last executing test programs: 8m17.194077626s ago: executing program 0 (id=3451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r5, 0x400, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000540)='proc\x00', 0x800000, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000180)='io\x00') setreuid(0x0, 0xee01) pread64(r8, &(0x7f0000000100)=""/57, 0x39, 0x40000000009) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x9, 0x7, 0x9, 0x9, 0x3, r7}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8m8.862968309s ago: executing program 0 (id=3475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4031, 0x800000000004, @thr={&(0x7f0000000180)="914255954020090ba28307612c136d59ceda35710a73552ad93fc97a539767b4ddce8b90c4eaf72c96788aa8a9f3311426429034708b130ffbde333851adec640e7cecca76da15ed2cc83997230ac36cb525c64833bfed62edfdd6bc2454", &(0x7f0000000240)="325e0b00a4fb7357dd2c1bcc81f3038f56688bccf412cdff433e61db0b6258fa5a38329edbaf8d0ba8253cd0741824c9d4586b87fa16186f90e4c3c721338636de4013057322205a886a824edf3f566c533652da92aa68a2fcd54fa8a5f20553ef324e7a9b0da3dd6e965877c2acc312f10371295b69a35655346f2f4bff9c10"}}, &(0x7f0000bbdffc)=0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000300)={0x800000, 0x2000bb22, 0x2, {0x1, @pix={0x0, 0x9, 0x59565955, 0x4, 0x400, 0x9, 0x1, 0x4, 0x1, 0x0, 0x2, 0x4}}}) timer_create(0x3, &(0x7f0000000000)={0x0, 0xe, 0x2, @thr={&(0x7f0000000400)="4ec99e435ad1bced38d10d1921cae2dabe8710b758954fc78f3d5c6d5ddaeafeba1000ea318337247d7123bb9a71cf5d8ee2dcf0c1300aaf091d489075485e6a1d259aca74f9a326577b07796ca2f21bdc9556827d2c8d50a5c55e4f2778d4997865645d38264638626f3e9058f3cdf45e13bbd781799509eef54852d6d5c8922c7d728c4ae6a6cbe5cf66b7144ad46c0ede344d16f98d04f5656e0a71640916654baffbfd13a437b38188d3cfe1768f97c8babe275cad1a1ed55fd2a4491a098d", &(0x7f0000000580)="93808473704d5521e93f14ead80fbd3bdc1f550535f986456b1b59f4681b411f9c1404ee7f671714f146f6b54763884e5d30a59d3ac6572b256d58b6f8b9e9565ef7500ac992dd817b0c2cdbebee4fe5cbd332011aec3c30ccfa7c9ab9faa210b2b12178950bc5e0b5595d7ff212d007a3e89476bf599316d42ad86314f99091702a96b5e1da3e7faf0fad411a2484c762ca48a56e06eb52583e7fc9e3729786aa06a5c3f9f56d35cf7da342c44fbd736ece2e71c12abe019bd47fe0b47c86007cb963e7e62999e62044ec370fd565d706f9ea2217fd0c"}}, &(0x7f00000000c0)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000680)=""/96) timer_settime(r4, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x6, 0x2002) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 8m5.16838997s ago: executing program 0 (id=3481): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4004804) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdde, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000000000600000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070020010000000000000000000000000000140035006772653000"/56], 0x50}}, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000100)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 8m2.30937802s ago: executing program 0 (id=3489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x809, 0x7fff, 0x1, 0x5, 0xdd9, 0x4, 0x0, 0x5, 0x82, 0x2, 0x8858, 0x5, 0x10000, 0xea, 0x5, 0x3], 0x10000, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='X', 0x1}], 0x1) 7m58.441959568s ago: executing program 0 (id=3504): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000002a77767a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000080), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m55.600695114s ago: executing program 0 (id=3513): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) inotify_init() r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe0}}, 0x404c0c8) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) pread64(r1, &(0x7f00000008c0)=""/223, 0xdf, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r0, 0x9) unshare(0x28040680) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x4000)=nil, 0x4000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 7m41.123217966s ago: executing program 32 (id=3513): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) inotify_init() r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe0}}, 0x404c0c8) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r4 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) pread64(r1, &(0x7f00000008c0)=""/223, 0xdf, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getown(r0, 0x9) unshare(0x28040680) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x4000)=nil, 0x4000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 13.152620214s ago: executing program 4 (id=5033): getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000200)=""/233) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 11.42716322s ago: executing program 5 (id=5039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x3000000, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 11.295411022s ago: executing program 4 (id=5041): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="9f", 0xfef4, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback={0x3f00000000000000}, 0xc5f}, 0x1c) 10.613434989s ago: executing program 5 (id=5043): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000200)=""/233) 9.70097091s ago: executing program 5 (id=5045): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r1, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0x4a}}, 0x14}, 0x1, 0x6000000}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) utime(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x0, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xb52b9c7732f7d2c0}, 0x24014844) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000640)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a3000000000050004000000000005"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c009610cc39a1e20000030601010000000000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket(0x18, 0x4, 0x3) 9.472219932s ago: executing program 4 (id=5046): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001140)=0x10000000) (fail_nth: 1) 7.938932104s ago: executing program 3 (id=5052): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000ac1414bb000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff1c"], 0x17c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff"], 0x40}], 0x1, 0x0, 0x14, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0xfffffffffffffe26) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)}], 0x2}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000880)="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", 0x14a}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@code={0xa, 0x65, {"b9030100c00f32b904000000c461b9dd0764660f3882820058000066450ff7ecf044093966baf80cb86ab0d68d66bafc0c66edc421845ef366bad00466baf80cb8665abb89ef66bafc0c66ed430f01f86644def0"}}], 0x65}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001, 0x3f7, 0x4, 0x40, 0x3, 0x2}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000f09000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000700)="650f349842000f00d8b805000000e5a00000000f015101010f070fde460b0f013065263e80e706f2360f217a0f07", 0x2e}], 0x1, 0x63, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000a40)="065856eed19ecf695e2bf2ac71c7bff10609a31ed3967ce4c02e2e43c7d74230fb3bee239d964657a61899b5e00bcfe2b4a20c534fbc26cb021ba2b38dd06b87784b2fe211dd0d583b7cd0af5cb2224277f19e750155a6eb5fced52b6f81e4a07b3675e5a1e13073e64fab93648d4a58adbfa0f6c97e5289d75446cb9e28c65fec595e5093234b18fbb15c43aeab8c46c511c2905331455371664227eb64e74b989b29306d38490cc66cb17c07ab1c66d87312ffe6b73e4fb0bd25555276fa920e54c34dcd28b22a89508d0355e33eb0e781f6f3d68f08165cd927fcadc19be25c65f187e0f3befd99c98b34ffb6ccbdf8877164a6a03cf1", 0xf8}, {&(0x7f0000000780)="c7394675a75ccd233f83be139c2d780d7af2f35b472b9126e47c0349b2352c93d62f1ea5afc4db8239cfee3c6e37019cdd4417a129794a3bfe7192792c8754db9953ccdf9c6c6d6690e915961d73a16b9eca83caab02f512db8ac934ca36db5f96b4fc2b41477c53c7e2f0e3e4e9ac7052c8c7d2271acaef1372a123640e3e7e9d4e49b3879ce0a4c329cc4259930e7190367586bd4074850835d1c4fd307356965d4ac6304122ec438eb7e47bd878722e9097", 0xb3}, {&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000000c40)="3d21df98ed9835a2434aada4e2b07438d5bf70ef6507870d54982eeb1c7b604f2f64e0a4eef62ac150afab181e8a4c19f43fcd4a4b925059b82d23a7487bdef14a10c858f12060e16d8190aa77f1ae3a53cfd1ec3070a75bd282cda857bcedc1fca0dddcf8f8a81238213bd06569164d4df574fa18a10101eeffb8f2360e19065d93cd50aaa758ee46b9415f", 0x8c}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000d00)="49448a5f740852b5116a72d17024c50ca7cc319833e8963ff0ade6d5d41c08c03c2107895c6cc99ebf0f9a7f1e812412fa4364c7d42abdaf133b1c86688e6a018c2e88c0f7dd0d1c3a0afca364ae7b9891de9e6cc9b720cfd3ea5cf7ef6f38fd0c639cd5a8907d2e1f31b1473d20cb0faeb22969bfbe0f640438fada0f4f310fdcad19f75d97fe452217dd6090c23ec02d56efdee9276c6fdcd26dbf32b6266930b7ac7afc71dd856b705b9d81fcc4933c6867690291ace51e04b20749120d8c70134c340d83d361f54585b29e47ccd07d16d39725af83dd09ffdbf96f0c02f53d3312", 0xe3}, {&(0x7f0000000e00)="6ab6c32a5ad371341b3352d5a602b8633ec68706c0062572e342b8407d292b26ead66c4d5d97cd37a95c600cf31796db685f62eb1ce8a1aadc8727bb4e711a24cf748a730c33d95c5707bd29e016c48c029e380152afb9583813c7a0162d367c8ff1c84463b0654e84e70a93156fadbf693f7721f87eb1705543c22c16fe7f032e8061fdef75015c1ecee3d3614544414c89a117d73f2b4b0e30135b8860daaf725e00017a34ce32d23c2c9f20466865f2e0f64b570895ca4126", 0xba}, {&(0x7f0000000ec0)="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", 0xff}], 0x8, 0x40021, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.075961784s ago: executing program 1 (id=5057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r5, 0x400, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, 0x0, &(0x7f0000000540)='proc\x00', 0x800000, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, 0x0) pread64(r7, &(0x7f0000000100)=""/57, 0x39, 0x40000000009) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x9, 0x7, 0x9, 0x9, 0x3, r6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.421617202s ago: executing program 4 (id=5058): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x7], [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = io_uring_setup(0x62da, &(0x7f0000000500)={0x0, 0x772, 0x100, 0x2, 0x1f9}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000580)=r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0fed2a00000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 5.421364172s ago: executing program 3 (id=5059): syz_emit_ethernet(0x3b6, &(0x7f0000001140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd601f000003803a"], 0x0) 5.368705206s ago: executing program 4 (id=5060): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x5, 0xffffffffffffffff}) close(r0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042f0401"], 0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x14182) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ab3105f30000000000000000850000008700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d7218d3445b7d929222d9086ca69d8c646d61ac706f72743d3078303030303030301430303030346578e5fb118e3030303030303030303030"]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000001c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x5cb, &(0x7f0000000480)={0x0, 0x0, 0x400, 0xffffffff, 0x138}, &(0x7f00000000c0), &(0x7f0000000540)) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) close_range(r4, r2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00400004030180ffff10000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000019780)=""/102387, &(0x7f00000003c0)=0xfffffffffffffdc8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 5.302040749s ago: executing program 3 (id=5062): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d020500912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c170c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a4473a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c269454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x3, 0x1, 0x0, 0x2, 0x8, 0x0, 0x400006, 0x0, 0x0, 0x1, 0x26, 0x7], 0x41000, 0x59352}) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file0'}, 0xb) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x77}) 4.813325154s ago: executing program 1 (id=5063): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.725016674s ago: executing program 2 (id=5064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x20, 0x0, 0x29}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x3, [@enum64={0x8, 0x4, 0x0, 0x13, 0x0, 0xa, [{0xb, 0x7, 0xdf}, {0x7, 0x19, 0x1}, {0x1, 0x7, 0x535}, {0x5, 0x3, 0x3}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @datasec={0x7, 0x7, 0x0, 0xf, 0x2, [{0x2, 0xb, 0x7a6e}, {0x3, 0x36, 0x1}, {0x5, 0x800, 0x1000}, {0x1, 0x7fff, 0x8}, {0x2, 0x1, 0x5}, {0x3, 0xe68d, 0x7}, {0x5, 0x9}], 'a0'}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/182, 0xd3, 0xb6, 0x1, 0x6}, 0x28) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2}, 0x94) ppoll(&(0x7f0000000040)=[{r1, 0x4208}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvfrom$inet(r1, &(0x7f00000000c0)=""/223, 0xdf, 0x12042, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000500)=0x80000001, 0x4) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000009"], 0x10) 4.658381113s ago: executing program 1 (id=5065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x45, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000680)=""/102392, 0x18ff8) tkill(r4, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r6, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.739705862s ago: executing program 2 (id=5066): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @multicast1, 0x4e24, 0x12, 'sed\x00', 0x2, 0x8, 0x2e}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x4e22, 0x1, 0xa, 0x7ffffffe, 0x1000fb}}, 0x44) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3400000010923bf9be43f227d5910e0000000000", @ANYRES32=r9, @ANYBLOB="01000000000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, 0x0, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x11, 0x3, 0x0) 3.728224382s ago: executing program 3 (id=5067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0x436}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@mmap={0x0, 0x8, 0x4, 0x2, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x5, 0xa1, 0x6, 0x4, "b59ce71a"}, 0x4, 0x1, {}, 0x5e8c, 0x0, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(r8, r9, r9) close_range(r6, 0xffffffffffffffff, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000180)=0x6f) r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r10, &(0x7f00000012c0)="a5", 0x1) read$dsp(r11, &(0x7f00000001c0)=""/156, 0x9c) 3.600248689s ago: executing program 1 (id=5068): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x1, 0x6, {0xffffffffffffffff}, {}, 0xb, 0x4}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, r1, {0x8, 0xa}, {0xa, 0xffe0}, {0xfff1, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}]}, 0x2c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)) io_getevents(0x0, 0x400, 0x0, 0x0, 0xffffffffffffffff) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.088392838s ago: executing program 2 (id=5069): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x100000000003fc, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = epoll_create1(0x0) r8 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat2(r10, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x4000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.08596902s ago: executing program 5 (id=5070): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x7], [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = io_uring_setup(0x62da, &(0x7f0000000500)={0x0, 0x772, 0x100, 0x2, 0x1f9}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000580)=r3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0fed2a00000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 2.950673883s ago: executing program 3 (id=5071): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x3) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="acfb88d2a14264e25b8898c9ec5c7510c5c496c09fedecd54fd0f33e0aae1e2049964c46e10a1a072b1200c336f585f475c35ed43d49f061a88636e8048b06c9d96f47a8c9598df164d2b6269f20e884a5592852c6323e8c150a94a3b619e2421003b26a914d50ec3a2c1a04bdf1d396ff429992d8d531e3099fa686a5a29b9ab439b5974ddf621e68a8347a93de99663137fe6e069c23b6d2f9f96d87f397adcb493dabedf2eb4a0844521d609c8dca322a97ba607c36ef4268b1f9f3b9a2d91d2e6e3f08e87ea7cb11d6c434027c475adcc9935175e7b5c5cc889997a4252591df4b58952930a3", 0xe8}, {&(0x7f0000000240)="90d0c4717f5b6b568a38ff13257803f4c86fe48e6997b6b94827b078bb7ea6f9fff01f24b38b703fad29ab808fabfc17d9b7c32f131b0bfeefd94e8cf17ba5c5406c1bdb0b141e44e4a987b8771c77f1ed26c3499d4fbb4352e0f715a9b319508c27680c833d405a69821fbee7bf981264", 0x71}], 0x2}, 0x80) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) 2.861651641s ago: executing program 5 (id=5072): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2060, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x84200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x40) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000000106010100000000000000000100000a05000100070000000500010007000000280001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000050001000700000005000100070000000500010007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000c01}, 0x400c010) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 2.725537711s ago: executing program 3 (id=5073): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x25}, 0x1, 0x0, 0x0, 0x20048041}, 0x40000) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$KVM_CAP_XEN_HVM(r0, 0x4068aea3, &(0x7f0000000100)={0x26, 0x0, 0x1a}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb460}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000980)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @mcast1}}}}}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="73656375d785329900000000000000000000000000000000000000000000000003"], 0x58) 1.823694349s ago: executing program 5 (id=5074): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 1.819428396s ago: executing program 1 (id=5075): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.696676354s ago: executing program 4 (id=5076): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r6 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000700)={{}, r7, 0x10, @inherit={0x50, 0x0}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000900)={{r5}, r7, 0xa, @inherit={0x68, &(0x7f0000000380)={0x1, 0x4, 0x1, 0x5, {0x4, 0x73fd, 0x4e895d2f, 0x6, 0x3}, [0xfffffffffffffffb, 0x800000000000, 0x1c00000000000000, 0xc2]}}, @subvolid=0x6}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=ANY=[@ANYBLOB="4000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="211200000000000020f7118008000100736905001400028006000d000500004b6aa07f50662f80a94b9c7100d00008000300ac1414aaf7fa86d718a32e9d4b3b184fb47bacc2736026cc28cfbfdb47c33a1ea68c117bba1f099d6345e2e0902d1bc5e6"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1], &(0x7f0000000540), 0x0) 1.236315813s ago: executing program 2 (id=5077): gettid() (async) sched_setscheduler(0x0, 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) (async) syz_emit_vhci(&(0x7f0000001880)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}}, 0x9) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, r0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x6, 0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)={0x0, r5}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0xc7e7f4bb0fa1b041) ioctl$sock_inet_SIOCSARP(r7, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @loopback}, {0x306, @random}, 0x8, {0x2, 0xffff, @multicast2}, 'veth1_virt_wifi\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 1.04408791s ago: executing program 2 (id=5078): socket(0x2, 0x80805, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x2000000, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) close(0xffffffffffffffff) 972.480732ms ago: executing program 1 (id=5079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket(0x2d, 0x80002, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a000000021000004000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa4e24ffff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041f1ff0050001100fc020000000000000000000000000000ac1414aa000000000000000000000001fe8800000000000000000000001b0001ac1414bb00000000000000000000000000020000000000000a000a00a09d099772a12e79b5ce20bb1243f9f8a940619175e7da002f40f5c3e08a65c76cdb0b86be9f3140b389c936d5e23cc709771a784a27ce4de9f199a637e9e2fd0cfe498e992243a8c44fc9847c3bf204b619db8626252f48bc7f62639fcd71"], 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES8=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x891) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c00010062726964676553eba0add3fe3f2b4db586a1b37343d1d7d01dfacf173aea2e4828824c024a39349b3e6fc70a2bbccb201ac408c64c3108d09f171f5fbc11121f6fb0cd854d04d306f07230c7bfe43b7d92d86d04961373944d4be61be285e641f70800d3b9472fa805f58889e9cce2dd7a9fb8db411336b39a2dd8a30834"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) 0s ago: executing program 2 (id=5080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0xfff2}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): digital interface selection failed (-22) [ 1154.346455][ T5879] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1154.357593][ T5879] usb 3-1: setting power OFF [ 1154.363219][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 1154.374420][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1154.385772][ T5879] (NULL device *): no alternate interface [ 1154.426912][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1154.607463][ T9769] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1154.623662][ T9769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.633720][ T9769] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1154.644332][ T9769] usb 4-1: media controller created [ 1154.659040][ T9769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.979064][ T9769] zl10353_read_register: readreg error (reg=127, ret==0) [ 1155.256206][ T9769] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1155.274585][ T9769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1155.305958][ T9769] usb 4-1: USB disconnect, device number 59 [ 1155.385653][ T9769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1156.712275][T17281] usb 3-1: USB disconnect, device number 47 [ 1157.586231][T22371] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1158.131076][T22384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4365'. [ 1159.134631][T22387] erspan0: invalid flags given to default FDB implementation [ 1159.506258][ T5879] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1159.654320][T22400] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.660909][T22400] binder: 22397:22400 ioctl 4018620d 2000000002c0 returned -16 [ 1159.669359][ T30] audit: type=1400 audit(2000000131.298:2120): avc: denied { set_context_mgr } for pid=22397 comm="syz.2.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1159.691643][ T5879] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.699777][ T30] audit: type=1400 audit(2000000131.298:2121): avc: denied { map } for pid=22397 comm="syz.2.4369" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1159.731321][ T5879] usb 2-1: config 0 has no interface number 0 [ 1159.737586][ T5879] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.751093][ T5879] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.761195][ T5879] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1159.770287][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.787264][ T5879] usb 2-1: config 0 descriptor?? [ 1159.998904][ T5879] usbhid 2-1:0.1: can't add hid device: -71 [ 1160.017336][ T5879] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1160.105284][ T5879] usb 2-1: USB disconnect, device number 45 [ 1160.286805][T22421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1161.635059][T22434] Process accounting resumed [ 1162.646652][T17281] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1162.663051][ T30] audit: type=1400 audit(2000000134.426:2122): avc: denied { ioctl } for pid=22469 comm="syz.3.4390" path="/251/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1162.833218][T17281] usb 5-1: Using ep0 maxpacket: 8 [ 1162.848956][T17281] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1162.870895][T17281] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1162.890955][T17281] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1162.940187][T17281] usb 5-1: Product: syz [ 1162.944616][T17281] usb 5-1: Manufacturer: syz [ 1162.949217][T17281] usb 5-1: SerialNumber: syz [ 1163.186904][T17281] usb 5-1: palm_os_3_probe - error -32 getting connection information [ 1163.196617][T17281] visor 5-1:1.0: probe with driver visor failed with error -32 [ 1163.217635][T17281] usb 5-1: USB disconnect, device number 50 [ 1164.010972][T22490] erspan0: invalid flags given to default FDB implementation [ 1165.171108][T17281] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1165.362826][T17281] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1165.371791][T17281] usb 2-1: config 0 has no interface number 0 [ 1165.377901][T17281] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.389279][T17281] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.401126][T17281] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1165.410747][T17281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.419494][ T5879] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1165.428504][T17281] usb 2-1: config 0 descriptor?? [ 1165.542222][ T9775] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1165.580998][ T5879] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1165.593880][ T5879] usb 4-1: config 0 has no interface number 0 [ 1165.607983][ T5879] usb 4-1: config 0 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.632817][ T5879] usb 4-1: config 0 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1165.651453][T17281] usbhid 2-1:0.1: can't add hid device: -71 [ 1165.905404][ T5879] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1165.905614][ T9775] usb 6-1: Using ep0 maxpacket: 16 [ 1165.917592][ T5879] usb 4-1: config 0 interface 106 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1165.970691][T22513] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 1165.978474][T22513] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1166.096596][T16562] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1166.108375][T17281] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1166.118141][ T9775] usb 6-1: config 5 has an invalid interface number: 248 but max is 0 [ 1166.141266][T17281] usb 2-1: USB disconnect, device number 46 [ 1166.147763][ T9775] usb 6-1: config 5 has no interface number 0 [ 1166.156506][ T9775] usb 6-1: config 5 interface 248 altsetting 2 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1166.168795][ T9775] usb 6-1: config 5 interface 248 has no altsetting 0 [ 1166.181768][ T9775] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01a0, bcdDevice=59.6f [ 1166.190850][ T9775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.198829][ T9775] usb 6-1: Product: syz [ 1166.205254][ T9775] usb 6-1: Manufacturer: syz [ 1166.209874][ T9775] usb 6-1: SerialNumber: syz [ 1166.307051][ T5879] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice= b.94 [ 1166.338780][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.351650][ T9775] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1166.356376][ T5879] usb 4-1: Product: syz [ 1166.372210][ T9775] usb 6-1: no configuration chosen from 1 choice [ 1166.391053][ T5879] usb 4-1: Manufacturer: syz [ 1166.395685][ T5879] usb 4-1: SerialNumber: syz [ 1166.440217][ T5879] usb 4-1: config 0 descriptor?? [ 1166.545787][ T30] audit: type=1326 audit(2000000138.510:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2d59aeb9 code=0x7ffc0000 [ 1166.627998][ T30] audit: type=1326 audit(2000000138.510:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2d59aeb9 code=0x7ffc0000 [ 1166.683387][ T5879] usb 4-1: bad CDC descriptors [ 1166.689267][ T5879] option 4-1:0.106: GSM modem (1-port) converter detected [ 1166.708306][ T30] audit: type=1326 audit(2000000138.510:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2d59aeb9 code=0x7ffc0000 [ 1166.720716][ T5879] usb 4-1: USB disconnect, device number 60 [ 1166.771088][ T9769] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1166.791201][ T30] audit: type=1326 audit(2000000138.521:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2d59aeb9 code=0x7ffc0000 [ 1166.879771][ T30] audit: type=1326 audit(2000000138.521:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2d59aeb9 code=0x7ffc0000 [ 1166.910741][ T5879] option 4-1:0.106: device disconnected [ 1166.932537][ T30] audit: type=1326 audit(2000000138.521:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2d55b78e code=0x7ffc0000 [ 1166.957281][ T30] audit: type=1326 audit(2000000138.521:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f2d59ab4b code=0x7ffc0000 [ 1166.990189][ T30] audit: type=1326 audit(2000000138.521:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f2d59ab4b code=0x7ffc0000 [ 1167.014517][ T30] audit: type=1326 audit(2000000138.521:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f2d59ab4b code=0x7ffc0000 [ 1167.047303][ T30] audit: type=1326 audit(2000000138.521:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22523 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f2d59ab4b code=0x7ffc0000 [ 1167.052426][ T9769] usb 3-1: Using ep0 maxpacket: 8 [ 1167.080240][T22522] overlayfs: failed to resolve '/.—i$¤dň6Ł•V=Ű;™KMśůôeޢ­­8Qq>ť0ń•8;éťłVݦ—!ä#üőL*řĘKtĽd8ŃĆ!Š*ÚVȵ˛‰'L-nÍJŻ˝So“„ě•ÎŚmŤě;úd>rŽśJ€ý„¶ŕ#5 îĹnĆ$r‚': -2 [ 1167.101222][ T9769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1167.125860][ T9769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1167.151432][ T9769] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1167.175086][ T9769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1167.204910][ T9769] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1167.217351][ T9769] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1167.231855][ T9769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.257382][ T9769] usb 3-1: config 0 descriptor?? [ 1167.279162][T22526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1167.590100][ T9769] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1167.802299][ T9769] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1167.810413][ T9769] usb 4-1: config 0 has no interface number 0 [ 1167.816627][ T9769] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.827864][ T9769] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.009596][ T9769] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1169.043104][ T9769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.060237][ T9769] usb 4-1: config 0 descriptor?? [ 1169.066954][T17143] usb 6-1: USB disconnect, device number 31 [ 1169.247701][T16562] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1169.306240][T17143] usb 3-1: USB disconnect, device number 48 [ 1169.658507][ T9769] prodikeys 0003:041E:2801.0010: item fetching failed at offset 6/7 [ 1169.677061][ T9769] prodikeys 0003:041E:2801.0010: hid parse failed [ 1169.688043][ T9769] prodikeys 0003:041E:2801.0010: probe with driver prodikeys failed with error -22 [ 1169.696656][T22557] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1169.721302][T22557] xt_hashlimit: size too large, truncated to 1048576 [ 1170.429795][T22564] bridge0: port 3(batadv0) entered disabled state [ 1170.455422][T17281] usb 4-1: USB disconnect, device number 61 [ 1170.471342][T22567] No control pipe specified [ 1170.479697][T22564] bridge_slave_0: left allmulticast mode [ 1170.486559][T22564] bridge_slave_0: left promiscuous mode [ 1170.493644][T22564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.564116][T22564] bridge_slave_1: left allmulticast mode [ 1170.612348][T22564] bridge_slave_1: left promiscuous mode [ 1170.618265][T22564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.629946][T22564] bond0: (slave bond_slave_0): Releasing backup interface [ 1170.648447][T22564] bond0: (slave bond_slave_1): Releasing backup interface [ 1170.750490][T22564] team0: Port device team_slave_0 removed [ 1170.804684][T22577] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1170.816311][T22564] team0: Port device team_slave_1 removed [ 1170.836473][T22564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.862214][T22564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.882817][T22564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1171.969743][T22565] team0: Mode changed to "loadbalance" [ 1172.025237][T22574] netlink: 'syz.4.4412': attribute type 29 has an invalid length. [ 1172.086456][ T9769] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1172.096850][T22576] netlink: 'syz.4.4412': attribute type 29 has an invalid length. [ 1172.820730][ T9769] usb 6-1: Using ep0 maxpacket: 16 [ 1172.837307][ T9769] usb 6-1: config 251 has an invalid interface number: 74 but max is 0 [ 1172.857659][ T9769] usb 6-1: config 251 has no interface number 0 [ 1172.864376][ T9769] usb 6-1: config 251 interface 74 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1172.910917][ T9769] usb 6-1: config 251 interface 74 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1172.934018][ T9769] usb 6-1: config 251 interface 74 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1172.968307][ T9769] usb 6-1: config 251 interface 74 has no altsetting 0 [ 1172.992866][ T9769] usb 6-1: New USB device found, idVendor=0b05, idProduct=55a7, bcdDevice=5b.21 [ 1173.002211][ T9769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.011908][ T9769] usb 6-1: Product: syz [ 1173.024203][ T9769] usb 6-1: Manufacturer: syz [ 1173.038870][ T9769] usb 6-1: SerialNumber: syz [ 1173.051622][T22579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1173.297183][ T9769] usb 6-1: USB disconnect, device number 32 [ 1173.514753][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1173.666277][T22617] kvm: emulating exchange as write [ 1173.731320][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1173.731330][ T30] audit: type=1400 audit(2000000146.079:2160): avc: denied { append } for pid=22620 comm="syz.1.4432" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1173.886367][T22626] delete_channel: no stack [ 1176.820588][ T9775] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1176.992236][ T9775] usb 4-1: Using ep0 maxpacket: 32 [ 1176.998890][ T9775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.034321][ T9775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.068616][ T9775] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1177.077687][ T9775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.106646][ T9775] usb 4-1: config 0 descriptor?? [ 1177.931658][T22667] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1177.939829][T22667] syzkaller1: linktype set to 33463 [ 1178.517597][ T9775] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1180.269495][ T9769] usb 4-1: USB disconnect, device number 62 [ 1180.472563][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1182.131335][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'. [ 1182.231214][T22733] netlink: 'syz.1.4451': attribute type 13 has an invalid length. [ 1182.265141][T22733] netlink: 'syz.1.4451': attribute type 17 has an invalid length. [ 1182.335143][T22733] gre0: left promiscuous mode [ 1182.369755][T22733] gre0: left allmulticast mode [ 1182.914553][T22750] SELinux: ebitmap: start bit 0 comes after start bit 589824 [ 1182.992984][T22750] SELinux: failed to load policy [ 1183.102291][T22733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1183.702149][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.712540][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.760177][T17143] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1183.861439][T22767] macsec1: entered allmulticast mode [ 1183.866816][T22767] dummy0: entered allmulticast mode [ 1184.054642][T22767] dummy0: left allmulticast mode [ 1184.155343][T17143] usb 2-1: Using ep0 maxpacket: 16 [ 1184.401387][T17143] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1184.415728][T17143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.425472][T17143] usb 2-1: Product: syz [ 1184.429644][T17143] usb 2-1: Manufacturer: syz [ 1184.462349][T17143] usb 2-1: SerialNumber: syz [ 1184.472088][T17143] usb 2-1: config 0 descriptor?? [ 1184.922746][T17143] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1184.975940][T17143] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.020877][T17143] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1185.049507][T17143] usb 2-1: media controller created [ 1185.074535][T17143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.165065][ T9769] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1185.174898][T17143] zl10353_read_register: readreg error (reg=127, ret==0) [ 1185.209266][T17143] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1185.221303][T17143] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1185.305416][T17143] usb 2-1: USB disconnect, device number 47 [ 1185.325374][ T9769] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1185.345485][ T9769] usb 4-1: not running at top speed; connect to a high speed hub [ 1185.376633][ T9769] usb 4-1: config 136 has an invalid interface number: 30 but max is 0 [ 1185.391702][ T9769] usb 4-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.402463][T17143] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1185.419547][ T9769] usb 4-1: config 136 has no interface number 0 [ 1185.441733][ T9769] usb 4-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1185.473264][ T9769] usb 4-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.504568][ T9769] usb 4-1: New USB device found, idVendor=0499, idProduct=1a0e, bcdDevice=f0.f4 [ 1185.524730][ T9769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.535352][ T9769] usb 4-1: Product: syz [ 1185.540398][ T9769] usb 4-1: Manufacturer: syz [ 1185.546399][ T9769] usb 4-1: SerialNumber: syz [ 1185.670005][ T9775] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1186.000592][ T9775] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1186.437430][ T9775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.453968][ T9775] usb 6-1: Product: syz [ 1186.462663][ T9775] usb 6-1: Manufacturer: syz [ 1186.474553][ T9775] usb 6-1: SerialNumber: syz [ 1186.487740][ T9775] usb 6-1: config 0 descriptor?? [ 1186.516168][T16562] Bluetooth: hci3: urb ffff88802a29c000 submission failed (2) [ 1187.110279][ T9775] usb 6-1: USB disconnect, device number 33 [ 1187.179766][T22799] kAFS: unparsable volume name [ 1187.206768][T22801] 9p: Bad value for 'rfdno' [ 1189.641851][ T9775] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1189.730197][T22826] bridge0: entered allmulticast mode [ 1189.803766][ T9775] usb 2-1: Using ep0 maxpacket: 16 [ 1189.805931][T22826] netlink: 'syz.4.4482': attribute type 2 has an invalid length. [ 1189.832403][ T9775] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1189.856066][ T9775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.859147][T22826] bridge_slave_1: left allmulticast mode [ 1189.870357][T22826] bridge_slave_1: left promiscuous mode [ 1189.874332][ T9775] usb 2-1: Product: syz [ 1189.898411][T22826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.898458][ T9775] usb 2-1: Manufacturer: syz [ 1189.948157][ T9775] usb 2-1: SerialNumber: syz [ 1190.016533][ T9775] usb 2-1: config 0 descriptor?? [ 1190.111327][T22826] bridge_slave_0: left allmulticast mode [ 1190.125559][T22826] bridge_slave_0: left promiscuous mode [ 1190.139151][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.475764][ T9775] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1190.486183][T17219] udevd[17219]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1190.515807][ T9775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1190.534935][ T9775] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1190.555461][T22838] bond0: Removing last ns target with arp_interval on [ 1190.562913][T10882] bond0: (slave bond_slave_0): interface is now down [ 1190.575240][ T9775] usb 2-1: media controller created [ 1190.575269][T10882] bond0: (slave bond_slave_1): interface is now down [ 1190.720366][T10882] bond0: now running without any active interface! [ 1190.724556][ T9775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1190.813791][ T9775] zl10353_read_register: readreg error (reg=127, ret==0) [ 1190.832895][ T9775] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1191.118073][ T9775] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1191.136021][ T9775] usb 2-1: USB disconnect, device number 48 [ 1191.300585][ T9775] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1191.975683][ T9775] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1192.528190][T17281] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1192.575616][ T9775] usb 2-1: Using ep0 maxpacket: 16 [ 1192.618471][ T9775] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1192.627813][ T9775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.635965][ T9775] usb 2-1: Product: syz [ 1192.650448][ T9775] usb 2-1: Manufacturer: syz [ 1192.664037][ T9775] usb 2-1: SerialNumber: syz [ 1192.671078][T17281] usb 6-1: Using ep0 maxpacket: 32 [ 1192.677227][T17281] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1192.693112][ T9775] usb 2-1: config 0 descriptor?? [ 1192.717484][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1192.738112][T17281] usb 6-1: config 0 has no interface number 0 [ 1192.745031][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.766402][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.785030][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1192.794967][T17281] usb 6-1: config 0 has no interface number 0 [ 1192.801472][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.812439][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.830665][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1192.864012][T17281] usb 6-1: config 0 has no interface number 0 [ 1192.871172][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.881550][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1192.895025][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1192.904065][T17281] usb 6-1: config 0 has no interface number 0 [ 1192.911865][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1193.104069][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1193.119067][ T9775] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1193.185940][ T9775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1193.281042][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1193.294061][ T9775] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1193.313943][T17281] usb 6-1: config 0 has no interface number 0 [ 1193.477971][T22846] uprobe: syz.1.4487:22846 failed to unregister, leaking uprobe [ 1193.495192][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1193.505153][ T9775] usb 2-1: media controller created [ 1193.536187][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1193.546602][ T9775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1193.577778][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1193.626400][T17281] usb 6-1: config 0 has no interface number 0 [ 1193.632525][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1193.663936][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1193.681046][ T9775] zl10353_read_register: readreg error (reg=127, ret==0) [ 1193.688138][ T9775] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1193.710527][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1193.728841][ T9775] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1193.737905][T17281] usb 6-1: config 0 has no interface number 0 [ 1193.754476][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1193.765165][ T9775] usb 2-1: USB disconnect, device number 49 [ 1193.784614][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1193.852543][T17281] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1193.860576][T17281] usb 6-1: config 0 has no interface number 0 [ 1193.879150][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4493'. [ 1193.901857][ T9775] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1193.939108][T17281] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1193.959071][T17281] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1193.977137][T17281] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1193.986560][T17281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.994702][T17281] usb 6-1: Product: syz [ 1194.015134][T17281] usb 6-1: Manufacturer: syz [ 1194.068647][T17281] usb 6-1: SerialNumber: syz [ 1194.093242][T17281] usb 6-1: config 0 descriptor?? [ 1194.125711][T17281] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1194.937211][T22888] overlayfs: failed to resolve './file1': -2 [ 1195.497253][ T9775] usb 4-1: USB disconnect, device number 63 [ 1195.792637][T22898] netlink: 'syz.3.4498': attribute type 4 has an invalid length. [ 1196.027467][T22903] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1196.111729][T22904] SQUASHFS error: Failed to read block 0x0: -5 [ 1196.135986][T22904] unable to read squashfs_super_block [ 1197.198576][T17281] etas_es58x 6-1:0.2: could not retrieve the product info string [ 1197.239293][T22897] delete_channel: no stack [ 1197.306606][T17281] usb 6-1: USB disconnect, device number 34 [ 1197.343958][T17281] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1198.233268][T22934] dummy0: entered promiscuous mode [ 1198.239250][T22934] macsec1: entered allmulticast mode [ 1198.244752][T22934] dummy0: entered allmulticast mode [ 1198.329622][ T30] audit: type=1400 audit(2000000171.894:2161): avc: denied { getopt } for pid=22928 comm="syz.5.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1198.440235][T22934] dummy0: left allmulticast mode [ 1198.460454][T22934] dummy0: left promiscuous mode [ 1198.586522][T22943] new mount options do not match the existing superblock, will be ignored [ 1198.854015][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1198.922057][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1199.220666][ T30] audit: type=1800 audit(2000000172.230:2162): pid=22945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4506" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1199.434240][T17281] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1199.596734][T17281] usb 3-1: Using ep0 maxpacket: 16 [ 1199.877551][T17281] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1199.891868][T17143] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1199.897494][T17281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.917789][T17281] usb 3-1: Product: syz [ 1199.927223][T17281] usb 3-1: Manufacturer: syz [ 1199.936063][T17281] usb 3-1: SerialNumber: syz [ 1199.954816][T17281] usb 3-1: config 0 descriptor?? [ 1200.130005][T17143] usb 2-1: Using ep0 maxpacket: 16 [ 1200.138275][T17143] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1200.168152][T17143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.176166][T17143] usb 2-1: Product: syz [ 1200.196650][T17143] usb 2-1: Manufacturer: syz [ 1200.201277][T17143] usb 2-1: SerialNumber: syz [ 1200.227656][T17143] usb 2-1: config 0 descriptor?? [ 1200.361894][T17281] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1200.382751][T17281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1200.412108][T17281] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1200.433812][T17281] usb 3-1: media controller created [ 1200.454056][T22986] fuse: Bad value for 'group_id' [ 1200.463079][T17281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.465251][T22986] fuse: Bad value for 'group_id' [ 1200.555838][T17281] zl10353_read_register: readreg error (reg=127, ret==0) [ 1200.567225][T17281] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1200.584497][T17281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1200.608486][T17281] usb 3-1: USB disconnect, device number 49 [ 1200.634866][T17143] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1200.649550][T17143] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1200.668957][T17143] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1200.678760][T17143] usb 2-1: media controller created [ 1200.688629][T17281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1200.694869][T17143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.834643][T17143] zl10353_read_register: readreg error (reg=127, ret==0) [ 1200.856369][T17143] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1200.865487][T17143] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1200.902390][T17143] usb 2-1: USB disconnect, device number 50 [ 1200.952951][T17143] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1202.109110][T23006] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1202.830599][T23015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1202.901535][T17143] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1203.141727][T17143] usb 2-1: Using ep0 maxpacket: 8 [ 1203.150986][T17143] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1203.161741][T17143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.204136][T17143] usb 2-1: Product: syz [ 1203.218296][T17143] usb 2-1: Manufacturer: syz [ 1203.225924][T17143] usb 2-1: SerialNumber: syz [ 1203.243065][T17143] usb 2-1: config 0 descriptor?? [ 1203.271597][T17143] gspca_main: se401-2.14.0 probing 047d:5003 [ 1203.657727][T17143] gspca_se401: Wrong descriptor type [ 1203.939569][ T30] audit: type=1804 audit(2000000177.741:2163): pid=23011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4523" name="file0" dev="ramfs" ino=75178 res=1 errno=0 [ 1204.502175][ T30] audit: type=1400 audit(2000000178.025:2164): avc: denied { execute_no_trans } for pid=23009 comm="syz.1.4523" path="/file2" dev="ramfs" ino=75180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1204.603971][T23041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4532'. [ 1205.004524][T16562] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 1205.004556][T16562] Bluetooth: unknown link type 247 [ 1205.018770][T16562] Bluetooth: hci4: connection err: -111 [ 1206.173270][T23057] gfs2: path_lookup on c::;řN€…L‰´¶;o$: returned error -2 [ 1206.244956][T23057] gre0: left allmulticast mode [ 1207.030430][ T9775] usb 2-1: USB disconnect, device number 51 [ 1207.846956][T17143] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1208.207275][T17143] usb 5-1: Using ep0 maxpacket: 8 [ 1208.221591][T17143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.258481][T17143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.287114][T17143] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1208.324131][T17143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.357919][T17143] usb 5-1: config 0 descriptor?? [ 1208.557221][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1208.769626][T17143] wacom 0003:056A:0059.0012: item fetching failed at offset 10/11 [ 1208.782530][T17143] wacom 0003:056A:0059.0012: parse failed [ 1208.795298][T17143] wacom 0003:056A:0059.0012: probe with driver wacom failed with error -22 [ 1208.963052][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.973567][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.988389][ T9777] usb 5-1: USB disconnect, device number 51 [ 1209.675264][T23111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4549'. [ 1209.694375][T23111] ip6t_srh: unknown srh match flags 4000 [ 1209.705960][T23111] openvswitch: netlink: Flow actions attr not present in new flow. [ 1211.051774][T23120] loop2: detected capacity change from 0 to 7 [ 1211.098296][T23120] Dev loop2: unable to read RDB block 7 [ 1211.131444][T16562] Bluetooth: hci1: unexpected event for opcode 0x200d [ 1211.141390][T23120] loop2: AHDI p1 p2 p3 [ 1211.145582][T23120] loop2: partition table partially beyond EOD, truncated [ 1211.209799][T23120] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1211.228306][T23120] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1211.479809][T17143] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1211.617732][ T9775] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1211.621544][T23145] netlink: 'syz.4.4558': attribute type 29 has an invalid length. [ 1211.659712][T23145] netlink: 'syz.4.4558': attribute type 29 has an invalid length. [ 1211.732003][T17143] usb 3-1: Using ep0 maxpacket: 32 [ 1211.856919][T17143] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1211.884340][T17143] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1211.913228][T17143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.951614][T17143] usb 3-1: Product: syz [ 1211.960585][T17143] usb 3-1: Manufacturer: syz [ 1211.965381][T17143] usb 3-1: SerialNumber: syz [ 1212.077066][T17143] usb 3-1: config 0 descriptor?? [ 1212.341767][ T9777] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1212.547072][ T9777] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 1212.570262][ T9777] usb 5-1: config 127 has no interface number 0 [ 1212.586637][ T9777] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1212.608184][ T9777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.831762][ T9777] peak_usb 5-1:127.124: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1212.867455][ T9775] usb 6-1: device descriptor read/64, error -71 [ 1213.230520][T23168] trusted_key: encrypted_key: insufficient parameters specified [ 1214.260978][T17143] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 1214.275407][T17143] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 1214.279702][ T9777] peak_usb 5-1:127.124 can0: sending command failure: -22 [ 1214.348320][T17143] usb 3-1: USB disconnect, device number 50 [ 1214.442550][ T9777] peak_usb 5-1:127.124 can0: sending command failure: -22 [ 1214.449978][ T9777] peak_usb 5-1:127.124 can0: sending command failure: -22 [ 1214.468755][T23150] IPVS: set_ctl: invalid protocol: 63 172.20.20.170:536 [ 1214.494878][ T9775] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1214.502512][T23150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.516579][T23150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.525595][T23176] i2c i2c-0: Invalid block write size 85 [ 1214.659470][ T9777] peak_usb 5-1:127.124: probe with driver peak_usb failed with error -22 [ 1214.684809][ T9775] usb 6-1: Using ep0 maxpacket: 16 [ 1214.715901][ T9775] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1214.780953][ T9775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.881557][ T9775] usb 6-1: Product: syz [ 1214.890157][ T9775] usb 6-1: Manufacturer: syz [ 1214.895095][ T9775] usb 6-1: SerialNumber: syz [ 1214.901843][ T9775] usb 6-1: config 0 descriptor?? [ 1214.916939][ T5879] usb 5-1: USB disconnect, device number 52 [ 1215.058513][ T9775] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1215.089582][ T9775] usb 6-1: USB disconnect, device number 36 [ 1215.492387][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4567'. [ 1215.583360][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4567'. [ 1218.885790][T17143] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1219.061327][T17143] usb 3-1: Using ep0 maxpacket: 16 [ 1219.109854][T17143] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1219.139211][T17143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.181817][T17143] usb 3-1: Product: syz [ 1219.190404][T17143] usb 3-1: Manufacturer: syz [ 1219.195024][T17143] usb 3-1: SerialNumber: syz [ 1219.220273][T17143] usb 3-1: config 0 descriptor?? [ 1219.874345][ T5879] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1219.883743][T17143] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1219.892717][T23236] uprobe: syz.2.4577:23236 failed to unregister, leaking uprobe [ 1219.960820][ T9775] usb 3-1: USB disconnect, device number 51 [ 1220.000598][ T30] audit: type=1400 audit(2000000200.651:2165): avc: denied { ioctl } for pid=23252 comm="syz.5.4581" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1220.070378][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1220.115588][ T9777] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1220.117497][ T5879] usb 4-1: can't read configurations, error -61 [ 1220.205827][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4581'. [ 1220.335501][ T5879] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1220.382770][ T9777] usb 5-1: Using ep0 maxpacket: 8 [ 1220.403284][ T9777] usb 5-1: config 162 has an invalid interface number: 159 but max is 1 [ 1220.412097][ T9777] usb 5-1: config 162 has an invalid interface number: 210 but max is 1 [ 1220.428975][ T9777] usb 5-1: config 162 has no interface number 0 [ 1220.435252][ T9777] usb 5-1: config 162 has no interface number 1 [ 1220.456241][ T9777] usb 5-1: config 162 interface 159 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1220.487808][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1220.504639][ T5879] usb 4-1: can't read configurations, error -61 [ 1220.506266][ T9777] usb 5-1: config 162 interface 210 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1220.522178][ T9777] usb 5-1: config 162 interface 210 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1220.522705][ T5879] usb usb4-port1: attempt power cycle [ 1220.535302][ T9777] usb 5-1: config 162 interface 210 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1220.552076][ T9777] usb 5-1: config 162 interface 210 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1220.579797][ T9777] usb 5-1: config 162 interface 210 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1220.593449][ T9777] usb 5-1: config 162 interface 159 has no altsetting 0 [ 1220.600795][ T9777] usb 5-1: config 162 interface 210 has no altsetting 0 [ 1220.611506][ T9777] usb 5-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=35.9c [ 1220.634224][ T9777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.642656][ T9777] usb 5-1: Product: syz [ 1220.647003][ T9777] usb 5-1: Manufacturer: syz [ 1220.651783][ T9777] usb 5-1: SerialNumber: syz [ 1220.896344][ T5879] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1221.015020][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1221.022792][ T5879] usb 4-1: can't read configurations, error -61 [ 1221.162583][ T5879] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1221.444169][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1221.457030][ T5879] usb 4-1: can't read configurations, error -61 [ 1221.916475][ T5879] usb usb4-port1: unable to enumerate USB device [ 1222.186457][ T9777] pl2303 5-1:162.159: required endpoints missing [ 1222.234815][ T9777] pl2303 5-1:162.210: required interrupt-in endpoint missing [ 1222.386381][ T9777] usb 5-1: USB disconnect, device number 53 [ 1222.391417][ T5879] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1222.648240][ T5879] usb 6-1: device descriptor read/64, error -71 [ 1222.943616][ T5879] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1223.143501][ T5879] usb 6-1: device descriptor read/64, error -71 [ 1223.355755][ T5879] usb usb6-port1: attempt power cycle [ 1223.462438][T23310] syz.3.4592 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1223.709370][ T5879] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1223.773039][ T5879] usb 6-1: device descriptor read/8, error -71 [ 1224.067946][ T5879] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1224.493393][ T5879] usb 6-1: device descriptor read/8, error -71 [ 1224.608846][ T5879] usb usb6-port1: unable to enumerate USB device [ 1225.107294][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1225.130971][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1225.291455][T23334] openvswitch: netlink: IP tunnel dst address not specified [ 1225.588766][T23346] bond0: option ad_select: unable to set because the bond device is up [ 1225.605233][T23347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4598'. [ 1225.744949][ T9777] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1225.826310][T23353] FAULT_INJECTION: forcing a failure. [ 1225.826310][T23353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.855661][T23353] CPU: 0 UID: 0 PID: 23353 Comm: syz.1.4601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.855693][T23353] Tainted: [L]=SOFTLOCKUP [ 1225.855700][T23353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1225.855710][T23353] Call Trace: [ 1225.855716][T23353] [ 1225.855724][T23353] dump_stack_lvl+0x100/0x190 [ 1225.855753][T23353] should_fail_ex.cold+0x5/0xa [ 1225.855773][T23353] _copy_to_user+0x32/0xd0 [ 1225.855800][T23353] simple_read_from_buffer+0xcb/0x170 [ 1225.855825][T23353] proc_fail_nth_read+0x1af/0x230 [ 1225.855855][T23353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1225.855880][T23353] ? rw_verify_area+0xce/0x6d0 [ 1225.855898][T23353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1225.855922][T23353] vfs_read+0x1e4/0xb30 [ 1225.855943][T23353] ? __pfx_vfs_read+0x10/0x10 [ 1225.855959][T23353] ? find_held_lock+0x2b/0x80 [ 1225.855984][T23353] ? __fget_files+0x215/0x3d0 [ 1225.856011][T23353] ? __fget_files+0x21f/0x3d0 [ 1225.856040][T23353] ksys_read+0x12a/0x250 [ 1225.856059][T23353] ? __pfx_ksys_read+0x10/0x10 [ 1225.856087][T23353] do_syscall_64+0xc9/0xf80 [ 1225.856110][T23353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.856129][T23353] RIP: 0033:0x7f7b3a35b78e [ 1225.856144][T23353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1225.856160][T23353] RSP: 002b:00007f7b3b249fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1225.856179][T23353] RAX: ffffffffffffffda RBX: 00007f7b3b24a6c0 RCX: 00007f7b3a35b78e [ 1225.856191][T23353] RDX: 000000000000000f RSI: 00007f7b3b24a0a0 RDI: 0000000000000004 [ 1225.856202][T23353] RBP: 00007f7b3b24a090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.856212][T23353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.856223][T23353] R13: 00007f7b3a616038 R14: 00007f7b3a615fa0 R15: 00007ffcc53dfae8 [ 1225.856249][T23353] [ 1225.968120][ T9777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.138665][ T9777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.204702][ T9777] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1226.231671][ T9777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.369897][ T9777] usb 3-1: config 0 descriptor?? [ 1226.824727][ T9777] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1227.252414][T23362] trusted_key: encrypted_key: insufficient parameters specified [ 1227.698519][ T30] audit: type=1400 audit(2000000208.714:2166): avc: denied { mount } for pid=23342 comm="syz.2.4597" name="/" dev="autofs" ino=76158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1227.744691][ T9777] arvo 0003:1E7D:30D4.0013: couldn't init struct arvo_device [ 1227.752102][ T9777] arvo 0003:1E7D:30D4.0013: couldn't install keyboard [ 1227.784577][ T9777] arvo 0003:1E7D:30D4.0013: probe with driver arvo failed with error -71 [ 1227.808662][ T9777] usb 3-1: USB disconnect, device number 52 [ 1227.980356][T23363] fido_id[23363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1228.328875][ T30] audit: type=1400 audit(2000000209.396:2167): avc: denied { unmount } for pid=17157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1228.750013][ T30] audit: type=1400 audit(2000000209.816:2168): avc: denied { search } for pid=23375 comm="syz.2.4608" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1230.142736][T23396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4614'. [ 1231.226013][T23396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.439978][T23396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.874386][T23396] bond0 (unregistering): Released all slaves [ 1231.992784][ T9777] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1232.193604][ T9777] usb 2-1: Using ep0 maxpacket: 32 [ 1232.374352][ T9777] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1232.423036][ T9777] usb 2-1: config 120 has an invalid interface number: 86 but max is 0 [ 1233.015061][ T9777] usb 2-1: config 120 has no interface number 0 [ 1233.027823][ T9777] usb 2-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 1233.040941][ T9777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.048953][ T9777] usb 2-1: Product: syz [ 1233.054003][ T9777] usb 2-1: Manufacturer: syz [ 1233.073321][ T9777] usb 2-1: SerialNumber: syz [ 1233.262149][T23434] binder: 23433:23434 ioctl c0306201 200000000680 returned -14 [ 1233.331061][T17281] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1234.234447][T17281] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 1234.251803][T17281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1234.259423][T17281] usb 3-1: can't read configurations, error -61 [ 1234.351267][ T9777] huawei_cdc_ncm 2-1:120.86: More than one union descriptor, skipping ... [ 1234.361012][ T9777] huawei_cdc_ncm 2-1:120.86: CDC Union missing and no IAD found [ 1234.369228][ T9777] huawei_cdc_ncm 2-1:120.86: bind() failure [ 1234.393513][ T9777] usb 2-1: USB disconnect, device number 52 [ 1234.412393][T17281] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1234.564888][ T5879] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1234.581083][T17281] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 1234.590661][T17281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1234.598901][T17281] usb 3-1: can't read configurations, error -61 [ 1234.606464][T17281] usb usb3-port1: attempt power cycle [ 1234.656429][T23449] bond2: entered promiscuous mode [ 1234.679467][T23449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1234.685219][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1234.726826][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 1234.757360][ T5879] usb 6-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1234.768460][ T5879] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1234.784584][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1234.812535][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1234.819204][ T5879] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 1234.858918][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.903044][ T5879] usb 6-1: config 0 descriptor?? [ 1234.936543][ T5879] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1234.947174][ T30] audit: type=1400 audit(2000000984.349:2169): avc: denied { append } for pid=23458 comm="syz.4.4629" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1234.975237][T17281] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1234.995688][T23457] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4632'. [ 1235.008040][T17281] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 1235.018745][T17281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1235.026678][T17281] usb 3-1: can't read configurations, error -61 [ 1235.127759][T23443] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4624'. [ 1235.155086][T17281] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1235.174044][ T9777] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1235.184603][T17281] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 1235.194771][T17281] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1235.202602][T17281] usb 3-1: can't read configurations, error -61 [ 1235.209330][T17281] usb usb3-port1: unable to enumerate USB device [ 1235.327038][ T9777] usb 5-1: Using ep0 maxpacket: 16 [ 1235.333794][ T9777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.344448][ T9777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1235.361208][ T9777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1235.375863][ T9777] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1235.389774][ T9777] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.430698][ T9777] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1235.440310][ T9777] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1235.448488][ T9777] usb 5-1: Manufacturer: syz [ 1235.456375][ T9777] usb 5-1: config 0 descriptor?? [ 1235.620649][T23464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1235.630067][T23464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1235.727239][ T9777] rc_core: IR keymap rc-hauppauge not found [ 1235.735898][ T9777] Registered IR keymap rc-empty [ 1235.743280][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1235.777063][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1235.886987][ T9777] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1235.912747][ T9777] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 1235.955352][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1235.974455][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.003119][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.008874][T23474] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1236.830375][ T30] audit: type=1400 audit(2000000986.313:2170): avc: denied { write } for pid=23473 comm="syz.2.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1236.835594][T23479] fuse: Bad value for 'rootmode' [ 1236.866659][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.868782][ T30] audit: type=1400 audit(2000000986.355:2171): avc: denied { listen } for pid=23473 comm="syz.2.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1236.898104][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.936462][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1236.974321][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.012399][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.042933][ T30] audit: type=1400 audit(2000000986.544:2172): avc: denied { read write } for pid=23482 comm="syz.3.4638" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1237.050573][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.098049][ T30] audit: type=1400 audit(2000000986.575:2173): avc: denied { open } for pid=23482 comm="syz.3.4638" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1237.145968][ T9777] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1237.153212][ T30] audit: type=1400 audit(2000000986.575:2174): avc: denied { append } for pid=23482 comm="syz.3.4638" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1237.177103][T17281] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1237.205973][ T9777] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1237.222393][ T9777] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1237.230803][ T30] audit: type=1400 audit(2000000986.680:2175): avc: denied { ioctl } for pid=23482 comm="syz.3.4638" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1238.159243][T17281] usb 3-1: Using ep0 maxpacket: 8 [ 1238.179190][ T5879] usb 6-1: USB disconnect, device number 41 [ 1238.180610][ T9777] usb 5-1: USB disconnect, device number 54 [ 1238.198203][T17281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.217203][T17281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.236478][T17281] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00 [ 1238.253563][T17281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.303430][T17281] usb 3-1: config 0 descriptor?? [ 1238.513514][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4641'. [ 1238.766837][T17281] usbhid 3-1:0.0: can't add hid device: -71 [ 1238.773243][T17281] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1238.790178][T17281] usb 3-1: USB disconnect, device number 57 [ 1239.028464][T23503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4643'. [ 1239.083662][ T9777] libceph: connect (1)[c::]:6789 error -13 [ 1239.096802][ T9777] libceph: mon0 (1)[c::]:6789 connect error [ 1239.321846][T23509] x_tables: duplicate underflow at hook 1 [ 1239.398824][T23501] ceph: No mds server is up or the cluster is laggy [ 1240.587941][ T30] audit: type=1400 audit(2000000990.271:2176): avc: denied { mounton } for pid=23521 comm="syz.2.4651" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1241.248633][ T30] audit: type=1400 audit(2000000990.953:2177): avc: denied { unmount } for pid=17157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1242.178591][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.185107][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.313977][ T30] audit: type=1400 audit(2000000992.077:2178): avc: denied { append } for pid=23549 comm="syz.2.4658" name="pfkey" dev="proc" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1242.373086][T23550] could not allocate digest TFM handle poly1305-generic [ 1243.191738][T23567] block device autoloading is deprecated and will be removed. [ 1244.155875][T17143] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1244.216304][T23587] FAULT_INJECTION: forcing a failure. [ 1244.216304][T23587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.270837][T23587] CPU: 0 UID: 0 PID: 23587 Comm: syz.5.4668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.270859][T23587] Tainted: [L]=SOFTLOCKUP [ 1244.270863][T23587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1244.270869][T23587] Call Trace: [ 1244.270873][T23587] [ 1244.270878][T23587] dump_stack_lvl+0x100/0x190 [ 1244.270896][T23587] should_fail_ex.cold+0x5/0xa [ 1244.270909][T23587] _copy_from_user+0x2e/0xd0 [ 1244.270925][T23587] __x64_sys_signalfd4+0x125/0x1d0 [ 1244.270942][T23587] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 1244.270963][T23587] do_syscall_64+0xc9/0xf80 [ 1244.270977][T23587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.270989][T23587] RIP: 0033:0x7f442459aeb9 [ 1244.270998][T23587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.271008][T23587] RSP: 002b:00007f44253a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 1244.271019][T23587] RAX: ffffffffffffffda RBX: 00007f4424815fa0 RCX: 00007f442459aeb9 [ 1244.271026][T23587] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 1244.271032][T23587] RBP: 00007f44253a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.271038][T23587] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1244.271045][T23587] R13: 00007f4424816038 R14: 00007f4424815fa0 R15: 00007ffcebf76428 [ 1244.271058][T23587] [ 1244.442585][T17143] usb 3-1: Using ep0 maxpacket: 16 [ 1244.450806][T17143] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1244.461858][T17143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.469853][T17143] usb 3-1: Product: syz [ 1244.474093][T17143] usb 3-1: Manufacturer: syz [ 1244.478691][T17143] usb 3-1: SerialNumber: syz [ 1244.486089][T17143] usb 3-1: config 0 descriptor?? [ 1245.101522][T17143] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1245.239295][T17143] usb 3-1: USB disconnect, device number 58 [ 1245.246835][T23601] dummy0: entered promiscuous mode [ 1245.252737][T23601] macsec1: entered allmulticast mode [ 1245.258066][T23601] dummy0: entered allmulticast mode [ 1245.643480][T23601] dummy0: left allmulticast mode [ 1245.648544][T23601] dummy0: left promiscuous mode [ 1246.093410][T23619] bond0: entered allmulticast mode [ 1246.101019][T23619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.133655][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 1246.186296][ T9777] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1246.555993][T17143] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1246.726208][ T9777] usb 5-1: Using ep0 maxpacket: 8 [ 1246.994098][T17143] usb 4-1: Using ep0 maxpacket: 8 [ 1247.443595][T17143] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.498816][T17143] usb 4-1: config 2 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.570447][T17143] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1247.616174][T17143] usb 4-1: New USB device found, idVendor=04e2, idProduct=7e12, bcdDevice=ca.a8 [ 1247.673758][T17143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.699458][T17143] usb 4-1: Product: syz [ 1247.913786][T17143] usb 4-1: Manufacturer: syz [ 1248.226809][T17143] usb 4-1: SerialNumber: syz [ 1248.880062][T14872] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 1248.887748][T14872] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 1248.900067][T14872] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 1248.911981][ T9777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1248.923528][ T9777] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1248.931530][ T9777] usb 5-1: can't read configurations, error -71 [ 1248.939126][T14872] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1249.073945][T17143] usb 4-1: USB disconnect, device number 68 [ 1250.907118][T23661] hfsplus: unable to find HFS+ superblock [ 1250.964699][T23650] fido_id[23650]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1250.980930][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1251.032647][T23664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1251.245103][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4690'. [ 1251.280081][T14872] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1251.490929][T23678] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 1251.607786][T23688] fuse: Bad value for 'fd' [ 1252.552618][T23712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.625645][T23714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1253.518689][T23698] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4700'. [ 1253.556478][ T9769] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1253.928993][T23712] netlink: 'syz.4.4702': attribute type 10 has an invalid length. [ 1253.940678][ T9769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1253.964680][T23712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.971588][ T9769] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1253.983524][T23712] bond0: (slave team0): Enslaving as an active interface with an up link [ 1254.004760][ T9769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.017370][ T9769] usb 3-1: config 0 descriptor?? [ 1254.185235][ T9777] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1254.309081][ T9777] usb 4-1: device descriptor read/64, error -71 [ 1254.462161][ T9769] samsung 0003:0419:0600.0015: item fetching failed at offset 3/6 [ 1254.476818][ T9769] samsung 0003:0419:0600.0015: parse failed [ 1254.485687][ T9769] samsung 0003:0419:0600.0015: probe with driver samsung failed with error -22 [ 1254.547584][ T9777] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1254.749096][ T9777] usb 4-1: device descriptor read/64, error -71 [ 1254.769287][T23703] binder: 23699:23703 ioctl c0306201 0 returned -14 [ 1254.851968][ T9777] usb usb4-port1: attempt power cycle [ 1255.175737][ T9777] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1255.224323][ T9777] usb 4-1: device descriptor read/8, error -71 [ 1255.328160][ T9769] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1255.452047][ T9777] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1255.472528][ T9777] usb 4-1: device descriptor read/8, error -71 [ 1255.473635][ T9769] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1255.501750][ T9769] usb 6-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 1255.516255][ T9769] usb 6-1: config 0 has no interface number 0 [ 1255.523117][ T9769] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 126, changing to 10 [ 1255.534741][ T9769] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.544875][ T9769] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.573833][ T9769] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1255.588986][ T9777] usb usb4-port1: unable to enumerate USB device [ 1255.590572][ T9769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.622377][ T9769] usb 6-1: config 0 descriptor?? [ 1255.635520][ T9769] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1255.804548][ T9777] usb 3-1: USB disconnect, device number 59 [ 1255.883605][ T9769] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1255.899008][ T9769] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.906911][ T9769] usb 6-1: MIDIStreaming interface descriptor not found [ 1256.003363][ T9769] usb 6-1: USB disconnect, device number 42 [ 1256.450054][T23754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1258.129315][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4718'. [ 1259.336494][T23797] macsec1: entered allmulticast mode [ 1259.342151][T23797] dummy0: entered allmulticast mode [ 1259.391909][T23797] dummy0: left allmulticast mode [ 1261.515458][T23823] 9p: Bad value for 'rfdno' [ 1261.531097][ T30] audit: type=1400 audit(2000001012.256:2179): avc: denied { write } for pid=23842 comm="syz.2.4735" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1262.062693][T23851] trusted_key: encrypted_key: insufficient parameters specified [ 1262.568201][ T30] audit: type=1400 audit(2000001013.317:2180): avc: denied { sys_admin } for pid=23852 comm="syz.4.4739" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1264.124001][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1264.757426][T17143] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1264.786450][T23895] netlink: 'syz.5.4738': attribute type 1 has an invalid length. [ 1264.794243][T23895] netlink: 9188 bytes leftover after parsing attributes in process `syz.5.4738'. [ 1265.054336][T16562] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1265.276728][T17143] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.281021][ T9777] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1265.723498][T17143] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1265.738648][T17143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1265.760798][T17143] usb 3-1: Product: syz [ 1265.764997][T17143] usb 3-1: Manufacturer: syz [ 1265.776900][T17143] usb 3-1: SerialNumber: syz [ 1265.852595][ T9769] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1265.855511][ T9777] usb 5-1: Using ep0 maxpacket: 16 [ 1265.870698][ T9777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.888125][ T9777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.901083][ T9777] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1265.914927][ T9777] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1265.924482][ T9777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.941754][ T9777] usb 5-1: config 0 descriptor?? [ 1266.073734][ T9769] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 1266.147974][ T9769] usb 4-1: config 0 has no interface number 0 [ 1266.156675][ T9769] usb 4-1: config 0 interface 175 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1266.178368][ T9769] usb 4-1: config 0 interface 175 has no altsetting 0 [ 1266.190651][T17143] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1266.219140][ T9769] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1266.375356][ T9769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.390644][ T9769] usb 4-1: Product: syz [ 1266.416861][ T9769] usb 4-1: Manufacturer: syz [ 1266.422349][ T9769] usb 4-1: SerialNumber: syz [ 1266.440197][ T9769] usb 4-1: config 0 descriptor?? [ 1267.509329][T14872] usb 3-1: USB disconnect, device number 60 [ 1267.535648][ T9777] usbhid 5-1:0.0: can't add hid device: -71 [ 1267.541763][ T9777] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1267.549937][T14872] usblp0: removed [ 1267.583448][ T9777] usb 5-1: USB disconnect, device number 57 [ 1267.668188][T23930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4756'. [ 1267.836144][T23934] netlink: 'syz.1.4757': attribute type 1 has an invalid length. [ 1267.843942][T23934] netlink: 'syz.1.4757': attribute type 2 has an invalid length. [ 1267.854469][T23934] netlink: 'syz.1.4757': attribute type 1 has an invalid length. [ 1267.862240][T23934] netlink: 'syz.1.4757': attribute type 2 has an invalid length. [ 1268.244144][ T9769] hub 4-1:0.175: bad descriptor, ignoring hub [ 1268.250263][ T9769] hub 4-1:0.175: probe with driver hub failed with error -5 [ 1268.384871][T23936] netlink: 'syz.4.4759': attribute type 1 has an invalid length. [ 1268.392846][T23936] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1268.424683][T16562] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1268.473263][ T9769] usbsevseg 4-1:0.175: USB 7 Segment device now attached [ 1268.501640][ T9769] usb 4-1: USB disconnect, device number 73 [ 1268.508253][ T9769] usbsevseg 4-1:0.175: USB 7 Segment now disconnected [ 1268.715256][T23945] netlink: 'syz.5.4758': attribute type 1 has an invalid length. [ 1268.895540][T23950] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1268.907467][T23945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.908280][T20431] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1269.073638][T20431] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1269.729254][T17143] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1270.445479][T23978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.455981][T23978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.224423][T23987] netlink: 'syz.5.4769': attribute type 12 has an invalid length. [ 1272.466439][T17143] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1272.481821][T17143] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1272.489413][T17143] usb 5-1: can't read configurations, error -71 [ 1273.366922][T24016] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4775'. [ 1273.928020][T24026] overlayfs: failed to resolve './file1': -2 [ 1274.573572][T24030] comedi comedi3: aio_aio12_8: I/O port conflict (0x4f27,32) [ 1274.819319][ T30] audit: type=1400 audit(2000001794.185:2181): avc: denied { bind } for pid=24034 comm="syz.1.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1274.966554][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1275.011786][T24044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1275.216236][T14872] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1275.377418][T14872] usb 6-1: Using ep0 maxpacket: 32 [ 1275.385358][T14872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.394870][T14872] usb 6-1: config 0 has an invalid interface number: 187 but max is 0 [ 1275.403256][T14872] usb 6-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 1275.413720][T14872] usb 6-1: config 0 has no interface number 0 [ 1275.420591][T14872] usb 6-1: too many endpoints for config 0 interface 187 altsetting 101: 97, using maximum allowed: 30 [ 1275.464655][T14872] usb 6-1: config 0 interface 187 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1275.485160][T24056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1275.534121][T14872] usb 6-1: config 0 interface 187 has no altsetting 0 [ 1275.578757][T14872] usb 6-1: string descriptor 0 read error: -22 [ 1275.590591][T14872] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 1275.620826][T14872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.666998][T14872] usb 6-1: config 0 descriptor?? [ 1275.705697][T24060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1275.936224][T17143] usb 6-1: USB disconnect, device number 43 [ 1276.097986][T24062] trusted_key: encrypted_key: insufficient parameters specified [ 1277.680755][T24083] overlayfs: failed to resolve './file1': -2 [ 1278.316903][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1278.947405][T24109] xt_hashlimit: size too large, truncated to 1048576 [ 1279.110896][T17097] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1279.362850][T17097] usb 6-1: Using ep0 maxpacket: 32 [ 1279.378314][T17097] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1279.387512][T17097] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1279.396268][T17097] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1279.416418][T17097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1279.427175][T17097] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1279.437823][T17097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1279.449826][T17097] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1279.460987][T17097] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1279.887007][T17097] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1279.914537][T17097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.932297][T17097] usb 6-1: config 0 descriptor?? [ 1279.938084][T24107] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1280.155165][T24126] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1280.174809][T17097] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1280.191043][T24127] netlink: 'syz.1.4795': attribute type 2 has an invalid length. [ 1280.245165][T24127] ‚#{6c: entered promiscuous mode [ 1280.293262][ T30] audit: type=1804 audit(2000001799.928:2182): pid=24126 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.4805" name="/newroot/331/file0" dev="tmpfs" ino=1762 res=1 errno=0 [ 1280.332232][T24127] netlink: 'syz.1.4795': attribute type 2 has an invalid length. [ 1280.359150][T24127] ‚#{6c: left promiscuous mode [ 1280.384949][ C0] usblp0: nonzero read bulk status received: -71 [ 1280.416144][T24107] usblp0: error -71 reading from printer [ 1280.483771][ C1] usblp0: nonzero read bulk status received: -71 [ 1280.605382][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4807'. [ 1281.006223][T17097] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1281.031894][T14872] usb 6-1: USB disconnect, device number 44 [ 1281.041068][T14872] usblp0: removed [ 1281.055951][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4807'. [ 1281.228150][T17097] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1281.236584][T17097] usb 4-1: config 0 has no interface number 0 [ 1281.242678][T17097] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.276748][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1281.291816][T17097] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.542701][T17097] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1281.571079][T17097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.604160][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4809'. [ 1281.629198][T17097] usb 4-1: config 0 descriptor?? [ 1282.549138][T24155] overlayfs: failed to resolve './file1': -2 [ 1283.069520][T24159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1283.081598][T24157] bond3: option arp_interval: invalid value (18446744073709551615) [ 1283.137415][T24157] bond3: option arp_interval: allowed values 0 - 2147483647 [ 1283.199688][T24157] bond3 (unregistering): Released all slaves [ 1283.273436][T17097] usbhid 4-1:0.1: can't add hid device: -71 [ 1283.326568][T17097] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1283.406873][T17097] usb 4-1: USB disconnect, device number 74 [ 1283.667593][T24175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24175 comm=syz.2.4818 [ 1283.923581][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1284.445779][T17281] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1285.293798][T17281] usb 5-1: Using ep0 maxpacket: 32 [ 1285.435942][T17281] usb 5-1: config 0 has no interfaces? [ 1285.446649][T17281] usb 5-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=5b.2a [ 1285.463873][T17281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.491422][T17281] usb 5-1: Product: syz [ 1285.504552][T17281] usb 5-1: Manufacturer: syz [ 1285.692100][T17281] usb 5-1: SerialNumber: syz [ 1285.739286][T17281] usb 5-1: config 0 descriptor?? [ 1286.444663][T17143] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1286.504777][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1286.538502][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1286.625887][T17143] usb 6-1: Using ep0 maxpacket: 8 [ 1286.640940][T17143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1286.663049][T17143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1286.676848][T17143] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1286.695357][T17143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1286.707030][T17143] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1286.717893][T17143] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1286.729280][T17143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.768160][T17143] usb 6-1: config 0 descriptor?? [ 1286.792698][T24216] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1286.887739][T24230] netlink: 'syz.3.4831': attribute type 1 has an invalid length. [ 1286.915130][T24230] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4831'. [ 1287.022008][T14872] usb 5-1: USB disconnect, device number 60 [ 1287.859372][ T30] audit: type=1400 audit(2000001807.844:2183): avc: denied { mount } for pid=24237 comm="syz.3.4835" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1287.860115][T17281] usb 6-1: USB disconnect, device number 45 [ 1287.913994][T24243] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1287.916828][T16562] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 1287.935791][ T30] audit: type=1400 audit(2000001807.865:2184): avc: denied { mounton } for pid=24237 comm="syz.3.4835" path="/339/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1287.989067][T14872] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1288.156307][T14872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.238981][T14872] usb 5-1: config 0 has no interface number 0 [ 1288.258198][T14872] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.275059][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4836'. [ 1288.278833][T14872] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.299532][T14872] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1288.338414][T14872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.353648][T14872] usb 5-1: config 0 descriptor?? [ 1288.392925][ T30] audit: type=1400 audit(2000001808.453:2185): avc: denied { unmount } for pid=17349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1288.548551][T24253] raw_sendmsg: syz.3.4837 forgot to set AF_INET. Fix it! [ 1288.892526][T17281] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1289.135171][T17281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1289.146855][T17281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.162623][T17281] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1289.171813][T17281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.183408][T17281] usb 4-1: config 0 descriptor?? [ 1289.592653][T17281] hid-picolcd 0003:04D8:F002.0016: item fetching failed at offset 5/7 [ 1289.621466][T17281] hid-picolcd 0003:04D8:F002.0016: device report parse failed [ 1289.782608][T24253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4837'. [ 1289.991806][ T30] audit: type=1400 audit(2000001809.808:2186): avc: denied { bind } for pid=24261 comm="syz.5.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1290.026185][T17281] hid-picolcd 0003:04D8:F002.0016: probe with driver hid-picolcd failed with error -22 [ 1290.037447][T14872] usbhid 5-1:0.1: can't add hid device: -71 [ 1290.100003][T14872] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1290.133943][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1290.141087][T17281] usb 4-1: USB disconnect, device number 75 [ 1290.191934][T14872] usb 5-1: USB disconnect, device number 61 [ 1290.905645][T17097] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1291.142255][T17097] usb 5-1: Using ep0 maxpacket: 8 [ 1291.354933][T17097] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1291.367139][T17097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1291.405565][T17097] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1291.792890][T17097] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.806819][T17097] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.815949][T17097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.129954][T17097] usb 5-1: GET_CAPABILITIES returned 0 [ 1292.142215][T17097] usbtmc 5-1:16.0: can't read capabilities [ 1292.272054][ T30] audit: type=1400 audit(2000001812.506:2187): avc: denied { accept } for pid=24310 comm="syz.2.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1292.353451][T24271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.394181][T24271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.415858][T17097] usb 5-1: USB disconnect, device number 62 [ 1292.437961][T24287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.409075][ T30] audit: type=1326 audit(2000001813.251:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.2.4855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f2d59aeb9 code=0x0 [ 1293.444260][ T30] audit: type=1400 audit(2000001813.419:2189): avc: denied { setcurrent } for pid=24317 comm="syz.2.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1293.709632][T24330] misc userio: Can't change port type on an already running userio instance [ 1293.781383][ T30] audit: type=1400 audit(2000001814.102:2190): avc: denied { execute_no_trans } for pid=24327 comm="syz.5.4859" path=2F6D656D66643AC92E24AA68E27FE61B2280F01D050BAFA9B8C6202864656C6574656429 dev="hugetlbfs" ino=81196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1295.216706][T24343] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1295.248770][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1296.074018][T24356] macsec1: entered allmulticast mode [ 1296.079596][T24356] dummy0: entered allmulticast mode [ 1296.261156][T24356] dummy0: left allmulticast mode [ 1296.677178][T24367] sit0: entered promiscuous mode [ 1296.702626][T24367] netlink: 'syz.1.4868': attribute type 1 has an invalid length. [ 1296.710680][T24367] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1298.675716][T17281] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1299.371198][T17281] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1299.443980][T17281] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1299.477298][T17281] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1299.497310][T17281] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1299.524893][T17281] usb 4-1: Product: syz [ 1299.529087][T17281] usb 4-1: Manufacturer: syz [ 1299.547593][T17281] usb 4-1: SerialNumber: syz [ 1299.722727][T17281] usb 4-1: config 0 descriptor?? [ 1299.750774][ T9777] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1300.241026][T17281] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1300.275776][ T9777] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 1300.293672][ T9777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.305204][ T9777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.315443][ T9777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 1300.331983][ T9777] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1300.399363][ T9777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.431498][ T9777] usb 3-1: config 0 descriptor?? [ 1300.464155][T17234] udevd[17234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.711429][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.817200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.583089][ T5879] usb 4-1: USB disconnect, device number 76 [ 1301.741180][T24414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1301.766305][T24414] gretap1: entered allmulticast mode [ 1301.817844][T24414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=24414 comm=syz.2.4883 [ 1302.209753][ T5879] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1302.219131][ T9777] wacom 0003:056A:0331.0017: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 1302.343022][ T9777] usb 3-1: USB disconnect, device number 61 [ 1302.370013][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 1302.392585][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1302.412326][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1302.452219][ T5879] usb 2-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 1302.472601][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.502940][ T5879] usb 2-1: config 0 descriptor?? [ 1302.520904][ T5879] iowarrior 2-1:0.0: no interrupt-out endpoint found [ 1302.829236][T24433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.102575][T24433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.275674][ T5879] usb 2-1: USB disconnect, device number 54 [ 1304.753759][T24469] macsec1: entered allmulticast mode [ 1304.759239][T24469] dummy0: entered allmulticast mode [ 1304.999338][T24469] dummy0: left allmulticast mode [ 1305.046311][ T30] audit: type=1326 audit(2000001825.924:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24461 comm="syz.5.4895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f442459aeb9 code=0x0 [ 1307.351047][T17097] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1307.398727][ T5879] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1307.493642][T17097] usb 5-1: Using ep0 maxpacket: 16 [ 1307.499935][T17097] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.511298][T17097] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1307.531074][T17097] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1307.544564][T17097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.561656][ T5879] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1307.572923][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.856699][ T5879] usb 2-1: config 0 descriptor?? [ 1307.862717][T17097] usb 5-1: config 0 descriptor?? [ 1308.576486][T24525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1308.587495][ T5879] ath6kl: Failed to submit usb control message: -71 [ 1308.595004][ T5879] ath6kl: unable to send the bmi data to the device: -71 [ 1308.608391][ T5879] ath6kl: Unable to send get target info: -71 [ 1308.620028][ T5879] ath6kl: Failed to init ath6kl core: -71 [ 1308.634448][ T5879] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1308.664530][ T5879] usb 2-1: USB disconnect, device number 55 [ 1308.665252][T14872] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1308.755755][T24530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1308.968105][T17097] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1309.005082][T17097] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1309.167502][T17097] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1309.369327][T17097] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1309.392218][T17097] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1309.455043][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1309.549992][T14872] usb 3-1: config 2 has an invalid interface number: 220 but max is 0 [ 1309.608985][T14872] usb 3-1: config 2 has no interface number 0 [ 1309.652708][T17097] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1309.664760][ C0] usb 5-1: input irq status -75 received [ 1309.668761][T14872] usb 3-1: config 2 interface 220 has no altsetting 0 [ 1309.710264][T14872] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=94.f4 [ 1309.741564][T14872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.771247][T14872] usb 3-1: Product: syz [ 1309.786133][T14872] usb 3-1: Manufacturer: syz [ 1309.802735][T14872] usb 3-1: SerialNumber: syz [ 1310.070588][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1310.456734][T17097] usb 5-1: USB disconnect, device number 63 [ 1310.588580][T24560] macsec1: entered allmulticast mode [ 1310.594114][T24560] dummy0: entered allmulticast mode [ 1310.745249][T24560] dummy0: left allmulticast mode [ 1310.877308][T16562] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1311.237111][T17097] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1311.330582][T24571] syz_tun: entered allmulticast mode [ 1311.339947][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1311.396362][T17097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.593163][T17097] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1311.740260][T17097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.771717][T17097] usb 5-1: config 0 descriptor?? [ 1311.777519][T24571] syz_tun (unregistering): left allmulticast mode [ 1311.779387][T17097] pwc: Askey VC010 type 2 USB webcam detected. [ 1311.797775][T24580] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1311.818599][ T9777] usb 3-1: USB disconnect, device number 62 [ 1311.824651][T24580] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1311.917851][T24584] netlink: 'syz.2.4926': attribute type 3 has an invalid length. [ 1311.947080][T24584] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1312.084955][T24592] syz.5.4929 (24592) used obsolete PPPIOCDETACH ioctl [ 1312.123070][T17281] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1312.196494][T17097] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1312.272086][T17097] pwc: recv_control_msg error -32 req 02 val 2700 [ 1312.281053][T17097] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1312.295109][T17281] usb 4-1: Using ep0 maxpacket: 8 [ 1312.342849][T17281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.470620][T17097] pwc: recv_control_msg error -32 req 04 val 1000 [ 1312.477348][T17281] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1312.486080][T17097] pwc: recv_control_msg error -32 req 04 val 1300 [ 1312.502889][T17281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.514322][T17097] pwc: recv_control_msg error -32 req 04 val 1400 [ 1312.531636][T17097] pwc: recv_control_msg error -32 req 02 val 2000 [ 1312.539052][T17097] pwc: recv_control_msg error -32 req 02 val 2100 [ 1312.558530][T17097] pwc: recv_control_msg error -32 req 04 val 1500 [ 1312.608902][T17097] pwc: recv_control_msg error -32 req 02 val 2500 [ 1312.618577][T17097] pwc: recv_control_msg error -32 req 02 val 2400 [ 1312.782461][T17097] pwc: recv_control_msg error -32 req 02 val 2600 [ 1312.841372][T17097] pwc: recv_control_msg error -32 req 02 val 2900 [ 1312.849958][T17097] pwc: recv_control_msg error -32 req 02 val 2800 [ 1313.121280][ T30] audit: type=1400 audit(2000001833.914:2192): avc: denied { read } for pid=24555 comm="syz.4.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1313.151116][T24600] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4931'. [ 1313.259445][T17281] usb 4-1: config 0 descriptor?? [ 1313.462311][T17281] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1314.048245][T17097] pwc: recv_control_msg error -71 req 04 val 1200 [ 1314.068000][T17097] pwc: Registered as video103. [ 1314.082446][T17281] usb 4-1: USB disconnect, device number 77 [ 1314.097186][T17097] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 1314.144020][T17097] usb 5-1: USB disconnect, device number 64 [ 1314.186046][T24612] netlink: 9996 bytes leftover after parsing attributes in process `syz.2.4933'. [ 1314.272462][T16562] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1314.847295][ T30] audit: type=1400 audit(2000002604.047:2193): avc: denied { unmount } for pid=17349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1316.068425][T24642] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4942'. [ 1317.649881][T24662] batadv_slave_1: entered promiscuous mode [ 1317.897716][ T5879] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1317.924219][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1317.937510][T24663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.058808][ T5879] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1318.075756][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.084814][T24663] batadv_slave_1 (unregistering): left promiscuous mode [ 1318.103696][ T5879] usb 4-1: config 0 descriptor?? [ 1318.115605][T24663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.485387][T14872] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1318.623994][ T5879] kye 0003:0458:0138.0019: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 1318.668707][T14872] usb 2-1: config 0 has no interfaces? [ 1318.676747][T14872] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1318.723369][T14872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.740737][T14872] usb 2-1: Product: syz [ 1318.750925][T14872] usb 2-1: Manufacturer: syz [ 1318.775741][T14872] usb 2-1: SerialNumber: syz [ 1318.796293][T14872] usb 2-1: config 0 descriptor?? [ 1318.930961][T24683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1319.227935][T14872] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1319.388988][T14872] usb 6-1: Using ep0 maxpacket: 32 [ 1319.410098][T14872] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1319.428189][T14872] usb 6-1: config 0 has no interface number 0 [ 1319.454307][T14872] usb 6-1: config 0 interface 12 altsetting 2 has an endpoint descriptor with address 0x28, changing to 0x8 [ 1319.468349][T14872] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1319.486253][T14872] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1319.495567][T14872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.503595][T14872] usb 6-1: Product: syz [ 1319.509569][T14872] usb 6-1: Manufacturer: syz [ 1319.514469][T14872] usb 6-1: SerialNumber: syz [ 1319.524730][T14872] usb 6-1: config 0 descriptor?? [ 1320.187450][ T5879] usb 4-1: USB disconnect, device number 78 [ 1320.955648][ T9777] usb 2-1: USB disconnect, device number 56 [ 1320.972440][T24702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.980233][T24702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.370975][ T9777] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1321.552102][ T9777] usb 2-1: Using ep0 maxpacket: 8 [ 1321.559982][ T9777] usb 2-1: config index 0 descriptor too short (expected 365, got 45) [ 1321.568782][ T9777] usb 2-1: config 16 has an invalid descriptor of length 61, skipping remainder of the config [ 1321.579811][ T9777] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.599902][ T9777] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1321.609846][ T9777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.746463][T24709] netlink: 9996 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1321.800313][T16562] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1321.957593][T14872] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1321.971536][T14872] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1321.980709][T14872] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1322.021704][ T9777] usbtmc 2-1:16.0: bulk endpoints not found [ 1322.054240][T14872] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1322.107685][T14872] usb 6-1: USB disconnect, device number 46 [ 1322.313448][ T30] audit: type=1400 audit(2000003380.069:2194): avc: denied { mounton } for pid=24714 comm="syz.5.4960" path="/file0" dev="ramfs" ino=84208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1322.568773][ T30] audit: type=1400 audit(2000003380.331:2195): avc: denied { map } for pid=24716 comm="syz.5.4961" path="socket:[84217]" dev="sockfs" ino=84217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1322.593593][ T30] audit: type=1400 audit(2000003380.331:2196): avc: denied { accept } for pid=24716 comm="syz.5.4961" path="socket:[84217]" dev="sockfs" ino=84217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1322.760215][T24725] netlink: 'syz.3.4964': attribute type 1 has an invalid length. [ 1322.777370][T24725] bond5: entered promiscuous mode [ 1322.784041][T24725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1322.906936][T24725] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4964'. [ 1322.943329][T24731] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1322.950362][T24731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1323.247485][ T9777] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1323.363105][T24731] vhci_hcd vhci_hcd.0: Device attached [ 1323.505092][ T9777] usb 5-1: device descriptor read/64, error -71 [ 1323.593858][T24740] comedi comedi3: pcl711: I/O port conflict (0x4f27,16) [ 1323.601902][T14872] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1323.628370][ T9775] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1323.733064][ T9777] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1323.772769][ T9775] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1323.786329][ T9775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.797564][ T9775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.807680][ T9775] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1323.822887][ T9775] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1323.848007][T17281] usb 2-1: USB disconnect, device number 57 [ 1323.855265][ T9775] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1323.863777][ T9777] usb 5-1: device descriptor read/64, error -71 [ 1323.876428][ T9775] usb 6-1: Manufacturer: syz [ 1323.883658][ T9775] usb 6-1: config 0 descriptor?? [ 1323.971346][ T9777] usb usb5-port1: attempt power cycle [ 1324.304809][ T9777] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1324.324344][T24763] xt_l2tp: invalid flags combination: 8 [ 1324.690627][ T9777] usb 5-1: device descriptor read/8, error -71 [ 1325.061120][ T9777] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1325.220241][ T9777] usb 5-1: device descriptor read/8, error -71 [ 1325.363591][ T9775] usbhid 6-1:0.0: can't add hid device: -71 [ 1325.369917][ T9775] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1325.378470][ T9777] usb usb5-port1: unable to enumerate USB device [ 1325.388478][ T9775] usb 6-1: USB disconnect, device number 47 [ 1325.497499][T24776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4975'. [ 1325.886922][T24733] vhci_hcd: connection reset by peer [ 1325.911528][T20432] vhci_hcd vhci_hcd.4: stop threads [ 1325.934392][T20432] vhci_hcd vhci_hcd.4: release socket [ 1325.980275][T20432] vhci_hcd vhci_hcd.4: disconnect device [ 1326.168709][ T5879] IPVS: starting estimator thread 0... [ 1326.340748][T24786] IPVS: using max 47 ests per chain, 112800 per kthread [ 1326.471714][T24795] kAFS: unable to lookup cell '(' [ 1326.560601][T24797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4977'. [ 1326.836541][ T9775] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1326.856502][T24787] trusted_key: encrypted_key: insufficient parameters specified [ 1326.893052][T24795] kAFS: unable to lookup cell '(,cľűL' [ 1327.624548][ T30] audit: type=1400 audit(2000003385.161:2197): avc: denied { shutdown } for pid=24798 comm="syz.5.4979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1327.763867][ T9775] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1327.772010][ T9775] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.782131][ T9775] usb 4-1: config 0 has no interface number 0 [ 1328.438963][ T9775] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1328.467168][ T9775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.495259][ T9775] usb 4-1: Product: syz [ 1328.515242][T14872] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1328.548279][ T9775] usb 4-1: Manufacturer: syz [ 1328.827361][ T9775] usb 4-1: SerialNumber: syz [ 1328.901853][T24811] dummy0: entered promiscuous mode [ 1328.908139][T24811] macsec1: entered allmulticast mode [ 1328.913675][T24811] dummy0: entered allmulticast mode [ 1329.228301][T24811] dummy0: left allmulticast mode [ 1329.241728][ T9775] usb 4-1: config 0 descriptor?? [ 1329.268332][T24811] dummy0: left promiscuous mode [ 1329.286350][ T9775] usb 4-1: can't set config #0, error -71 [ 1329.305645][ T9775] usb 4-1: USB disconnect, device number 79 [ 1330.541654][T14872] kernel read not supported for file /1004/net/arp (pid: 14872 comm: kworker/1:0) [ 1330.543366][T24831] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4985'. [ 1330.553201][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4987'. [ 1330.563233][ T30] audit: type=1400 audit(2000003388.699:2198): avc: denied { read } for pid=24844 comm="syz.5.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1331.594270][T24870] netlink: 'syz.3.4990': attribute type 8 has an invalid length. [ 1332.196204][T24871] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1332.207097][T24871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1332.217853][T24871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1332.552380][T24882] Invalid source name [ 1333.120993][T24889] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4994'. [ 1333.267328][ T9769] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1333.454085][ T9769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1333.487103][ T9769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1333.504392][ T9769] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1333.530178][ T9769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.543968][ T9769] usb 4-1: Product: syz [ 1333.548169][ T9769] usb 4-1: Manufacturer: syz [ 1333.558525][ T9769] usb 4-1: SerialNumber: syz [ 1333.613857][T24907] openvswitch: netlink: IP tunnel dst address not specified [ 1333.732679][T24908] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4997'. [ 1333.742450][T24908] team0: Caught tx_queue_len zero misconfig [ 1333.768237][ T9775] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1333.781287][ T9769] usb 4-1: config 0 descriptor?? [ 1333.808100][T24880] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1333.823140][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 1333.857036][ T9769] port100 4-1:0.0: NFC: Could not get supported command types [ 1333.924361][ T9775] usb 2-1: Using ep0 maxpacket: 32 [ 1333.945399][ T9775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.957651][ T9775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.985266][ T9775] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1334.022853][ T9775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.082739][ T9775] usb 2-1: config 0 descriptor?? [ 1334.126979][T24911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1334.856377][ T9775] ft260 0003:0403:6030.001A: unknown main item tag 0x7 [ 1335.045302][ T9775] ft260 0003:0403:6030.001A: chip code: 6424 8183 [ 1335.238115][ T9775] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1335.425465][ T30] audit: type=1400 audit(2000003393.781:2199): avc: denied { write } for pid=24918 comm="syz.5.5002" path="socket:[83942]" dev="sockfs" ino=83942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1335.453750][ T9775] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 1335.545199][T14872] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 1335.967331][T14872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1336.017232][T14872] usb 5-1: config 1 has an invalid interface number: 181 but max is 0 [ 1336.034313][T14872] usb 5-1: config 1 has no interface number 0 [ 1336.060055][ T9775] usb 2-1: reset high-speed USB device number 58 using dummy_hcd [ 1336.099291][T14872] usb 5-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 1336.149593][T14872] usb 5-1: config 1 interface 181 has no altsetting 0 [ 1336.188031][ T9769] usb 4-1: USB disconnect, device number 80 [ 1336.209663][T14872] usb 5-1: string descriptor 0 read error: -22 [ 1336.216714][T14872] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 1336.226220][T14872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.262384][T14872] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1336.459074][T24917] overlay: ./file0 is not a directory [ 1336.465109][ T30] audit: type=1400 audit(2000003394.925:2200): avc: denied { mounton } for pid=24916 comm="syz.4.5001" path="/400/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1336.516196][T20434] usb 5-1: Failed to submit usb control message: -71 [ 1336.517158][ T5879] usb 5-1: USB disconnect, device number 69 [ 1336.544302][T20434] usb 5-1: unable to send the bmi data to the device: -71 [ 1336.551454][T20434] usb 5-1: unable to get target info from device [ 1336.554769][ T30] audit: type=1400 audit(2000003394.967:2201): avc: denied { watch watch_reads } for pid=24916 comm="syz.4.5001" path="/400/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1336.607790][T20434] usb 5-1: could not get target info (-71) [ 1336.619846][T20434] usb 5-1: could not probe fw (-71) [ 1336.648838][ T9769] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1336.803021][ T9769] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 1336.812534][ T9769] usb 4-1: config 0 has no interface number 1 [ 1336.818674][ T9769] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1336.845839][ T9769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.850494][ T9777] usb 2-1: USB disconnect, device number 58 [ 1336.865674][ T9769] usb 4-1: config 0 descriptor?? [ 1336.888682][ T9769] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.899005][ T9769] usb 4-1: MIDIStreaming interface descriptor not found [ 1336.978445][T17143] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1337.021513][ T9769] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1337.075500][ T9769] spca561 4-1:0.0: probe with driver spca561 failed with error -22 [ 1337.099580][ T9769] usb 4-1: USB disconnect, device number 81 [ 1337.183105][T17143] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1337.448379][T17143] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1337.462228][T17143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.478030][T17143] usb 6-1: config 0 descriptor?? [ 1337.489876][T24938] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1337.563997][T24950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5008'. [ 1337.573052][T24950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5008'. [ 1337.631300][T24950] sp0: Synchronizing with TNC [ 1337.977976][T17143] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1338.457202][T24967] 9p: Bad value for 'port' [ 1338.489439][T24967] overlayfs: missing 'lowerdir' [ 1338.727982][ T9775] usb 6-1: USB disconnect, device number 48 [ 1339.118354][ T30] audit: type=1400 audit(2000003397.708:2202): avc: denied { call } for pid=24969 comm="syz.1.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1339.500452][ T9775] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1340.113153][T24979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1340.129925][T24979] /dev/sg0: Can't lookup blockdev [ 1340.448676][ T9775] usb 2-1: Using ep0 maxpacket: 16 [ 1340.467162][ T9775] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.479560][ T9775] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.486215][ T30] audit: type=1400 audit(2000003399.146:2203): avc: denied { write } for pid=24982 comm="syz.2.5017" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1341.010712][ T9775] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1341.019793][ T9775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.035690][ T30] audit: type=1400 audit(2000003399.146:2204): avc: denied { open } for pid=24982 comm="syz.2.5017" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1341.189311][ T9775] usb 2-1: config 0 descriptor?? [ 1341.225548][ T30] audit: type=1400 audit(2000003399.923:2205): avc: denied { create } for pid=24990 comm="syz.5.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.623152][ T9775] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1342.268208][ T30] audit: type=1400 audit(2000003400.952:2206): avc: denied { listen } for pid=25001 comm="syz.4.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1342.405034][ T9777] usb 2-1: USB disconnect, device number 59 [ 1342.831962][T25014] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5025'. [ 1342.951768][T25014] netlink: Unknown conntrack attr (type=15, max=9) [ 1342.994391][T24989] Trying to write to read-only block-device nullb0 [ 1344.556709][T25032] fuse: Bad value for 'user_id' [ 1344.561573][T25032] fuse: Bad value for 'user_id' [ 1344.661087][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5024'. [ 1346.127653][T25050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.214577][ T30] audit: type=1400 audit(2000003405.162:2207): avc: denied { write } for pid=25034 comm="syz.1.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1346.333706][ T30] audit: type=1400 audit(2000003405.183:2208): avc: denied { nlmsg_write } for pid=25034 comm="syz.1.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1346.335438][ T9777] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1346.367241][T25050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.573751][ T9777] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.616096][ T9777] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 1346.634742][ T9777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1346.651588][ T9777] usb 4-1: Product: syz [ 1346.659946][ T9777] usb 4-1: Manufacturer: syz [ 1346.668537][ T9777] usb 4-1: SerialNumber: syz [ 1346.726252][ T9777] usb 4-1: config 0 descriptor?? [ 1346.950698][ T9777] usb 4-1: USB disconnect, device number 82 [ 1348.486415][T25081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40858 sclass=netlink_route_socket pid=25081 comm=syz.1.5040 [ 1348.696886][T25084] netlink: 'syz.2.5042': attribute type 1 has an invalid length. [ 1348.704924][T25084] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1348.769286][T16562] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1349.547162][T25093] trusted_key: encrypted_key: insufficient parameters specified [ 1350.432930][T25101] FAULT_INJECTION: forcing a failure. [ 1350.432930][T25101] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.527491][T25101] CPU: 1 UID: 0 PID: 25101 Comm: syz.4.5046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.527510][T25101] Tainted: [L]=SOFTLOCKUP [ 1350.527514][T25101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1350.527520][T25101] Call Trace: [ 1350.527525][T25101] [ 1350.527530][T25101] dump_stack_lvl+0x100/0x190 [ 1350.527550][T25101] should_fail_ex.cold+0x5/0xa [ 1350.527562][T25101] should_failslab+0xc2/0x120 [ 1350.527576][T25101] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1350.527589][T25101] __kmalloc_noprof+0xf6/0x9c0 [ 1350.527604][T25101] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1350.527616][T25101] tomoyo_realpath_from_path+0xb6/0x690 [ 1350.527631][T25101] tomoyo_path_number_perm+0x23c/0x580 [ 1350.527649][T25101] ? tomoyo_path_number_perm+0x22e/0x580 [ 1350.527667][T25101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1350.527686][T25101] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1350.527714][T25101] ? find_held_lock+0x2b/0x80 [ 1350.527728][T25101] ? hook_file_ioctl_common+0x146/0x410 [ 1350.527742][T25101] ? __fget_files+0x215/0x3d0 [ 1350.527758][T25101] ? __fget_files+0x21f/0x3d0 [ 1350.527773][T25101] security_file_ioctl+0xd3/0x230 [ 1350.527786][T25101] __x64_sys_ioctl+0xb7/0x210 [ 1350.527798][T25101] do_syscall_64+0xc9/0xf80 [ 1350.527811][T25101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.527822][T25101] RIP: 0033:0x7fb88339aeb9 [ 1350.527831][T25101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.527842][T25101] RSP: 002b:00007fb8815b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.527852][T25101] RAX: ffffffffffffffda RBX: 00007fb883616180 RCX: 00007fb88339aeb9 [ 1350.527859][T25101] RDX: 0000200000001140 RSI: 000000004008af00 RDI: 0000000000000008 [ 1350.527866][T25101] RBP: 00007fb8815b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.527872][T25101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.527878][T25101] R13: 00007fb883616218 R14: 00007fb883616180 R15: 00007ffdac23c398 [ 1350.527892][T25101] [ 1350.527898][T25101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1353.890517][T25149] kvm: pic: non byte write [ 1353.896116][T25149] kvm: pic: non byte write [ 1354.456751][T16562] Bluetooth: hci5: Malformed Event: 0x2f [ 1354.476837][T25160] 9p: Could not find request transport: rÓD[}’’"Ůl¦ťŚdma¬port=0x000000000004exĺűŽ00000000000 [ 1354.942352][T25171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5064'. [ 1355.110368][T17097] libceph: connect (1)[c::]:6789 error -13 [ 1355.116399][T17097] libceph: mon0 (1)[c::]:6789 connect error [ 1355.122543][ T9769] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1355.190711][T25174] ceph: No mds server is up or the cluster is laggy [ 1355.414923][T17097] libceph: connect (1)[c::]:6789 error -13 [ 1355.423114][T17097] libceph: mon0 (1)[c::]:6789 connect error [ 1355.442465][ T9769] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1355.463286][ T9769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1355.481527][ T9769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1355.495477][ T9769] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.518576][ T9769] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.527795][ T9769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.553116][ T9769] usb 5-1: config 0 descriptor?? [ 1355.861361][T25181] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5045'. [ 1355.954179][ T9769] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 1356.010187][ T9769] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1356.040524][T25185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37392 sclass=netlink_route_socket pid=25185 comm=syz.2.5066 [ 1356.699274][T25198] netlink: 'syz.3.5071': attribute type 10 has an invalid length. [ 1356.700772][T25194] netlink: 'syz.2.5069': attribute type 1 has an invalid length. [ 1356.766238][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1356.909112][T25194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1357.927617][ T9769] usb 5-1: reset high-speed USB device number 70 using dummy_hcd [ 1358.454996][T25224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1358.595770][T16562] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1359.665744][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1359.678888][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.899413][T17097] usb 5-1: USB disconnect, device number 70 [ 1458.756241][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1458.763225][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25214/1:b..l [ 1458.771984][ C0] rcu: (detected by 0, t=10502 jiffies, g=120521, q=461 ncpus=2) [ 1458.779784][ C0] task:syz.3.5073 state:R running task stack:26344 pid:25214 tgid:25210 ppid:17349 task_flags:0x400040 flags:0x00080000 [ 1458.795168][ C0] Call Trace: [ 1458.798568][ C0] [ 1458.801497][ C0] ? __schedule+0xf65/0x5e10 [ 1458.806092][ C0] __schedule+0xfe4/0x5e10 [ 1458.810501][ C0] ? find_held_lock+0x2b/0x80 [ 1458.815177][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 1458.820394][ C0] ? __pfx___schedule+0x10/0x10 [ 1458.825247][ C0] ? mark_held_locks+0x40/0x70 [ 1458.830007][ C0] preempt_schedule_irq+0x50/0x90 [ 1458.835027][ C0] irqentry_exit+0x17b/0x670 [ 1458.839620][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1458.845612][ C0] RIP: 0010:lock_release+0x20/0x2e0 [ 1458.850863][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b 2d 3d 4d 01 12 48 89 6c 24 10 <48> 89 f5 0f 1f 44 00 00 65 8b 05 55 4d 01 12 83 f8 07 0f 87 3c 02 [ 1458.870600][ C0] RSP: 0018:ffffc90005146ec8 EFLAGS: 00000292 [ 1458.876683][ C0] RAX: 0000000000080000 RBX: ffffffff8e5e32e0 RCX: ffffc9000cdba000 [ 1458.884648][ C0] RDX: 0000000000080000 RSI: ffffffff827c65e2 RDI: ffffffff8e5e32e0 [ 1458.892627][ C0] RBP: d9ae76d45b87ea00 R08: 0000000000000001 R09: 0000000000000000 [ 1458.900618][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000050dc [ 1458.908595][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000001 [ 1458.916592][ C0] ? __update_page_owner_handle+0x3c2/0x550 [ 1458.922526][ C0] __update_page_owner_handle+0x3c7/0x550 [ 1458.928268][ C0] __set_page_owner+0x11f/0x540 [ 1458.933116][ C0] ? __pfx___probestub_lock_release+0x10/0x10 [ 1458.939178][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1458.944546][ C0] ? bad_range+0x261/0x400 [ 1458.948971][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1458.954167][ C0] post_alloc_hook+0x1e1/0x250 [ 1458.958927][ C0] get_page_from_freelist+0xe3d/0x2e10 [ 1458.964389][ C0] ? prepare_alloc_pages+0x16d/0x5f0 [ 1458.969682][ C0] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 1458.975574][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1458.980608][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1458.986939][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1458.991965][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1458.997334][ C0] ? find_held_lock+0x2b/0x80 [ 1459.002017][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1459.006950][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1459.012848][ C0] ? policy_nodemask+0xed/0x4f0 [ 1459.017702][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1459.022564][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1459.027945][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1459.033841][ C0] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1459.039742][ C0] folio_alloc_mpol_noprof+0x36/0x340 [ 1459.045124][ C0] shmem_alloc_folio+0x135/0x160 [ 1459.050059][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 1459.055692][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1459.061842][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1459.067830][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 1459.073068][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1459.078696][ C0] ? filemap_map_pages+0x9e0/0x2110 [ 1459.083894][ C0] shmem_fault+0x1f9/0xa20 [ 1459.088327][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1459.093277][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1459.098222][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1459.103689][ C0] __do_fault+0x10d/0x550 [ 1459.108020][ C0] do_fault+0xaf9/0x1990 [ 1459.112274][ C0] __handle_mm_fault+0x1807/0x2b50 [ 1459.117391][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1459.122848][ C0] ? __pte_offset_map_lock+0x174/0x320 [ 1459.128331][ C0] ? find_held_lock+0x2b/0x80 [ 1459.133067][ C0] ? follow_page_pte+0x5b4/0x1410 [ 1459.138105][ C0] handle_mm_fault+0x36d/0xa20 [ 1459.142875][ C0] __get_user_pages+0xf9c/0x34d0 [ 1459.147837][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1459.153272][ C0] populate_vma_page_range+0x267/0x3f0 [ 1459.158764][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1459.164751][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1459.170599][ C0] ? do_mmap+0x93f/0x12f0 [ 1459.174934][ C0] __mm_populate+0x107/0x3a0 [ 1459.179532][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1459.184653][ C0] ? up_write+0x290/0x4f0 [ 1459.189009][ C0] vm_mmap_pgoff+0x37f/0x470 [ 1459.193798][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1459.198976][ C0] ? rcu_is_watching+0x12/0xc0 [ 1459.203747][ C0] ? kcov_ioctl+0x162/0x720 [ 1459.208259][ C0] ? kcov_ioctl+0x162/0x720 [ 1459.212766][ C0] ksys_mmap_pgoff+0x7d/0x5b0 [ 1459.217446][ C0] ? kcov_ioctl+0x16a/0x720 [ 1459.221951][ C0] __x64_sys_mmap+0x125/0x190 [ 1459.226660][ C0] do_syscall_64+0xc9/0xf80 [ 1459.231189][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.237079][ C0] RIP: 0033:0x7f89ff19aeb9 [ 1459.241492][ C0] RSP: 002b:00007f89fffbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1459.249916][ C0] RAX: ffffffffffffffda RBX: 00007f89ff416090 RCX: 00007f89ff19aeb9 [ 1459.257895][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1459.265861][ C0] RBP: 00007f89ff208c1f R08: ffffffffffffffff R09: 0000000000000000 [ 1459.273829][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1459.281897][ C0] R13: 00007f89ff416128 R14: 00007f89ff416090 R15: 00007ffcc2e38808 [ 1459.289895][ C0] [ 1459.292911][ C0] rcu: rcu_preempt kthread starved for 10076 jiffies! g120521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1459.304190][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1459.314152][ C0] rcu: RCU grace-period kthread stack dump: [ 1459.320033][ C0] task:rcu_preempt state:R running task stack:28168 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1459.333541][ C0] Call Trace: [ 1459.336830][ C0] [ 1459.339762][ C0] ? __schedule+0xf65/0x5e10 [ 1459.344406][ C0] __schedule+0xfe4/0x5e10 [ 1459.348850][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1459.353819][ C0] ? __pfx___schedule+0x10/0x10 [ 1459.358722][ C0] ? find_held_lock+0x2b/0x80 [ 1459.363411][ C0] ? schedule+0x2bf/0x390 [ 1459.367737][ C0] schedule+0xdd/0x390 [ 1459.371805][ C0] schedule_timeout+0x127/0x280 [ 1459.376685][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1459.382097][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1459.387390][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1459.393191][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1459.398656][ C0] rcu_gp_fqs_loop+0x1a9/0xb00 [ 1459.403420][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1459.408791][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1459.413814][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1459.419082][ C0] rcu_gp_kthread+0x21e/0x320 [ 1459.423757][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1459.428949][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1459.434768][ C0] ? __kthread_parkme+0x18c/0x230 [ 1459.439824][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1459.445025][ C0] kthread+0x3b3/0x730 [ 1459.449130][ C0] ? __pfx_kthread+0x10/0x10 [ 1459.453753][ C0] ? ret_from_fork+0x79/0xaf0 [ 1459.458430][ C0] ? ret_from_fork+0x79/0xaf0 [ 1459.463104][ C0] ? rcu_is_watching+0x12/0xc0 [ 1459.467873][ C0] ? __pfx_kthread+0x10/0x10 [ 1459.472461][ C0] ret_from_fork+0x754/0xaf0 [ 1459.477049][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1459.482162][ C0] ? __switch_to+0x7b9/0x10c0 [ 1459.486849][ C0] ? __pfx_kthread+0x10/0x10 [ 1459.491444][ C0] ret_from_fork_asm+0x1a/0x30 [ 1459.496221][ C0] [ 1459.499233][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1459.505553][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.516049][ C0] Tainted: [L]=SOFTLOCKUP [ 1459.520362][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1459.530411][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1459.536052][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 ae 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1459.555653][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 1459.561760][ C0] RAX: 000000000435f44b RBX: ffffffff8e297ac0 RCX: ffffffff8b76d4b5 [ 1459.569727][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45ba3 RDI: ffffffff8bfa3620 [ 1459.577750][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 1459.585716][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 1459.593681][ C0] R13: 0000000000000000 R14: ffffffff90b749d0 R15: 0000000000000000 [ 1459.601646][ C0] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 1459.610581][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1459.617165][ C0] CR2: 000000110c28ccff CR3: 0000000028003000 CR4: 00000000003526f0 [ 1459.625163][ C0] Call Trace: [ 1459.628440][ C0] [ 1459.631362][ C0] default_idle+0x9/0x10 [ 1459.635602][ C0] default_idle_call+0x6c/0xb0 [ 1459.640363][ C0] do_idle+0x35b/0x4b0 [ 1459.644444][ C0] ? __pfx_do_idle+0x10/0x10 [ 1459.649077][ C0] cpu_startup_entry+0x4f/0x60 [ 1459.653842][ C0] rest_init+0x251/0x260 [ 1459.658085][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1459.663641][ C0] start_kernel+0x47a/0x480 [ 1459.668171][ C0] x86_64_start_reservations+0x24/0x30 [ 1459.673684][ C0] x86_64_start_kernel+0x122/0x130 [ 1459.678805][ C0] common_startup_64+0x13e/0x148 [ 1459.683797][ C0]