last executing test programs: 10m5.714540757s ago: executing program 4 (id=543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) 10m5.65330431s ago: executing program 4 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x78b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 10m5.30818284s ago: executing program 4 (id=547): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='traNs=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x2040) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x4, {0xffffffff, 0xbde, 0xf, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0x9, 0x7, 0x8, 0x0, [{0x10, 0x5, 0x3, '\x00', 0xf}, {0xe, 0x4, 0x6, '\x00', 0x2}, {0xd, 0x6, 0x1, '\x00', 0x6}, {0x7, 0x36, 0x0, '\x00', 0xd}, {0xb, 0x6, 0x4, '\x00', 0x4}, {0x84, 0xf1, 0x6}, {0x7, 0x8, 0x7f, '\x00', 0x5}, {0x7, 0x7, 0x4e, '\x00', 0x9}, {0x0, 0x2, 0x7, '\x00', 0x7}, {0xd, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xd, '\x00', 0x4}, {0x9, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x5, 0x9, '\x00', 0x4}, {0x7, 0x8, 0xfb, '\x00', 0x1}, {0x3, 0x71, 0x1, '\x00', 0x1}, {0x8a, 0x0, 0x1, '\x00', 0x7f}, {0x6, 0x1, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x8, '\x00', 0x3}, {0xc, 0xe, 0xfc, '\x00', 0xc0}, {0x2, 0x7, 0x4, '\x00', 0xd}, {0x7, 0x5, 0x3, '\x00', 0x7}, {0x2a, 0xf9, 0x1, '\x00', 0xc8}, {0x8, 0x25, 0x4, '\x00', 0x6}, {0xf, 0x8, 0x1, '\x00', 0xfd}]}}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0xaa42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r5, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000280)=""/34, 0x22}, {0x0}], 0x2}, 0x4}], 0x1, 0x10041, 0x0) 10m4.371486628s ago: executing program 4 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0089364, &(0x7f00000001c0)) 10m4.153115241s ago: executing program 4 (id=553): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110b, 0xfffffffffffffeff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 10m3.933243471s ago: executing program 4 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 10m3.751236477s ago: executing program 32 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 15.272451096s ago: executing program 3 (id=2418): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x1, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89fd, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r9, @ANYRES16=r0, @ANYRES64=r2], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 11.444920041s ago: executing program 3 (id=2430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000640)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e20, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd004ef}}}, 0x108) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4002, 0x100007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001e580)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4c21, 0x4e11, @empty, 0x1000}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) add_key$user(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x0) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x4, @meta={0x43465052, 0x18ed989b, 0xac24, 0x5549, 0x39d680c8}}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x1, 0x1) r7 = add_key$keyring(&(0x7f0000000600), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r8 = add_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, r8, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x5000, 0x100000, 0xc, 0xfa, 0x1, 0x1, 0x2, 0x24, 0x0, 0x1, 0xf9, 0x3c}, {0xdddd1000, 0x200000, 0xd, 0x0, 0xf9, 0xd, 0x3, 0x8, 0x8, 0xc, 0x80, 0x2}, {0xe000, 0x7000, 0x8, 0xa, 0x2, 0x0, 0x1, 0x3b, 0xa2, 0x9, 0x4c, 0x1}, {0x100000, 0xc000, 0x4, 0x40, 0x8, 0x2, 0x4, 0xfa, 0x8, 0x2, 0x2f, 0x2}, {0x7000, 0x2, 0x4, 0x0, 0x2, 0x87, 0x4, 0xfa, 0xb, 0x7f, 0x9, 0x53}, {0xfdc3cfa976b32d4e, 0x7000, 0xf, 0x7, 0xe1, 0x40, 0x0, 0x6, 0x1, 0x3, 0xe, 0xcb}, {0xb000, 0x8080000, 0xc, 0x18, 0x11, 0x2, 0x1, 0x80, 0x8, 0x8f, 0x1, 0x2}, {0x4000, 0x26000, 0x8, 0x3, 0x3a, 0xa, 0x7, 0xff, 0xf7, 0xdd, 0x9, 0x2c}, {0x26000, 0x1}, {0x100000, 0x283e}, 0x4, 0x0, 0x26000, 0x1, 0x5, 0x6900, 0x25000, [0x7, 0x8, 0x5, 0xff]}) 10.428738277s ago: executing program 5 (id=2434): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'wrr\x00', 0xd, 0x4, 0x5b}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r7, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070100e6fffffcdbdf25027c80001100378013000300717472"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018) preadv(0xffffffffffffffff, &(0x7f0000002940), 0x0, 0x2, 0x40) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9.435521463s ago: executing program 0 (id=2435): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000400)=""/204, 0xcc}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b80)=ANY=[@ANYBLOB="64cfa6d2d3e47caf6b00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c8ac4dd0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e0000002"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500040000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002480)='/sys/power/pm_trace', 0x410000, 0x180) 9.27419188s ago: executing program 5 (id=2437): syz_usb_connect$uac1(0x4, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xff, 0x81, 0x3, {0x7, 0x25, 0x1, 0x8, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x81, 0x0, "0d41dc1ea866b017b3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x3, 0x1d, 0x5, {0x7, 0x25, 0x1, 0x0, 0x1, 0xfff6}}}}}}}}]}}, 0x0) 8.718159745s ago: executing program 2 (id=2438): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3f00}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.61689792s ago: executing program 2 (id=2439): socket$pppoe(0x18, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fstat(r5, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd70d54361c6afe3a6167e155e14ff", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000003240)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 8.196292789s ago: executing program 0 (id=2441): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x1f\t'}, 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) read(r1, &(0x7f0000000080)=""/1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0xffffffff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x1000000000008, 0x20000000008}, {0x100000001, 0x8, 0x4, 0x8}, {0xf8, 0x0, 0x70e080ab}, 0x0, 0x3504, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) 8.14571434s ago: executing program 3 (id=2442): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x7, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x46b, 0x4, 0x7, 0xf5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x6, 0x37}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x83b, 0x101, 0x1, "df2b5c317bb42c045f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x3, 0xfd, {0x7, 0x25, 0x1, 0x4, 0x80, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xd4, 0x6, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0xb, 0x80, {0x7, 0x25, 0x1, 0x4, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0xf0, 0x8, 0xf, 0xcf, 0x7}, 0x12, &(0x7f0000000940)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x5, 0xa}, @ptm_cap={0x3}]}, 0x5, [{0x54, &(0x7f0000000980)=@string={0x54, 0x3, "2ed72764aefe3c746cec3f69eb7984c7d76ab05c8d129dbeb16871a6ae1fbdd2273066ad544ea38dd5c9103050e0b507f89b3b9a5db6ea958bff3ac481b984977722744ab54e76bf761e32651c699f26bb7d"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc07}}, {0x6c, &(0x7f0000000a40)=@string={0x6c, 0x3, "f9e810bd5657ac0d0022ae6b84528770da7b7beecd1c31ae3dd67191307bab6584a034301044b132d30cc09b53eb4ef5c67d66dbcc33e1c2606eba9f67ef184198c745bb74629e9d42b327235695c6aaf3ed81767648747405a79fd7edda85a4a6b0974204d7d164cf61"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41d}}, {0xb0, &(0x7f0000000b00)=@string={0xb0, 0x3, "63ddc01211ff2145b4e2226f10b900b08b90347abce6ca8b2fc7594c47ecd4535b8990be2df1d8d8fc2750c6cb82ec2e70c77f90ac7c2ddc96e6b3600e45d30528e1041780a778d13b196e8cb0fb4d12cd4463d03aaeb089686fbe4b0efe6f7150826b305b03a63c5dbd5393885495f8314f468339a30ad6f9201803b57d445c910983c44bc3427d74d865941bdd57ee41bb8e49a20c20e2aa5dc790ff3627950a7941e866a68f08988c5db44b9c"}}]}) 7.969344324s ago: executing program 5 (id=2443): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.666913628s ago: executing program 1 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 6.433209521s ago: executing program 5 (id=2445): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}}, 0x0) msgget$private(0x0, 0x31) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r5 = socket(0x2a, 0x1, 0x1) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x7, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0xfff, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 6.209027333s ago: executing program 1 (id=2446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x1480, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1454, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x800, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2bd, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0x7f, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PTAB={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x100004, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x6, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf30, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x7fffffff, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0x0, 0x2e6, 0x4, 0xffffff7f, 0x2, 0x1, 0x8000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x0, 0x2, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x8, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0xef3, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5588, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x9, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x5, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0x2, 0x4, 0x10001, 0xc7, 0x5, 0x3, 0x6, 0x8, 0x80000001, 0x3, 0x6, 0x6, 0x800, 0x5, 0x7, 0x1, 0x1fd8, 0x0, 0x7, 0xa, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x40, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x7, 0x8]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x8, 0x97, 0x3, 0x7fff, 0x7, 0x0, 0x6, 0x4, 0x86, 0x1b, 0xdd76, 0xf, 0x7f, 0xffffff01, 0xffffffff, 0x1, 0x655, 0xf128, 0x4a, 0x1000, 0x5, 0xfffffff9, 0x4fa, 0x3, 0x1, 0x1000, 0x8, 0x1c0000, 0xfffffff6, 0x8, 0x9, 0x9, 0xde, 0xfffffe00, 0x1, 0x7, 0x5a, 0x8, 0xa1f, 0x10000, 0x7, 0x4, 0xc, 0x7, 0x92, 0x3, 0x8, 0x84fd, 0x0, 0x1000, 0x3, 0x5, 0x5, 0x8001, 0x7, 0x2, 0xf, 0x40, 0xff, 0x9, 0x8, 0x5, 0x80, 0x6, 0x8, 0xffffffdb, 0x0, 0x3, 0x7, 0x400, 0x3, 0x3, 0x4, 0x0, 0x7, 0x4, 0xe, 0x59, 0x80000000, 0xfffff801, 0x7, 0x3, 0x0, 0xf3, 0xfffffffa, 0x5, 0xc10, 0x4f, 0x5c9c8504, 0x101, 0x7fffffff, 0x3fd, 0x9, 0x7, 0x2, 0x7, 0xaa, 0x80, 0xbed, 0xb3, 0x2, 0x10000, 0x6, 0x6, 0x6, 0xfffeffff, 0x4, 0x0, 0x3c9dda41, 0xffff, 0x3, 0x0, 0x9, 0x7, 0x5, 0x2, 0x3, 0x80000000, 0x0, 0xc3d, 0x2, 0x0, 0x6, 0x7, 0xc6, 0x800, 0x8, 0x2, 0x6, 0x857, 0x4, 0x7ff, 0xfffffff7, 0x0, 0x8, 0x5, 0x80000001, 0xd, 0x8, 0x2, 0x4, 0x4, 0xd4, 0x2, 0x8, 0x2, 0x4d45, 0x7, 0x146f9d24, 0xbd, 0xb6, 0x9, 0xd807, 0x2, 0x38, 0x5, 0x1, 0xf, 0x0, 0x44, 0x3, 0x6, 0x536e99ce, 0x5, 0xd, 0xe4e6, 0x2, 0x7, 0x3ff, 0x7, 0x0, 0x7, 0x0, 0x8, 0x8, 0x0, 0x9, 0x4, 0x800, 0x6, 0x8000, 0x0, 0x0, 0x8, 0x8000, 0x6, 0x52, 0x101, 0x4, 0x1, 0x3, 0x4, 0x9, 0xcc1, 0x800, 0x9, 0x2, 0x1, 0x9, 0x81, 0x4, 0x7, 0x4, 0x101, 0x2, 0x8f68, 0xd8f6, 0xe57, 0x8, 0x6, 0x5, 0x46, 0x7, 0x71a, 0x0, 0x3, 0x4, 0x101, 0x3abf, 0x1, 0x1000, 0xef, 0x7, 0x1, 0x40, 0x5fd0, 0x100, 0x854, 0x6, 0xfffffff9, 0x341e, 0x272, 0xd73, 0x1, 0x2549, 0x6, 0x8, 0x0, 0x3, 0x8, 0x9, 0x35, 0xe, 0x8, 0x5, 0x19bc000, 0x6, 0x97, 0xf, 0x4, 0x2, 0x25e9, 0x4, 0x7, 0x4]}, @TCA_TBF_RATE64={0xc, 0x4, 0x6cb1fa13c165937f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0xa52f, 0x6, 0x497, 0x5}, {0x73, 0x0, 0x86e4, 0x2, 0xcece, 0x621}, 0x4, 0x6, 0x1929}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0xc4, 0x7, 0x3a, 0x1, 0xf, 0x8, 0x8, 0x6, 0x2, 0x2, 0x5, 0x0, 0x3, 0x3, 0xffff, 0xf, 0x1, 0x0, 0x4, 0xfff, 0x81, 0x0, 0x9, 0x8000, 0x6, 0x3, 0x3, 0x7fff, 0xfffffff5, 0x120e79ff, 0x2, 0x2, 0xfffffffc, 0x80, 0x4, 0x80, 0x4, 0x8, 0x80000001, 0x7, 0x6, 0x5, 0x5, 0x80000001, 0xba, 0x8000, 0x4, 0x800, 0x0, 0x2, 0x3, 0x5, 0x81, 0x1, 0x2, 0x3, 0x8, 0x7, 0x2, 0x7fffffff, 0x0, 0x470b, 0x5, 0x4, 0x10, 0x8, 0xfffffff8, 0x9, 0x4, 0xfffffff8, 0x2, 0x2, 0x6, 0x9, 0x4, 0x3, 0x5, 0x9, 0x9, 0x1, 0x80000000, 0x9, 0x4, 0xf, 0x401, 0x3, 0x3, 0x6, 0x80, 0x40, 0x1, 0x1, 0x2, 0x1, 0x3, 0x0, 0x2, 0x5, 0x3, 0x7, 0x7, 0x1, 0xff, 0x2, 0x1, 0x2, 0x9, 0xfffffffc, 0x2718, 0xf3, 0x546f, 0x5, 0x6, 0xee8, 0x7, 0x200, 0x54, 0x7, 0x1, 0xa0000, 0x6, 0x0, 0x5, 0x5, 0x0, 0x3ff, 0xffffffff, 0x3, 0x9, 0x5, 0x8000000, 0x6, 0xe75, 0x6, 0x8001, 0x6, 0x8, 0x200, 0x1, 0x0, 0x80000001, 0x5, 0xa, 0x9, 0x1, 0x4, 0x3, 0x4, 0x9, 0x6, 0x5, 0x81, 0x9, 0x10000, 0xff, 0x3e74, 0x9, 0x200, 0x4, 0x5, 0x7, 0x0, 0x7ff, 0x4fdf, 0x40, 0x6, 0x3, 0x884, 0x10001, 0x4, 0xceb5, 0x40, 0xfffffffc, 0x2, 0x4, 0x4, 0x7, 0x9, 0x59, 0x7, 0x9, 0xd4ff, 0x80, 0x2, 0x7, 0x7fff, 0x7fffffff, 0x0, 0x6, 0x8, 0x70, 0x10001, 0x7fffffff, 0x0, 0x8, 0x5, 0x9, 0x1, 0x2104, 0x10001, 0x80000001, 0x10000, 0x9, 0x7, 0xb, 0x9, 0x342c031, 0x9, 0x8000, 0x7fffffff, 0x4, 0x57, 0x7, 0x7, 0x2, 0x5, 0x63b, 0x4, 0x2, 0x800, 0xffffffff, 0x2, 0xfe, 0xfffffffd, 0xc00000, 0x5, 0x6, 0x5af441b9, 0x8, 0x7, 0x3, 0x4, 0x7, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0x1, 0x1, 0x5, 0x6, 0x1, 0x1, 0x8, 0x80000000, 0x6, 0xa53, 0x14000, 0x4, 0x2, 0x7, 0x4, 0x8001]}]}}]}, 0x1480}, 0x1, 0x0, 0x0, 0x4040098}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket(0x10, 0x803, 0x0) 6.181912698s ago: executing program 0 (id=2447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000640)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e20, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd004ef}}}, 0x108) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4002, 0x100007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001e580)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4c21, 0x4e11, @empty, 0x1000}}}, 0x108) add_key$user(&(0x7f0000001040), 0x0, &(0x7f0000000240), 0x0, 0x0) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x4, @meta={0x43465052, 0x18ed989b, 0xac24, 0x5549, 0x39d680c8}}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x1, 0x1) r7 = add_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r7, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x5000, 0x100000, 0xc, 0xfa, 0x1, 0x1, 0x2, 0x24, 0x0, 0x1, 0xf9, 0x3c}, {0xdddd1000, 0x200000, 0xd, 0x0, 0xf9, 0xd, 0x3, 0x8, 0x8, 0xc, 0x80, 0x2}, {0xe000, 0x7000, 0x8, 0xa, 0x2, 0x0, 0x1, 0x3b, 0xa2, 0x9, 0x4c, 0x1}, {0x100000, 0xc000, 0x4, 0x40, 0x8, 0x2, 0x4, 0xfa, 0x8, 0x2, 0x2f, 0x2}, {0x7000, 0x2, 0x4, 0x0, 0x2, 0x87, 0x4, 0xfa, 0xb, 0x7f, 0x9, 0x53}, {0xfdc3cfa976b32d4e, 0x7000, 0xf, 0x7, 0xe1, 0x40, 0x0, 0x6, 0x1, 0x3, 0xe, 0xcb}, {0xb000, 0x8080000, 0xc, 0x18, 0x11, 0x2, 0x1, 0x80, 0x8, 0x8f, 0x1, 0x2}, {0x4000, 0x26000, 0x8, 0x3, 0x3a, 0xa, 0x7, 0xff, 0xf7, 0xdd, 0x9, 0x2c}, {0x26000, 0x1}, {0x100000, 0x283e}, 0x4, 0x0, 0x26000, 0x1, 0x5, 0x6900, 0x25000, [0x7, 0x8, 0x5, 0xff]}) 6.143237706s ago: executing program 5 (id=2448): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xc803dc0696b6a4dc, &(0x7f00000000c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x1}}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 5.799416377s ago: executing program 2 (id=2449): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x28, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x1f, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.208524266s ago: executing program 1 (id=2450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x104, 0x10, 0x421, 0x0, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x104}}, 0x0) 5.172211581s ago: executing program 3 (id=2451): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000400)=""/204, 0xcc}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b80)=ANY=[@ANYBLOB="64cfa6d2d3e47caf6b00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c8ac4dd0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e0000002"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500040000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000895}, 0xc000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002480)='/sys/power/pm_trace', 0x410000, 0x180) 4.85625099s ago: executing program 1 (id=2452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpgid(r6) r9 = syz_open_dev$vim2m(0x0, 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3]}}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0x3, 0x7, 0x6}, @hci={0x1f, 0x2}, @sco, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='virt_wifi0\x00', 0x10, 0x9, 0x2}) 3.850658424s ago: executing program 1 (id=2453): socket$unix(0x1, 0x1, 0x0) r0 = syz_clone(0xc218980, &(0x7f0000000280)="d7492d522ebf09ac98ddcf875ac552a3a25539a08db91c8c1ff9b79deefe9a014d90a86a3befe60ea4dca4f59ec4985520ba7e183d10c0ba8241ba8cf4f276e6938410f969d7395e3107dda34b6f3a96073f96fd21a56866cf747f28ef", 0x5d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="855d") r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/dev_mcast\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011001000000087d1e3831000000000001090224000100000009090400d209030003000921fcfffa012229000905810300000d0afc63262ba7c4d20bc7ef0d5255506d536401cbf87e2ffe4e208a375430b6506d3b64aefdc0492a81b27acc00f92a488953de0a781e38b052353bf5a0fd37e14943c80bece1bf0d8487f14133bcd4994069d5e2f98d0a270b78ad486d890a271de600"/164], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000180)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB=' \"F\x00\x00'], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = epoll_create(0xec06) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20002000}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x32dc, 0x0, 0xc, 0x0, 0xfffffe70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r8 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), 0x0, 0x0, 0x2) fgetxattr(r9, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.605292745s ago: executing program 0 (id=2454): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], &(0x7f0000000340)='GPL\x00', 0x74, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = open(0x0, 0x80242, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000380)={{0x4, @addr=0xffff}, "4eb27c991941c0e7fa119edc5706e944ba1c8aa3c6c1d65f67033808cba9b613", 0x2}) ftruncate(r4, 0x2007ffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r6) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0xf62, 0x1, 0x6, 0xa}, {0x0, 0x6, 0x81, 0x1ff}, {0x7, 0x5, 0x9, 0x7}, {0x5b, 0xff, 0x6, 0xed}, {0xe2, 0x5, 0x3, 0x8000}, {0xfff8, 0x9, 0x11}, {0x1, 0x80, 0x5, 0x2}]}) lseek(r4, 0x8, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10000}) 3.545495694s ago: executing program 3 (id=2455): syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.824585625s ago: executing program 0 (id=2456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000030000000500000004000005080000000300000001000000ffffffff010000000200000008000000030000000200000008000000010000"], &(0x7f0000000300)=""/55, 0x63, 0x37, 0x1, 0xff}, 0x28) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2, 0x8, 0x6, 0x2, 0x500, 0x6, 0x20b}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) recvfrom(r1, &(0x7f0000000380)=""/236, 0xec, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) 1.470522304s ago: executing program 2 (id=2457): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x1f\t'}, 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) read(r1, &(0x7f0000000080)=""/1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x413, 0x0, 0xffffffff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x1000000000008, 0x20000000008}, {0x100000001, 0x8, 0x4, 0x8}, {0xf8, 0x0, 0x70e080ab}, 0x0, 0x3504, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) 769.512795ms ago: executing program 0 (id=2458): truncate(0x0, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x1f) recvmmsg(0xffffffffffffffff, &(0x7f00000090c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000780)=""/140, 0x8c}], 0x6}, 0x9}], 0x1, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x34, 0x4) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x1}, 0xe) 588.999846ms ago: executing program 2 (id=2459): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 456.43568ms ago: executing program 3 (id=2460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x107c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1050, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x800, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2bd, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0x7f, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PTAB={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x100004, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x6, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x6, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcde, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf30, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x5, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x7fffffff, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0x0, 0x2e6, 0x4, 0xffffff7f, 0x2, 0x1, 0x8000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x0, 0x2, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x8, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0xef3, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5588, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x9, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x5, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0x2, 0x4, 0x10001, 0xc7, 0x5, 0x3, 0x6, 0x8, 0x80000001, 0x3, 0x6, 0x6, 0x800, 0x5, 0x7, 0x1, 0x1fd8, 0x0, 0x7, 0xa, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x40, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x7, 0x8]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x8, 0x97, 0x3, 0x7fff, 0x7, 0x0, 0x6, 0x4, 0x86, 0x1b, 0xdd76, 0xf, 0x7f, 0xffffff01, 0xffffffff, 0x1, 0x655, 0xf128, 0x4a, 0x1000, 0x5, 0xfffffff9, 0x4fa, 0x3, 0x1, 0x1000, 0x8, 0x1c0000, 0xfffffff6, 0x8, 0x9, 0x9, 0xde, 0xfffffe00, 0x1, 0x7, 0x5a, 0x8, 0xa1f, 0x10000, 0x7, 0x4, 0xc, 0x7, 0x92, 0x3, 0x8, 0x84fd, 0x0, 0x1000, 0x3, 0x5, 0x5, 0x8001, 0x7, 0x2, 0xf, 0x40, 0xff, 0x9, 0x8, 0x5, 0x80, 0x6, 0x8, 0xffffffdb, 0x0, 0x3, 0x7, 0x400, 0x3, 0x3, 0x4, 0x0, 0x7, 0x4, 0xe, 0x59, 0x80000000, 0xfffff801, 0x7, 0x3, 0x0, 0xf3, 0xfffffffa, 0x5, 0xc10, 0x4f, 0x5c9c8504, 0x101, 0x7fffffff, 0x3fd, 0x9, 0x7, 0x2, 0x7, 0xaa, 0x80, 0xbed, 0xb3, 0x2, 0x10000, 0x6, 0x6, 0x6, 0xfffeffff, 0x4, 0x0, 0x3c9dda41, 0xffff, 0x3, 0x0, 0x9, 0x7, 0x5, 0x2, 0x3, 0x80000000, 0x0, 0xc3d, 0x2, 0x0, 0x6, 0x7, 0xc6, 0x800, 0x8, 0x2, 0x6, 0x857, 0x4, 0x7ff, 0xfffffff7, 0x0, 0x8, 0x5, 0x80000001, 0xd, 0x8, 0x2, 0x4, 0x4, 0xd4, 0x2, 0x8, 0x2, 0x4d45, 0x7, 0x146f9d24, 0xbd, 0xb6, 0x9, 0xd807, 0x2, 0x38, 0x5, 0x1, 0xf, 0x0, 0x44, 0x3, 0x6, 0x536e99ce, 0x5, 0xd, 0xe4e6, 0x2, 0x7, 0x3ff, 0x7, 0x0, 0x7, 0x0, 0x8, 0x8, 0x0, 0x9, 0x4, 0x800, 0x6, 0x8000, 0x0, 0x0, 0x8, 0x8000, 0x6, 0x52, 0x101, 0x4, 0x1, 0x3, 0x4, 0x9, 0xcc1, 0x800, 0x9, 0x2, 0x1, 0x9, 0x81, 0x4, 0x7, 0x4, 0x101, 0x2, 0x8f68, 0xd8f6, 0xe57, 0x8, 0x6, 0x5, 0x46, 0x7, 0x71a, 0x0, 0x3, 0x4, 0x101, 0x3abf, 0x1, 0x1000, 0xef, 0x7, 0x1, 0x40, 0x5fd0, 0x100, 0x854, 0x6, 0xfffffff9, 0x341e, 0x272, 0xd73, 0x1, 0x2549, 0x6, 0x8, 0x0, 0x3, 0x8, 0x9, 0x35, 0xe, 0x8, 0x5, 0x19bc000, 0x6, 0x97, 0xf, 0x4, 0x2, 0x25e9, 0x4, 0x7, 0x4]}, @TCA_TBF_RATE64={0xc, 0x4, 0x6cb1fa13c165937f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0xa52f, 0x6, 0x497, 0x5}, {0x73, 0x0, 0x86e4, 0x2, 0xcece, 0x621}, 0x4, 0x6, 0x1929}}, @TCA_TBF_BURST={0x8, 0x6, 0x5}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x4040098}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket(0x10, 0x803, 0x0) 271.153892ms ago: executing program 1 (id=2461): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x7, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x46b, 0x4, 0x7, 0xf5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x6, 0x37}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x83b, 0x101, 0x1, "df2b5c317bb42c045f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x3, 0xfd, {0x7, 0x25, 0x1, 0x4, 0x80, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xd4, 0x6, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0xb, 0x80, {0x7, 0x25, 0x1, 0x4, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0xf0, 0x8, 0xf, 0xcf, 0x7}, 0x12, &(0x7f0000000940)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x5, 0xa}, @ptm_cap={0x3}]}, 0x5, [{0x54, &(0x7f0000000980)=@string={0x54, 0x3, "2ed72764aefe3c746cec3f69eb7984c7d76ab05c8d129dbeb16871a6ae1fbdd2273066ad544ea38dd5c9103050e0b507f89b3b9a5db6ea958bff3ac481b984977722744ab54e76bf761e32651c699f26bb7d"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc07}}, {0x6c, &(0x7f0000000a40)=@string={0x6c, 0x3, "f9e810bd5657ac0d0022ae6b84528770da7b7beecd1c31ae3dd67191307bab6584a034301044b132d30cc09b53eb4ef5c67d66dbcc33e1c2606eba9f67ef184198c745bb74629e9d42b327235695c6aaf3ed81767648747405a79fd7edda85a4a6b0974204d7d164cf61"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x41d}}, {0xb0, &(0x7f0000000b00)=@string={0xb0, 0x3, "63ddc01211ff2145b4e2226f10b900b08b90347abce6ca8b2fc7594c47ecd4535b8990be2df1d8d8fc2750c6cb82ec2e70c77f90ac7c2ddc96e6b3600e45d30528e1041780a778d13b196e8cb0fb4d12cd4463d03aaeb089686fbe4b0efe6f7150826b305b03a63c5dbd5393885495f8314f468339a30ad6f9201803b57d445c910983c44bc3427d74d865941bdd57ee41bb8e49a20c20e2aa5dc790ff3627950a7941e866a68f08988c5db44b9c"}}]}) 226.271194ms ago: executing program 2 (id=2462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000640)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e20, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd004ef}}}, 0x108) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4002, 0x100007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001e580)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1, 0x6}}, {{0xa, 0x4c21, 0x4e11, @empty, 0x1000}}}, 0x108) add_key$user(&(0x7f0000001040), 0x0, &(0x7f0000000240), 0x0, 0x0) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x4, @meta={0x43465052, 0x18ed989b, 0xac24, 0x5549, 0x39d680c8}}) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x2, 0x1, 0x1) r7 = add_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r7, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x5000, 0x100000, 0xc, 0xfa, 0x1, 0x1, 0x2, 0x24, 0x0, 0x1, 0xf9, 0x3c}, {0xdddd1000, 0x200000, 0xd, 0x0, 0xf9, 0xd, 0x3, 0x8, 0x8, 0xc, 0x80, 0x2}, {0xe000, 0x7000, 0x8, 0xa, 0x2, 0x0, 0x1, 0x3b, 0xa2, 0x9, 0x4c, 0x1}, {0x100000, 0xc000, 0x4, 0x40, 0x8, 0x2, 0x4, 0xfa, 0x8, 0x2, 0x2f, 0x2}, {0x7000, 0x2, 0x4, 0x0, 0x2, 0x87, 0x4, 0xfa, 0xb, 0x7f, 0x9, 0x53}, {0xfdc3cfa976b32d4e, 0x7000, 0xf, 0x7, 0xe1, 0x40, 0x0, 0x6, 0x1, 0x3, 0xe, 0xcb}, {0xb000, 0x8080000, 0xc, 0x18, 0x11, 0x2, 0x1, 0x80, 0x8, 0x8f, 0x1, 0x2}, {0x4000, 0x26000, 0x8, 0x3, 0x3a, 0xa, 0x7, 0xff, 0xf7, 0xdd, 0x9, 0x2c}, {0x26000, 0x1}, {0x100000, 0x283e}, 0x4, 0x0, 0x26000, 0x1, 0x5, 0x6900, 0x25000, [0x7, 0x8, 0x5, 0xff]}) 0s ago: executing program 5 (id=2463): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0x700, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x8, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) kernel console output (not intermixed with test programs): id failed with error -71 [ 655.167167][ T803] usb 4-1: USB disconnect, device number 66 [ 655.179817][T12745] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.655609][ T29] audit: type=1400 audit(1777541767.884:773): avc: denied { mounton } for pid=12759 comm="syz.3.1952" path=2F313231372F6E65742F726177202864656C6574656429 dev="proc" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 656.997702][T12767] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 657.561822][T12770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.594313][ T803] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 657.617807][T12772] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1956'. [ 657.961795][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 657.975875][ T803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 657.996214][T12779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1959'. [ 658.010649][T12779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1959'. [ 658.054874][ T803] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 658.084787][ T803] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 658.100078][ T5717] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 658.130992][ T803] usb 3-1: Product: syz [ 658.146655][ T803] usb 3-1: Manufacturer: syz [ 658.174788][ T803] usb 3-1: SerialNumber: syz [ 659.453242][ T803] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 659.470799][ T803] visor 3-1:1.0: probe with driver visor failed with error -110 [ 659.493491][T12791] ceph: No mds server is up or the cluster is laggy [ 659.539380][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.624451][ T804] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 659.702631][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 659.716105][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 659.821774][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.940794][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 659.949803][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 659.992284][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 660.002794][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 660.020886][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 660.036477][ T5717] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.045558][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.053569][ T29] audit: type=1400 audit(1777541771.285:774): avc: denied { ioctl } for pid=12764 comm="syz.2.1954" path="socket:[52926]" dev="sockfs" ino=52926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 660.094261][ T5717] usb 4-1: config 0 descriptor?? [ 660.117449][ T804] usb 2-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 660.181029][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.193752][ T804] usb 2-1: Product: 㛊흥ᎉ直芭樹㝍ꂅ즺櫬꫏đ曨嘝佮梡萤酟꩏呷祌涵㢏門챏돥毖䷑ဿꜼ잆ꙷ㿇뻭쟾튑㰿 [ 660.224101][ T804] usb 2-1: Manufacturer: 〉 [ 660.229799][ T804] usb 2-1: SerialNumber: я [ 660.250486][T12782] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 660.291884][T12782] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 660.421388][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 660.431767][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 660.474013][ T5717] usb 4-1: USB disconnect, device number 67 [ 660.797495][ T804] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 660.823815][ T804] usb 2-1: invalid MIDI in EP 0 [ 660.917910][T12806] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1966'. [ 661.033400][ T804] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 661.073171][ T804] usb 2-1: USB disconnect, device number 95 [ 661.156608][T12241] udevd[12241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.243480][ T42] usb 3-1: USB disconnect, device number 67 [ 661.717793][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1969'. [ 663.667436][ T42] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 663.997139][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 664.005365][ T42] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.017676][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 664.028127][ T42] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 664.049919][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.107283][ T42] usb 3-1: Product: syz [ 664.138785][ T42] usb 3-1: Manufacturer: syz [ 664.178083][ T42] usb 3-1: SerialNumber: syz [ 664.212431][ T42] usb 3-1: config 0 descriptor?? [ 664.443726][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.469743][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.585676][ T42] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 664.844190][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.021492][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.170925][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1974'. [ 665.519348][T12845] vivid-006: disconnect [ 665.702122][T12844] vivid-006: reconnect [ 666.123183][T12855] tipc: Enabling of bearer rejected, failed to enable media [ 666.330580][ T804] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 666.519745][ T804] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 666.562285][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 666.609321][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 666.666015][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 666.716066][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 666.773044][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 666.851163][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 666.920711][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 666.951683][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 666.992135][T12863] Cannot find add_set index 0 as target [ 667.002575][T12863] fuse: Unknown parameter '00000000000000000000006' [ 667.029678][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.072134][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.097890][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.134626][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.163998][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.206127][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.229031][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.237972][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.264473][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.298424][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.307236][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.318345][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.329476][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.390712][ T804] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 667.429288][ T804] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 667.500645][ T804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.533488][ T804] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 667.552369][ T804] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 667.577924][ T804] usb 4-1: Product: syz [ 667.590869][ T804] usb 4-1: Manufacturer: syz [ 667.598204][ T804] usb 4-1: SerialNumber: syz [ 667.618911][T12872] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 667.678744][ T804] usb 4-1: config 0 descriptor?? [ 667.724947][ T804] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 668.228488][ T804] usb 4-1: USB disconnect, device number 68 [ 668.305239][ T804] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 668.804402][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 668.823240][ T42] imon:send_packet: packet tx failed (-71) [ 668.864732][ T42] imon 3-1:0.0: panel buttons/knobs setup failed [ 668.987145][T12884] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 669.005790][ T42] rc_core: IR keymap rc-imon-pad not found [ 669.062222][ T42] Registered IR keymap rc-empty [ 669.156241][ T42] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 669.418864][ T42] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 669.488572][ T42] imon:send_packet: packet tx failed (-71) [ 669.534313][ T42] imon 3-1:0.0: remote input dev register failed [ 669.552660][ T42] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 669.924986][T12892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1994'. [ 670.097315][ T42] imon 3-1:0.0: unable to initialize intf0, err 0 [ 670.105978][ T42] imon:imon_probe: failed to initialize context! [ 670.112548][ T42] imon 3-1:0.0: unable to register, err -19 [ 670.126291][ T42] usb 3-1: USB disconnect, device number 68 [ 670.484457][ T5717] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 670.625368][T12907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1999'. [ 670.638202][T12907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1999'. [ 671.044337][ T5717] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 671.077833][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.087832][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.106835][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.117111][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.127361][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.139575][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.150191][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.159816][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.171803][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.180519][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.190867][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.202365][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.303467][ T42] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 671.318832][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.328434][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.340405][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.447067][ T803] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 671.454728][ T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.454756][ T42] usb 1-1: config 0 has no interface number 0 [ 671.456977][ T42] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 671.479643][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.479788][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.491275][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.497662][ T42] usb 1-1: Product: syz [ 671.512553][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.513017][ T42] usb 1-1: Manufacturer: syz [ 671.521338][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.524329][ T42] usb 1-1: SerialNumber: syz [ 671.550083][ T42] usb 1-1: config 0 descriptor?? [ 671.559198][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.572596][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.581802][ T5717] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.592557][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.605060][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 671.614619][ T5717] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 671.624803][ T5717] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 671.634498][ T5717] usb 4-1: Product: syz [ 671.639051][ T5717] usb 4-1: Manufacturer: syz [ 671.644688][ T5717] usb 4-1: SerialNumber: syz [ 671.650541][ T803] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 671.663584][ T5717] usb 4-1: config 0 descriptor?? [ 671.670432][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.681103][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.687952][ T5717] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 671.717705][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.781509][ T42] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 671.815084][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 671.826811][ T42] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 671.834904][ T42] usb 1-1: media controller created [ 671.847462][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.854334][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.864989][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.878575][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.915908][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.949090][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 671.972053][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.983113][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 671.997499][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.079776][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.110883][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 672.127949][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.175179][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.294055][ T42] usb 4-1: USB disconnect, device number 69 [ 672.304019][ T5696] usb 1-1: USB disconnect, device number 66 [ 672.393164][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 672.409195][T12893] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 672.419629][ T42] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 672.426297][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 672.447937][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.469720][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.482669][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 672.492593][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.504750][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.514262][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 672.525924][ T803] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 672.537628][ T803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.546798][ T803] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 672.556485][ T803] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 672.572800][ T803] usb 2-1: Product: syz [ 672.577253][ T803] usb 2-1: Manufacturer: syz [ 672.582170][ T803] usb 2-1: SerialNumber: syz [ 672.591756][ T803] usb 2-1: config 0 descriptor?? [ 672.604690][ T803] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 672.885959][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 672.947249][ T803] usb 2-1: USB disconnect, device number 96 [ 672.970300][ T803] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 675.058354][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2014'. [ 675.081169][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2014'. [ 675.489522][T12956] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 676.776752][T12982] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 677.164792][T12982] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 677.596304][T12985] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 677.725966][T12976] ISOFS: Unable to identify CD-ROM format. [ 678.070233][ T42] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 678.250870][ T42] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 678.288788][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.311664][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.375637][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.403461][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.441650][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.488814][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.519521][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.550035][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.582892][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.603583][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.623616][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.669483][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.703112][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.732199][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.783880][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.821701][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.863303][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 678.901666][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.940493][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 678.985163][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.036251][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 679.066591][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 679.082991][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 679.103951][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 679.151788][ T42] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 679.179666][ T42] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 679.194461][ T42] usb 2-1: Product: syz [ 679.223348][ T42] usb 2-1: Manufacturer: syz [ 679.243545][ T42] usb 2-1: SerialNumber: syz [ 679.273359][ T42] usb 2-1: config 0 descriptor?? [ 679.314548][ T42] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 679.624414][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 679.633610][ T42] usb 2-1: USB disconnect, device number 97 [ 679.676088][ T42] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 680.475454][T13009] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2034'. [ 680.936539][T13009] comedi comedi0: Minor 2147483647 is invalid! [ 681.132200][ T29] audit: type=1400 audit(1777541792.376:775): avc: denied { checkpoint_restore } for pid=13014 comm="syz.2.2037" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.382148][ T29] audit: type=1400 audit(1777541794.627:776): avc: denied { connect } for pid=13024 comm="syz.0.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 684.520075][ T803] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 684.823589][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 684.855546][ T803] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 684.876875][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.885774][ T803] usb 3-1: Product: syz [ 684.892629][ T803] usb 3-1: Manufacturer: syz [ 684.898617][ T803] usb 3-1: SerialNumber: syz [ 684.911060][ T803] usb 3-1: config 0 descriptor?? [ 685.286483][T13057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2045'. [ 685.399569][ T803] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 685.569475][T13056] comedi comedi0: Minor 2147483647 is invalid! [ 685.786314][ T5696] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 685.974710][ T5696] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 686.009263][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.049576][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.104248][T13070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2050'. [ 686.113496][T13070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2050'. [ 686.127977][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.155825][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.193085][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.217652][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.240842][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.285954][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.320931][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.342253][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.378022][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.421775][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.473727][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.502140][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.518064][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.580590][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.618413][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.680825][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.712619][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.754272][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.783550][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.806917][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 686.830649][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 686.884151][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 686.917666][ T5696] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 686.948255][ T5696] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 686.976070][T13068] trusted_key: encrypted_key: insufficient parameters specified [ 686.984117][ T5696] usb 4-1: Product: syz [ 686.989503][ T5696] usb 4-1: Manufacturer: syz [ 686.994379][ T5696] usb 4-1: SerialNumber: syz [ 687.052990][ T5696] usb 4-1: config 0 descriptor?? [ 687.129398][ T803] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 687.137986][ T5696] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 687.408774][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 687.442293][ T5696] usb 4-1: USB disconnect, device number 70 [ 687.473722][ T5696] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 688.654959][ T5696] usb 3-1: USB disconnect, device number 69 [ 689.002531][T13096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2057'. [ 689.204414][ T5696] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 689.222220][T13098] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2055'. [ 689.251147][T13098] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2055'. [ 689.302345][T13098] netlink: 'syz.5.2055': attribute type 6 has an invalid length. [ 689.332924][T13098] netlink: 'syz.5.2055': attribute type 5 has an invalid length. [ 689.364607][T13098] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2055'. [ 689.395639][ T5696] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.415679][ T5696] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 689.425250][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.433375][ T5696] usb 3-1: Product: 봐坖ඬ∀殮劄炇篚᳍긱혽酱笰斫ꂄ〴䐐㊱೓鯀緆㏌싡湠龺䄘잘뭅扴鶞덂⌧镖꫆皁䡶瑴꜅힟ꒅ낦䊗휄擑懏 [ 689.451219][T13101] comedi comedi0: Minor 2147483647 is invalid! [ 689.482262][ T5696] usb 3-1: Manufacturer: ఇ [ 689.487510][ T5696] usb 3-1: SerialNumber: Н [ 689.743487][ T5696] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 689.773042][ T5696] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 689.875788][ T5696] usb 3-1: USB disconnect, device number 70 [ 689.919998][T12368] udevd[12368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.945049][ T803] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 690.044087][ T5717] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 690.243976][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 690.252135][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.274641][ T803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 690.372440][ T803] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 690.386523][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 690.399621][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.449070][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.469226][ T803] usb 1-1: Product: syz [ 690.629878][T13116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2063'. [ 690.802381][ T803] usb 1-1: Manufacturer: syz [ 690.812068][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.822554][ T803] usb 1-1: SerialNumber: syz [ 690.830767][ T5717] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 690.843841][ T803] usb 1-1: config 0 descriptor?? [ 690.853045][ T803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 690.887798][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.926297][ T5717] usb 2-1: config 0 descriptor?? [ 691.085459][T13116] comedi comedi0: Minor 2147483647 is invalid! [ 691.096460][ T803] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 691.117549][ T803] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 691.184818][ T803] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 691.312861][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.323758][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.344698][ T803] usb 1-1: USB disconnect, device number 67 [ 691.483864][ T5717] usbhid 2-1:0.0: can't add hid device: -71 [ 691.498933][ T5717] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 691.527026][ T5717] usb 2-1: USB disconnect, device number 98 [ 691.673460][ T5607] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 691.860686][ T5607] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 691.988353][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.006849][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.059325][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.105179][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.150398][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.202232][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.297606][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.454689][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.606890][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.645862][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.692893][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.710570][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.774680][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.824717][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.866898][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 692.894816][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.930178][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.944593][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 693.064540][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 693.154117][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.327214][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 693.416364][ T5607] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 693.501553][ T5607] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 693.557200][ T5607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 693.575861][ T5607] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 693.809500][ T5607] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 693.821967][ T5607] usb 3-1: Product: syz [ 693.839198][ T5607] usb 3-1: Manufacturer: syz [ 693.852425][ T5607] usb 3-1: SerialNumber: syz [ 693.862090][ T5696] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 693.892837][ T5607] usb 3-1: config 0 descriptor?? [ 693.944511][ T5607] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 694.034610][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.059574][ T5696] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 694.108470][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.159165][ T5696] usb 2-1: config 0 descriptor?? [ 694.190392][ T5696] pwc: Askey VC010 type 2 USB webcam detected. [ 694.402598][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 694.477509][ T42] usb 3-1: USB disconnect, device number 71 [ 694.529409][ T42] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 694.664544][ T5696] pwc: recv_control_msg error -71 req 02 val 2b00 [ 694.681754][ T5607] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 694.696307][ T5696] pwc: recv_control_msg error -71 req 02 val 2700 [ 694.720403][ T5696] pwc: recv_control_msg error -71 req 02 val 2c00 [ 694.735709][ T5696] pwc: recv_control_msg error -71 req 04 val 1000 [ 694.747159][ T5696] pwc: recv_control_msg error -71 req 04 val 1300 [ 694.755359][ T5696] pwc: recv_control_msg error -71 req 04 val 1400 [ 694.764815][ T5696] pwc: recv_control_msg error -71 req 02 val 2000 [ 694.775699][ T5696] pwc: recv_control_msg error -71 req 02 val 2100 [ 694.783579][ T5696] pwc: recv_control_msg error -71 req 04 val 1500 [ 694.791028][ T5696] pwc: recv_control_msg error -71 req 02 val 2500 [ 694.811354][ T5696] pwc: recv_control_msg error -71 req 02 val 2400 [ 694.819485][ T5696] pwc: recv_control_msg error -71 req 02 val 2600 [ 694.827575][ T5696] pwc: recv_control_msg error -71 req 02 val 2900 [ 694.835918][ T5696] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.844448][ T5696] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.852008][ T5696] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.866201][ T5696] pwc: Registered as video103. [ 694.892335][ T5696] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 694.970330][ T5696] usb 2-1: USB disconnect, device number 99 [ 695.082291][ T5607] usb 1-1: device descriptor read/64, error -71 [ 695.451486][ T5607] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 695.661293][ T5607] usb 1-1: device descriptor read/64, error -71 [ 695.816356][ T5607] usb usb1-port1: attempt power cycle [ 696.389836][ T5607] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 696.520224][ T5607] usb 1-1: device descriptor read/8, error -71 [ 696.820705][ T5607] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 696.862065][ T5607] usb 1-1: device descriptor read/8, error -71 [ 696.994883][ T5607] usb usb1-port1: unable to enumerate USB device [ 697.835224][T13196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2083'. [ 697.853205][T13196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2083'. [ 698.785336][T13205] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.842664][ T42] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 699.043994][ T5696] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 699.131313][ T42] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 699.183695][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.226540][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.285339][ T5696] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.357634][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.482873][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2088'. [ 699.486322][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.660088][T13215] syzkaller0: entered promiscuous mode [ 699.667307][ T5696] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 699.685662][T13215] syzkaller0: entered allmulticast mode [ 699.695051][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.703290][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.718107][ T5696] usb 2-1: Product: 봐坖ඬ∀殮劄炇篚᳍긱혽酱笰斫ꂄ〴䐐㊱೓鯀緆㏌싡湠龺䄘잘뭅扴鶞덂⌧镖꫆皁䡶瑴꜅힟ꒅ낦䊗휄擑懏 [ 699.738589][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.747412][ T5696] usb 2-1: Manufacturer: ఇ [ 699.767241][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.791001][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.805820][ T5696] usb 2-1: SerialNumber: Н [ 699.817108][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.856354][T13212] tipc: Enabled bearer , priority 0 [ 699.864852][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.893129][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.906764][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.918319][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.928092][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.941288][T13211] tipc: Resetting bearer [ 699.971217][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.985868][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.018527][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.055531][ T5696] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 700.069023][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 700.076824][ T5696] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 700.077489][T13211] tipc: Disabling bearer [ 700.084669][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.084711][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.084736][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 700.085617][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 700.166920][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 700.186371][T13210] comedi comedi0: Minor 2147483647 is invalid! [ 700.236216][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 700.271237][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 700.290677][ T42] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 700.319977][ T42] usb 1-1: Product: syz [ 700.333807][ T5696] usb 2-1: USB disconnect, device number 100 [ 700.345253][ T42] usb 1-1: Manufacturer: syz [ 700.358067][ T42] usb 1-1: SerialNumber: syz [ 700.435415][T12368] udevd[12368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.452925][ T42] usb 1-1: config 0 descriptor?? [ 700.659503][T13222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2092'. [ 701.189313][ T42] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 701.292267][ T42] usb 1-1: USB disconnect, device number 72 [ 701.305047][ T42] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 701.394535][T13221] comedi comedi0: Minor 2147483647 is invalid! [ 701.760762][ T42] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 701.904214][ T29] audit: type=1400 audit(1777541813.156:777): avc: denied { connect } for pid=13246 comm="syz.5.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 701.951591][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 701.996948][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 702.028873][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 702.048320][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.074259][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.101860][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.122284][ T42] usb 4-1: config 0 descriptor?? [ 702.563684][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 702.584413][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 702.618550][ T42] usb 4-1: USB disconnect, device number 71 [ 704.197893][ T42] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 704.691239][ T42] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 704.993065][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.137141][T13287] xt_hashlimit: size too large, truncated to 1048576 [ 705.150098][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.171025][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.180883][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.191047][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.202502][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.211065][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.222853][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.235183][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.245324][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.256586][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.268460][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.275957][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.303254][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.321522][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.340440][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.356531][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.368603][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.393092][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.405027][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.418680][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.428700][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 705.488909][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 705.521220][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 705.576106][ T42] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 705.595310][ T42] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 705.622317][ T42] usb 2-1: Product: syz [ 705.631102][ T42] usb 2-1: Manufacturer: syz [ 705.641586][ T42] usb 2-1: SerialNumber: syz [ 705.655794][ T42] usb 2-1: config 0 descriptor?? [ 705.674115][ T42] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 706.005313][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 706.005846][ T5717] usb 2-1: USB disconnect, device number 101 [ 706.061400][ T5717] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 706.637261][T13318] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 707.575543][ T5717] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 707.766104][T13336] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 707.849988][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 707.893255][ T5717] usb 1-1: not running at top speed; connect to a high speed hub [ 708.234428][ T5717] usb 1-1: language id specifier not provided by device, defaulting to English [ 708.303341][ T5717] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 708.343601][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.873221][T13328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2127'. [ 708.911311][T13328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2127'. [ 708.973598][T13328] netlink: 'syz.0.2127': attribute type 6 has an invalid length. [ 708.992185][T13328] netlink: 'syz.0.2127': attribute type 5 has an invalid length. [ 709.015845][T13328] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2127'. [ 709.229037][T13354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2138'. [ 709.299943][ T5607] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 709.392565][T13354] comedi comedi0: Minor 2147483647 is invalid! [ 710.202504][ T5607] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 710.213889][ T42] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 710.239259][ T5607] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.257427][ T5607] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 710.271587][ T5607] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 710.283311][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.375781][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 710.396077][T13349] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 710.439839][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 710.452185][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 710.468332][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 710.512141][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.569472][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.602431][ T42] usb 4-1: config 0 descriptor?? [ 710.604009][ T5717] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 710.657247][ T5607] usbhid 2-1:2.0: can't add hid device: -71 [ 710.693865][ T5607] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 710.753265][ T5607] usb 2-1: USB disconnect, device number 102 [ 711.316486][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 711.780766][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 711.815538][T13370] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 712.037962][ T5717] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 712.449892][ T5717] usb 1-1: USB disconnect, device number 73 [ 712.469730][ T42] usb 4-1: USB disconnect, device number 72 [ 712.892788][ T42] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 712.997925][ T29] audit: type=1400 audit(1777541824.152:778): avc: denied { map } for pid=13375 comm="syz.1.2145" path="socket:[57574]" dev="sockfs" ino=57574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 713.014845][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2144'. [ 713.085453][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2144'. [ 713.194836][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.221222][ T42] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 713.231600][ T42] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 713.241027][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.303566][T13386] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 713.340048][ T42] usb 4-1: config 0 descriptor?? [ 713.368998][ T42] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 713.405294][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 713.482061][ T42] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 713.534241][ T42] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 713.573540][ T42] usb 4-1: media controller created [ 713.622554][T13372] dvb-usb: bulk message failed: -22 (2/0) [ 713.632587][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.792886][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 713.844517][ T42] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 713.877719][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 713.970811][ T42] dvb-usb: schedule remote query interval to 150 msecs. [ 713.997118][ T42] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 714.032858][ T42] usb 4-1: USB disconnect, device number 73 [ 714.237212][ T42] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 714.282666][T13398] overlayfs: failed to clone upperpath [ 714.699988][T13404] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 714.957884][T13404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.506623][T13407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.549055][T13407] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 715.606019][T13407] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 715.962383][T13409] gretap1: entered promiscuous mode [ 716.030476][T13409] bond3: (slave gretap1): making interface the new active one [ 716.110395][T13409] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 716.551567][ T42] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 716.924484][ T42] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 716.961916][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.000923][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.042850][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 717.076694][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.112186][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.220231][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 717.226202][T13433] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13433 comm=syz.5.2161 [ 717.232650][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.274450][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.348794][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 717.466168][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.545581][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.588451][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 717.983679][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.049276][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.078767][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 718.093463][T13437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2162'. [ 718.107706][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.129567][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.156583][T13437] comedi comedi0: Minor 2147483647 is invalid! [ 718.167389][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 718.200380][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.217092][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.242801][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 718.259214][T13443] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 718.277136][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.277181][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.277207][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 718.279121][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 718.355856][ T42] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 718.367272][ T42] usb 1-1: Product: syz [ 718.371744][ T42] usb 1-1: Manufacturer: syz [ 718.376541][ T42] usb 1-1: SerialNumber: syz [ 718.399463][T13448] netlink: 'syz.5.2166': attribute type 29 has an invalid length. [ 718.414416][ T42] usb 1-1: config 0 descriptor?? [ 718.434623][ T42] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 718.448876][T13448] netlink: 'syz.5.2166': attribute type 29 has an invalid length. [ 718.478925][T13448] netlink: 'syz.5.2166': attribute type 32 has an invalid length. [ 718.487649][T13448] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2166'. [ 718.505443][T13447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.789367][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 718.814382][ T5696] usb 1-1: USB disconnect, device number 74 [ 718.816432][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2167'. [ 718.843372][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2167'. [ 718.846098][ T5696] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 718.860568][ T42] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 719.022256][ T42] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 719.051651][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.083413][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.147322][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.177743][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.347857][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.371398][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.380580][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.390974][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.815025][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.842290][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.866158][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.879323][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.891231][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.922901][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.975921][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 720.991453][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.024046][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.056862][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.101148][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.544339][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.633643][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.319435][ T42] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 722.362893][ T42] usb 2-1: can't read configurations, error -71 [ 724.007164][ T42] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 724.196902][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 724.210392][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.230682][T13507] fuse: fd is not a fuse device [ 724.243863][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.271047][ T42] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 724.296886][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.334933][ T42] usb 1-1: config 0 descriptor?? [ 724.666932][ T5696] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 724.927280][ T5696] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 724.950830][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 724.968595][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 724.979789][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 724.990830][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.018790][ T42] usb 1-1: USB disconnect, device number 75 [ 725.026211][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.050534][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.095104][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.132067][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.143025][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.160300][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.181831][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.193771][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.206954][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.224881][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.246145][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.265983][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.304377][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.329655][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.351570][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.382001][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.400659][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.443899][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.484145][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.511153][ T5696] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 725.537692][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 725.577709][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 725.611223][ T5696] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 725.647733][ T5696] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 725.676452][ T5696] usb 4-1: Product: syz [ 725.692244][ T5696] usb 4-1: Manufacturer: syz [ 725.712265][ T5696] usb 4-1: SerialNumber: syz [ 725.733498][T13539] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 725.768741][ T5696] usb 4-1: config 0 descriptor?? [ 725.804490][ T5696] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 726.332182][ T5717] usb 4-1: USB disconnect, device number 74 [ 726.393920][ T5717] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 727.586068][ T5696] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 727.703594][T13561] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 727.783964][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 727.974241][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.258599][T13566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.271615][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.314516][ T5696] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 728.380058][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.426953][ T5696] usb 1-1: Product: syz [ 728.437339][ T5696] usb 1-1: Manufacturer: syz [ 728.451878][ T5696] usb 1-1: SerialNumber: syz [ 728.501550][ T5696] usb 1-1: selecting invalid altsetting 1 [ 728.531134][ T5696] usb 1-1: unit 6 not found! [ 728.563404][T13575] fuse: fd is not a fuse device [ 728.637186][T13576] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 728.695160][ T5696] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 729.181471][T13583] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2199'. [ 729.204628][T13579] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2199'. [ 729.258269][ T5696] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 730.418328][T13478] udevd[13478]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.623930][ T5717] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 730.681846][ T5696] usb 1-1: USB disconnect, device number 76 [ 730.804786][ T5717] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 730.849677][ T5717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 730.883656][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.905754][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 730.920361][ T5717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 730.942859][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.992695][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.005810][ T5717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 731.034183][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 731.077996][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.095041][ T5717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 731.106039][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 731.117208][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.163803][ T42] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 731.345818][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 731.583725][ T5696] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 731.624566][ T42] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 731.787946][ T5717] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 731.931100][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.089236][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 732.212270][ T42] usb 4-1: Product: syz [ 732.284660][ T42] usb 4-1: Manufacturer: syz [ 732.314769][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 732.336697][ T42] usb 4-1: SerialNumber: syz [ 732.396676][ T42] usb 4-1: config 0 descriptor?? [ 732.454272][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 732.569114][ T42] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 732.732528][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.236930][ T5696] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.622450][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.208494][ T5717] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.220482][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.234679][ T5696] usb 1-1: config 0 descriptor?? [ 734.280264][ T5717] usb 2-1: unable to read config index 5 descriptor/start: -71 [ 734.284811][ T42] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 734.362408][ T5717] usb 2-1: can't read configurations, error -71 [ 734.406827][ T42] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 734.418054][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 734.436345][ T5696] usb 1-1: can't set config #0, error -71 [ 734.485920][ T5696] usb 1-1: USB disconnect, device number 77 [ 734.791786][ T5717] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 734.820886][T13609] evm: overlay not supported [ 734.827508][ T29] audit: type=1400 audit(1777541846.093:779): avc: denied { watch } for pid=13607 comm="syz.2.2216" path="/441/bus/file1" dev="overlay" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 734.992429][ T5717] usb 2-1: device descriptor read/64, error -71 [ 735.662357][ T5717] usb usb2-port1: attempt power cycle [ 735.718377][ T5696] usb 4-1: USB disconnect, device number 75 [ 736.260603][T13616] netlink: 'syz.0.2220': attribute type 11 has an invalid length. [ 736.413023][ T5717] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 736.461608][ T5717] usb 2-1: device descriptor read/8, error -71 [ 736.581420][ T5696] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 736.741066][ T5717] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 736.742713][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 736.835253][ T5696] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 736.839548][ T5717] usb 2-1: device descriptor read/8, error -71 [ 737.047989][ T5696] usb 4-1: config 2 has no interface number 0 [ 737.094605][ T5717] usb usb2-port1: unable to enumerate USB device [ 737.140114][ T5696] usb 4-1: config 2 interface 31 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 737.197715][ T5696] usb 4-1: config 2 interface 31 has no altsetting 0 [ 737.224773][ T5696] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 737.238880][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.254898][ T5696] usb 4-1: Product: syz [ 737.259935][T13630] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 737.267523][ T5696] usb 4-1: Manufacturer: syz [ 737.290667][ T5696] usb 4-1: SerialNumber: syz [ 737.351273][ T5696] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 737.851972][ T5717] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 738.027976][ T5717] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.115363][ T5717] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 738.196929][ T29] audit: type=1400 audit(1777541849.454:780): avc: denied { remount } for pid=13640 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 738.845647][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.854625][ T5717] usb 2-1: Product: 봐坖ඬ∀殮劄炇篚᳍긱혽酱笰斫ꂄ〴䐐㊱೓鯀緆㏌싡湠龺䄘잘뭅扴鶞덂⌧镖꫆皁䡶瑴꜅힟ꒅ낦䊗휄擑懏 [ 738.872610][ T5717] usb 2-1: Manufacturer: ఇ [ 738.879356][ T5717] usb 2-1: SerialNumber: Н [ 739.154642][ T5717] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 739.170330][ T5717] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 739.188857][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 739.241754][ T5717] usb 2-1: USB disconnect, device number 109 [ 739.384096][T13608] udevd[13608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.360723][T13668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2233'. [ 740.445090][T13667] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 741.077972][T13665] comedi comedi0: Minor 2147483647 is invalid! [ 741.375402][T13674] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 742.420509][ T5696] usb 4-1: USB disconnect, device number 76 [ 742.929828][ T5696] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 743.098371][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 743.112802][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.195722][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.332579][ T5696] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 743.372947][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.426923][ T5696] usb 4-1: config 0 descriptor?? [ 743.647175][ T29] audit: type=1326 audit(1777541854.917:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.694867][ T29] audit: type=1326 audit(1777541854.967:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.763189][ T29] audit: type=1326 audit(1777541854.967:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.857606][ T29] audit: type=1326 audit(1777541854.967:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.896044][ T29] audit: type=1326 audit(1777541854.967:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.938564][ T29] audit: type=1326 audit(1777541854.967:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 743.995559][ T29] audit: type=1326 audit(1777541854.967:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 744.044012][ T29] audit: type=1326 audit(1777541854.967:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 744.091438][ T29] audit: type=1326 audit(1777541854.967:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 744.141981][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 744.155119][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 744.225614][ T29] audit: type=1326 audit(1777541854.967:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 744.255125][ T5696] usb 4-1: USB disconnect, device number 77 [ 747.742438][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2253'. [ 748.581631][T13742] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 749.618726][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2255'. [ 749.636694][T13734] comedi comedi0: Minor 2147483647 is invalid! [ 750.044493][ T5696] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 750.104431][ T42] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 750.275411][ T5696] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.290106][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 750.319516][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 750.330610][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 750.341052][ T5696] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 750.350334][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.359433][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.372513][ T5696] usb 4-1: Product: 봐坖ඬ∀殮劄炇篚᳍긱혽酱笰斫ꂄ〴䐐㊱೓鯀緆㏌싡湠龺䄘잘뭅扴鶞덂⌧镖꫆皁䡶瑴꜅힟ꒅ낦䊗휄擑懏 [ 750.409199][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.418510][ T5696] usb 4-1: Manufacturer: ఇ [ 750.427991][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.436109][ T5696] usb 4-1: SerialNumber: Н [ 750.449105][ T42] usb 2-1: config 0 descriptor?? [ 750.657466][ T5696] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 750.700615][ T5696] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 750.830308][ T5696] usb 4-1: USB disconnect, device number 78 [ 750.874566][T13608] udevd[13608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.938147][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 750.974037][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 750.986793][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.068484][T13762] fuse: fd is not a fuse device [ 751.127617][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.134009][T13762] fuse: fd is not a fuse device [ 751.172122][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.201240][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.230342][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.249594][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 751.249610][ T29] audit: type=1400 audit(1777541862.521:801): avc: denied { execute_no_trans } for pid=13765 comm="syz.2.2265" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=60887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 751.292269][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.314841][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.329830][ T42] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 751.371540][ T42] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 751.563880][ T5717] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 751.727503][ T29] audit: type=1400 audit(1777541863.001:802): avc: denied { map } for pid=13773 comm="syz.3.2268" path="socket:[60911]" dev="sockfs" ino=60911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 751.735177][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.788035][ T5717] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.853158][ T42] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 751.973564][ T5696] usb 2-1: USB disconnect, device number 110 [ 752.021277][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 752.035851][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 752.047958][ T5717] usb 3-1: SerialNumber: syz [ 752.053685][ T42] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 752.072446][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.075274][ T5717] usb 3-1: No union descriptors [ 752.098415][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.099281][ T5717] usb-storage 3-1:1.0: USB Mass Storage device detected [ 752.121473][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.134981][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.139765][ T5717] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 752.152675][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.152707][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.178261][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.204299][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.236764][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.262673][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.279500][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.301710][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.327747][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.414715][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.444705][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.463858][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.479787][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.482650][ T5717] usb 3-1: USB disconnect, device number 72 [ 752.519660][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.543801][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2272'. [ 752.563868][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.592045][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.627864][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.646395][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 752.666805][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 752.698497][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 752.720575][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 752.761923][ T42] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 752.792254][ T42] usb 1-1: Product: syz [ 752.802383][ T42] usb 1-1: Manufacturer: syz [ 752.822851][ T42] usb 1-1: SerialNumber: syz [ 752.918549][ T42] usb 1-1: config 0 descriptor?? [ 753.242757][ T42] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 753.539283][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 753.546787][ T42] usb 1-1: USB disconnect, device number 78 [ 753.552521][T13775] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 753.562353][ T42] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 753.770237][T13804] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 753.894411][T13809] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 753.921647][T13809] netlink: 'syz.1.2276': attribute type 2 has an invalid length. [ 753.957993][T13809] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 754.945251][T13793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.365415][T13793] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 755.471797][T13793] hsr1: left allmulticast mode [ 755.481350][T13793] dummy0: left allmulticast mode [ 755.507695][T13793] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 755.931150][ T5607] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 755.974314][T13824] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 756.437770][ T5607] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 756.453843][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.463537][ T5607] usb 3-1: Product: syz [ 756.468055][ T5607] usb 3-1: Manufacturer: syz [ 756.473671][ T5607] usb 3-1: SerialNumber: syz [ 756.533138][T10523] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.597949][ T803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.655667][T10523] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.718393][T13830] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 757.113713][ T5717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.122462][ T5607] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 757.491449][ T5717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.803092][T13845] syzkaller0: left promiscuous mode [ 757.821652][T13845] syzkaller0: left allmulticast mode [ 758.339828][ T42] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 759.274631][ T42] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 759.356873][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.388868][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.418172][ T804] usb 3-1: USB disconnect, device number 73 [ 759.453532][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.466257][ T804] usblp0: removed [ 759.491699][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.542523][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.594636][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 759.627606][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 759.672294][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 759.732066][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.113428][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.188052][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.228362][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.248436][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.263958][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.306434][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.339899][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.379032][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.436459][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.439401][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.532704][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.618173][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.783735][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 760.818475][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 761.627309][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 761.638676][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 765.012982][ T42] usb 1-1: string descriptor 0 read error: -71 [ 765.179093][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 765.208477][ T42] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 765.225273][T13883] fuse: fd is not a fuse device [ 765.289076][ T42] usb 1-1: config 0 descriptor?? [ 765.303414][ T42] usb 1-1: can't set config #0, error -71 [ 765.322858][ T42] usb 1-1: USB disconnect, device number 79 [ 765.435596][T13883] fuse: fd is not a fuse device [ 765.581929][T13891] lo speed is unknown, defaulting to 1000 [ 765.606804][T13893] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 765.656259][T13891] lo speed is unknown, defaulting to 1000 [ 765.761424][T13891] lo speed is unknown, defaulting to 1000 [ 767.380959][ T29] audit: type=1400 audit(1777541878.659:803): avc: denied { read write } for pid=13905 comm="syz.2.2306" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 767.606460][ T29] audit: type=1400 audit(1777541878.659:804): avc: denied { open } for pid=13905 comm="syz.2.2306" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 768.195009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 768.284519][T13917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2308'. [ 768.447500][T13916] comedi comedi0: Minor 2147483647 is invalid! [ 769.244107][T13891] infiniband syz0: set down [ 769.438927][T13891] infiniband syz0: added lo [ 769.492042][T13920] bond4: Unable to set down delay as MII monitoring is disabled [ 769.574805][T13929] fuse: fd is not a fuse device [ 769.582912][T13920] bond4 (unregistering): Released all slaves [ 769.596506][T13891] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 769.622812][T13891] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 769.641772][T13929] fuse: fd is not a fuse device [ 769.740296][T13891] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 769.848315][ T5607] lo speed is unknown, defaulting to 1000 [ 770.302885][T13891] RDS/IB: syz0: added [ 770.498709][T13891] smc: adding ib device syz0 with port count 1 [ 770.505019][T13891] smc: ib device syz0 port 1 has no pnetid [ 770.512635][T13891] lo speed is unknown, defaulting to 1000 [ 770.736624][ T5607] lo speed is unknown, defaulting to 1000 [ 771.243911][T13937] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 771.932688][T13948] tipc: Enabling of bearer rejected, already enabled [ 772.122957][ T5607] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 772.144271][T13950] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 772.527907][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 772.562168][ T5607] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 772.614536][ T5607] usb 4-1: config 0 has no interface number 0 [ 772.645163][ T5607] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 772.679819][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.720272][ T5607] usb 4-1: Product: syz [ 772.739006][ T5607] usb 4-1: Manufacturer: syz [ 772.766636][ T5607] usb 4-1: SerialNumber: syz [ 772.951629][ T5607] usb 4-1: config 0 descriptor?? [ 773.751749][ T5607] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 773.772214][T13891] lo speed is unknown, defaulting to 1000 [ 773.988876][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 774.031774][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 774.195258][T13891] lo speed is unknown, defaulting to 1000 [ 774.275766][ T29] audit: type=1326 audit(1777541885.563:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.3.2317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4465b9cdd9 code=0x0 [ 774.457961][T13970] fuse: fd is not a fuse device [ 774.499280][T13970] fuse: fd is not a fuse device [ 774.516232][T13891] lo speed is unknown, defaulting to 1000 [ 774.823438][T13975] FAULT_INJECTION: forcing a failure. [ 774.823438][T13975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.876522][T13975] CPU: 1 UID: 0 PID: 13975 Comm: syz.2.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.876552][T13975] Tainted: [L]=SOFTLOCKUP [ 774.876558][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.876569][T13975] Call Trace: [ 774.876575][T13975] [ 774.876582][T13975] dump_stack_lvl+0x100/0x190 [ 774.876608][T13975] should_fail_ex.cold+0x5/0xa [ 774.876633][T13975] _copy_from_user+0x2e/0xd0 [ 774.876659][T13975] bpf_test_init.isra.0+0xaf/0x100 [ 774.876690][T13975] bpf_prog_test_run_xdp+0x57e/0x1670 [ 774.876720][T13975] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 774.876746][T13975] ? fput+0x79/0x100 [ 774.876777][T13975] ? __bpf_prog_get+0x97/0x2a0 [ 774.876799][T13975] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 774.876818][T13975] __sys_bpf+0x1725/0x4b90 [ 774.876849][T13975] ? __pfx___sys_bpf+0x10/0x10 [ 774.876874][T13975] ? proc_fail_nth_write+0x9f/0x220 [ 774.876892][T13975] ? find_held_lock+0x2b/0x80 [ 774.876914][T13975] ? find_held_lock+0x2b/0x80 [ 774.876930][T13975] ? ksys_write+0x190/0x250 [ 774.876946][T13975] ? ksys_write+0x190/0x250 [ 774.876967][T13975] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 774.876988][T13975] ? kernel_write+0x623/0x6c0 [ 774.877005][T13975] ? __fget_files+0x215/0x3d0 [ 774.877037][T13975] ? fput+0x79/0x100 [ 774.877060][T13975] ? ksys_write+0x1ac/0x250 [ 774.877077][T13975] ? __pfx_ksys_write+0x10/0x10 [ 774.877094][T13975] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 774.877123][T13975] __x64_sys_bpf+0x7b/0xc0 [ 774.877140][T13975] ? lockdep_hardirqs_on+0x78/0x100 [ 774.877159][T13975] do_syscall_64+0x10b/0xf80 [ 774.877176][T13975] ? clear_bhb_loop+0x40/0x90 [ 774.877197][T13975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.877215][T13975] RIP: 0033:0x7fefbd19cdd9 [ 774.877229][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.877246][T13975] RSP: 002b:00007fefbe030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.877263][T13975] RAX: ffffffffffffffda RBX: 00007fefbd415fa0 RCX: 00007fefbd19cdd9 [ 774.877275][T13975] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 774.877285][T13975] RBP: 00007fefbe030090 R08: 0000000000000000 R09: 0000000000000000 [ 774.877295][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.877304][T13975] R13: 00007fefbd416038 R14: 00007fefbd415fa0 R15: 00007ffd40e54f18 [ 774.877328][T13975] [ 775.214639][T13891] lo speed is unknown, defaulting to 1000 [ 775.363955][T13891] lo speed is unknown, defaulting to 1000 [ 775.519925][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 775.520309][ T804] usb 4-1: USB disconnect, device number 79 [ 775.659251][ T804] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 775.759075][ T804] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 775.826986][ T804] quatech2 4-1:0.51: device disconnected [ 779.216073][T14024] lo speed is unknown, defaulting to 1000 [ 780.583973][T14028] FAULT_INJECTION: forcing a failure. [ 780.583973][T14028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.660830][T14028] CPU: 1 UID: 0 PID: 14028 Comm: syz.3.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.660860][T14028] Tainted: [L]=SOFTLOCKUP [ 780.660867][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 780.660877][T14028] Call Trace: [ 780.660883][T14028] [ 780.660890][T14028] dump_stack_lvl+0x100/0x190 [ 780.660917][T14028] should_fail_ex.cold+0x5/0xa [ 780.660942][T14028] _copy_from_user+0x2e/0xd0 [ 780.660967][T14028] video_usercopy+0xe74/0x1700 [ 780.660992][T14028] ? __pfx___video_do_ioctl+0x10/0x10 [ 780.661015][T14028] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 780.661041][T14028] ? __pfx_video_usercopy+0x10/0x10 [ 780.661079][T14028] v4l2_ioctl+0x1bd/0x250 [ 780.661102][T14028] ? __pfx_v4l2_ioctl+0x10/0x10 [ 780.661127][T14028] __x64_sys_ioctl+0x18e/0x210 [ 780.661148][T14028] do_syscall_64+0x10b/0xf80 [ 780.661167][T14028] ? clear_bhb_loop+0x40/0x90 [ 780.661188][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.661207][T14028] RIP: 0033:0x7f4465b9cdd9 [ 780.661221][T14028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.661237][T14028] RSP: 002b:00007f4466a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.661254][T14028] RAX: ffffffffffffffda RBX: 00007f4465e15fa0 RCX: 00007f4465b9cdd9 [ 780.661265][T14028] RDX: 00002000000002c0 RSI: 00000000c054561d RDI: 0000000000000003 [ 780.661276][T14028] RBP: 00007f4466a9d090 R08: 0000000000000000 R09: 0000000000000000 [ 780.661285][T14028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.661296][T14028] R13: 00007f4465e16038 R14: 00007f4465e15fa0 R15: 00007fffa7365498 [ 780.661320][T14028] [ 781.082978][T14037] fuse: fd is not a fuse device [ 781.600399][T14042] tipc: Started in network mode [ 781.627152][T14042] tipc: Node identity , cluster identity 4711 [ 781.665489][T14042] tipc: Failed to obtain node identity [ 781.708604][T14042] tipc: Enabling of bearer rejected, failed to enable media [ 782.405314][T14063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2351'. [ 782.918120][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.391294][T14069] netlink: 'syz.3.2354': attribute type 27 has an invalid length. [ 785.157157][T14087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2359'. [ 785.728743][T14086] comedi comedi0: Minor 2147483647 is invalid! [ 786.100732][T14095] syzkaller0: entered promiscuous mode [ 786.131915][T14095] syzkaller0: entered allmulticast mode [ 786.228720][T14097] tipc: Enabled bearer , priority 0 [ 786.267136][T14094] tipc: Resetting bearer [ 786.347944][T14094] tipc: Disabling bearer [ 786.593894][T14101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.792271][T14110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2368'. [ 786.819315][T14110] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2368'. [ 786.848946][T14110] netlink: 'syz.1.2368': attribute type 6 has an invalid length. [ 786.891259][T14110] netlink: 'syz.1.2368': attribute type 6 has an invalid length. [ 786.995682][ T5717] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 787.065831][ T804] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 787.318749][ T804] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 787.457091][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 787.898869][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 787.945368][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 787.947053][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 787.953535][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.007060][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.013533][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.059910][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.088098][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.123849][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.150736][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.172031][ T5717] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 788.181094][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.192264][ T5717] usb 4-1: config 0 descriptor?? [ 788.222159][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.291325][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.316741][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.340883][ T5717] hub 4-1:0.0: USB hub found [ 788.433891][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.472262][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.500089][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.538867][ T5717] hub 4-1:0.0: 1 port detected [ 788.574635][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.633205][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.693384][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.741949][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.778804][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.823734][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.868376][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.892664][ T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 788.928549][ T804] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 788.979323][ T804] usb 3-1: config 0 interface 0 has no altsetting 0 [ 789.076866][ T804] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 789.367901][ T5717] hub 4-1:0.0: activate --> -90 [ 789.432165][ T804] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 789.492413][ T804] usb 3-1: Product: syz [ 789.500529][ T804] usb 3-1: Manufacturer: syz [ 789.505507][ T804] usb 3-1: SerialNumber: syz [ 789.512646][ T804] usb 3-1: config 0 descriptor?? [ 789.540697][ T804] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 789.884055][ T42] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 790.034733][ T24] usb 3-1: USB disconnect, device number 74 [ 790.050949][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 790.136111][ T42] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 790.205178][ T42] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 790.240747][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.259050][ T42] usb 1-1: Product: syz [ 790.265610][ T42] usb 1-1: Manufacturer: syz [ 790.275101][ T42] usb 1-1: SerialNumber: syz [ 790.301978][ T42] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 790.344689][ T24] usb 4-1: USB disconnect, device number 80 [ 790.348085][ T5717] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 790.395371][ T5717] usb 4-1-port1: attempt power cycle [ 790.463763][ T804] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 790.471666][T14145] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 790.613703][ T804] usb 2-1: device descriptor read/64, error -71 [ 790.789011][ T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 790.834099][ T42] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 790.860749][ T42] usb 1-1: media controller created [ 790.883750][ T804] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 790.920929][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.043444][ T804] usb 2-1: device descriptor read/64, error -71 [ 791.166617][ T804] usb usb2-port1: attempt power cycle [ 791.233679][ T42] usb 1-1: USB disconnect, device number 80 [ 791.676064][ T804] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 791.784452][ T804] usb 2-1: device descriptor read/8, error -71 [ 792.073547][ T804] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 792.379256][ T804] usb 2-1: device descriptor read/8, error -71 [ 792.495579][T14168] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 792.542939][ T804] usb usb2-port1: unable to enumerate USB device [ 793.290355][T14176] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2387'. [ 793.409628][T14178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 793.483892][T14185] FAULT_INJECTION: forcing a failure. [ 793.483892][T14185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.499295][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.2.2393 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.499321][T14185] Tainted: [L]=SOFTLOCKUP [ 793.499327][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.499337][T14185] Call Trace: [ 793.499344][T14185] [ 793.499351][T14185] dump_stack_lvl+0x100/0x190 [ 793.499377][T14185] should_fail_ex.cold+0x5/0xa [ 793.499402][T14185] _copy_to_user+0x32/0xd0 [ 793.499428][T14185] simple_read_from_buffer+0xcb/0x170 [ 793.499450][T14185] proc_fail_nth_read+0x1af/0x230 [ 793.499470][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 793.499491][T14185] ? rw_verify_area+0xce/0x6d0 [ 793.499517][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 793.499533][T14185] vfs_read+0x1e4/0xb30 [ 793.499552][T14185] ? __pfx_vfs_read+0x10/0x10 [ 793.499567][T14185] ? __fget_files+0x215/0x3d0 [ 793.499588][T14185] ? __fget_files+0x21f/0x3d0 [ 793.499610][T14185] ksys_read+0x12a/0x250 [ 793.499624][T14185] ? __pfx_ksys_read+0x10/0x10 [ 793.499640][T14185] ? rcu_is_watching+0x12/0xc0 [ 793.499664][T14185] do_syscall_64+0x10b/0xf80 [ 793.499683][T14185] ? clear_bhb_loop+0x40/0x90 [ 793.499705][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.499723][T14185] RIP: 0033:0x7fefbd15d60e [ 793.499739][T14185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 793.499756][T14185] RSP: 002b:00007fefbe02ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 793.499774][T14185] RAX: ffffffffffffffda RBX: 00007fefbe0306c0 RCX: 00007fefbd15d60e [ 793.499786][T14185] RDX: 000000000000000f RSI: 00007fefbe0300a0 RDI: 0000000000000004 [ 793.499796][T14185] RBP: 00007fefbe030090 R08: 0000000000000000 R09: 0000000000000000 [ 793.499805][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.499815][T14185] R13: 00007fefbd416038 R14: 00007fefbd415fa0 R15: 00007ffd40e54f18 [ 793.499846][T14185] [ 793.782682][ T42] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 793.850305][T14189] binder: 14188:14189 ioctl 9361 708d returned -22 [ 793.858277][T14189] binder: 14188:14189 ioctl c0306201 0 returned -14 [ 793.867514][T14189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 793.933345][ T42] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 793.941677][ T42] usb 1-1: config 1 has no interface number 0 [ 794.142855][ T42] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 794.182432][ T42] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 794.217389][ T42] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.290278][ T42] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 794.324503][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.341409][T14196] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2396'. [ 794.354588][ T42] usb 1-1: Product: syz [ 794.369875][ T42] usb 1-1: Manufacturer: syz [ 794.394890][ T42] usb 1-1: SerialNumber: syz [ 794.405723][T14187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 794.843865][T14187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.201778][ T804] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 795.249635][ T42] usb 1-1: Incompatible driver and firmware versions [ 795.624457][ T42] usb 1-1: USB disconnect, device number 81 [ 795.661682][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 796.117829][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 796.534094][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 796.883588][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.231638][ T804] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.292767][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.324786][ T804] usb 4-1: config 0 descriptor?? [ 798.403356][ T804] usb 4-1: can't set config #0, error -71 [ 798.410119][ T42] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 798.457416][ T804] usb 4-1: USB disconnect, device number 85 [ 798.483159][T14222] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2406'. [ 798.550704][T14225] fuse: Bad value for 'fd' [ 798.612152][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.637634][ T42] usb 3-1: not running at top speed; connect to a high speed hub [ 798.659136][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.698031][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 798.784531][ T42] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 798.880875][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.003275][ T42] usb 3-1: Product: syz [ 799.072949][ T42] usb 3-1: Manufacturer: syz [ 799.103679][ T42] usb 3-1: SerialNumber: syz [ 799.236875][T14235] macvlan0: entered promiscuous mode [ 799.289614][T14235] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 799.319968][T14235] netlink: 'syz.3.2411': attribute type 2 has an invalid length. [ 799.337296][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.347107][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.374016][ T29] audit: type=1400 audit(1777541910.675:806): avc: denied { accept } for pid=14219 comm="syz.0.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 801.363354][ T42] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 801.412353][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 801.428520][ T42] usb 3-1: USB disconnect, device number 75 [ 801.490209][T13938] udevd[13938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.515063][ T29] audit: type=1400 audit(1777541912.796:807): avc: denied { allowed } for pid=14250 comm="syz.1.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 802.726282][ T5717] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 803.902820][T14272] fuse: Bad value for 'fd' [ 803.952927][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.003232][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.022170][T14275] macsec0: entered promiscuous mode [ 804.027436][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 804.027497][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.037856][T14275] macsec0: entered allmulticast mode [ 804.081346][ T5717] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.097929][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.111937][ T5717] usb 4-1: config 0 descriptor?? [ 804.286928][ T42] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 804.574738][ T29] audit: type=1400 audit(1777541915.688:808): avc: denied { read write } for pid=14292 comm="syz.2.2427" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 804.642636][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 804.655111][ T29] audit: type=1400 audit(1777541915.688:809): avc: denied { open } for pid=14292 comm="syz.2.2427" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 804.680060][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 804.687254][ T804] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 804.704170][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 804.719109][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.733594][ T29] audit: type=1400 audit(1777541915.688:810): avc: denied { ioctl } for pid=14292 comm="syz.2.2427" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 804.747725][ T5717] usb 4-1: USB disconnect, device number 86 [ 804.771926][ T42] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.785384][ T42] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.795579][ T29] audit: type=1326 audit(1777541915.688:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 804.827208][ T42] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.842816][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 804.849851][ T42] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 804.859157][ T29] audit: type=1326 audit(1777541915.688:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 804.889326][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.901641][ T42] usb 1-1: config 0 descriptor?? [ 804.907422][ T29] audit: type=1326 audit(1777541915.688:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 804.934386][ T804] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 804.945589][ T29] audit: type=1326 audit(1777541915.688:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 804.969731][ T29] audit: type=1326 audit(1777541915.688:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 804.995622][ T29] audit: type=1326 audit(1777541915.688:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 805.026549][ T804] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 805.045894][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.076961][ T804] usb 3-1: Product: syz [ 805.083689][ T804] usb 3-1: Manufacturer: syz [ 805.095479][ T804] usb 3-1: SerialNumber: syz [ 805.106515][ T29] audit: type=1326 audit(1777541915.688:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.2427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbd19cdd9 code=0x7ffc0000 [ 805.164323][ T804] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 805.186600][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 805.229827][ T804] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 805.268368][ T804] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 805.279401][ T804] dvb_usb_umt_010 3-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 805.336715][ T42] hid_parser_main: 5 callbacks suppressed [ 805.336735][ T42] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 805.364630][ T804] usb 3-1: USB disconnect, device number 76 [ 805.390330][ T42] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 805.399804][ T42] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 805.408147][ T42] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 805.429353][ T42] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0 [ 805.463080][ T42] corsair-cpro 0003:1B1C:0C10.0019: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 805.663962][ T42] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -38 [ 806.946710][T14321] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 807.390377][ T5717] usb 1-1: USB disconnect, device number 82 [ 808.140034][T14332] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 808.901790][T14342] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 809.814093][ T42] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 810.369839][ T42] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.408658][ T42] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 810.450253][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.486423][ T42] usb 4-1: Product: 봐坖ඬ∀殮劄炇篚᳍긱혽酱笰斫ꂄ〴䐐㊱೓鯀緆㏌싡湠龺䄘잘뭅扴鶞덂⌧镖꫆皁䡶瑴꜅힟ꒅ낦䊗휄擑懏 [ 810.545883][T14357] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2445'. [ 810.577018][ T42] usb 4-1: Manufacturer: ఇ [ 810.599352][ T42] usb 4-1: SerialNumber: Н [ 810.763630][T14359] syzkaller0: entered promiscuous mode [ 810.780927][T14359] syzkaller0: entered allmulticast mode [ 810.852883][ T42] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 810.866363][T14365] tipc: Enabled bearer , priority 0 [ 810.878931][ T42] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 810.894386][T14362] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 810.917539][ T42] usb 4-1: unable to issue vendor read request (ret = -71) [ 810.925306][T14358] tipc: Resetting bearer [ 810.937428][ T42] usb 4-1: unable to issue vendor read request (ret = -71) [ 810.968488][ T42] usb 4-1: unable to issue vendor read request (ret = -71) [ 810.978992][ T42] usb 4-1: unable to issue vendor read request (ret = -71) [ 811.279520][T14358] tipc: Disabling bearer [ 811.496020][ T42] usb 4-1: USB disconnect, device number 87 [ 811.562337][T13938] udevd[13938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.645533][T14370] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.686482][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.721000][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.733378][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.784816][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.828254][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.916664][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 811.929626][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 812.017547][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 812.972669][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 813.502974][ T42] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 814.573046][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 814.651821][ T42] usb 2-1: config 0 interface 0 altsetting 210 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.950696][ T5717] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 814.985991][ T42] usb 2-1: config 0 interface 0 altsetting 210 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.054785][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 815.077040][ T42] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 815.098822][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.120286][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.135209][ T42] usb 2-1: config 0 descriptor?? [ 815.150486][ T5717] usb 4-1: config 0 has no interfaces? [ 815.158324][ T5717] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 815.168757][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.201127][ T5717] usb 4-1: config 0 descriptor?? [ 815.443132][ T804] usb 4-1: USB disconnect, device number 88 [ 815.465899][T14398] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 815.691948][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 815.758779][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.039751][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.078751][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.098811][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.142923][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.188326][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.223698][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.266577][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.311750][ T42] ryos 0003:1E7D:3138.001A: unknown main item tag 0x0 [ 816.355804][ T42] ryos 0003:1E7D:3138.001A: hidraw0: USB HID vff.fc Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 816.396918][ T42] usb 2-1: USB disconnect, device number 115 [ 816.515366][T14411] fido_id[14411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 816.550070][T14414] syzkaller0: entered promiscuous mode [ 816.593505][T14414] syzkaller0: entered allmulticast mode [ 816.752319][T14418] tipc: Enabled bearer , priority 0 [ 816.804558][T14413] tipc: Resetting bearer [ 816.843947][T14419] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 816.865894][T14413] tipc: Disabling bearer [ 816.920924][ T42] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 922.408425][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 922.415400][ C1] rcu: 0-...!: (1 GPs behind) idle=d7ec/1/0x4000000000000000 softirq=72337/72338 fqs=0 [ 922.426258][ C1] rcu: (detected by 1, t=10502 jiffies, g=90049, q=127 ncpus=2) [ 922.433981][ C1] Sending NMI from CPU 1 to CPUs 0: [ 922.434006][ C0] NMI backtrace for cpu 0 [ 922.434020][ C0] CPU: 0 UID: 0 PID: 14421 Comm: syz.5.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.434040][ C0] Tainted: [L]=SOFTLOCKUP [ 922.434045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.434054][ C0] RIP: 0010:mark_lock+0x28/0xa20 [ 922.434074][ C0] Code: 90 90 55 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 f0 48 83 ec 70 65 48 8b 1d 95 30 26 12 48 89 5c 24 68 <89> d3 83 fa 08 74 6d 41 be 01 00 00 00 89 d9 41 d3 e6 4d 63 f6 41 [ 922.434087][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000082 [ 922.434099][ C0] RAX: 0000000000000000 RBX: fa281bf23d572100 RCX: 0000000000000000 [ 922.434108][ C0] RDX: 0000000000000008 RSI: ffff888038bfb090 RDI: ffff888038bfa500 [ 922.434117][ C0] RBP: ffffc90000007c80 R08: 0000000000000000 R09: 0000000000000000 [ 922.434125][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888038bfb090 [ 922.434134][ C0] R13: ffff888038bfa500 R14: 0000000000020000 R15: 0000000000000003 [ 922.434143][ C0] FS: 00007f9cc8bdd6c0(0000) GS:ffff888124379000(0000) knlGS:0000000000000000 [ 922.434157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 922.434166][ C0] CR2: 00007f9cc7e4f0d1 CR3: 0000000055459000 CR4: 00000000003526f0 [ 922.434175][ C0] Call Trace: [ 922.434181][ C0] [ 922.434192][ C0] __lock_acquire+0x4a5/0x2630 [ 922.434209][ C0] ? do_raw_spin_lock+0x128/0x260 [ 922.434229][ C0] ? do_raw_spin_lock+0x128/0x260 [ 922.434249][ C0] lock_acquire+0x1b1/0x370 [ 922.434265][ C0] ? advance_sched+0x707/0xd20 [ 922.434284][ C0] ? advance_sched+0x6a2/0xd20 [ 922.434303][ C0] advance_sched+0x718/0xd20 [ 922.434320][ C0] ? advance_sched+0x707/0xd20 [ 922.434340][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 922.434358][ C0] ? __pfx_advance_sched+0x10/0x10 [ 922.434376][ C0] __hrtimer_run_queues+0x470/0xa00 [ 922.434401][ C0] hrtimer_interrupt+0x3e5/0x940 [ 922.434417][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 922.434437][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 922.434454][ C0] [ 922.434458][ C0] [ 922.434463][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 922.434479][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 922.434498][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 e6 57 f6 48 89 df e8 3e 36 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 09 48 f6 65 8b 05 fe de 7d 08 85 c0 74 16 5b [ 922.434511][ C0] RSP: 0018:ffffc90006e87b28 EFLAGS: 00000246 [ 922.434522][ C0] RAX: 0000000000000002 RBX: ffffffff9b1a2118 RCX: 0000000000000000 [ 922.434530][ C0] RDX: 0000000000000000 RSI: ffffffff8df1e81e RDI: ffffffff8c1c3480 [ 922.434539][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 922.434547][ C0] R10: 0000000000000001 R11: 0000000800000000 R12: ffffffff9b1a1e80 [ 922.434556][ C0] R13: 0000000000000001 R14: ffffc90006e87c80 R15: ffffffff9b1a205c [ 922.434570][ C0] __do_adjtimex+0x892/0xe70 [ 922.434589][ C0] ? __pfx___do_adjtimex+0x10/0x10 [ 922.434609][ C0] do_adjtimex+0xa0/0x370 [ 922.434627][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 922.434650][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 922.434669][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 922.434689][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 922.434714][ C0] ? kcov_ioctl+0x16a/0x720 [ 922.434730][ C0] ? rcu_is_watching+0x12/0xc0 [ 922.434751][ C0] do_syscall_64+0x10b/0xf80 [ 922.434765][ C0] ? clear_bhb_loop+0x40/0x90 [ 922.434780][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.434794][ C0] RIP: 0033:0x7f9cc7d9cdd9 [ 922.434806][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.434818][ C0] RSP: 002b:00007f9cc8bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 922.434831][ C0] RAX: ffffffffffffffda RBX: 00007f9cc8015fa0 RCX: 00007f9cc7d9cdd9 [ 922.434840][ C0] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 922.434848][ C0] RBP: 00007f9cc7e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 922.434856][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.434865][ C0] R13: 00007f9cc8016038 R14: 00007f9cc8015fa0 R15: 00007fffe5ac09f8 [ 922.434878][ C0] [ 922.435002][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g90049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 922.870054][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 922.880014][ C1] rcu: RCU grace-period kthread stack dump: [ 922.885884][ C1] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 922.899363][ C1] Call Trace: [ 922.902639][ C1] [ 922.905563][ C1] __schedule+0x10e9/0x6820 [ 922.910079][ C1] ? __pfx___schedule+0x10/0x10 [ 922.914926][ C1] ? find_held_lock+0x2b/0x80 [ 922.919593][ C1] ? schedule+0x2bf/0x390 [ 922.923915][ C1] schedule+0xdd/0x390 [ 922.927975][ C1] schedule_timeout+0x127/0x280 [ 922.932823][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 922.938193][ C1] ? __pfx_process_timeout+0x10/0x10 [ 922.943476][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 922.949270][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 922.954732][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 922.959500][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 922.964784][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 922.970237][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 922.975170][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 922.980363][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 922.986166][ C1] rcu_gp_kthread+0x179/0x230 [ 922.990842][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 922.996033][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 923.001835][ C1] ? __kthread_parkme+0x18c/0x230 [ 923.006857][ C1] ? kthread+0x13a/0x450 [ 923.011090][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 923.016282][ C1] kthread+0x370/0x450 [ 923.020344][ C1] ? __pfx_kthread+0x10/0x10 [ 923.024925][ C1] ret_from_fork+0x72b/0xd50 [ 923.029516][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 923.034622][ C1] ? __switch_to+0x800/0x1100 [ 923.039296][ C1] ? __pfx_kthread+0x10/0x10 [ 923.043879][ C1] ret_from_fork_asm+0x1a/0x30 [ 923.048664][ C1] [ 923.051674][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 923.057985][ C1] CPU: 1 UID: 0 PID: 14422 Comm: syz.2.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.068917][ C1] Tainted: [L]=SOFTLOCKUP [ 923.073230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 923.083272][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x70 [ 923.089423][ C1] Code: e9 51 4f 84 09 8b 82 cc 16 00 00 85 c0 74 f1 8b 82 a8 16 00 00 83 f8 02 75 e6 48 8b 8a b0 16 00 00 8b 92 ac 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 e9 17 4f 84 09 0f [ 923.109039][ C1] RSP: 0018:ffffc90007467758 EFLAGS: 00000246 [ 923.115108][ C1] RAX: 000000000007ffff RBX: 0000000000000000 RCX: ffffc9000f8a3000 [ 923.123068][ C1] RDX: 0000000000080000 RSI: ffffffff81fc0f17 RDI: ffff888034398000 [ 923.131030][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 923.138993][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 923.146957][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 923.154917][ C1] FS: 00007fefbe00e6c0(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 923.163840][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.170411][ C1] CR2: 0000001b33104ff8 CR3: 0000000021ff4000 CR4: 00000000003526f0 [ 923.178373][ C1] Call Trace: [ 923.181650][ C1] [ 923.184570][ C1] smp_call_function_many_cond+0x587/0x1700 [ 923.190464][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 923.195492][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 923.201811][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 923.207182][ C1] ? __pfx___text_poke+0x10/0x10 [ 923.212116][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 923.217134][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 923.222245][ C1] ? kvm_lapic_exit+0x1c/0x60 [ 923.226914][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 923.232717][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 923.238962][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 923.245206][ C1] ? find_held_lock+0x2b/0x80 [ 923.249884][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 923.255862][ C1] jump_label_update+0x37a/0x550 [ 923.260807][ C1] static_key_slow_inc_cpuslocked+0x82/0x120 [ 923.266782][ C1] static_key_slow_inc+0x1a/0x30 [ 923.271715][ C1] __kvm_apic_set_base+0x579/0xa40 [ 923.276823][ C1] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 923.282196][ C1] kvm_apic_set_base+0x184/0x200 [ 923.287131][ C1] __set_sregs_common.constprop.0+0x4aa/0x1b50 [ 923.293286][ C1] ? __pfx___set_sregs_common.constprop.0+0x10/0x10 [ 923.299877][ C1] __set_sregs+0x7e/0x260 [ 923.304197][ C1] ? __pfx___set_sregs+0x10/0x10 [ 923.309130][ C1] kvm_arch_vcpu_ioctl_set_sregs+0xce/0x110 [ 923.315018][ C1] kvm_vcpu_ioctl+0x8ee/0x1720 [ 923.319778][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 923.324972][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.330857][ C1] ? do_vfs_ioctl+0x226/0x13e0 [ 923.335611][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 923.340633][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 923.347492][ C1] ? __fget_files+0x215/0x3d0 [ 923.352161][ C1] ? hook_file_ioctl_common+0x149/0x410 [ 923.357711][ C1] ? selinux_file_ioctl+0x13b/0x290 [ 923.362902][ C1] ? selinux_file_ioctl+0xb6/0x290 [ 923.368007][ C1] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 923.373197][ C1] __x64_sys_ioctl+0x18e/0x210 [ 923.377956][ C1] do_syscall_64+0x10b/0xf80 [ 923.382536][ C1] ? clear_bhb_loop+0x40/0x90 [ 923.387209][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.393099][ C1] RIP: 0033:0x7fefbd19cdd9 [ 923.397504][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.417099][ C1] RSP: 002b:00007fefbe00e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.425507][ C1] RAX: ffffffffffffffda RBX: 00007fefbd416090 RCX: 00007fefbd19cdd9 [ 923.433469][ C1] RDX: 0000200000000180 RSI: 000000004138ae84 RDI: 0000000000000005 [ 923.441446][ C1] RBP: 00007fefbd232d69 R08: 0000000000000000 R09: 0000000000000000 [ 923.449403][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.457361][ C1] R13: 00007fefbd416128 R14: 00007fefbd416090 R15: 00007ffd40e54f18 [ 923.465334][ C1]