0: Registering input extension [ 955.638292][ T6097] em28xx 10-1:0.0: Closing input extension [ 955.655831][ T6097] em28xx 10-1:0.0: Freeing device [ 955.787152][T17514] netlink: 'syz.7.2872': attribute type 10 has an invalid length. [ 956.080662][T17518] bond5: entered allmulticast mode [ 956.679111][ T30] audit: type=1400 audit(1243.641:1109): avc: denied { setopt } for pid=17526 comm="syz.2.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 956.999033][T10383] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 957.155452][T10383] usb 7-1: Using ep0 maxpacket: 8 [ 957.172008][T10383] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.184616][T10383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.296663][T10383] pvrusb2: Hardware description: Terratec Grabster AV400 [ 957.332030][T10383] pvrusb2: ********** [ 957.336496][T10383] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 957.348988][T10383] pvrusb2: Important functionality might not be entirely working. [ 957.357174][T10383] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 957.371513][T10383] pvrusb2: ********** [ 957.587561][ T2338] pvrusb2: Invalid write control endpoint [ 957.844210][ T2338] pvrusb2: Invalid write control endpoint [ 957.850369][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 957.859919][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 957.867726][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 957.881142][ T2338] pvrusb2: Device being rendered inoperable [ 957.890703][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 957.898066][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 957.915021][ T2338] pvrusb2: Attached sub-driver cx25840 [ 957.930119][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 957.949656][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 958.383534][T17544] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2879'. [ 958.439532][T10383] usb 7-1: USB disconnect, device number 101 [ 958.625375][T17546] loop7: detected capacity change from 0 to 16384 [ 958.892761][ T30] audit: type=1400 audit(1245.851:1110): avc: denied { bind } for pid=17547 comm="syz.2.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 959.446339][T17551] loop7: detected capacity change from 16384 to 0 [ 959.452933][ C1] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 959.804992][ T5943] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 959.872091][T17563] bond2: entered allmulticast mode [ 959.885124][ T6097] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 959.955420][ T5943] usb 10-1: Using ep0 maxpacket: 32 [ 959.975171][ T5943] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 959.986195][ T5943] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 959.998550][ T5943] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.012815][ T5943] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 960.040800][ T5943] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 960.050244][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.060397][ T5943] usb 10-1: Product: syz [ 960.064821][ T5943] usb 10-1: Manufacturer: syz [ 960.066186][ T6097] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 960.070099][ T5943] usb 10-1: SerialNumber: syz [ 960.084955][ T6097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.184377][ T6097] usb 2-1: config 0 descriptor?? [ 960.289598][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 960.300732][ T5943] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input70 [ 960.544939][ T5943] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 960.553462][ T5943] (id 0x00) [ 960.735509][ T5943] rc_core: IR keymap rc-imon-pad not found [ 960.741479][ T5943] Registered IR keymap rc-empty [ 960.746797][ T5943] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 960.756474][ T6097] ath6kl: Failed to read usb control message: -32 [ 960.757818][ T5943] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 960.768304][ T6097] ath6kl: Unable to read the bmi data from the device: -32 [ 960.783857][T17572] tmpfs: Unknown parameter '; ' [ 960.788890][ T6097] ath6kl: Unable to recv target info: -32 [ 960.796450][ T5943] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 960.809310][ T5943] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input71 [ 960.855473][ T6097] ath6kl: Failed to init ath6kl core: -32 [ 960.862399][ T5943] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:99> initialized [ 960.871799][ T6097] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 960.942965][T17572] IPv6: Can't replace route, no match found [ 961.175612][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2893'. [ 961.204978][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 961.205013][T17586] netlink: 'syz.7.2893': attribute type 6 has an invalid length. [ 961.231815][T16177] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.235161][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2893'. [ 961.240519][T16177] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.259998][T16177] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.260037][T16177] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.274296][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 961.274446][T17586] netlink: 'syz.7.2893': attribute type 6 has an invalid length. [ 962.160188][T17600] loop7: detected capacity change from 0 to 16384 [ 962.365009][T17601] loop7: detected capacity change from 16384 to 0 [ 962.365359][ C1] I/O error, dev loop7, sector 8832 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 962.523862][T17597] imon:send_packet: packet tx failed (-71) [ 962.529160][ T5943] usb 10-1: USB disconnect, device number 99 [ 962.555382][T17597] imon:vfd_write: send packet #4 failed [ 962.675138][T10383] usb 2-1: USB disconnect, device number 78 [ 964.475080][ T5947] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 964.641361][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.652774][ T5947] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 964.663593][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.705094][ T30] audit: type=1400 audit(1251.661:1111): avc: denied { recv } for pid=17616 comm="syz.7.2898" saddr=10.128.0.169 src=48430 daddr=10.128.1.149 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 964.742875][ T5947] usb 2-1: config 0 descriptor?? [ 965.245672][ T5947] steelseries 0003:1038:12B6.0036: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 965.497674][T17627] tmpfs: Unknown parameter '; ' [ 965.770942][T17629] IPv6: Can't replace route, no match found [ 966.085752][T17640] loop7: detected capacity change from 0 to 16384 [ 966.485053][T17642] loop7: detected capacity change from 16384 to 0 [ 966.698985][T17647] sp0: Synchronizing with TNC [ 967.425025][ T5947] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 967.576700][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 967.586572][ T5947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 967.596463][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 967.606635][ T5947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 967.715608][ T5947] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 967.726679][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.738161][ T5947] usb 7-1: config 0 descriptor?? [ 967.801703][ T9] usb 2-1: USB disconnect, device number 79 [ 968.080229][ T5947] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 968.089809][ T5947] hdpvr 7-1:0.0: device init failed [ 968.099086][ T5947] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 968.109731][ T5947] usb 7-1: USB disconnect, device number 102 [ 968.289949][T17661] binder: 17660:17661 unknown command 0 [ 968.295678][T17661] binder: 17660:17661 ioctl c0306201 200000000080 returned -22 [ 968.420088][T17671] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 968.863937][ T30] audit: type=1400 audit(1255.821:1112): avc: denied { append } for pid=17672 comm="syz.9.2916" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 968.951623][T17674] FAT-fs (nbd9): unable to read boot sector [ 968.978536][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2916'. [ 969.078436][ T30] audit: type=1400 audit(1256.041:1113): avc: denied { unmount } for pid=7447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 969.117394][T17641] [U] [ 969.382955][T17681] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2917'. [ 969.392071][T17681] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2917'. [ 969.401298][T17681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 969.775056][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 969.777172][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 971.723381][T17717] IPv6: Can't replace route, no match found [ 971.756191][T17715] IPv6: Can't replace route, no match found [ 972.092541][T17720] tmpfs: Unknown parameter '; ' [ 972.340571][T17721] IPv6: Can't replace route, no match found [ 973.462996][T17742] binder: 17739:17742 ioctl 400c620e 200000000500 returned -22 [ 973.905478][T17744] bond6: entered allmulticast mode [ 974.158171][T17751] netlink: 'syz.6.2934': attribute type 10 has an invalid length. [ 974.361992][T17756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2935'. [ 974.867649][T17765] Falling back ldisc for ttyS3. [ 976.695878][ T30] audit: type=1400 audit(1263.591:1114): avc: denied { mount } for pid=17778 comm="syz.9.2941" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 976.719188][ T30] audit: type=1400 audit(1263.591:1115): avc: denied { search } for pid=17778 comm="syz.9.2941" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 976.960271][ T30] audit: type=1400 audit(1263.591:1116): avc: denied { search } for pid=17778 comm="syz.9.2941" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 977.001589][ T30] audit: type=1400 audit(1263.591:1117): avc: denied { read open } for pid=17778 comm="syz.9.2941" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 977.025837][ T30] audit: type=1400 audit(1263.601:1118): avc: denied { connect } for pid=17778 comm="syz.9.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 978.806498][T17806] binder: 17803:17806 ioctl 400c620e 200000000500 returned -22 [ 978.815749][T17806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17806 comm=syz.2.2948 [ 978.931569][T17809] efs: cannot read volume header [ 979.350096][ T30] audit: type=1400 audit(1266.311:1119): avc: denied { name_bind } for pid=17813 comm="syz.9.2946" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 979.391844][ T5947] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 979.565155][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 979.571872][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.582929][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.593035][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 979.605968][ T5947] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 979.615263][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.626685][ T5947] usb 3-1: config 0 descriptor?? [ 979.667116][T17824] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2954'. [ 979.887571][T17811] netlink: 'syz.2.2951': attribute type 10 has an invalid length. [ 980.132073][ T5947] HID 045e:07da: Invalid code 65791 type 1 [ 980.140863][ T3869] Bluetooth: Error in BCSP hdr checksum [ 980.150782][ T5947] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0037/input/input72 [ 980.176175][ T5947] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 980.398103][T16218] Bluetooth: Error in BCSP hdr checksum [ 980.525151][ T5947] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 980.547295][ T49] usb 3-1: USB disconnect, device number 90 [ 980.715836][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 980.738076][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.748604][ T5947] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 980.760207][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.788504][ T5947] usb 2-1: config 0 descriptor?? [ 981.026778][T17841] overlayfs: failed to resolve './file1': -40 [ 981.235489][T17843] Invalid source name [ 981.239534][T17843] UBIFS error (pid: 17843): cannot open "./file0", error -22 [ 981.934980][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 981.949042][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 983.916480][T10383] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 984.094634][T10383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 984.104533][T10383] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 984.115072][T10383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 984.131212][T10383] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 984.142534][T10383] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 984.151673][T10383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.174794][T10383] usb 3-1: config 0 descriptor?? [ 984.489213][T10383] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 984.497050][T10383] hdpvr 3-1:0.0: device init failed [ 984.503205][T10383] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 984.517210][T10383] usb 3-1: USB disconnect, device number 91 [ 984.536928][ T5873] usb 2-1: USB disconnect, device number 80 [ 984.680116][ T30] audit: type=1400 audit(1271.641:1120): avc: denied { watch watch_reads } for pid=17878 comm="syz.1.2968" path="/540/file1" dev="tmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 984.729330][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.771788][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.810664][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.873000][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.905614][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.944863][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.952569][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 984.985274][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.052184][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.071305][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.108365][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.129559][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.148334][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.156521][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.164549][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.172825][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.181079][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.190246][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.198463][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.207200][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.218516][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.226634][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.234543][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.242796][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f4be0 returned -22 [ 985.250983][T17880] binder: 17878:17880 ioctl 4020ae46 7f29ed7f48e0 returned -22 [ 985.260276][T17880] binder: 17878:17880 ioctl 8138ae83 7f29ed7f4aa0 returned -22 [ 985.345017][T10383] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 985.515906][T10383] usb 7-1: Using ep0 maxpacket: 32 [ 985.523787][T10383] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 985.534414][T10383] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 985.543509][T10383] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 985.552869][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 985.563015][T10383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 985.573002][T10383] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 985.583047][T10383] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 985.592969][T10383] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 985.606918][T10383] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 985.616369][T10383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.627256][T10383] usb 7-1: config 0 descriptor?? [ 985.778966][T17889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2971'. [ 985.848002][T10383] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 986.301087][ T30] audit: type=1400 audit(1273.261:1121): avc: denied { read write } for pid=17883 comm="syz.6.2969" name="lp0" dev="devtmpfs" ino=4407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 986.327712][ T30] audit: type=1400 audit(1273.261:1122): avc: denied { open } for pid=17883 comm="syz.6.2969" path="/dev/usb/lp0" dev="devtmpfs" ino=4407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 986.346921][ T5873] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 986.361304][ T5873] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 987.412195][ T5947] usb 7-1: USB disconnect, device number 103 [ 987.440111][ T5947] usblp0: removed [ 989.154977][ T5947] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 989.294745][T17927] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2982'. [ 989.309434][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.321308][ T5947] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 989.331681][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.345619][ T5947] usb 10-1: config 0 descriptor?? [ 989.475703][ T49] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 989.626651][ T49] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 989.635828][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.654070][ T49] usb 3-1: config 0 descriptor?? [ 989.663671][ T49] pwc: Creative Labs Webcam Pro Ex detected. [ 989.764254][ T5947] steelseries 0003:1038:12B6.0039: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 990.113160][T17929] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 990.119782][T17929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 990.186580][T17956] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 990.193287][T17956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 990.207752][T17929] vhci_hcd vhci_hcd.0: Device attached [ 990.217934][T17956] vhci_hcd vhci_hcd.0: Device attached [ 990.254154][T17959] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 990.260778][T17959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 990.270426][T17929] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 990.277045][T17929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 990.288070][T17929] vhci_hcd vhci_hcd.0: Device attached [ 990.323323][T17929] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 990.329950][T17929] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 990.341153][T17929] vhci_hcd vhci_hcd.0: Device attached [ 990.364699][T17929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.384239][T17929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.401776][T17929] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.426600][T17959] vhci_hcd vhci_hcd.0: Device attached [ 990.461562][ T5947] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 990.476756][T17929] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29) [ 990.483382][T17929] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.491818][T17929] vhci_hcd vhci_hcd.0: Device attached [ 990.573561][T17966] vhci_hcd: connection closed [ 990.573897][T16171] vhci_hcd vhci_hcd.2: stop threads [ 990.582403][T17964] vhci_hcd: connection closed [ 990.584757][T17962] vhci_hcd: connection closed [ 990.589901][T17960] vhci_hcd: connection closed [ 990.592463][T16171] vhci_hcd vhci_hcd.2: release socket [ 990.597155][T17957] vhci_hcd: connection closed [ 990.599746][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 990.617073][T17953] vhci_hcd: connection reset by peer [ 990.622616][T16171] vhci_hcd vhci_hcd.2: stop threads [ 990.629249][T16171] vhci_hcd vhci_hcd.2: release socket [ 990.767682][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 990.769781][ T49] pwc: send_video_command error -71 [ 990.778756][T16171] vhci_hcd vhci_hcd.2: stop threads [ 990.779147][ T49] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 990.791547][ T49] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 990.792355][T16171] vhci_hcd vhci_hcd.2: release socket [ 990.805108][ T49] usb 3-1: USB disconnect, device number 92 [ 990.815833][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 991.348632][T16171] vhci_hcd vhci_hcd.2: stop threads [ 991.357061][T16171] vhci_hcd vhci_hcd.2: release socket [ 991.365565][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 991.371573][T16171] vhci_hcd vhci_hcd.2: stop threads [ 991.378540][T16171] vhci_hcd vhci_hcd.2: release socket [ 991.385023][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 991.391802][T16171] vhci_hcd vhci_hcd.2: stop threads [ 991.397391][T16171] vhci_hcd vhci_hcd.2: release socket [ 991.403995][T16171] vhci_hcd vhci_hcd.2: disconnect device [ 992.324487][ T49] usb 10-1: USB disconnect, device number 100 [ 992.797731][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.285394][ T5943] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 993.434999][ T49] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 993.585164][ T49] usb 10-1: Using ep0 maxpacket: 8 [ 993.586566][ T5943] usb 2-1: config index 0 descriptor too short (expected 41, got 33) [ 993.620116][ T5943] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 993.642870][ T49] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 993.652733][ T49] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.794954][ T5943] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 993.817812][ T5943] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 993.830508][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 993.831022][ T5943] usb 2-1: config 1 interface 0 has no altsetting 0 [ 993.839119][ T49] pvrusb2: ********** [ 993.848616][ T5943] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 993.861166][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.864928][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 993.869346][ T5943] usb 2-1: Product: syz [ 993.883780][ T5943] usb 2-1: Manufacturer: syz [ 993.886591][ T49] pvrusb2: Important functionality might not be entirely working. [ 993.896559][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 993.897113][ T5943] usb 2-1: SerialNumber: syz [ 993.908172][ T49] pvrusb2: ********** [ 993.952328][T17987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 994.033506][ T2338] pvrusb2: Invalid write control endpoint [ 994.045684][ T30] audit: type=1400 audit(1281.011:1123): avc: denied { getopt } for pid=18007 comm="syz.6.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 994.121364][ T2338] pvrusb2: Invalid write control endpoint [ 994.128266][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 994.144733][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 994.152866][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 994.166523][ T2338] pvrusb2: Device being rendered inoperable [ 994.172548][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 994.180384][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 994.189590][ T2338] pvrusb2: Attached sub-driver cx25840 [ 994.196007][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 994.234992][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 994.538145][ T49] usb 10-1: USB disconnect, device number 101 [ 994.762782][ T5943] rtl8150 2-1:1.0: couldn't find required endpoints [ 994.772406][ T5943] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 994.793825][ T5943] usb 2-1: USB disconnect, device number 81 [ 994.985053][ T9] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 995.169183][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.180150][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.193525][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 995.204432][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 995.213050][ T9] usb 7-1: SerialNumber: syz [ 995.414457][T18035] tmpfs: Unknown parameter '; ' [ 995.480131][ T9] usb 7-1: 0:2 : does not exist [ 995.497975][ T9] usb 7-1: USB disconnect, device number 104 [ 995.692153][T11175] udevd[11175]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.744906][ T5947] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 995.838852][T18035] IPv6: Can't replace route, no match found [ 996.765000][T18056] loop7: detected capacity change from 0 to 16384 [ 997.271579][T10383] usb usb38-port1: attempt power cycle [ 998.240928][T10383] usb usb38-port1: unable to enumerate USB device [ 998.956804][T18056] loop7: detected capacity change from 16384 to 0 [ 998.963327][ C0] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 999.192876][T10383] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 999.353685][T10383] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 999.363403][T10383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.468143][T10383] usb 3-1: config 0 descriptor?? [ 999.521739][T10383] cp210x 3-1:0.0: cp210x converter detected [ 999.768458][T18073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.923136][T18073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.074915][T10383] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1000.307146][ T6097] usb 3-1: USB disconnect, device number 93 [ 1000.394022][ T6097] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1000.431287][ T6097] cp210x 3-1:0.0: device disconnected [ 1000.547446][T18078] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1000.656024][ T30] audit: type=1400 audit(4291403586.626:1124): avc: denied { mounton } for pid=18077 comm="syz.6.3020" path="/178/file0" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1000.809495][T18088] binder: 18086:18088 unknown command 0 [ 1000.815722][T18088] binder: 18086:18088 ioctl c0306201 200000000080 returned -22 [ 1000.925189][T18084] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1002.610216][T18110] IPv6: Can't replace route, no match found [ 1002.694821][T18112] tmpfs: Unknown parameter '; ' [ 1002.897478][T18114] IPv6: Can't replace route, no match found [ 1003.068091][T18116] netlink: 584 bytes leftover after parsing attributes in process `syz.9.3026'. [ 1003.953425][ T30] audit: type=1400 audit(4291403589.918:1125): avc: denied { write } for pid=18122 comm="syz.7.3033" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1004.091455][T18129] binder: 18128:18129 unknown command 0 [ 1004.097051][T18129] binder: 18128:18129 ioctl c0306201 200000000080 returned -22 [ 1004.211363][T18135] tmpfs: Unknown parameter '; ' [ 1004.459163][T18140] IPv6: Can't replace route, no match found [ 1004.577177][T18143] IPv6: Can't replace route, no match found [ 1004.628802][ T5947] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1004.639650][ T5947] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1004.652864][ T30] audit: type=1400 audit(4291403590.618:1126): avc: denied { connect } for pid=18148 comm="syz.6.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1004.694561][T16218] Bluetooth: hci5: Frame reassembly failed (-84) [ 1004.703983][T16218] Bluetooth: hci5: Frame reassembly failed (-84) [ 1004.740190][T10383] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1004.932123][T18157] binder: 18146:18157 ioctl 400c620e 200000000500 returned -22 [ 1004.955127][T18157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18157 comm=syz.9.3041 [ 1005.120888][T10383] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 1005.129173][T10383] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.139485][T10383] usb 2-1: config 0 has no interface number 0 [ 1005.145791][T10383] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1005.156148][T10383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.166303][T10383] usb 2-1: config 0 descriptor?? [ 1005.180076][T10383] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1006.775195][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 1006.900217][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1007.474621][ T978] usb 2-1: USB disconnect, device number 82 [ 1008.150746][T18181] sd 0:0:1:0: device reset [ 1008.613586][T18184] binder: 18183:18184 unknown command 0 [ 1008.619302][T18184] binder: 18183:18184 ioctl c0306201 200000000080 returned -22 [ 1009.659753][ T30] audit: type=1400 audit(4291403595.631:1127): avc: denied { ioctl } for pid=18206 comm="syz.7.3052" path="socket:[78114]" dev="sockfs" ino=78114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1010.162768][ T30] audit: type=1400 audit(4291403596.131:1128): avc: denied { accept } for pid=18206 comm="syz.7.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1010.772167][ T5823] Bluetooth: hci5: sending frame failed (-49) [ 1010.779526][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1010.796356][T10383] IPVS: starting estimator thread 0... [ 1010.805988][T18218] vcan0: entered allmulticast mode [ 1010.812921][T18218] vcan0: left allmulticast mode [ 1010.831830][T18218] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1010.889736][T18219] IPVS: using max 44 ests per chain, 105600 per kthread [ 1011.077182][ T49] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1011.237197][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1011.245489][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.245575][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1011.245795][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65522, setting to 1024 [ 1011.245854][ T49] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1011.246015][ T49] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1011.246082][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.341102][T18195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1011.342763][ T49] hub 2-1:1.0: bad descriptor, ignoring hub [ 1011.342788][ T49] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1011.343216][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 1011.343232][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 1011.343605][ T49] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1011.444259][T18223] binder: 18221:18223 ioctl c0306201 200000000640 returned -22 [ 1011.966686][ T49] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1012.084006][T18243] IPv6: Can't replace route, no match found [ 1012.136650][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 1012.144632][ T49] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1012.153365][ T49] usb 7-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1012.163884][ T49] usb 7-1: config 0 has no interface number 0 [ 1012.173708][ T49] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1012.183102][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.191616][ T49] usb 7-1: Product: syz [ 1012.195833][ T49] usb 7-1: Manufacturer: syz [ 1012.201832][ T49] usb 7-1: SerialNumber: syz [ 1012.213461][ T49] usb 7-1: config 0 descriptor?? [ 1012.224184][ T49] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1012.563006][T18170] usb 7-1: USB disconnect, device number 105 [ 1013.166810][ T978] usb 2-1: USB disconnect, device number 83 [ 1013.960499][ T30] audit: type=1400 audit(4291403599.933:1129): avc: denied { mount } for pid=18252 comm="syz.2.3067" name="/" dev="rpc_pipefs" ino=79127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1015.128575][T18275] tmpfs: Unknown parameter 'grequota~block_hardlimit' [ 1015.236086][T18281] tmpfs: Unknown parameter '; ' [ 1015.371948][T18282] IPv6: Can't replace route, no match found [ 1015.625243][T18286] loop7: detected capacity change from 0 to 16384 [ 1015.660698][ T5189] udevd[5189]: worker [11175] terminated by signal 33 (Unknown signal 33) [ 1015.669528][ T5189] udevd[5189]: worker [11175] failed while handling '/devices/virtual/block/loop7' [ 1015.855737][ C1] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 1015.865829][T18289] loop7: detected capacity change from 16384 to 0 [ 1016.254357][T10383] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1016.466365][T10383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.477512][T10383] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1016.486655][T10383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.628019][T10383] usb 2-1: config 0 descriptor?? [ 1017.439417][T10383] steelseries 0003:1038:12B6.003B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 1018.255371][T10383] usb 2-1: USB disconnect, device number 84 [ 1018.353318][ T978] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1018.613378][ T49] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1018.623186][ T978] usb 10-1: config 0 has an invalid interface number: 249 but max is 0 [ 1018.631516][ T978] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.642090][ T978] usb 10-1: config 0 has no interface number 0 [ 1018.649056][ T978] usb 10-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1019.118519][ T978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.141261][ T978] usb 10-1: config 0 descriptor?? [ 1019.156082][ T978] port100 10-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1019.193101][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 1019.199442][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.212040][ T49] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1019.221560][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.230271][ T49] usb 7-1: Product: syz [ 1019.234683][ T49] usb 7-1: Manufacturer: syz [ 1019.239260][ T49] usb 7-1: SerialNumber: syz [ 1019.246693][ T49] usb 7-1: config 0 descriptor?? [ 1019.258489][ T49] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1019.265186][ T49] usb 7-1: selecting invalid altsetting 1 [ 1020.073045][T18021] usb 7-1: USB disconnect, device number 106 [ 1021.143871][ T49] usb 10-1: USB disconnect, device number 102 [ 1021.582197][ T49] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1021.741608][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1021.747913][ T49] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1021.757287][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.776093][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1021.783909][ T49] pvrusb2: ********** [ 1021.787927][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1021.798117][ T49] pvrusb2: Important functionality might not be entirely working. [ 1021.806413][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1021.819643][ T49] pvrusb2: ********** [ 1022.184058][ T2338] pvrusb2: Invalid write control endpoint [ 1022.191480][ T5874] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1022.294834][ T2338] pvrusb2: Invalid write control endpoint [ 1022.301896][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1022.311163][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1022.319020][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1022.329177][ T2338] pvrusb2: Device being rendered inoperable [ 1022.335255][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1022.342601][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1022.350601][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1022.356311][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1022.368282][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.381491][ T5874] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1022.391309][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1022.400660][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.410339][ T5874] usb 10-1: config 0 descriptor?? [ 1022.590887][ T49] usb 2-1: USB disconnect, device number 85 [ 1022.853701][ T5874] steelseries 0003:1038:12B6.003C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 1023.689594][T18170] usb 10-1: USB disconnect, device number 103 [ 1023.860718][ T5874] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1024.040243][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 1024.046928][ T5874] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1024.056269][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.072634][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1024.079775][ T5874] pvrusb2: ********** [ 1024.083827][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1024.093985][ T5874] pvrusb2: Important functionality might not be entirely working. [ 1024.102142][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1024.113630][ T5874] pvrusb2: ********** [ 1024.446287][ T2338] pvrusb2: Invalid write control endpoint [ 1024.502664][ T2338] pvrusb2: Invalid write control endpoint [ 1024.515884][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1024.525618][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1024.533323][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1024.546168][ T2338] pvrusb2: Device being rendered inoperable [ 1024.552914][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1024.563860][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1024.573482][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1024.579267][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1024.589544][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1024.603639][T18373] loop7: detected capacity change from 0 to 16384 [ 1024.653013][ T5874] usb 7-1: USB disconnect, device number 107 [ 1024.770700][T18170] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1024.785696][T18376] loop7: detected capacity change from 16384 to 0 [ 1024.986679][T18170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.000988][T18170] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1025.020370][T18170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.029832][T18170] usb 3-1: config 0 descriptor?? [ 1025.179021][ T30] audit: type=1400 audit(4291403611.148:1130): avc: denied { relabelfrom } for pid=18382 comm="syz.7.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1025.203992][ T30] audit: type=1400 audit(4291403611.179:1131): avc: denied { relabelto } for pid=18382 comm="syz.7.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1025.539006][T18170] steelseries 0003:1038:12B6.003D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1025.706994][T18390] program syz.6.3104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1025.935680][ T5874] usb 3-1: USB disconnect, device number 94 [ 1026.719454][T18170] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1027.144729][T18399] binder: 18397:18399 ioctl 400c620e 200000000500 returned -22 [ 1027.155507][T18170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1027.166126][T18170] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1027.178830][T18170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1027.188742][T18170] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1027.204845][T18398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18398 comm=syz.1.3107 [ 1027.207240][T18170] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1027.228367][T18170] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.242749][T18170] usb 10-1: config 0 descriptor?? [ 1027.582191][T18170] hdpvr 10-1:0.0: unexpected answer of status request, len -71 [ 1027.590293][T18170] hdpvr 10-1:0.0: device init failed [ 1027.595624][T18170] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1027.606187][T18170] usb 10-1: USB disconnect, device number 104 [ 1027.618844][ T5874] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1027.768789][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 1027.777602][ T5874] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1027.787007][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.800364][ T5874] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1027.807510][ T5874] pvrusb2: ********** [ 1027.811520][ T5874] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1027.818573][T10383] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1027.821728][ T5874] pvrusb2: Important functionality might not be entirely working. [ 1027.837270][ T5874] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1027.849040][ T5874] pvrusb2: ********** [ 1027.980186][T10383] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.991410][T10383] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1028.001038][T10383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.009845][ T2338] pvrusb2: Invalid write control endpoint [ 1028.016909][T10383] usb 3-1: config 0 descriptor?? [ 1028.051999][ T2338] pvrusb2: Invalid write control endpoint [ 1028.057951][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1028.067389][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1028.077115][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1028.087720][ T2338] pvrusb2: Device being rendered inoperable [ 1028.094025][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1028.101342][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1028.111365][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1028.116900][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1028.127169][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1028.469045][ T5873] usb 2-1: USB disconnect, device number 86 [ 1028.902723][T10383] steelseries 0003:1038:12B6.003E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1029.502104][T10383] usb 3-1: USB disconnect, device number 95 [ 1030.707088][ T5873] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1032.197310][T18021] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1032.206162][ T5873] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1032.373929][T10383] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1032.441635][ T5873] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1032.451545][ T5873] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1032.460588][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.482907][T18444] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1032.492168][ T5873] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.502232][T18021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1032.521589][T18021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1032.552414][T10383] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1032.561891][T18021] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1032.572119][T10383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.592688][T18021] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1032.603031][T10383] usb 3-1: config 0 has no interface number 0 [ 1032.616797][T10383] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1032.631511][T18021] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1032.641132][T10383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.649675][T18021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.660388][T10383] usb 3-1: config 0 descriptor?? [ 1032.672197][T18021] usb 10-1: config 0 descriptor?? [ 1032.677805][ T5947] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1032.696210][T10383] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1032.858245][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.186340][T18021] hdpvr 10-1:0.0: unexpected answer of status request, len -71 [ 1033.208291][T18021] hdpvr 10-1:0.0: device init failed [ 1033.214829][T18021] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1033.227242][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.277432][ T5947] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1033.297781][T18021] usb 10-1: USB disconnect, device number 105 [ 1033.310618][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.433592][ T5947] usb 2-1: config 0 descriptor?? [ 1033.949306][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.011709][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.714442][ T5947] hid-led 0003:0FC5:B080.003F: item fetching failed at offset 0/3 [ 1034.722965][ T5947] hid-led 0003:0FC5:B080.003F: probe with driver hid-led failed with error -22 [ 1034.859330][ T5873] usb 3-1: USB disconnect, device number 96 [ 1034.871863][ T5947] usb 7-1: USB disconnect, device number 108 [ 1035.104614][ T5873] usb 2-1: USB disconnect, device number 87 [ 1036.403825][ T30] audit: type=1400 audit(4291403622.384:1132): avc: denied { write } for pid=18477 comm="syz.2.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1038.387284][T18505] loop7: detected capacity change from 0 to 16384 [ 1038.428714][T18021] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1038.608369][T18506] loop7: detected capacity change from 16384 to 0 [ 1038.608369][ C1] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1038.608402][ C1] Buffer I/O error on dev loop7, logical block 288, async page read [ 1038.636342][T18021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.707136][T18021] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1038.720380][T18516] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1038.729576][T18516] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1038.738563][T18516] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1038.756108][T18021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.787697][T18021] usb 3-1: config 0 descriptor?? [ 1039.251426][T18021] steelseries 0003:1038:12B6.0040: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1039.450625][ T5873] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1039.632666][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 1039.643836][ T5873] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1039.653309][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.700853][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1039.711400][ T5873] pvrusb2: ********** [ 1039.715830][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1039.727323][ T30] audit: type=1400 audit(4291403625.716:1133): avc: denied { append } for pid=18522 comm="syz.7.3140" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1039.750451][ T5873] pvrusb2: Important functionality might not be entirely working. [ 1039.758702][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1039.770364][ T5873] pvrusb2: ********** [ 1039.777548][ T5874] usb 3-1: USB disconnect, device number 97 [ 1040.444222][ T2338] pvrusb2: Invalid write control endpoint [ 1040.506231][ T2338] pvrusb2: Invalid write control endpoint [ 1040.511971][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1040.527353][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1040.535848][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1040.546313][ T2338] pvrusb2: Device being rendered inoperable [ 1040.552581][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1040.560718][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1040.569588][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1040.579944][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1040.590702][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1041.024945][T18537] loop7: detected capacity change from 0 to 16384 [ 1041.039066][T18021] usb 7-1: USB disconnect, device number 109 [ 1041.424334][ C1] I/O error, dev loop7, sector 14336 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1041.462636][ C1] I/O error, dev loop7, sector 14336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1041.472185][ C1] Buffer I/O error on dev loop7, logical block 1792, async page read [ 1041.480529][T18540] loop7: detected capacity change from 16384 to 0 [ 1041.758573][T10611] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1042.367372][T18565] binder: 18560:18565 ioctl 400c620e 200000000500 returned -22 [ 1042.414051][T18565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18565 comm=syz.6.3149 [ 1042.734851][T10611] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.746852][T10611] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1042.756109][T10611] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.773985][T10611] usb 10-1: config 0 descriptor?? [ 1042.912961][T18568] IPv6: Can't replace route, no match found [ 1043.027205][T18571] binder: 18569:18571 ioctl 400c620e 200000000500 returned -22 [ 1043.046757][T18571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18571 comm=syz.6.3151 [ 1043.203277][T10611] steelseries 0003:1038:12B6.0041: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 1044.261932][T18577] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3152'. [ 1044.271121][T18577] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3152'. [ 1044.280144][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3152'. [ 1044.657048][ T5873] usb 10-1: USB disconnect, device number 106 [ 1045.036207][T18581] fuse: Bad value for 'rootmode' [ 1045.170044][ T30] audit: type=1400 audit(4291403631.078:1134): avc: denied { create } for pid=18578 comm="syz.9.3153" name="#28" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1045.193290][ T30] audit: type=1400 audit(4291403631.088:1135): avc: denied { link } for pid=18578 comm="syz.9.3153" name="#28" dev="tmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1045.216146][ T30] audit: type=1400 audit(4291403631.088:1136): avc: denied { rename } for pid=18578 comm="syz.9.3153" name="#29" dev="tmpfs" ino=2903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1045.241676][ T30] audit: type=1326 audit(4291403631.148:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18578 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3498f8f749 code=0x7ffc0000 [ 1045.265633][ T30] audit: type=1326 audit(4291403631.148:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18578 comm="syz.9.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3498f8f749 code=0x7ffc0000 [ 1047.503560][T18598] tmpfs: Unknown parameter '; ' [ 1048.046707][T18598] IPv6: Can't replace route, no match found [ 1048.803824][T10611] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1048.988233][T10611] usb 10-1: Using ep0 maxpacket: 16 [ 1049.010723][T10611] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1049.019701][T10611] usb 10-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1049.033991][T10611] usb 10-1: config 0 has no interface number 0 [ 1049.052491][T10611] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1049.062121][T10611] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.070516][T10611] usb 10-1: Product: syz [ 1049.075199][T10611] usb 10-1: Manufacturer: syz [ 1049.079978][T10611] usb 10-1: SerialNumber: syz [ 1049.189115][T10611] usb 10-1: config 0 descriptor?? [ 1049.226748][T10611] uvcvideo 10-1:0.105: probe with driver uvcvideo failed with error -22 [ 1049.293208][T18613] loop7: detected capacity change from 0 to 16384 [ 1049.421454][T10611] usb 10-1: USB disconnect, device number 107 [ 1049.498359][T18616] loop7: detected capacity change from 16384 to 0 [ 1049.498490][ C0] I/O error, dev loop7, sector 15360 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1049.585579][T18622] bond3: entered allmulticast mode [ 1049.667578][T18170] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1049.776694][ T5947] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1049.989416][T18170] usb 2-1: Using ep0 maxpacket: 16 [ 1049.996730][T18170] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 1050.007474][T18170] usb 2-1: config 9 has no interface number 0 [ 1050.015201][T18170] usb 2-1: config 9 interface 27 has no altsetting 0 [ 1050.026028][T18170] usb 2-1: language id specifier not provided by device, defaulting to English [ 1050.037341][T18170] usb 2-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 1050.046744][T18170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.055300][T18170] usb 2-1: Product: syz [ 1050.059719][T18170] usb 2-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 1050.085580][T18170] usb 2-1: SerialNumber: syz [ 1050.091241][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1050.100944][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1050.110951][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1050.122244][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1050.132462][ T5947] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1050.142196][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.154685][ T5947] usb 3-1: config 0 descriptor?? [ 1050.182809][T18629] tmpfs: Unknown parameter '; ' [ 1050.288196][T10611] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1050.292223][T18630] IPv6: Can't replace route, no match found [ 1050.525242][T10611] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1050.535234][T10611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.657638][T10611] usb 7-1: config 0 descriptor?? [ 1050.667004][ T5947] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 1050.684417][ T5947] hdpvr 3-1:0.0: device init failed [ 1050.694968][ T5947] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1050.711062][ T5947] usb 3-1: USB disconnect, device number 98 [ 1051.963287][T10611] ath6kl: Unsupported hardware version: 0x0 [ 1051.981570][T10611] ath6kl: Failed to init ath6kl core: -22 [ 1051.989756][T10611] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1052.760570][ T30] audit: type=1804 audit(4291403638.752:1139): pid=18645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3172" name="/newroot/560/file0" dev="tmpfs" ino=2945 res=1 errno=0 [ 1053.792647][T18170] usb 2-1: Could not find all expected endpoints [ 1053.808784][T18170] usb 2-1: USB disconnect, device number 88 [ 1054.079980][T18676] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3173'. [ 1054.089135][T18676] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3173'. [ 1054.098237][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3173'. [ 1054.124192][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.149101][T18672] 9p: Could not find request transport: uix [ 1054.213453][T18170] usb 7-1: USB disconnect, device number 110 [ 1055.085129][ T5873] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1055.126474][T18691] binder: 18689:18691 ioctl 400c620e 200000000500 returned -22 [ 1055.146113][T18170] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1055.146978][T18691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18691 comm=syz.7.3181 [ 1055.485777][T18170] usb 7-1: Using ep0 maxpacket: 16 [ 1055.493452][T18170] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1055.503924][T18170] usb 7-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1055.514946][T18170] usb 7-1: config 0 has no interface number 0 [ 1055.523116][T18170] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1055.549025][T18170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.557920][T18170] usb 7-1: Product: syz [ 1055.562146][T18170] usb 7-1: Manufacturer: syz [ 1055.568769][ T5873] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 1055.569056][T18170] usb 7-1: SerialNumber: syz [ 1055.577943][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.583850][T18170] usb 7-1: config 0 descriptor?? [ 1055.597033][ T5873] usb 2-1: config 0 has no interface number 0 [ 1055.600528][T18170] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1055.603814][ T5873] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1055.626371][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.637576][ T5873] usb 2-1: config 0 descriptor?? [ 1055.645466][ T5873] port100 2-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1055.710038][T18693] bond8: entered allmulticast mode [ 1056.071323][ T5873] usb 7-1: USB disconnect, device number 111 [ 1057.558885][T18170] usb 2-1: USB disconnect, device number 89 [ 1057.821516][T18707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=18707 comm=syz.1.3185 [ 1057.973563][ T5873] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1058.123652][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 1058.130364][ T5873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.140638][ T5873] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1058.155331][T18688] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1058.163463][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1058.175519][ T5873] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.196270][ T5873] usb 10-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1058.205513][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.213736][ T5873] usb 10-1: Product: syz [ 1058.218486][ T5873] usb 10-1: Manufacturer: syz [ 1058.223136][ T5873] usb 10-1: SerialNumber: syz [ 1058.229518][ T5873] usb 10-1: config 0 descriptor?? [ 1058.301807][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1058.313377][ T5873] rc_core: IR keymap rc-xbox-dvd not found [ 1058.319212][ T5873] Registered IR keymap rc-empty [ 1058.324402][T18688] usb 2-1: Using ep0 maxpacket: 16 [ 1058.331095][T18688] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.342724][ T5873] rc rc0: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1058.351672][T18688] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1058.360195][ T5873] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input74 [ 1058.369780][T18688] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1058.381780][T18688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.398175][T18688] usb 2-1: config 0 descriptor?? [ 1058.467453][T18703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.493636][T18703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.507488][ T5947] usb 10-1: USB disconnect, device number 108 [ 1058.507581][ C1] xbox_remote 10-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1058.841185][T18715] [U]  [ 1058.844989][T18715] [U] K{ [ 1058.850274][T18715] [U] T 1ŠFFˊ`GJǘGO/MC [ 1058.862374][T18715] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1058.880837][T18715] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1058.917384][T18715] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1058.972582][T18688] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1059.158622][T18715] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1059.682344][T18715] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1059.708565][T18715] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1059.726073][T18715] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1060.191525][T18728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.215740][T18728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.556199][T18715] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1060.567193][T18715] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1060.583734][T18715] [U] 22Ʃ۩X?0;3U [ 1060.588633][T18715] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1060.615940][T18742] bond9: entered allmulticast mode [ 1060.950009][T18715] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1060.997632][T18715] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1061.051951][T18688] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1061.051984][T18715] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1061.087900][T18715] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1061.119065][T18715] [U] EC [ 1061.132540][T18715] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1061.223969][T18688] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 1061.389836][T18714] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1061.518541][T10383] usb 2-1: USB disconnect, device number 90 [ 1061.893236][T18688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.208218][T18688] usb 3-1: config 0 has no interface number 0 [ 1062.214465][T18688] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1062.223965][T18688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.234092][T18688] usb 3-1: config 0 descriptor?? [ 1062.256104][T18688] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1064.960731][ T49] usb 3-1: USB disconnect, device number 99 [ 1066.205838][T18803] bond7: entered allmulticast mode [ 1068.160994][T18818] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3211'. [ 1069.354617][T18832] netlink: 360 bytes leftover after parsing attributes in process `syz.9.3214'. [ 1070.054002][T18849] /dev/nullb0: Can't open blockdev [ 1070.087686][T10611] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1070.207006][T18851] fuse: Unknown parameter 'grp_id' [ 1070.261732][ T30] audit: type=1326 audit(4291403656.261:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.288582][ T30] audit: type=1326 audit(4291403656.291:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.313474][ T30] audit: type=1326 audit(4291403656.291:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.337273][T10611] usb 7-1: Using ep0 maxpacket: 32 [ 1070.339206][T10611] usb 7-1: config index 0 descriptor too short (expected 6683, got 27) [ 1070.346582][ T30] audit: type=1326 audit(4291403656.291:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.351002][T10611] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1070.351027][T10611] usb 7-1: config 0 has no interface number 0 [ 1070.351064][T10611] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1070.351089][T10611] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1070.411948][ T30] audit: type=1326 audit(4291403656.291:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.435830][ T30] audit: type=1326 audit(4291403656.291:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.462706][T10611] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1070.472081][ T30] audit: type=1326 audit(4291403656.291:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.482141][T10611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.496083][ T30] audit: type=1326 audit(4291403656.391:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.507586][T10611] usb 7-1: Product: syz [ 1070.528927][ T30] audit: type=1326 audit(4291403656.391:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.555954][T10611] usb 7-1: Manufacturer: syz [ 1070.556177][ T30] audit: type=1326 audit(4291403656.391:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.7.3220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ecb8f749 code=0x7ffc0000 [ 1070.561331][T10611] usb 7-1: SerialNumber: syz [ 1070.592270][T10611] usb 7-1: config 0 descriptor?? [ 1070.803073][T18860] netlink: 204 bytes leftover after parsing attributes in process `syz.9.3221'. [ 1070.933881][T18860] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3221'. [ 1071.075546][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3221'. [ 1071.274603][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.307299][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.518568][T10611] appletouch 7-1:0.85: Geyser mode initialized. [ 1072.543816][T10611] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input75 [ 1073.524192][ T49] usb 7-1: USB disconnect, device number 112 [ 1073.562457][ T49] appletouch 7-1:0.85: input: appletouch disconnected [ 1074.145392][T18170] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1074.295288][T18170] usb 3-1: Using ep0 maxpacket: 32 [ 1074.302656][T18170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.313410][T18170] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1074.322812][T18170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.337522][T18170] usb 3-1: config 0 descriptor?? [ 1074.349450][T18170] dvb-usb: found a 'TeVii S662' in warm state. [ 1074.355853][T18170] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1074.362042][T18170] dvb-usb: bulk message failed: -22 (2/0) [ 1074.370553][T18170] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1074.383452][T18170] dvbdev: DVB: registering new adapter (TeVii S662) [ 1074.391985][T18170] usb 3-1: media controller created [ 1074.397852][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.403774][T18170] dw2102: i2c transfer failed. [ 1074.409490][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.415718][T18170] dw2102: i2c transfer failed. [ 1074.421483][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.425529][T10611] usb 7-1: new full-speed USB device number 113 using dummy_hcd [ 1074.430957][T18170] dw2102: i2c transfer failed. [ 1074.439721][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.445971][T18170] dw2102: i2c transfer failed. [ 1074.451007][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.458617][T18170] dw2102: i2c transfer failed. [ 1074.463680][T18170] dvb-usb: bulk message failed: -22 (6/0) [ 1074.469887][T18170] dw2102: i2c transfer failed. [ 1074.474699][T18170] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1074.488769][T18170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.506587][T18170] dvb-usb: bulk message failed: -22 (3/0) [ 1074.515271][T18170] dw2102: command 0x0e transfer failed. [ 1074.520869][T18170] dvb-usb: bulk message failed: -22 (3/0) [ 1074.526821][T18170] dw2102: command 0x0e transfer failed. [ 1074.600188][T10611] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 1074.609545][T10611] usb 7-1: config 0 has no interface number 0 [ 1074.616015][T10611] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 1074.629256][T10611] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1074.638451][T10611] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1074.646749][T10611] usb 7-1: Product: syz [ 1074.650949][T10611] usb 7-1: Manufacturer: syz [ 1074.655684][T10611] usb 7-1: SerialNumber: syz [ 1074.666118][T10611] usb 7-1: config 0 descriptor?? [ 1074.673895][T18913] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1074.683173][T10611] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 1074.694873][T10611] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 1074.714775][T10611] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 1074.731690][T10611] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1074.750269][T10611] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 1074.759558][T10611] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1074.770363][T10611] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 1074.779576][T10611] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1074.790316][T10611] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 1074.799805][T10611] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1074.835052][T18170] dvb-usb: bulk message failed: -22 (3/0) [ 1074.840859][T18170] dw2102: command 0x0e transfer failed. [ 1074.850325][T18170] dvb-usb: bulk message failed: -22 (3/0) [ 1074.856653][T18170] dw2102: command 0x0e transfer failed. [ 1074.862597][T18170] dvb-usb: bulk message failed: -22 (1/0) [ 1074.868753][T18170] dw2102: command 0x51 transfer failed. [ 1074.874365][T18170] dvb-usb: bulk message failed: -22 (5/0) [ 1074.880318][T18170] dw2102: i2c probe for address 0x68 failed. [ 1074.886468][T18170] dvb-usb: bulk message failed: -22 (5/0) [ 1074.892191][T18170] dw2102: i2c probe for address 0x69 failed. [ 1074.899856][T18170] dvb-usb: bulk message failed: -22 (5/0) [ 1074.909886][T18170] dw2102: i2c probe for address 0x6a failed. [ 1074.916563][T18170] dw2102: probing for demodulator failed. Is the external power switched on? [ 1074.926370][T18170] dvb-usb: no frontend was attached by 'TeVii S662' [ 1075.258779][T18913] netlink: 'syz.6.3237': attribute type 4 has an invalid length. [ 1075.269467][T10611] usb 7-1: USB disconnect, device number 113 [ 1075.275009][T18170] rc_core: IR keymap rc-tt-1500 not found [ 1075.279763][T10611] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1075.282528][T18170] Registered IR keymap rc-empty [ 1075.292929][T10611] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1075.310743][T18170] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1075.423224][T10611] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1075.440125][T18170] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input76 [ 1075.444561][T10611] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1075.459629][T18170] dvb-usb: schedule remote query interval to 250 msecs. [ 1075.466793][T18170] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1076.011674][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 1076.012133][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1076.012144][ T30] audit: type=1400 audit(4291403662.014:1151): avc: denied { unmount } for pid=7447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1076.017526][ T5947] dw2102: i2c transfer failed. [ 1076.044109][T10611] keyspan 7-1:0.107: device disconnected [ 1076.055288][T18170] dvb-usb: TeVii S662 successfully initialized and connected. [ 1076.058324][T18170] usb 3-1: USB disconnect, device number 100 [ 1076.144405][T18170] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1077.226470][T18934] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1079.447082][T18971] tmpfs: Unknown parameter '; ' [ 1079.665123][T18974] IPv6: Can't replace route, no match found [ 1080.083897][T10611] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1080.173676][ T30] audit: type=1400 audit(4291403666.176:1152): avc: denied { mount } for pid=18985 comm="syz.6.3255" name="/" dev="hugetlbfs" ino=82030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1080.176938][T18986] SET target dimension over the limit! [ 1080.231690][ T30] audit: type=1400 audit(4291403666.236:1153): avc: denied { mounton } for pid=18985 comm="syz.6.3255" path="/file0" dev="hugetlbfs" ino=82031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1080.258806][T10611] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1080.267543][T10611] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1080.278311][T10611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1080.287608][T10611] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1080.298631][T10611] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1080.313471][T10611] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1080.322722][T10611] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1080.330744][T10611] usb 3-1: Product: syz [ 1080.335057][ T5873] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 1080.343466][T10611] usb 3-1: Manufacturer: syz [ 1080.355566][T10611] cdc_wdm 3-1:1.0: skipping garbage [ 1080.360825][T10611] cdc_wdm 3-1:1.0: skipping garbage [ 1080.369175][T10611] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1080.375188][T10611] cdc_wdm 3-1:1.0: Unknown control protocol [ 1080.492258][ T5873] usb 2-1: Invalid ep0 maxpacket: 64 [ 1080.505804][T18999] IPv6: Can't replace route, no match found [ 1080.552389][ T5947] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1080.985053][ T30] audit: type=1400 audit(4291403666.996:1154): avc: denied { read write } for pid=18978 comm="syz.2.3254" name="cdc-wdm0" dev="devtmpfs" ino=4597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1081.010031][ T30] audit: type=1400 audit(4291403667.016:1155): avc: denied { open } for pid=18978 comm="syz.2.3254" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1081.040924][T18979] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.041959][ T5873] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 1081.055737][T18979] binder: 18978:18979 ioctl 4018620d 2000000000c0 returned -16 [ 1081.065834][T18979] binder: 18978:18979 ioctl 8004551a 200000000080 returned -22 [ 1081.133956][ T5947] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1081.143515][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.155866][ T5947] usb 10-1: config 0 descriptor?? [ 1081.208353][ T5873] usb 2-1: Invalid ep0 maxpacket: 64 [ 1081.264017][ T5873] usb usb2-port1: attempt power cycle [ 1081.711677][ T5873] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 1081.720186][ T5947] ath6kl: Unsupported hardware version: 0xff [ 1081.726990][ T5947] ath6kl: Failed to init ath6kl core: -22 [ 1081.733358][ T5947] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1081.737011][ T5873] usb 2-1: Invalid ep0 maxpacket: 64 [ 1081.781915][T18170] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1081.865929][ T30] audit: type=1400 audit(4291403667.877:1156): avc: denied { write } for pid=19010 comm="syz.7.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1081.887515][ T5873] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 1081.912143][ T5873] usb 2-1: Invalid ep0 maxpacket: 64 [ 1081.917762][ T5873] usb usb2-port1: unable to enumerate USB device [ 1081.933004][T18170] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.944572][T18170] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1081.953926][T18170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.964316][T18170] usb 7-1: config 0 descriptor?? [ 1082.384623][T18170] steelseries 0003:1038:12B6.0043: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0 [ 1082.835531][ T5947] usb 3-1: USB disconnect, device number 101 [ 1082.867499][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3262'. [ 1082.887220][ T30] audit: type=1400 audit(4291403668.897:1157): avc: denied { write } for pid=19015 comm="syz.7.3262" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1082.935594][T19018] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1082.967453][T19020] tmpfs: Unknown parameter '; ' [ 1083.073958][T19020] IPv6: Can't replace route, no match found [ 1083.109028][T19022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1083.705836][T10383] usb 10-1: USB disconnect, device number 109 [ 1083.805042][T19034] lo: Caught tx_queue_len zero misconfig [ 1084.386307][T10611] usb 7-1: USB disconnect, device number 114 [ 1084.440435][ T5873] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1084.601446][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 1084.609831][ T5873] usb 2-1: config 4 has an invalid interface number: 196 but max is 0 [ 1084.620887][ T5873] usb 2-1: config 4 has no interface number 0 [ 1084.627178][ T5873] usb 2-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=21.39 [ 1084.638841][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.875907][T19061] netlink: 'syz.2.3276': attribute type 10 has an invalid length. [ 1085.385815][T19067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.395973][T19067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.991988][T19088] ptrace attach of "./syz-executor exec"[19089] was attempted by "./syz-executor exec"[19088] [ 1087.252858][ T5873] usb 2-1: string descriptor 0 read error: -71 [ 1087.276135][ T5873] keyspan 2-1:4.196: Keyspan - (without firmware) converter detected [ 1087.313193][ T5873] usb 2-1: USB disconnect, device number 95 [ 1087.336884][ T5873] keyspan 2-1:4.196: device disconnected [ 1088.066237][T19097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.100689][T19097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1088.111207][T19097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1088.138265][T19097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1088.145912][T19097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1088.156042][T17196] vivid-007: reconnect [ 1089.169869][ T30] audit: type=1400 audit(4291403675.180:1158): avc: denied { write } for pid=19113 comm="syz.2.3287" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1089.204929][T19114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1089.279017][ T8008] bond0: (slave syz_tun): Releasing backup interface [ 1089.303818][T19096] chnl_net:caif_netlink_parms(): no params data found [ 1089.359894][T19117] loop7: detected capacity change from 0 to 16384 [ 1089.581631][ T30] audit: type=1400 audit(4291403675.591:1159): avc: denied { ioctl } for pid=19119 comm="syz.2.3289" path="socket:[82300]" dev="sockfs" ino=82300 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1089.638040][T19117] loop7: detected capacity change from 16384 to 0 [ 1089.641760][ C0] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 14 prio class 2 [ 1089.716905][T19096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.727855][T19096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.735117][T19096] bridge_slave_0: entered allmulticast mode [ 1089.742157][T19096] bridge_slave_0: entered promiscuous mode [ 1089.775156][T19096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.782944][T19096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.790269][T19096] bridge_slave_1: entered allmulticast mode [ 1089.797050][T19096] bridge_slave_1: entered promiscuous mode [ 1089.831261][T19096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.842710][T19096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.869290][T19096] team0: Port device team_slave_0 added [ 1089.876951][T19096] team0: Port device team_slave_1 added [ 1089.912411][T19096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.920028][T19096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.953536][T19096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.965344][T19096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.972914][T19096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.005534][T19096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.103061][T19096] hsr_slave_0: entered promiscuous mode [ 1090.109417][T19096] hsr_slave_1: entered promiscuous mode [ 1090.115409][T19096] debugfs: 'hsr0' already exists in 'hsr' [ 1090.121234][T19096] Cannot create hsr debugfs directory [ 1090.207455][T19097] Bluetooth: hci5: command tx timeout [ 1090.808488][T19131] can0: slcan on ttyS3. [ 1090.835222][T16186] team0: left allmulticast mode [ 1090.841619][T16186] bridge0: port 1(team0) entered disabled state [ 1090.877809][ T5947] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1091.026447][T16186] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1091.111540][ T30] audit: type=1400 audit(4291403677.121:1160): avc: denied { append } for pid=19138 comm="syz.6.3293" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1091.367553][ T30] audit: type=1400 audit(4291403677.382:1161): avc: denied { map } for pid=19138 comm="syz.6.3293" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1091.396846][ T30] audit: type=1400 audit(4291403677.392:1162): avc: denied { execute } for pid=19138 comm="syz.6.3293" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1091.492267][T16186] bond0 (unregistering): Released all slaves [ 1091.696220][T16186] bond1 (unregistering): Released all slaves [ 1091.711209][T16186] bond2 (unregistering): Released all slaves [ 1091.725710][T16186] bond3 (unregistering): Released all slaves [ 1091.740583][T16186] bond4 (unregistering): Released all slaves [ 1091.758147][T16186] bond5 (unregistering): Released all slaves [ 1091.773247][T16186] bond6 (unregistering): Released all slaves [ 1091.948374][T16186] tipc: Disabling bearer [ 1091.957378][T19129] can0 (unregistered): slcan off ttyS3. [ 1091.963460][T16186] tipc: Left network mode [ 1092.167016][T18021] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1092.299130][T19097] Bluetooth: hci5: command tx timeout [ 1092.491297][ T5873] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1092.510073][T18021] usb 3-1: Using ep0 maxpacket: 8 [ 1092.534228][T18021] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 1092.547073][T18021] usb 3-1: config 0 has no interface number 0 [ 1092.563620][T18021] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1092.602693][T18021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.621426][T18021] usb 3-1: Product: syz [ 1092.625660][T18021] usb 3-1: Manufacturer: syz [ 1092.631556][T18021] usb 3-1: SerialNumber: syz [ 1092.663381][T19096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1092.673764][T18021] usb 3-1: config 0 descriptor?? [ 1092.702865][T19096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1092.717754][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1092.727571][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1092.747035][ T5873] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1092.756297][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.764295][ T5873] usb 7-1: Product: syz [ 1092.768531][ T5873] usb 7-1: Manufacturer: syz [ 1092.773127][ T5873] usb 7-1: SerialNumber: syz [ 1092.779145][ T5873] usb 7-1: config 0 descriptor?? [ 1092.800799][ T5873] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress d4 [ 1092.822802][T18021] msi2500 3-1:0.246: Registered as swradio24 [ 1092.832062][T18021] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1092.870317][T16186] hsr_slave_0: left promiscuous mode [ 1092.885112][T16186] hsr_slave_1: left promiscuous mode [ 1093.127928][T10611] usb 3-1: USB disconnect, device number 102 [ 1093.222348][ T5873] usb 7-1: USB disconnect, device number 115 [ 1093.282278][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.896569][ T30] audit: type=1400 audit(4291403679.913:1163): avc: denied { read } for pid=19157 comm="syz.9.3297" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1093.897809][T19158] /dev/nullb0: Can't open blockdev [ 1093.918904][ T30] audit: type=1400 audit(4291403679.913:1164): avc: denied { open } for pid=19157 comm="syz.9.3297" path="/586/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1093.978075][ T30] audit: type=1400 audit(4291403679.913:1165): avc: denied { ioctl } for pid=19157 comm="syz.9.3297" path="/586/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1094.197989][T19166] netlink: 'syz.2.3302': attribute type 16 has an invalid length. [ 1094.225360][T19166] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1094.375344][T19097] Bluetooth: hci5: command tx timeout [ 1094.419162][ T30] audit: type=1400 audit(4291403680.433:1166): avc: denied { setopt } for pid=19165 comm="syz.9.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1095.562946][T19096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.577073][T19096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1095.782634][T19096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.805026][T19096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.815993][T16210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.823207][T16210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.857087][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.864296][T16210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.914850][T19187] IPv6: Can't replace route, no match found [ 1095.994625][ T5873] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1096.102139][T16186] IPVS: stop unused estimator thread 0... [ 1096.147120][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.158421][ T5873] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1096.169137][T19204] nfs4: Unknown parameter 'rdmaHX' [ 1096.185437][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.197254][T19096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.251349][T19096] veth0_vlan: entered promiscuous mode [ 1096.261893][T19096] veth1_vlan: entered promiscuous mode [ 1096.281958][T19096] veth0_macvtap: entered promiscuous mode [ 1096.294474][T19096] veth1_macvtap: entered promiscuous mode [ 1096.309025][T19096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.321630][T19096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.334420][T16171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.357119][ T5873] usb 7-1: config 0 descriptor?? [ 1096.360860][T16171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.375618][T16171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.402286][T16171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.444638][T18021] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1096.453356][T19097] Bluetooth: hci5: command tx timeout [ 1096.475214][T16171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.495431][T16171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.524845][T16171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.532699][T16171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.596401][T19206] 9p: Bad value for 'wfdno' [ 1096.704119][T18021] usb 10-1: Using ep0 maxpacket: 8 [ 1096.711060][T18021] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.721748][T18021] usb 10-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1096.735290][T18021] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1096.743091][T18021] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.752667][T18021] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1096.761157][T18021] usb 10-1: SerialNumber: syz [ 1096.807427][ T5873] steelseries 0003:1038:12B6.0044: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0 [ 1096.812841][T18021] cdc_ether 10-1:1.0: skipping garbage [ 1096.835919][T18021] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 1097.320316][T18021] usb 10-1: USB disconnect, device number 110 [ 1097.830229][ T5874] usb 7-1: USB disconnect, device number 116 [ 1097.865273][T19225] bond1: entered allmulticast mode [ 1098.344840][T19232] bond5: entered allmulticast mode [ 1098.656632][T19244] FAULT_INJECTION: forcing a failure. [ 1098.656632][T19244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.676242][T19244] CPU: 0 UID: 0 PID: 19244 Comm: syz.9.3316 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.676273][T19244] Tainted: [L]=SOFTLOCKUP [ 1098.676280][T19244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1098.676291][T19244] Call Trace: [ 1098.676297][T19244] [ 1098.676304][T19244] dump_stack_lvl+0x16c/0x1f0 [ 1098.676336][T19244] should_fail_ex+0x512/0x640 [ 1098.676359][T19244] strncpy_from_user+0x3b/0x2e0 [ 1098.676380][T19244] getname_flags.part.0+0x8f/0x550 [ 1098.676401][T19244] getname_flags+0x93/0xf0 [ 1098.676426][T19244] user_path_at+0x24/0x60 [ 1098.676449][T19244] __x64_sys_mount+0x1fb/0x310 [ 1098.676466][T19244] ? __pfx___x64_sys_mount+0x10/0x10 [ 1098.676480][T19244] do_syscall_64+0xcd/0xf80 [ 1098.676498][T19244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.676510][T19244] RIP: 0033:0x7f3498f8f749 [ 1098.676520][T19244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.676531][T19244] RSP: 002b:00007f3499ee6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1098.676545][T19244] RAX: ffffffffffffffda RBX: 00007f34991e5fa0 RCX: 00007f3498f8f749 [ 1098.676562][T19244] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1098.676573][T19244] RBP: 00007f3499ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.676584][T19244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.676595][T19244] R13: 00007f34991e6038 R14: 00007f34991e5fa0 R15: 00007ffe30b60298 [ 1098.676620][T19244] [ 1099.176491][T19251] netlink: 'syz.7.3318': attribute type 10 has an invalid length. [ 1100.197137][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1100.811656][T19266] binder: 19264:19266 ioctl 400c620e 200000000500 returned -22 [ 1100.833383][T19266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19266 comm=syz.6.3322 [ 1101.213055][T19274] syzkaller0: entered promiscuous mode [ 1101.214180][ T30] audit: type=1326 audit(4291403687.237:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19270 comm="syz.6.3324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcea058f749 code=0x0 [ 1101.218680][T19274] syzkaller0: entered allmulticast mode [ 1101.443807][ T30] audit: type=1400 audit(4291403687.467:1168): avc: denied { ioctl } for pid=19270 comm="syz.6.3324" path="socket:[83228]" dev="sockfs" ino=83228 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1101.487922][T19279] bond2: entered allmulticast mode [ 1102.102946][T19305] tmpfs: Unknown parameter '; ' [ 1102.298706][T19306] IPv6: Can't replace route, no match found [ 1102.841046][T10383] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1103.026834][ T5947] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1103.121774][T10383] usb 2-1: Using ep0 maxpacket: 8 [ 1103.133313][T10383] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1103.144560][T10383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.194154][T10383] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1103.205709][T10383] pvrusb2: ********** [ 1103.210421][T10383] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1103.221416][ T5947] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1103.229983][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.240844][T10383] pvrusb2: Important functionality might not be entirely working. [ 1103.248985][T10383] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1103.260962][T10383] pvrusb2: ********** [ 1103.265841][ T5947] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1103.276252][ T5947] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1103.287398][ T5947] usb 7-1: Manufacturer: syz [ 1103.296448][ T5947] usb 7-1: config 0 descriptor?? [ 1103.616628][T19314] hfsplus: Unknown parameter 'barrier@' [ 1103.623365][ T2338] pvrusb2: Invalid write control endpoint [ 1103.627597][T19314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.645659][T19314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.654468][ T5947] rc_core: IR keymap rc-hauppauge not found [ 1103.660991][ T5947] Registered IR keymap rc-empty [ 1103.671605][ T5947] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1103.689253][ T5947] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input77 [ 1103.811574][ T2338] pvrusb2: Invalid write control endpoint [ 1103.825570][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1103.836459][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1103.844140][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1103.854683][ T2338] pvrusb2: Device being rendered inoperable [ 1103.864076][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1103.871461][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1103.879764][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1103.898054][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1103.908677][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1103.918132][T19310] m920x_read = error: -19 [ 1104.187132][ T5874] usb 2-1: USB disconnect, device number 96 [ 1104.388461][T19336] IPv6: Can't replace route, no match found [ 1105.118243][T19338] netlink: 'syz.2.3342': attribute type 10 has an invalid length. [ 1105.235395][T19345] tmpfs: Bad value for 'mpol' [ 1105.332051][ T30] audit: type=1400 audit(4291403691.349:1169): avc: denied { map } for pid=19346 comm="syz.2.3344" path="pipe:[83459]" dev="pipefs" ino=83459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1105.355827][ T30] audit: type=1400 audit(4291403691.349:1170): avc: denied { create } for pid=19351 comm="syz.7.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1106.091283][T18021] usb 7-1: USB disconnect, device number 117 [ 1106.141498][T19361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1108.184534][ T30] audit: type=1400 audit(4291403694.200:1171): avc: denied { setattr } for pid=19394 comm="syz.1.3357" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1108.294231][ T30] audit: type=1400 audit(4291403694.310:1172): avc: denied { write } for pid=19391 comm="syz.6.3356" name="file0" dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1108.368942][T19398] netlink: 'syz.6.3356': attribute type 5 has an invalid length. [ 1108.468912][T19398] overlay: Unknown parameter 'mask' [ 1108.709052][T19406] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1108.722762][ T30] audit: type=1400 audit(4291403694.730:1173): avc: denied { mounton } for pid=19399 comm="syz.9.3358" path="/syzcgroup/cpu/syz9/cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1109.553184][T19414] IPv6: Can't replace route, no match found [ 1109.827569][ T30] audit: type=1800 audit(4291403695.791:1174): pid=19421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3363" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1109.937639][T18021] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1110.012091][T18170] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1110.077429][T18021] usb 7-1: device descriptor read/64, error -71 [ 1110.102331][ T5873] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1110.189779][T18170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.201537][T18170] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1110.211577][T18170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.228732][T18170] usb 3-1: config 0 descriptor?? [ 1110.257272][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 1110.263744][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.274707][ T5873] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1110.284111][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.297397][ T5873] usb 2-1: config 0 descriptor?? [ 1110.317300][T18021] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1110.447456][T18021] usb 7-1: device descriptor read/64, error -71 [ 1110.639322][T18021] usb usb7-port1: attempt power cycle [ 1110.655194][T18170] steelseries 0003:1038:12B6.0045: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 1110.927122][ T49] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1111.086914][ T49] usb 10-1: Using ep0 maxpacket: 8 [ 1111.098024][ T49] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1111.108064][ T49] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.154650][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1111.166250][ T49] pvrusb2: ********** [ 1111.166853][T18021] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1111.170860][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1111.189248][ T49] pvrusb2: Important functionality might not be entirely working. [ 1111.197822][T18021] usb 7-1: device descriptor read/8, error -71 [ 1111.198108][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1111.215972][ T49] pvrusb2: ********** [ 1111.351348][ T2338] pvrusb2: Invalid write control endpoint [ 1111.393109][ T2338] pvrusb2: Invalid write control endpoint [ 1111.399595][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1111.413581][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1111.421327][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1111.432167][ T2338] pvrusb2: Device being rendered inoperable [ 1111.438248][T18021] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1111.446138][ T2338] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1111.453567][ T2338] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 1111.463202][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1111.468806][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1111.480304][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1111.489890][T18021] usb 7-1: device descriptor read/8, error -71 [ 1111.559364][T19425] m920x_read = error: -19 [ 1111.697183][T18021] usb usb7-port1: unable to enumerate USB device [ 1111.761410][T18021] usb 10-1: USB disconnect, device number 111 [ 1112.478581][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 1112.484712][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1112.575133][T10611] usb 3-1: USB disconnect, device number 103 [ 1112.582249][ T5873] usb 2-1: USB disconnect, device number 97 [ 1113.600611][T19444] FAULT_INJECTION: forcing a failure. [ 1113.600611][T19444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.614982][T19444] CPU: 0 UID: 0 PID: 19444 Comm: syz.1.3373 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.615001][T19444] Tainted: [L]=SOFTLOCKUP [ 1113.615005][T19444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1113.615012][T19444] Call Trace: [ 1113.615016][T19444] [ 1113.615021][T19444] dump_stack_lvl+0x16c/0x1f0 [ 1113.615042][T19444] should_fail_ex+0x512/0x640 [ 1113.615057][T19444] _copy_to_user+0x32/0xd0 [ 1113.615072][T19444] simple_read_from_buffer+0xcb/0x170 [ 1113.615088][T19444] proc_fail_nth_read+0x197/0x240 [ 1113.615101][T19444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.615113][T19444] ? rw_verify_area+0xcf/0x6c0 [ 1113.615127][T19444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.615138][T19444] vfs_read+0x1e4/0xcf0 [ 1113.615152][T19444] ? __pfx___mutex_lock+0x10/0x10 [ 1113.615172][T19444] ? __pfx_vfs_read+0x10/0x10 [ 1113.615188][T19444] ? __fget_files+0x20e/0x3c0 [ 1113.615208][T19444] ksys_read+0x12a/0x250 [ 1113.615221][T19444] ? __pfx_ksys_read+0x10/0x10 [ 1113.615238][T19444] do_syscall_64+0xcd/0xf80 [ 1113.615256][T19444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.615268][T19444] RIP: 0033:0x7fc483f8e15c [ 1113.615278][T19444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1113.615289][T19444] RSP: 002b:00007fc484d65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.615300][T19444] RAX: ffffffffffffffda RBX: 00007fc4841e5fa0 RCX: 00007fc483f8e15c [ 1113.615307][T19444] RDX: 000000000000000f RSI: 00007fc484d650a0 RDI: 0000000000000004 [ 1113.615314][T19444] RBP: 00007fc484d65090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.615320][T19444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.615327][T19444] R13: 00007fc4841e6038 R14: 00007fc4841e5fa0 R15: 00007ffdb26d48b8 [ 1113.615341][T19444] [ 1113.926434][T19449] tmpfs: Unknown parameter '; ' [ 1114.002721][T19450] IPv6: Can't replace route, no match found [ 1114.216279][T18170] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1114.268593][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1114.278979][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1114.287452][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1114.299249][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1114.308023][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1114.388184][T18170] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1114.398270][T18170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.408881][T18170] usb 7-1: config 0 descriptor?? [ 1114.690509][T19451] chnl_net:caif_netlink_parms(): no params data found [ 1114.955788][T19451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.955919][T19451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.956043][T19451] bridge_slave_0: entered allmulticast mode [ 1114.957488][T19451] bridge_slave_0: entered promiscuous mode [ 1114.959755][T19451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.959874][T19451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.959980][T19451] bridge_slave_1: entered allmulticast mode [ 1114.961301][T19451] bridge_slave_1: entered promiscuous mode [ 1115.004159][T19451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.007079][T19451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.034022][T19451] team0: Port device team_slave_0 added [ 1115.037320][T19451] team0: Port device team_slave_1 added [ 1115.066750][T19451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.066768][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.066793][T19451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.068269][T19451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.068284][T19451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.068307][T19451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.119908][T19451] hsr_slave_0: entered promiscuous mode [ 1115.120791][T19451] hsr_slave_1: entered promiscuous mode [ 1115.340545][T19451] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.340603][T19451] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.403879][T19451] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.403914][T19451] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.434595][T18170] ath6kl: mismatched byte count 0 vs. expected 12 [ 1115.435525][T18170] ath6kl: Failed to init ath6kl core: -22 [ 1115.435893][T18170] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1115.464769][ T49] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1115.495924][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.629260][T19451] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.640679][T19451] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.678458][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1115.685053][ T49] usb 2-1: no configurations [ 1115.689639][ T49] usb 2-1: can't read configurations, error -22 [ 1115.750910][ T5947] syz1: Port: 1 Link DOWN [ 1115.755624][T16176] smc: removing ib device syz1 [ 1115.758716][T19451] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1115.774123][T19451] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.826980][ T49] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1115.920982][ T5873] usb 7-1: USB disconnect, device number 122 [ 1115.987597][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1115.992732][ T5874] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1116.011205][ T49] usb 2-1: no configurations [ 1116.020728][ T49] usb 2-1: can't read configurations, error -22 [ 1116.036836][ T49] usb usb2-port1: attempt power cycle [ 1116.164405][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 1116.191848][T19451] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1116.203340][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.221800][ T5874] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1116.234719][T19451] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1116.251545][T19451] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1116.254643][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.273030][T19451] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1116.343989][ T5874] usb 3-1: config 0 descriptor?? [ 1116.354461][T19097] Bluetooth: hci1: command tx timeout [ 1116.386676][ T49] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1116.414893][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1116.422885][ T49] usb 2-1: no configurations [ 1116.428636][ T49] usb 2-1: can't read configurations, error -22 [ 1116.557954][T19451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.564998][ T49] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1116.683044][T19451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.698909][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 1116.705740][ T49] usb 2-1: no configurations [ 1116.710389][ T49] usb 2-1: can't read configurations, error -22 [ 1116.717281][ T49] usb usb2-port1: unable to enumerate USB device [ 1116.733915][T16218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.741093][T16218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.883135][T19451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.937929][T19451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1117.291974][T16218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.299188][T16218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.346313][T16176] ------------[ cut here ]------------ [ 1117.352371][T16176] GID entry ref leak for dev syz1 index 2 ref=1 [ 1117.358747][T16176] WARNING: drivers/infiniband/core/cache.c:806 at 0x0, CPU#0: kworker/u8:19/16176 [ 1117.368472][T16176] Modules linked in: [ 1117.373214][T16176] CPU: 0 UID: 0 PID: 16176 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.384704][T16176] Tainted: [L]=SOFTLOCKUP [ 1117.389077][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.399401][T16176] Workqueue: ib-unreg-wq ib_unregister_work [ 1117.405875][T16176] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1117.411997][T16176] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 4a 58 4e f9 48 8d 3d 53 de 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 30 58 4e f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1117.431775][T16176] RSP: 0018:ffffc90004dcfac8 EFLAGS: 00010293 [ 1117.437935][T16176] RAX: 0000000000000000 RBX: ffff88803215e800 RCX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1117.446113][T16176] RDX: 0000000000000002 RSI: ffff888020b15020 RDI: ffffffff90946a80 [ 1117.454306][T16176] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10068a9e80 [ 1117.462372][T16176] R10: ffff88803454f403 R11: ffffffff8228b04b R12: ffffed100642bd1b [ 1117.464316][ T30] audit: type=1400 audit(4291403703.465:1175): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[3996]" dev="pipefs" ino=3996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1117.470687][T16176] R13: ffff88804d6b4000 R14: 0000000000000002 R15: dffffc0000000000 [ 1117.502093][T16176] FS: 0000000000000000(0000) GS:ffff888124909000(0000) knlGS:0000000000000000 [ 1117.511140][T16176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.517796][T16176] CR2: 0000200000026030 CR3: 0000000050d06000 CR4: 00000000003526f0 [ 1117.526116][T16176] Call Trace: [ 1117.529816][T16176] [ 1117.532776][T16176] ib_device_release+0xef/0x1e0 [ 1117.537691][T16176] ? __pfx_ib_device_release+0x10/0x10 [ 1117.543175][T16176] device_release+0xa4/0x240 [ 1117.547819][T16176] kobject_put+0x1ef/0x6f0 [ 1117.552311][T16176] put_device+0x1f/0x30 [ 1117.556552][T16176] process_one_work+0x9ba/0x1b20 [ 1117.561540][T16176] ? __pfx_process_one_work+0x10/0x10 [ 1117.567024][T16176] ? assign_work+0x1a0/0x250 [ 1117.571891][T16176] worker_thread+0x6c8/0xf10 [ 1117.576714][T16176] ? __pfx_worker_thread+0x10/0x10 [ 1117.581868][T16176] kthread+0x3c5/0x780 [ 1117.585983][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.590691][T16176] ? rcu_is_watching+0x12/0xc0 [ 1117.595484][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.600117][T16176] ret_from_fork+0x983/0xb10 [ 1117.604745][T16176] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.609908][T16176] ? __switch_to+0x7af/0x10d0 [ 1117.614614][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.619207][T16176] ret_from_fork_asm+0x1a/0x30 [ 1117.624026][T16176] [ 1117.627075][T16176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1117.634349][T16176] CPU: 0 UID: 0 PID: 16176 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.645557][T16176] Tainted: [L]=SOFTLOCKUP [ 1117.649868][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1117.659911][T16176] Workqueue: ib-unreg-wq ib_unregister_work [ 1117.665794][T16176] Call Trace: [ 1117.669065][T16176] [ 1117.671979][T16176] dump_stack_lvl+0x3d/0x1f0 [ 1117.676569][T16176] vpanic+0x640/0x6f0 [ 1117.680551][T16176] panic+0xca/0xd0 [ 1117.684268][T16176] ? __pfx_panic+0x10/0x10 [ 1117.688682][T16176] ? check_panic_on_warn+0x1f/0xb0 [ 1117.693791][T16176] check_panic_on_warn+0xab/0xb0 [ 1117.698717][T16176] __warn+0x108/0x3c0 [ 1117.702693][T16176] __report_bug+0x2a0/0x520 [ 1117.707189][T16176] ? __pfx___report_bug+0x10/0x10 [ 1117.712218][T16176] report_bug_entry+0xb2/0x220 [ 1117.717027][T16176] ? gid_table_release_one+0x1b6/0x450 [ 1117.722508][T16176] handle_bug+0x18a/0x260 [ 1117.726835][T16176] exc_invalid_op+0x17/0x50 [ 1117.731334][T16176] asm_exc_invalid_op+0x1a/0x20 [ 1117.736172][T16176] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1117.742247][T16176] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 4a 58 4e f9 48 8d 3d 53 de 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 30 58 4e f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1117.761835][T16176] RSP: 0018:ffffc90004dcfac8 EFLAGS: 00010293 [ 1117.767885][T16176] RAX: 0000000000000000 RBX: ffff88803215e800 RCX: 0000000000000001 [ 1117.775844][T16176] RDX: 0000000000000002 RSI: ffff888020b15020 RDI: ffffffff90946a80 [ 1117.783804][T16176] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10068a9e80 [ 1117.791778][T16176] R10: ffff88803454f403 R11: ffffffff8228b04b R12: ffffed100642bd1b [ 1117.799735][T16176] R13: ffff88804d6b4000 R14: 0000000000000002 R15: dffffc0000000000 [ 1117.807702][T16176] ? kasan_save_free_info+0x3b/0x60 [ 1117.812908][T16176] ? gid_table_release_one+0x1a6/0x450 [ 1117.818370][T16176] ib_device_release+0xef/0x1e0 [ 1117.823208][T16176] ? __pfx_ib_device_release+0x10/0x10 [ 1117.828656][T16176] device_release+0xa4/0x240 [ 1117.833238][T16176] kobject_put+0x1ef/0x6f0 [ 1117.837648][T16176] put_device+0x1f/0x30 [ 1117.841803][T16176] process_one_work+0x9ba/0x1b20 [ 1117.846725][T16176] ? __pfx_process_one_work+0x10/0x10 [ 1117.852108][T16176] ? assign_work+0x1a0/0x250 [ 1117.856682][T16176] worker_thread+0x6c8/0xf10 [ 1117.861272][T16176] ? __pfx_worker_thread+0x10/0x10 [ 1117.866372][T16176] kthread+0x3c5/0x780 [ 1117.870426][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.875002][T16176] ? rcu_is_watching+0x12/0xc0 [ 1117.879759][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.884331][T16176] ret_from_fork+0x983/0xb10 [ 1117.888900][T16176] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.893994][T16176] ? __switch_to+0x7af/0x10d0 [ 1117.898651][T16176] ? __pfx_kthread+0x10/0x10 [ 1117.903230][T16176] ret_from_fork_asm+0x1a/0x30 [ 1117.907991][T16176] [ 1117.911290][T16176] Kernel Offset: disabled [ 1117.915604][T16176] Rebooting in 86400 seconds..