last executing test programs: 11.147966947s ago: executing program 4 (id=1550): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mount$9p_rdma(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x801000, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x5}}, {@sq}, {@timeout={'timeout', 0x3d, 0x48}}, {@common=@cache_mmap}]}}) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x1, &(0x7f0000000040)={0x15, "a52422ffd60775c221c4030ddf7d6648a97569b7d49cc4492d050600"}}) 9.715258327s ago: executing program 1 (id=1559): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64, @ANYRES16=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6577206c656661756c74207573b997c8113de165723a28797a203030c7c89c1ae68860303130303030300029683d30"], 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1}, 0x1c}}, 0x0) 9.182835683s ago: executing program 0 (id=1561): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r2}, &(0x7f0000002480), &(0x7f00000024c0)}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000180), &(0x7f0000000040)=@udp=r3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f00000000c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000440)=0xffffffff) recvmmsg(r6, &(0x7f0000004e80)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/115, 0x73}, {&(0x7f0000005180)=""/239, 0xef}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f00000001c0)=""/34, 0x22}], 0x6, &(0x7f0000000240)=""/51, 0x33}, 0x7}, {{&(0x7f0000000480)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000005040)=""/260, 0x104}, {&(0x7f0000000a40)=""/224, 0xe0}], 0x3}, 0x6}, {{0xfffffffffffffffe, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/227, 0xe3}], 0x2}, 0x2}, {{&(0x7f0000000dc0)=@x25, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/120, 0x78}, {&(0x7f0000000ec0)=""/145, 0x91}, {&(0x7f0000000f80)=""/132, 0x84}, {&(0x7f0000001040)=""/88, 0x58}, {&(0x7f00000010c0)=""/179, 0xb3}, {&(0x7f0000000940)=""/115, 0x73}], 0x6, &(0x7f00000012c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000002540)=[{&(0x7f0000002340)=""/3, 0x3}, {&(0x7f0000002380)=""/136, 0x88}, {&(0x7f0000002440)=""/21, 0x15}], 0x3, &(0x7f0000002580)=""/115, 0x73}, 0x9}, {{&(0x7f0000002600)=@nl=@unspec, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002680)=""/197, 0xc5}, {&(0x7f0000002780)=""/217, 0xd9}, {&(0x7f0000002880)=""/247, 0xf7}, {&(0x7f0000002980)=""/51, 0x33}, {&(0x7f00000029c0)=""/170, 0xaa}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/75, 0x4b}], 0x7}, 0x1ff}, {{&(0x7f0000003b80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003c00)=""/37, 0x25}, {&(0x7f0000003c40)=""/253, 0xfd}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/123, 0x7b}], 0x4, &(0x7f0000004e00)=""/95, 0x5f}, 0xc}], 0x7, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) 7.785951565s ago: executing program 4 (id=1565): syz_emit_ethernet(0x166, &(0x7f0000000200)={@random="e33110495bfd", @dev, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e24, 0x3, @remote, 0x10}}}, {&(0x7f0000000040)=""/155, 0x9b}, &(0x7f0000000100), 0x48}, 0xa0) 7.745645464s ago: executing program 1 (id=1566): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20077d950000"], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0xfffffd7b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write(r3, &(0x7f0000000380)="2c52fffb64c4", 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x5, @val=@uprobe_multi={&(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x24010881}, 0x8000) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write$binfmt_script(r2, 0x0, 0x0) r7 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f00000000c0)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="4010fa000000fa22f6d67bf401033f37cbfa5c1388cd57e65f4563ae8088b8df653e4145916d38a238dd7d2c69dbb036ec4ce33518f3934aa7b95c2bdffa3bb2dae913c643088827fa7e44ee1689d97a9964602eed7651fcc09fc8fed1ca0bf9f188f0133bc1a09405ac8545b2f4751a02d73000f9e2812e395fd0c38f142367942101b962bb12cac57a3d6b7f558ce41396520cc3c379274e7fa9c160c34d568ac1982ed99a28dd7ae465747d1a5cb5fa520227217c241f3c807421d57775418c5cbce2c5da20a79b88aa8c5fe9362d2dbbc3533bf9553b5fdabe3cdcd3731271011562a7c859b0477ce5cd026773aa890d533d48"], &(0x7f0000000080)={0x0, 0x3, 0x23, @string={0x23, 0x3, "c65173409b455821c3ddbff33e755755ce774442484d86f3bf21a1f460f4d16892"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000140)={0x0, 0xd, 0xa6, "80bcd3540793efaf66842bbafb686f93c2ff2d0e57e9dbc2c06204a1f340fdf3df96d44bb3e1c13a6ec1fe5020a021b78a07eb4252e7944719d4c46a34a80ad83aac6bab395c4150194e5c7d27ee2494040c74dc64b2bbfb562ea2f21423f0d9ac8a595dccf38c17554b498b2ff00185b8650a12ef00a838aa741e97b9ddd7baf1a5df2d2182f017bf190614f671a521a9b20904b1de5115e69f510c4723bf86a4182273613e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "be560ec0db68b5a7c217b6826ccc7617acdad8b176fd01ce6ba0c9e14a886cb789e4228785f441757c4434605894d4"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_clone(0x8688a111, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) ioctl$LOOP_GET_STATUS(r9, 0x4c03, &(0x7f0000000240)) r10 = socket(0x1, 0xa, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000007c0)=ANY=[@ANYBLOB="253104000000b89b1eac9eea4c4f4c267f1306b0c61561c248f18f85501e20f445fb87ffb5056c50fddfbdc50c37b506525b5dd37185ae34f09c423e84ac5360d62621c61b5859a6d58bbbb1d91faa72048209d21d2145d624d49d27240788"], 0x0, 0x0}) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000740)=0x81, 0x4) connect$unix(r10, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 7.66779084s ago: executing program 4 (id=1567): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRES16=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6577206c656661756c74207573b997c8113de165723a28797a203030c7c89c1ae68860303130303030300029683d30"], 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1}, 0x1c}}, 0x0) 7.173711441s ago: executing program 2 (id=1569): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x4, {0xd, @pix={0x7, 0xfffffff9, 0x34324142, 0x5, 0x3, 0x80000000, 0x0, 0x1, 0x1, 0x3, 0x0, 0x5}}, 0x10007}) 7.128532292s ago: executing program 0 (id=1570): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, r1, r2, r3, r4, r5, r6, r7, r8], 0x8, 0x9, 0x3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000003c0)={&(0x7f00000002c0)="800fe0ec3aefe6c24088f3ce2fb2246a0eca4e7e209a7dd67ae93a6c2637cc9e0996d72b0e3fc474a996b3b5bd7b18070930c0473fddad163f2a802828b5857888aea416537138537eae484f8db2ce586b4c42a28aadeccac183b1f37dba6dc360521ebe802e3ae4b26faa865ac655dfe239c9693781a159e1f2549eba1969ec83de5915c9e2f02fda33a53b104a3a43a0bdb0c058effbc1e9808a6dd9150ddef5515d520fd16972870a1ba8ad7d43cc5aa3ce798e244557e72f46adb742b0d05c0c612c83a90f73f2c7f8e908", 0xcd, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000440)={r9, 0x34, &(0x7f0000000400)=""/52}) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x54081) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000006c0)={r9}) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r11, 0x4068aea3, &(0x7f0000000740)={0xdb, 0x0, 0x6}) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, &(0x7f00000007c0)=0x520) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000840)={r12}) r13 = syz_open_dev$admmidi(&(0x7f0000000880), 0xfffffffffffffffa, 0x4040) ioctl$int_out(r13, 0x5460, &(0x7f00000008c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000900)=0x6000) r14 = memfd_secret(0x0) ioctl$TUNSETNOCSUM(r14, 0x400454c8, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r14, 0xc02064b9, &(0x7f00000009c0)={&(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x1, r9}) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000a00)={'team_slave_0\x00', 0x2000}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r14, 0xc0145401, &(0x7f0000000a40)={0x3, 0x1, 0x3, 0x0, 0xc8000000}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) 7.027865945s ago: executing program 2 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0xfff}, 0x8) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x600200, 0x0) write$dsp(r3, &(0x7f0000000140)="4cee55c0fe0c1f1033cadfb80e0e724af2a5054e9c07638c58d9c868d24b48172c0ac99af99af08ac71c9009e1e72456e9ab05d38893a91c6260c79a14077b18a66177acce4a9790f1ab90c1abc36080f6aec2709dc96d78ef682bdb6f8af4bc938a69925e65fb7d6d49c7e6e911996638bb59", 0x73) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtaction={0x148, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x134, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffff3e}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_tunnel_key={0xe0, 0x1a, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x5b, 0x6, "cf9f47e6b223df2281531b7084b5ea41b4716777a55aa40ca955f2c7e41e49364a9348bf3f009aeee7a053d8fe66501d7037ddf4aa9ab31b0d1d8b28e88f172e52a2c39a69d4281f089b073367ac892a352d2cdbdfeada"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x148}}, 0x20008010) 6.97700821s ago: executing program 0 (id=1572): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "4ed1"}, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x2, 0xe1, {0xe1, 0x24, "bf94525e666c74e7e65be08e9b53cd9039a706a88c7821492d24c90c470b1db4008fe589a3d160a9c47a635d52cd7799eb5e3a4dbb449f4809980972f2983d2fd273b06467ddd60decd7c2220ba26e1cdbfd59edf63ee48f79859f89746baa363d07fa4ed6c13e4fc9b9df17217ff570338a45eb3c0e0c2dd51f5f0df12abbaf194003f562cdf243a99c61d7514d11253028eaac1bdb383c0886138f8a634a37a2311477fa9e8cf3b1cdc291ac07c4b6857a1ccbd83a8c46f43ac5cd5dedeb3ab79f416cff1add99de8fd7dcbbae3c9222fa4327dd7248cddccd5926451722"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000040)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x81, 0x79, 0x3, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "9694d07eacfa7c43c7c1e818607fecb1"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0x7}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x5, 0x81, "924b6a6b", "6b9a7eb8"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x99, 0x80, 0x92, 0x9, 0x9, 0x8001}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000400)={0x0, 0xf, 0xec, "88d2dda5c95de0199fb237b6117ef15cce6a0fedacb30072dc5d2791efe70700447067f8d9f1744f22420d63df851aefbf744f52f661fe88be1824b7fef456c1c37226cb450cf8818156406cdf5bbc2f9590a3a65d4da3c1da8f70b2d85a67104fa81faf99c03265ad060df66d8afe6afae7e3d1b74abdc92b156ec5f5b78934a7e31bb82577a26456dfc760427aad7bdaf2ebe6ecb1b42e5d094851b47cca2f5e2f33f54da30bb3246300c9ab01d0cf17da9c9296c54714234b295365cbceb0621ae0687c0496d4a67f5673112b66b2dc788f35490016894e7e476c99778e65fcd34f5aa84400e09b011221"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1c00, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "3204"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "132e"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xff}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x9}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6.844601568s ago: executing program 2 (id=1573): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x35, 0x2, 0x0, 0xb47, 0xd, 0xa, 0x0, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x5, {0x80, 0x9, 0xf, 0x4}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) 5.833299882s ago: executing program 4 (id=1574): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb", 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r8, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r10, 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000680000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000030374050df15c86f58097685eb5ccd31c99e846b523fa5e2efe0cf98978df117bafb900b90402080a0000000200000004fe04f989131238afe9b066f04c259c"], 0x0) sendfile(r10, r11, 0x0, 0xffffffff004) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 5.391905632s ago: executing program 1 (id=1575): lseek(0xffffffffffffffff, 0x101, 0x1) r0 = syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r3 = fsopen(0x0, 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1000) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = open(0x0, 0x108843, 0x98) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0)={0xff, 0x0, 0x2, 0x5, 0xfd, 0xfe, 0x0, 0x0, 0x20, 0x0, 0x2, 0x2, 0x20, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01064c2, &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) 4.527417588s ago: executing program 0 (id=1576): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002f80)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000740)="11b4c6aec3b12abc9240e67aeef6d632a9f28845202f68166fc06685780b69a2aa044b58764fe937b622998a08b80773fbf1ecd8126baed59120bc77521d50c73e50ad0ebe87871a1636d5443fcf089e063c36dd253bb7a548d1c5c90de339a1a01d46fd2b34efbdc4e79b2ac23bb32385db4d474e07e6878cda4aa2f28dd3f9183ff8d0cbe5bf04b5b41de55d7d2748bf11d4e0d1f925a560a610a50296a7cdbf7500179ae8d02c2baa82963d0a26c82e799e3e15b3d10c24c5073943a5ee843c431684778cef114711105f8b80ede6b7acf45bdea6555d67e5711216d61b", 0xdf}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000d587f925beeafaf400fe714b7c855afff4e950ce6f216304c6f620b37430", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x20000000}}, {{0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00), 0x0, 0x4000004}}, {{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="dec6ea68d14a762c838e4279d6f71f8cbb98c8d42dba6710c76834706e00d4e57239ea5e7da6713703c93561589cec5ea1bdbd194e14895e462450282d1920d56a5fd06947f80fe5b8e25f0216a3146b56938844bb4e9ad3cdfebcbc3904d0671bd2307293374ad59227ad5ec4e7f100d423c0a7605543d1ce3014ad", 0x7c}, {&(0x7f0000000c40)="b91aa3f8e0bba6", 0x7}, {&(0x7f0000000c80)="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", 0xfe}, {&(0x7f0000000d80)="4b006100edc6c75a14b5251ecadde245b36e7551b626e3f5d960a9b6b6abae3cde6d7e37ab604db0e1f8bbe75c3624e0b7a6fb949570664bbf70cb3c0c2697df4457d9f2de0fe8decebd4e16ff81fae73ef6ad02c91429", 0x57}], 0x4, &(0x7f0000002ec0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88, 0x400c044}}], 0x3, 0x0) recvmmsg(r1, 0x0, 0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xfffffffffffffffd, 0x1000090}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r4, r4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c6173740000000004000280080003400000010514"], 0xe4}}, 0x20050800) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x4}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r3, 0x5}, &(0x7f0000000280)=0x8) syz_open_procfs(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x18, 0x4, 0xfffffffd, 0x9, 0x5fffd, 0x5, 0x2, 0x9}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0) r7 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000003c0)={r7}) 4.013777114s ago: executing program 3 (id=1578): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 3.815934087s ago: executing program 3 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 3.543907433s ago: executing program 3 (id=1580): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x76a, 0xe36, 0xe7a2, 0xeb9e}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000000000000ffffffff"}}) 3.487603433s ago: executing program 2 (id=1581): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000000030000000100000037a1f617ebbcb7440800000fff00000000000000340000000300000001000000000000000000000002000000050000000200005961000000017fffffff00000007000000080000000600000008000000017fffffff"], 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff0000aaaaaaaaaa0008060001080006040001aaaaaa2d18e5aaaaaa00000000000000000000ac1414aad98c25716b7dbdbb0474c05c4e003a923498f2d7d5355d9c748c895c1ccd2da7e36a2101fa20cdf3800962d2d90f3c98ef0cc051f24d0a7fe0f4be2648fdc51914eefd2edd1eb03243b718f07e1619903ae0454a14b7c5585d87fd242a39c42361db94eee4d2100bcf45033d657961434e1ffb9cddf67fcd843d4055681dcd3f85c0eda676f800"/192], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000001c0000000000000418110000550c4deab5ffa9b443934bfbb0e0fc6a4ca9ea27fd857208476d410f0cc8b0a170c4f081457019b81cbae22765aa372599eec88a6abca41b26c3a019a03b8ed9bd702f0890e754df7242668b0bc0253d3a012aa1e4a66fa0194fb87c6e8758865d5d52b507aae192931dc73de2b0b0552baa27de4b6925995aa7cf20b6757e2228f6e00668e23bde7ee5fa584873905e81948302e18b6c59b1c0b340b2f1d1c754e8ef5972fadb63b9a52c5357894293d23bca64e7e5492ca171dbca9e68cbd45bf3200c96684cb44a770fadcfa53c00"/241, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800000127bd7000fbdbdf2535108000ff02ff07000c00000800030042c304992ce68b8bd0cf857c96316ca76e817094dbbea29e294396b838dac6cb88320cea968485f46a086bf09b5317f911efa1c9a82ba383a54e1fb711da68f3cba4d18145b0c68961c31880f9f80de9bc1323594dabc941b0d2b07eb36430ccb82773ddb379746da9dbd80d2e41311473ad1e236d9cd7f4", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) r9 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 3.161688471s ago: executing program 1 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1, 0x8000, 0x41, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0xffffffffffffffff, 0x0, 0x2, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1, 0x8000, 0x41, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0xffffffffffffffff, 0x0, 0x2, 0x7fffffff], 0x80a0000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3.12229667s ago: executing program 3 (id=1583): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r1, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000340)={0x5, 0x800, 0x6}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) 3.048434179s ago: executing program 4 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x8002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 2.935824372s ago: executing program 0 (id=1585): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setresuid(0xee01, 0xee00, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01072abd7000ffdbdf250900000030000380080001020000000008000300040000001400000076655f0400e3ff0000"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) mkdir(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x991, 0xdd, 0xfa, 0x80000000}, {0xffff, 0x0, 0x1, 0x8}]}, 0x10) 1.92888003s ago: executing program 3 (id=1586): socket$netlink(0x10, 0x3, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 1.740230045s ago: executing program 1 (id=1587): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffffff, 0x0, 0x908f1f1d15863395) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x16c16, &(0x7f0000000540)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@metacopy_on}], [{@euid_eq}, {@fowner_lt}, {@dont_hash}, {@uid_gt}, {@permit_directio}, {@dont_measure}, {@appraise}, {@dont_measure}]}) r2 = open(&(0x7f0000000440)='./file0\x00', 0x602140, 0x18) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x40, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x0, 0x6, 0x8}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000001840)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0xaf4, @mcast1}, 0x1c) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.00991949s ago: executing program 0 (id=1588): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200440b4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffff0000, @empty}, 0x1c) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) (fail_nth: 2) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) 635.205775ms ago: executing program 3 (id=1589): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/208, 0xd0}, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x26) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) socket(0x1d, 0xa, 0x6) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000000000061104c000000000005000000000000009500000c000000001d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 593.27578ms ago: executing program 1 (id=1590): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000140)={0x3, 0x3, 0x800, 0x5, 0x4, 0x6}) 499.625995ms ago: executing program 4 (id=1591): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket(0x18, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x68, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 303.720692ms ago: executing program 2 (id=1592): syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe80000000000000000000000000fd00ff0200000000000000000000000000013c"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073"], 0x68}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000024c0)=@newtaction={0x140, 0x30, 0x233, 0x0, 0x0, {0x9}, [{0x12c, 0x1, [@m_connmark={0x128, 0x8, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2f95, 0x3, 0x5, 0x2, 0xf7e9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80, 0x2, 0x1000, 0x60}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x86d5, 0x20000000, 0xffffffff, 0x43d226a0}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x91, 0xffffffffffffffff, 0x8000, 0x80000000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x8, 0x400, 0x4}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x3, 0x4, 0xffffffff}, 0x94}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffffe, 0x8, 0x6, 0x4}, 0x10}}]}, {0x32, 0x6, "1965194f666f72daa2988c53e9bc426ce540a7eb674197595cef685d48f680382d0215507c77c1d80a7b2e429ff9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x140}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2 (id=1593): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x2, 0x2, 0x76a, 0xe36, 0xe7a2, 0xeb9e}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000000000000ffffffff"}}) kernel console output (not intermixed with test programs): evtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 339.401027][ T5996] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 339.541207][T10147] trusted_key: encrypted_key: insufficient parameters specified [ 339.675734][T10137] vxcan1 speed is unknown, defaulting to 1000 [ 339.928104][ T5996] usb 4-1: Using ep0 maxpacket: 32 [ 339.930420][ T5996] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 339.959949][ T5996] usb 4-1: config 0 has no interface number 0 [ 339.975160][ T5996] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 339.984654][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.992837][ T5996] usb 4-1: Product: syz [ 339.997062][ T5996] usb 4-1: Manufacturer: syz [ 340.004399][ T5996] usb 4-1: SerialNumber: syz [ 340.086384][ T5996] usb 4-1: config 0 descriptor?? [ 340.178058][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 340.293972][ T5996] mdc800 4-1:0.109: probe fails -> wrong Interface [ 340.307529][ T5996] usb 4-1: USB disconnect, device number 40 [ 340.464364][ T30] audit: type=1400 audit(1756301184.435:718): avc: denied { ioctl } for pid=10157 comm="syz.2.1021" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 340.489399][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.587924][ T30] audit: type=1400 audit(1756301184.555:719): avc: denied { ioctl } for pid=10169 comm="syz.2.1024" path="socket:[28390]" dev="sockfs" ino=28390 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 340.612591][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.037927][T10187] loop2: detected capacity change from 0 to 6 [ 341.074144][T10187] Dev loop2: unable to read RDB block 6 [ 341.105581][T10187] loop2: AHDI p1 [ 341.116933][T10187] loop2: partition table partially beyond EOD, truncated [ 341.461052][ T912] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 341.642131][ T912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.670936][ T912] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.717935][ T912] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 341.749169][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 341.841085][ T912] usb 5-1: Product: syz [ 341.850680][ T912] usb 5-1: Manufacturer: syz [ 341.857143][T10202] overlayfs: failed to get inode (-116) [ 341.861458][ T912] usb 5-1: SerialNumber: syz [ 341.904908][ T912] usb 5-1: config 0 descriptor?? [ 341.916852][T10202] overlayfs: failed to get inode (-116) [ 341.925690][ T912] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 341.941441][T10202] overlayfs: failed to get inode (-116) [ 341.957558][T10202] overlayfs: failed to get inode (-116) [ 341.963789][T10204] bridge2: entered allmulticast mode [ 341.964235][ T912] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 342.066583][ T912] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 342.628287][T10208] lo speed is unknown, defaulting to 1000 [ 342.634459][T10208] lo speed is unknown, defaulting to 1000 [ 342.641912][T10208] lo speed is unknown, defaulting to 1000 [ 342.647370][ T5955] usb 5-1: USB disconnect, device number 42 [ 342.650458][T10208] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 342.664991][T10208] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 342.683732][T10208] lo speed is unknown, defaulting to 1000 [ 342.690701][T10208] lo speed is unknown, defaulting to 1000 [ 342.697176][T10208] lo speed is unknown, defaulting to 1000 [ 342.703646][T10208] lo speed is unknown, defaulting to 1000 [ 342.710079][T10208] lo speed is unknown, defaulting to 1000 [ 342.978810][T10213] lo speed is unknown, defaulting to 1000 [ 342.984608][T10213] lo speed is unknown, defaulting to 1000 [ 343.042853][ T30] audit: type=1400 audit(1756301187.015:720): avc: denied { connect } for pid=10212 comm="syz.1.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.130747][T10213] lo speed is unknown, defaulting to 1000 [ 343.156743][T10213] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 343.183604][T10213] lo speed is unknown, defaulting to 1000 [ 343.190738][T10213] lo speed is unknown, defaulting to 1000 [ 343.198515][T10213] lo speed is unknown, defaulting to 1000 [ 343.206916][T10213] lo speed is unknown, defaulting to 1000 [ 343.214855][T10213] lo speed is unknown, defaulting to 1000 [ 343.456066][T10225] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1037'. [ 344.161107][T10230] bridge0: left promiscuous mode [ 344.220774][T10249] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1044'. [ 344.293528][T10230] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 344.325175][ T5955] lo speed is unknown, defaulting to 1000 [ 344.371027][ T5955] 3yz0: Port: 1 Link ACTIVE [ 344.371921][T10235] vxcan1 speed is unknown, defaulting to 1000 [ 344.621925][ T5955] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 344.845622][T10235] lo speed is unknown, defaulting to 1000 [ 344.870708][T10235] lo speed is unknown, defaulting to 1000 [ 344.903566][ T5955] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 344.964118][ T5955] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.083223][ T5955] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.096819][ T5955] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.106140][ T5890] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 345.117256][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.155472][ T5955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.170148][ T5955] usb 5-1: invalid MIDI out EP 0 [ 345.251020][ T5890] usb 1-1: device descriptor read/64, error -71 [ 345.338070][ T5955] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 345.358069][T10249] delete_channel: no stack [ 345.399967][ T5955] usb 5-1: USB disconnect, device number 43 [ 345.501082][ T5890] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 345.641118][ T5890] usb 1-1: device descriptor read/64, error -71 [ 345.751240][ T5890] usb usb1-port1: attempt power cycle [ 346.004258][T10275] veth0_to_team: entered promiscuous mode [ 346.010245][T10275] veth0_to_team: entered allmulticast mode [ 346.101606][ T5890] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 346.152163][ T5890] usb 1-1: device descriptor read/8, error -71 [ 346.401391][ T5890] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 346.456584][ T5890] usb 1-1: device descriptor read/8, error -71 [ 346.576142][ T5890] usb usb1-port1: unable to enumerate USB device [ 347.238919][T10314] loop2: detected capacity change from 0 to 6 [ 347.247553][T10314] Dev loop2: unable to read RDB block 6 [ 347.255003][T10314] loop2: AHDI p1 [ 347.258767][T10314] loop2: partition table partially beyond EOD, truncated [ 347.788897][ T30] audit: type=1400 audit(1756301191.315:721): avc: denied { mounton } for pid=10309 comm="syz.0.1058" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 347.903719][ T5996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5996 comm=kworker/0:6 [ 348.420206][T10334] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 348.453527][T10334] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.472914][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 348.504594][T10337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1064'. [ 348.611700][T10334] bond4: (slave veth3): Enslaving as an active interface with a down link [ 348.942237][T10334] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 348.989311][T10334] bond4: (slave batadv1): making interface the new active one [ 349.039874][T10334] batadv1: entered promiscuous mode [ 349.074435][T10334] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 349.158159][T10340] block nbd2: Send control failed (result -32) [ 349.196440][T10340] block nbd2: Request send failed, requeueing [ 349.253311][ T6010] block nbd2: Dead connection, failed to find a fallback [ 349.260621][ T6010] block nbd2: shutting down sockets [ 349.266836][ T6010] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.285553][T10340] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.331538][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.422287][T10340] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.482865][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.517517][T10340] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.132561][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 350.133202][ T5845] Bluetooth: hci5: command 0x1003 tx timeout [ 350.239669][T10340] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.372642][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 350.582432][T10340] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.614016][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 350.712423][T10340] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.731717][T10340] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.742176][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 350.765022][T10340] I/O error, dev nbd2, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.812580][T10340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 350.830643][T10346] syz.1.1065 (10346): drop_caches: 2 [ 350.861866][T10340] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 351.121021][ T30] audit: type=1400 audit(1756301195.086:722): avc: denied { map } for pid=10361 comm="syz.0.1071" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 351.157541][T10364] loop2: detected capacity change from 0 to 6 [ 351.168091][T10364] Dev loop2: unable to read RDB block 6 [ 351.175318][T10364] loop2: AHDI p1 [ 351.179011][T10364] loop2: partition table partially beyond EOD, truncated [ 351.211283][ T912] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 351.465884][ T912] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 351.474780][ T912] usb 4-1: config 0 has no interface number 0 [ 351.480971][ T912] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 351.504767][ T912] usb 4-1: config 0 interface 12 has no altsetting 0 [ 351.523836][ T912] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 351.536725][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.550000][ T912] usb 4-1: Product: syz [ 351.562996][ T912] usb 4-1: Manufacturer: syz [ 351.570793][ T912] usb 4-1: SerialNumber: syz [ 351.595631][ T912] usb 4-1: config 0 descriptor?? [ 351.603236][T10359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 351.611607][ T912] f81534 4-1:0.12: required endpoints missing [ 352.058511][ T30] audit: type=1400 audit(1756301196.026:723): avc: denied { setopt } for pid=10358 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 352.413271][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 352.413290][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 352.414113][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 352.414138][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 353.840986][ T30] audit: type=1400 audit(1756301197.796:724): avc: denied { setopt } for pid=10402 comm="syz.2.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.496733][T10421] block nbd4: shutting down sockets [ 355.883837][T10427] mkiss: ax0: crc mode is auto. [ 356.611070][ T5955] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 356.751101][ T5955] usb 2-1: device descriptor read/64, error -71 [ 356.760370][ T912] usb 4-1: USB disconnect, device number 41 [ 356.903205][ T30] audit: type=1400 audit(1756301200.876:725): avc: denied { mount } for pid=10463 comm="syz.3.1093" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 356.945062][ T30] audit: type=1326 audit(1756301200.896:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1bd8ebe9 code=0x7ffc0000 [ 356.968554][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.974828][ T5890] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 356.983886][T10467] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 356.994603][ T5955] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 357.013447][ T30] audit: type=1326 audit(1756301200.896:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1bd8ebe9 code=0x7ffc0000 [ 357.036843][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.054184][ T30] audit: type=1326 audit(1756301200.896:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1f1bd8ebe9 code=0x7ffc0000 [ 357.065258][T10467] 9pnet: Could not find request transport: "°nâ`Ê [ 357.131192][ T5955] usb 2-1: device descriptor read/64, error -71 [ 357.147858][ T30] audit: type=1400 audit(1756301201.116:729): avc: denied { ioctl } for pid=10478 comm="syz.3.1097" path="net:[4026532998]" dev="nsfs" ino=4026532998 ioctlcmd=0x5760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 357.181301][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 357.206174][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.221713][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 357.331705][ T5955] usb usb2-port1: attempt power cycle [ 357.523272][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.537569][ T5890] usb 5-1: config 0 descriptor?? [ 358.289817][ T5955] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 358.300093][ T5890] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 358.341507][ T5955] usb 2-1: device descriptor read/8, error -71 [ 358.592898][ T5955] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 358.647131][ T5955] usb 2-1: device descriptor read/8, error -71 [ 358.761468][ T5955] usb usb2-port1: unable to enumerate USB device [ 358.956613][T10509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1103'. [ 359.038257][T10510] ubi: mtd0 is already attached to ubi31 [ 359.375031][ T5955] usb 5-1: USB disconnect, device number 44 [ 360.036398][T10475] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 360.190924][ T5955] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 360.405406][T10475] usb 2-1: config 0 has no interfaces? [ 360.414056][T10475] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 360.428103][T10475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.463551][T10475] usb 2-1: Product: syz [ 360.470068][T10475] usb 2-1: Manufacturer: syz [ 360.484928][T10475] usb 2-1: SerialNumber: syz [ 360.498772][T10475] usb 2-1: config 0 descriptor?? [ 360.604808][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.624712][ T5955] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 360.634127][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.645305][ T5955] usb 5-1: config 0 descriptor?? [ 360.710069][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.720685][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.777755][T10516] pimreg: entered allmulticast mode [ 360.811513][ T5996] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 361.011086][ T5996] usb 1-1: Using ep0 maxpacket: 16 [ 361.025100][ T5996] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 361.038983][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.062265][ T5996] usb 1-1: Product: syz [ 361.075465][ T5996] usb 1-1: Manufacturer: syz [ 361.087728][ T5996] usb 1-1: SerialNumber: syz [ 361.106240][ T5996] usb 1-1: config 0 descriptor?? [ 361.124587][ T5955] hid_mf 0003:0079:1846.000F: unknown main item tag 0x1 [ 361.132971][ T5955] hid_mf 0003:0079:1846.000F: unknown main item tag 0x2 [ 361.147387][ T5996] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 361.161178][ T5955] hid_mf 0003:0079:1846.000F: item fetching failed at offset 6/7 [ 361.172741][ T5955] hid_mf 0003:0079:1846.000F: HID parse failed. [ 361.179223][ T5955] hid_mf 0003:0079:1846.000F: probe with driver hid_mf failed with error -22 [ 361.329530][ T912] usb 5-1: USB disconnect, device number 45 [ 361.357056][ T5996] gp8psk: usb in 128 operation failed. [ 361.381643][ T5996] gp8psk: usb in 137 operation failed. [ 361.395174][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.429870][ T5996] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 361.468027][ T5996] usb 1-1: media controller created [ 361.520780][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.548392][ T5996] gp8psk_fe: Frontend revision 1 attached [ 361.559494][ T5996] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 361.567899][ T5996] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 361.733808][ T5996] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 361.744006][ T5996] gp8psk: found Genpix USB device pID = 201 (hex) [ 361.877911][ T30] audit: type=1400 audit(1756301205.846:730): avc: denied { execute } for pid=10538 comm="syz.4.1110" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 361.927817][T10539] vxcan1 speed is unknown, defaulting to 1000 [ 361.935725][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.945483][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.970807][ T5996] usb 1-1: USB disconnect, device number 48 [ 362.069144][ T5996] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 362.202394][T10547] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 362.235764][T10547] netlink: 'syz.0.1111': attribute type 4 has an invalid length. [ 362.385824][T10539] lo speed is unknown, defaulting to 1000 [ 362.393607][T10539] lo speed is unknown, defaulting to 1000 [ 362.789149][T10475] usb 2-1: USB disconnect, device number 52 [ 362.828527][T10550] trusted_key: encrypted_key: insufficient parameters specified [ 362.933246][ T9158] batadv1: left promiscuous mode [ 363.242676][T10475] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 363.415971][T10475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 49716, setting to 64 [ 363.491816][T10475] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 363.643878][T10565] sp0: Synchronizing with TNC [ 363.668159][T10564] sp0: Found TNC [ 363.679020][T10475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.728072][T10475] usb 2-1: Product: syz [ 363.732640][T10475] usb 2-1: Manufacturer: syz [ 363.737232][T10475] usb 2-1: SerialNumber: syz [ 363.769194][T10475] usb 2-1: config 0 descriptor?? [ 363.801287][T10556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.892197][T10475] rc_core: IR keymap rc-streamzap not found [ 363.898785][T10475] Registered IR keymap rc-empty [ 363.934880][T10475] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 363.963615][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.026637][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.033541][T10475] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 364.065827][ T30] audit: type=1400 audit(1756301208.036:731): avc: denied { append } for pid=10571 comm="syz.2.1118" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 364.158360][T10475] usb 2-1: USB disconnect, device number 53 [ 364.614188][T10592] netlink: 'syz.3.1122': attribute type 4 has an invalid length. [ 364.736272][T10595] netlink: 'syz.3.1122': attribute type 4 has an invalid length. [ 364.793520][ T5933] lo speed is unknown, defaulting to 1000 [ 364.793550][ T5996] lo speed is unknown, defaulting to 1000 [ 365.118886][T10598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.237086][ T30] audit: type=1400 audit(1756301210.206:732): avc: denied { open } for pid=10614 comm="syz.3.1124" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.501729][T10623] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 366.841637][T10641] netlink: 'syz.0.1128': attribute type 4 has an invalid length. [ 366.977592][T10643] netlink: 'syz.0.1128': attribute type 4 has an invalid length. [ 367.131108][ T5890] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 367.687863][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 367.726449][T10643] trusted_key: encrypted_key: insufficient parameters specified [ 367.766043][ T5890] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 367.820909][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.075058][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.678288][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.820924][ T5890] usb 5-1: Product: ᪈椗ݔťèŽã¢•å­¿ì‰¶â‹¢êµ—茇욻ନᙚ࢞ꫢå¹å¢±â§›å¶Žãˆ±ë—° [ 368.900131][ T5890] usb 5-1: Manufacturer: à¡¡ [ 368.941490][ T5890] usb 5-1: SerialNumber: syz [ 369.965656][ T30] audit: type=1400 audit(1756301213.936:733): avc: denied { connect } for pid=10668 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.985206][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.116039][T10689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.136798][T10689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.247923][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1135'. [ 370.814491][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.837063][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.942061][ T5890] usb 5-1: 0:2 : does not exist [ 371.002227][ T5890] usb 5-1: USB disconnect, device number 46 [ 371.022837][T10717] sp0: Synchronizing with TNC [ 371.341627][ T30] audit: type=1400 audit(1756301215.286:734): avc: denied { listen } for pid=10719 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 371.389053][T10704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1136'. [ 371.876469][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=10746 comm=syz.3.1145 [ 372.021000][ T912] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 373.038074][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.123691][T10757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1146'. [ 373.584116][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.685551][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.893819][T10751] vlan2: left promiscuous mode [ 373.898677][T10751] macvtap0: left promiscuous mode [ 373.907917][T10751] geneve2: left promiscuous mode [ 373.913871][T10751] geneve2: left allmulticast mode [ 373.978043][ T1316] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.987068][ T1316] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 373.998373][ T1316] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.017578][ T1316] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 374.110290][ T1316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.136819][ T1316] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 374.154846][ T1316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.164601][ T1316] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 374.247800][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 374.481122][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 374.492108][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.513117][ T10] usb 2-1: config 79 has an invalid interface number: 237 but max is 0 [ 374.530217][ T10] usb 2-1: config 79 has no interface number 0 [ 374.540657][ T10] usb 2-1: config 79 interface 237 has no altsetting 0 [ 374.557229][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=4a.4f [ 374.567561][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.575744][ T10] usb 2-1: Product: syz [ 374.579929][ T10] usb 2-1: Manufacturer: syz [ 374.585779][ T10] usb 2-1: SerialNumber: syz [ 374.663149][T10789] batadv_slave_0: entered promiscuous mode [ 376.259329][T10804] geneve2: entered promiscuous mode [ 376.273648][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.309740][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.335576][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.357428][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.674471][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.702917][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.723232][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.736502][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.768283][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.787934][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.809671][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.837775][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.854744][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.881195][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 376.976100][ T10] pn533_usb 2-1:79.237: NFC: Could not find bulk-in or bulk-out endpoint [ 377.022879][ T10] usb 2-1: USB disconnect, device number 54 [ 377.274408][ T30] audit: type=1400 audit(1756301221.246:735): avc: denied { accept } for pid=10812 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.192167][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.231521][T10826] all (unregistering): Released all slaves [ 378.440070][T10835] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 378.543948][T10839] netlink: 'syz.2.1164': attribute type 4 has an invalid length. [ 378.960662][T10839] trusted_key: encrypted_key: insufficient parameters specified [ 379.160810][ T30] audit: type=1800 audit(1756301223.116:736): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1167" name="file0" dev="tmpfs" ino=1284 res=0 errno=0 [ 379.182677][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.249839][T10851] loop0: Can't mount, would change RO state [ 379.395843][ T30] audit: type=1804 audit(1756301223.216:737): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1167" name="/newroot/237/file0" dev="tmpfs" ino=1284 res=1 errno=0 [ 379.511914][ T30] audit: type=1400 audit(1756301223.216:738): avc: denied { mounton } for pid=10849 comm="syz.3.1167" path="/237/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 379.782082][ T30] audit: type=1400 audit(1756301223.756:739): avc: denied { mount } for pid=10861 comm="syz.4.1172" name="/" dev="ramfs" ino=30673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 379.830915][T10475] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 379.878837][ T30] audit: type=1400 audit(1756301223.846:740): avc: denied { mounton } for pid=10861 comm="syz.4.1172" path="/file0" dev="ramfs" ino=31635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 379.941176][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 380.013465][T10475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.044127][T10475] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 380.068209][T10475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.097841][T10475] usb 4-1: config 0 descriptor?? [ 380.102769][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 380.104223][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 380.126286][ T10] usb 2-1: config 0 has no interface number 0 [ 380.148200][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 380.162980][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.185989][ T10] usb 2-1: Product: syz [ 380.197833][ T10] usb 2-1: Manufacturer: syz [ 380.210105][ T10] usb 2-1: SerialNumber: syz [ 380.244283][ T10] usb 2-1: config 0 descriptor?? [ 380.258216][ T10] smsc95xx v2.0.0 [ 380.543775][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 380.558474][T10475] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 380.601725][T10475] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input36 [ 380.619214][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 380.680062][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 380.699029][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 380.718885][ T10] usb 2-1: USB disconnect, device number 55 [ 380.804973][T10475] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 380.940542][ T30] audit: type=1400 audit(1756301224.896:741): avc: denied { read } for pid=10898 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.079030][ T5890] usb 4-1: USB disconnect, device number 42 [ 381.237561][T10907] ubi: mtd0 is already attached to ubi31 [ 381.700443][ T30] audit: type=1400 audit(1756301225.666:742): avc: denied { shutdown } for pid=10902 comm="syz.2.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.744881][ T30] audit: type=1400 audit(1756301225.696:743): avc: denied { getopt } for pid=10902 comm="syz.2.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.764438][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.778536][ T30] audit: type=1400 audit(1756301225.696:744): avc: denied { setopt } for pid=10902 comm="syz.2.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.798064][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.873184][T10906] __nla_validate_parse: 4 callbacks suppressed [ 381.873229][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 382.766756][T10926] block nbd4: shutting down sockets [ 383.542032][ T5933] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 383.744695][T10933] overlayfs: failed to resolve './bus': -2 [ 383.750883][ T5933] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.766057][T10932] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 383.772902][ T5933] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.515859][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.550017][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 384.607288][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1195'. [ 384.640928][T10475] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 384.778675][ T30] audit: type=1400 audit(1756301228.746:745): avc: denied { setopt } for pid=10954 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 384.798833][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.823804][ T30] audit: type=1400 audit(1756301228.776:746): avc: denied { bind } for pid=10954 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 384.910579][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 384.926172][ T5933] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.935359][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.943393][ T5933] usb 4-1: Product: syz [ 384.947616][ T5933] usb 4-1: Manufacturer: syz [ 384.957028][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 384.962295][T10475] usb 2-1: device descriptor read/64, error -71 [ 384.969350][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 384.975862][ T5933] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 384.990880][ T5933] cdc_wdm 4-1:1.0: Unknown control protocol [ 385.201037][T10475] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 385.391100][T10475] usb 2-1: device descriptor read/64, error -71 [ 385.414079][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1187'. [ 385.548880][T10475] usb usb2-port1: attempt power cycle [ 385.647241][T10978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10978 comm=syz.4.1198 [ 385.678395][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 385.937021][T10475] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 385.981409][T10475] usb 2-1: device descriptor read/8, error -71 [ 385.997095][T10980] syzkaller0: entered promiscuous mode [ 386.081043][T10980] syzkaller0: entered allmulticast mode [ 386.251331][T10475] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 386.311602][T10475] usb 2-1: device descriptor read/8, error -71 [ 386.451840][T10475] usb usb2-port1: unable to enumerate USB device [ 387.388488][ T5890] usb 4-1: USB disconnect, device number 43 [ 387.947464][T10994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10994 comm=syz.1.1201 [ 388.158680][T10995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 391.430701][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 391.516860][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 391.953093][T11024] loop2: detected capacity change from 0 to 7 [ 391.963688][T11024] Dev loop2: unable to read RDB block 7 [ 391.969275][T11024] loop2: unable to read partition table [ 391.975975][T11024] loop2: partition table beyond EOD, truncated [ 391.985968][T11024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 392.263450][T11041] netlink: 'syz.1.1210': attribute type 4 has an invalid length. [ 392.450801][T11048] netlink: 'syz.1.1210': attribute type 4 has an invalid length. [ 392.469150][ T5890] lo speed is unknown, defaulting to 1000 [ 392.497849][ T5845] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 392.506508][ T5845] Bluetooth: hci2: unexpected event for opcode 0x203e [ 392.526125][ T912] lo speed is unknown, defaulting to 1000 [ 392.688849][T11048] trusted_key: encrypted_key: insufficient parameters specified [ 393.470945][T11062] support for cryptoloop has been removed. Use dm-crypt instead. [ 394.267371][T11098] netlink: 'syz.0.1222': attribute type 4 has an invalid length. [ 394.369034][T11102] netlink: 'syz.0.1222': attribute type 4 has an invalid length. [ 394.545244][T11102] trusted_key: encrypted_key: insufficient parameters specified [ 394.745710][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.777547][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.934694][T11090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.991041][ T5890] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 395.289032][T11082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.308617][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.319631][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.331398][ T5890] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 395.347381][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.529286][ T5890] usb 2-1: config 0 descriptor?? [ 395.952431][T11119] overlayfs: failed lookup in lower (newroot/248, name='bus', err=-40): overlapping layers [ 395.979533][ T5890] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 396.065689][T11133] netlink: 'syz.4.1229': attribute type 4 has an invalid length. [ 396.084197][T11133] netlink: 'syz.4.1229': attribute type 4 has an invalid length. [ 396.195169][ T5955] usb 2-1: USB disconnect, device number 60 [ 396.283591][T11134] trusted_key: encrypted_key: insufficient parameters specified [ 396.533025][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 396.542263][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 396.551336][ T5859] Bluetooth: hci2: hardware error 0x00 [ 397.921072][T10475] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 398.248283][T10475] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 398.256606][ T912] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 398.264264][T10475] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.275519][T10475] usb 2-1: config 0 has no interface number 0 [ 398.298262][T10475] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 398.321029][T10475] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.338882][T10475] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 398.348512][T10475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.357312][T10475] usb 2-1: Product: syz [ 398.362235][T10475] usb 2-1: Manufacturer: syz [ 398.368385][T10475] usb 2-1: SerialNumber: syz [ 398.376335][T10475] usb 2-1: config 0 descriptor?? [ 398.437522][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 398.458381][ T912] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.473586][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.482646][ T912] usb 1-1: Product: syz [ 398.486843][ T912] usb 1-1: Manufacturer: syz [ 398.491658][ T912] usb 1-1: SerialNumber: syz [ 398.507617][ T912] usb 1-1: config 0 descriptor?? [ 398.611085][ T5859] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 398.801552][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1246'. [ 399.036818][T11181] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1241'. [ 399.131491][ T10] usb 1-1: USB disconnect, device number 49 [ 399.552991][T11201] pim6reg: entered allmulticast mode [ 399.580918][T11207] block nbd2: shutting down sockets [ 399.675735][T11196] pim6reg: left allmulticast mode [ 400.151109][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 400.246683][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.257216][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.312679][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 400.321783][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 400.333993][ T10] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 400.346873][ T30] audit: type=1326 audit(1756301244.316:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11222 comm="syz.3.1251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f1bd8ebe9 code=0x0 [ 400.380123][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 400.390460][ T10] usb 1-1: config 4 has no interface number 0 [ 400.398877][ T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 400.409179][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.417534][ T10] usb 1-1: Product: syz [ 400.421918][ T10] usb 1-1: Manufacturer: syz [ 400.427116][ T10] usb 1-1: SerialNumber: syz [ 400.577093][ T5955] usb 2-1: USB disconnect, device number 61 [ 400.642913][ T10] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 400.683217][ T10] usb 1-1: USB disconnect, device number 50 [ 400.941750][ T30] audit: type=1400 audit(1756301244.906:748): avc: denied { write } for pid=11231 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 401.047786][T11237] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 401.056134][T11237] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 401.073393][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 402.691098][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 402.842639][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 402.872409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.902327][ T10] usb 5-1: config 0 descriptor?? [ 402.923260][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 403.109401][ T10] gspca_spca508: reg_read err -32 [ 403.391775][ T10] gspca_spca508: reg_read err -71 [ 403.423647][T11269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 403.433889][ T10] gspca_spca508: reg_read err -71 [ 403.449555][ T10] gspca_spca508: reg write: error -71 [ 403.455531][T11269] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 403.473897][ T10] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 403.519122][ T10] usb 5-1: USB disconnect, device number 48 [ 403.880979][ T30] audit: type=1400 audit(1756301247.816:749): avc: denied { append } for pid=11266 comm="syz.3.1261" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 404.187725][T11275] fuse: Unknown parameter 'grOup_—›' [ 404.194764][ T30] audit: type=1400 audit(1756301248.156:750): avc: denied { create } for pid=11273 comm="syz.4.1263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.282628][ T30] audit: type=1400 audit(1756301248.156:751): avc: denied { mounton } for pid=11273 comm="syz.4.1263" path="/251/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.461009][ T30] audit: type=1400 audit(1756301248.196:752): avc: denied { read write } for pid=11273 comm="syz.4.1263" name="file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.483869][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.599363][ T30] audit: type=1400 audit(1756301248.196:753): avc: denied { open } for pid=11273 comm="syz.4.1263" path="/251/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.664472][ T30] audit: type=1400 audit(1756301248.196:754): avc: denied { ioctl } for pid=11273 comm="syz.4.1263" path="/251/file0" dev="tmpfs" ino=1347 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.710901][T10475] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 404.875303][T10475] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 404.876789][ T5890] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 404.979829][T10475] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 404.989293][T10475] usb 5-1: can't read configurations, error -61 [ 405.121261][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 405.132365][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 405.144042][T10475] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 405.233482][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 405.279720][ T5890] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 405.291919][T10475] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 405.307232][T10475] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 405.325282][T10475] usb 5-1: can't read configurations, error -61 [ 405.330859][ T5890] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 405.351885][ T5890] usb 2-1: Product: syz [ 405.363875][ T5890] usb 2-1: Manufacturer: syz [ 405.364133][T10475] usb usb5-port1: attempt power cycle [ 405.368496][ T5890] usb 2-1: SerialNumber: syz [ 405.401665][ T5890] usb 2-1: config 0 descriptor?? [ 405.426702][ T5890] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 405.433313][T11311] 9pnet_fd: Insufficient options for proto=fd [ 405.742787][T10475] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 405.769524][ T9158] usb 2-1: Failed to submit usb control message: -71 [ 405.769712][ T5933] usb 2-1: USB disconnect, device number 62 [ 405.803150][ T9158] usb 2-1: unable to send the bmi data to the device: -71 [ 405.803918][T10475] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 405.822879][ T9158] usb 2-1: unable to get target info from device [ 405.829888][ T9158] usb 2-1: could not get target info (-71) [ 405.839812][T10475] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 405.847722][T10475] usb 5-1: can't read configurations, error -61 [ 405.854902][ T9158] usb 2-1: could not probe fw (-71) [ 405.981028][T10475] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 405.990079][T11321] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 406.018784][ T912] lo speed is unknown, defaulting to 1000 [ 406.025515][ T912] 3yz0: Port: 1 Link DOWN [ 406.031289][T10475] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 406.044460][T11321] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 406.053954][T10475] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 406.061680][T10475] usb 5-1: can't read configurations, error -61 [ 406.076700][T10475] usb usb5-port1: unable to enumerate USB device [ 406.085099][ T912] lo speed is unknown, defaulting to 1000 [ 406.107159][ T912] 3yz0: Port: 1 Link ACTIVE [ 406.172224][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.200360][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.219855][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.229931][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.561778][T11332] input: syz1 as /devices/virtual/input/input43 [ 406.841079][ T5890] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 407.011151][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 407.018584][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.104284][ T5890] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 407.132953][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.153090][ T5890] usb 2-1: Product: syz [ 407.157241][ T5890] usb 2-1: Manufacturer: syz [ 407.175688][ T5890] usb 2-1: SerialNumber: syz [ 407.182846][ T5890] usb 2-1: config 0 descriptor?? [ 407.189305][ T5890] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 407.485706][ T5890] usb 2-1: USB disconnect, device number 63 [ 407.854055][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 407.863017][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 408.352967][T11354] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 408.367756][T11354] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 409.091267][ T30] audit: type=1326 audit(1756301253.046:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.3.1282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f1bd8ebe9 code=0x0 [ 409.420025][T11357] block nbd2: shutting down sockets [ 409.516602][ T30] audit: type=1400 audit(1756301253.486:756): avc: denied { lock } for pid=11360 comm="syz.1.1283" path="socket:[33827]" dev="sockfs" ino=33827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 409.693676][T11370] overlayfs: missing 'lowerdir' [ 409.708157][T11372] loop2: detected capacity change from 0 to 7 [ 409.740897][T11372] Dev loop2: unable to read RDB block 7 [ 409.768281][T11372] loop2: unable to read partition table [ 409.779009][T11372] loop2: partition table beyond EOD, truncated [ 409.791536][T11372] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 409.928659][T11379] batadv_slave_0: entered promiscuous mode [ 409.991531][T11382] loop2: detected capacity change from 0 to 7 [ 409.999189][T11382] Dev loop2: unable to read RDB block 7 [ 410.010520][T11382] loop2: unable to read partition table [ 410.016626][T11382] loop2: partition table beyond EOD, truncated [ 410.025841][T11382] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.621686][ T30] audit: type=1400 audit(1756301254.586:757): avc: denied { append } for pid=11390 comm="syz.3.1292" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 412.073454][T11411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.399462][T11421] loop2: detected capacity change from 0 to 7 [ 412.413304][T11421] Dev loop2: unable to read RDB block 7 [ 412.431777][T11421] loop2: unable to read partition table [ 412.437492][T11421] loop2: partition table beyond EOD, truncated [ 412.459831][T11421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.511660][T11429] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 412.570259][T11432] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 412.735766][ T912] lo speed is unknown, defaulting to 1000 [ 412.743374][ T5933] lo speed is unknown, defaulting to 1000 [ 412.816812][T11429] trusted_key: encrypted_key: insufficient parameters specified [ 413.031614][T11438] loop2: detected capacity change from 0 to 6 [ 413.038194][T11438] Dev loop2: unable to read RDB block 6 [ 413.045828][T11438] loop2: AHDI p1 [ 413.055356][T11438] loop2: partition table partially beyond EOD, truncated [ 413.200923][T10475] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 413.209530][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 413.218596][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 413.391005][T10475] usb 1-1: Using ep0 maxpacket: 16 [ 413.397412][T10475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 413.436585][T11446] binder: 11444:11446 ioctl c0306201 0 returned -14 [ 413.471055][T10475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 413.544841][T10475] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 413.561269][T10475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.600874][T10475] usb 1-1: Product: syz [ 413.604986][ T30] audit: type=1400 audit(1756301257.576:758): avc: denied { accept } for pid=11453 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.611451][T10475] usb 1-1: Manufacturer: syz [ 413.627355][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.642155][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.653384][T10475] usb 1-1: SerialNumber: syz [ 413.660252][T10475] usb 1-1: config 0 descriptor?? [ 413.680366][T10475] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 413.733338][T10475] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 413.770977][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 413.801093][ T912] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 413.882566][ T5955] usb 1-1: USB disconnect, device number 51 [ 413.892281][ T5955] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 413.902338][ T5955] kobil_sct 1-1:0.0: device disconnected [ 413.921368][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 413.928309][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 413.936831][ T10] usb 2-1: can't read configurations, error -61 [ 413.961092][ T912] usb 5-1: Using ep0 maxpacket: 16 [ 413.967628][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.978675][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.989452][ T912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.002251][ T5890] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 414.002971][ T912] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 414.019187][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.028375][ T912] usb 5-1: config 0 descriptor?? [ 414.071024][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 414.161100][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 414.167574][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.177765][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.188999][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 414.198805][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 414.208849][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.222070][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 414.228625][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.239184][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.247551][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 414.255176][ T5890] usb 4-1: Manufacturer: syz [ 414.260638][ T10] usb 2-1: can't read configurations, error -61 [ 414.267657][ T5890] usb 4-1: config 0 descriptor?? [ 414.273072][ T10] usb usb2-port1: attempt power cycle [ 414.443797][ T912] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 414.450789][ T912] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 414.458610][ T912] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 414.469790][ T912] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 414.476838][ T912] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 414.486717][ T912] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 414.512202][ T912] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 414.520473][ T912] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 414.619671][T11467] trusted_key: encrypted_key: insufficient parameters specified [ 414.630985][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 414.640905][ T5890] rc_core: IR keymap rc-hauppauge not found [ 414.653153][ T5890] Registered IR keymap rc-empty [ 414.668921][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 414.677811][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.686003][T11452] netlink: 'syz.4.1308': attribute type 2 has an invalid length. [ 414.694379][T11452] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1308'. [ 414.705853][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 414.713507][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.843396][ T10] usb 2-1: can't read configurations, error -61 [ 414.843583][T11472] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 414.862562][T11472] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 414.871705][T11472] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 414.871705][T11472] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 415.294268][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 415.313414][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 415.360954][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 415.376712][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.384844][T11472] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 415.398139][T11472] CUSE: DEVNAME unspecified [ 415.403171][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 415.409783][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.418683][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 415.428389][ T10] usb 2-1: can't read configurations, error -61 [ 415.451521][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.463065][ T10] usb usb2-port1: unable to enumerate USB device [ 415.492992][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.625149][T11472] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.634483][ T5933] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 415.651182][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.660677][T11472] team0: Port device batadv1 added [ 415.671832][T11478] netlink: 'syz.3.1313': attribute type 9 has an invalid length. [ 415.680956][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.692822][T11481] netlink: 'syz.3.1313': attribute type 9 has an invalid length. [ 415.716369][ T5933] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 415.752047][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.767298][ T5933] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 415.781273][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.792668][T10475] usb 5-1: reset high-speed USB device number 53 using dummy_hcd [ 415.821618][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.861219][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.867147][ T5933] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 415.912363][ T5890] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 415.924947][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 415.947859][ T5890] usb 4-1: USB disconnect, device number 44 [ 416.001013][T10475] usb 5-1: device descriptor read/64, error -32 [ 416.247861][T11488] loop2: detected capacity change from 0 to 6 [ 416.254921][T11488] Dev loop2: unable to read RDB block 6 [ 416.260565][T11488] loop2: AHDI p1 [ 416.260947][T10475] usb 5-1: reset high-speed USB device number 53 using dummy_hcd [ 416.264555][T11488] loop2: partition table partially beyond EOD, truncated [ 416.519383][T10475] usb 5-1: device descriptor read/64, error -32 [ 416.650979][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1321'. [ 416.823878][T11509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 416.830473][T11509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.873516][T11509] vhci_hcd vhci_hcd.0: Device attached [ 416.873903][T11515] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.476279][T11519] block nbd2: Attempted send on invalid socket [ 417.483199][T11519] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 417.523310][ T5933] vhci_hcd: vhci_device speed not set [ 417.581162][ T5933] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 417.865801][ T912] usb 5-1: USB disconnect, device number 53 [ 418.272843][T11516] vhci_hcd: connection reset by peer [ 418.309281][ T9158] vhci_hcd: stop threads [ 418.336158][ T9158] vhci_hcd: release socket [ 418.355606][ T9158] vhci_hcd: disconnect device [ 418.950855][T11524] syz.4.1321 (11524): drop_caches: 2 [ 419.098814][T11519] hfsplus: unable to find HFS+ superblock [ 419.124778][T11534] loop2: detected capacity change from 0 to 6 [ 419.139397][T11534] Dev loop2: unable to read RDB block 6 [ 419.145601][T11534] loop2: AHDI p1 [ 419.149276][T11534] loop2: partition table partially beyond EOD, truncated [ 419.185011][T11536] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1327'. [ 419.218851][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 419.471070][T11511] block nbd1: shutting down sockets [ 419.578599][ T30] audit: type=1400 audit(1756301263.547:759): avc: denied { write } for pid=11542 comm="syz.3.1330" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 419.608410][T11546] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1331'. [ 419.620549][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 419.620549][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 419.657739][T11546] gtp1: entered promiscuous mode [ 419.662754][T11546] gtp1: entered allmulticast mode [ 420.099024][T11569] Bluetooth: MGMT ver 1.23 [ 420.314180][T11547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.322281][T11547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.329421][T11547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.412592][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 420.570908][ T912] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 420.787529][ T912] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 420.803188][ T5890] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 420.821633][ T912] usb 5-1: can't read configurations, error -22 [ 420.973950][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 420.982831][ T5890] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 420.995524][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.000920][ T912] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 421.004418][ T5890] usb 1-1: Product: syz [ 421.022797][ T5890] usb 1-1: Manufacturer: syz [ 421.027586][ T5890] usb 1-1: SerialNumber: syz [ 421.037249][ T5890] usb 1-1: config 0 descriptor?? [ 421.045368][ T5890] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 421.313408][ T912] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 421.337857][ T912] usb 5-1: can't read configurations, error -22 [ 421.383747][ T912] usb usb5-port1: attempt power cycle [ 421.755148][ T912] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 421.783030][ T5890] gspca_sonixj: reg_r err -110 [ 421.789372][ T5890] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 421.807318][ T912] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 421.821626][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 421.844194][ T912] usb 5-1: can't read configurations, error -22 [ 422.060925][ T912] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 422.100227][ T912] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 422.121103][ T912] usb 5-1: can't read configurations, error -22 [ 422.133121][T11593] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 422.146192][ T912] usb usb5-port1: unable to enumerate USB device [ 422.182659][T11593] netlink: 'syz.2.1342': attribute type 4 has an invalid length. [ 422.303921][T11595] trusted_key: encrypted_key: insufficient parameters specified [ 422.361012][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 422.373537][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 422.670959][ T5933] vhci_hcd: vhci_device speed not set [ 423.080381][T11603] netlink: 'syz.4.1344': attribute type 4 has an invalid length. [ 423.144958][T11603] netlink: 'syz.4.1344': attribute type 4 has an invalid length. [ 423.286258][T11605] trusted_key: encrypted_key: insufficient parameters specified [ 423.369558][T11606] tmpfs: Unknown parameter 'fdinfo/3' [ 423.458473][ T5890] usb 1-1: USB disconnect, device number 52 [ 423.609451][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 423.650115][ T30] audit: type=1400 audit(1756301267.607:760): avc: denied { shutdown } for pid=11608 comm="syz.2.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 423.670733][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.683932][T11616] input: syz0 as /devices/virtual/input/input47 [ 423.708109][T11616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 424.034257][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1351'. [ 424.197893][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 424.207236][T11634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1354'. [ 424.432517][ T30] audit: type=1400 audit(1756301268.407:761): avc: denied { getopt } for pid=11640 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.786960][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 425.681321][T11659] netlink: 'syz.2.1358': attribute type 4 has an invalid length. [ 425.822999][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 425.877617][T11659] netlink: 'syz.2.1358': attribute type 4 has an invalid length. [ 425.981075][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 425.990954][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 426.000347][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.023922][ T10] usb 5-1: config 0 descriptor?? [ 426.047411][T11662] trusted_key: encrypted_key: insufficient parameters specified [ 426.143506][T11664] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 426.237706][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 426.248308][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 426.377564][T11664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.387697][T11671] vlan0: entered allmulticast mode [ 426.392946][T11671] veth1: entered allmulticast mode [ 428.158659][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 428.213003][T11686] openvswitch: netlink: Missing valid actions attribute. [ 428.223351][ T58] bond0: (slave wlan1): link status definitely down, disabling slave [ 428.232279][T11686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.259583][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1365'. [ 428.261009][ T5890] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 428.351624][ T30] audit: type=1400 audit(1756301272.317:762): avc: denied { getopt } for pid=11689 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 428.430976][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 428.449310][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 428.480326][ T5890] usb 4-1: config 0 has no interface number 0 [ 428.503349][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 428.519504][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.529512][ T5890] usb 4-1: Product: syz [ 428.535015][ T5890] usb 4-1: Manufacturer: syz [ 428.546440][ T5890] usb 4-1: SerialNumber: syz [ 428.574634][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 428.584712][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 428.616808][ T5890] usb 4-1: config 0 descriptor?? [ 428.699002][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 428.711978][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 428.834444][ T10] usb 5-1: USB disconnect, device number 58 [ 428.915185][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.971576][ T5890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 428.989227][ T30] audit: type=1400 audit(1756301272.957:763): avc: denied { connect } for pid=11701 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.333365][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 429.341356][ T10] usb 4-1: USB disconnect, device number 45 [ 429.356795][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 429.374566][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 429.389483][ T10] quatech2 4-1:0.51: device disconnected [ 429.798252][ T30] audit: type=1400 audit(1756301273.767:764): avc: denied { ioctl } for pid=11722 comm="syz.2.1373" path="socket:[35319]" dev="sockfs" ino=35319 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 429.972674][T11734] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 429.998915][T11734] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 430.108804][T11740] netlink: 'syz.1.1379': attribute type 4 has an invalid length. [ 430.111417][T11741] netlink: 'syz.3.1377': attribute type 4 has an invalid length. [ 430.133462][ T5933] lo speed is unknown, defaulting to 1000 [ 430.145398][ T5933] 3yz0: Port: 1 Link DOWN [ 430.169670][T11741] netlink: 'syz.3.1377': attribute type 4 has an invalid length. [ 430.195552][ T5933] lo speed is unknown, defaulting to 1000 [ 430.213744][ T5933] 3yz0: Port: 1 Link ACTIVE [ 430.248129][T11739] trusted_key: encrypted_key: insufficient parameters specified [ 430.300919][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 430.426993][T11748] trusted_key: encrypted_key: insufficient parameters specified [ 430.451968][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 430.461737][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 430.472905][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 430.506961][ T10] usb 1-1: config 0 has no interface number 0 [ 430.554964][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.576826][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 430.594939][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.610018][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 430.620469][ T10] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 430.630090][ T10] usb 1-1: Product: syz [ 430.635801][ T10] usb 1-1: config 0 descriptor?? [ 430.643996][T11735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.351237][ T10] usb 1-1: USB disconnect, device number 53 [ 431.376700][T11760] netlink: 'syz.1.1383': attribute type 4 has an invalid length. [ 431.426343][ T5890] lo speed is unknown, defaulting to 1000 [ 431.442586][ T5890] syz0: Port: 1 Link DOWN [ 431.534870][T11760] netlink: 'syz.1.1383': attribute type 4 has an invalid length. [ 431.596474][ T5933] lo speed is unknown, defaulting to 1000 [ 431.602383][ T5933] syz0: Port: 1 Link ACTIVE [ 431.698433][ T30] audit: type=1400 audit(1756301275.667:765): avc: denied { watch_sb } for pid=11769 comm="syz.2.1386" path="/286" dev="tmpfs" ino=1511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.735532][T11768] trusted_key: encrypted_key: insufficient parameters specified [ 431.752368][T11770] batadv0: entered promiscuous mode [ 431.771096][T11770] macvtap1: entered promiscuous mode [ 431.785763][T11770] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 431.827151][T11770] batadv0: left promiscuous mode [ 431.857377][ T30] audit: type=1400 audit(1756301275.827:766): avc: denied { create } for pid=11761 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 431.939369][ T30] audit: type=1400 audit(1756301275.897:767): avc: denied { ioctl } for pid=11761 comm="syz.3.1384" path="socket:[34623]" dev="sockfs" ino=34623 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 431.981715][T11774] tmpfs: Bad value for 'mpol' [ 432.014681][T11778] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 432.036699][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1388'. [ 432.269401][T11787] overlayfs: failed to resolve './file1': -2 [ 432.579821][ T30] audit: type=1326 audit(1756301276.507:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11790 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7ab8ebe9 code=0x7ffc0000 [ 432.654153][ T30] audit: type=1326 audit(1756301276.507:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11790 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7ab8ebe9 code=0x7ffc0000 [ 432.677554][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.717519][ T30] audit: type=1326 audit(1756301276.507:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11790 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe7ab8ebe9 code=0x7ffc0000 [ 432.740912][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.776980][ T30] audit: type=1326 audit(1756301276.507:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11790 comm="syz.4.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe7ab8ebe9 code=0x7ffc0000 [ 432.871114][ T912] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 433.025652][ T912] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 433.034942][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.050901][ T912] usb 1-1: Product: syz [ 433.063063][ T912] usb 1-1: Manufacturer: syz [ 433.071972][ T912] usb 1-1: SerialNumber: syz [ 433.088524][ T912] usb 1-1: config 0 descriptor?? [ 433.321218][ T912] mos7840 1-1:0.0: required endpoints missing [ 433.390705][ T912] usb 1-1: USB disconnect, device number 54 [ 434.257897][T11811] tty tty21: ldisc open failed (-12), clearing slot 20 [ 434.346217][T11818] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 434.375209][T11818] team0: Port device netdevsim0 removed [ 434.397531][T11818] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 434.741875][ T5947] kernel read not supported for file /dsp1 (pid: 5947 comm: kworker/1:7) [ 434.935769][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 434.935790][ T30] audit: type=1400 audit(1756301278.907:782): avc: denied { remount } for pid=11819 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 435.577936][ T30] audit: type=1400 audit(1756301279.477:783): avc: denied { mounton } for pid=11832 comm="syz.0.1404" path="/proc/1073/task" dev="proc" ino=34693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 435.600681][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.870898][ T5947] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 435.982667][T11846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.004408][T11846] batadv_slave_0: entered promiscuous mode [ 436.104926][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 436.378720][ T5947] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 436.393141][ T5947] usb 5-1: Product: syz [ 436.402285][ T5947] usb 5-1: Manufacturer: syz [ 436.442605][ T5947] usb 5-1: SerialNumber: syz [ 436.468699][ T5947] usb 5-1: config 0 descriptor?? [ 436.544912][ T5947] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 436.786983][T11852] pim6reg: entered allmulticast mode [ 437.209694][ T5947] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 437.267893][ T30] audit: type=1326 audit(1756301281.237:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.319632][ T30] audit: type=1326 audit(1756301281.237:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.424204][ T30] audit: type=1326 audit(1756301281.237:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.522186][ T30] audit: type=1326 audit(1756301281.237:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.587476][ T30] audit: type=1326 audit(1756301281.237:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.666104][ T30] audit: type=1326 audit(1756301281.247:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.719954][T11886] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 437.753427][T11884] 9pnet_fd: Insufficient options for proto=fd [ 437.796945][ T10] lo speed is unknown, defaulting to 1000 [ 437.812046][T11888] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 437.822995][ T30] audit: type=1326 audit(1756301281.247:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 437.880505][ T10] lo speed is unknown, defaulting to 1000 [ 438.011130][ T30] audit: type=1326 audit(1756301281.247:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11869 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b4838ebe9 code=0x7ffc0000 [ 438.034423][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.115966][T11892] trusted_key: encrypted_key: insufficient parameters specified [ 438.372337][T11891] block nbd2: shutting down sockets [ 439.057836][T11901] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 439.376167][T11908] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1420'. [ 439.862874][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.429908][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.523291][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.557870][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.567247][T11918] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 440.587261][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.616621][ T912] usb 5-1: USB disconnect, device number 59 [ 441.108955][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.830203][T11937] IPv6: Can't replace route, no match found [ 441.921578][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 441.921628][ T30] audit: type=1400 audit(1756301285.887:827): avc: denied { execmod } for pid=11936 comm="syz.0.1430" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 442.591056][ T5933] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 442.741067][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 442.761437][ T5933] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 442.789959][ T5933] usb 4-1: config 0 has no interface number 0 [ 442.804106][ T5933] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 442.843162][ T5933] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 442.852995][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 442.861744][ T5933] usb 4-1: Product: syz [ 442.866204][ T5933] usb 4-1: SerialNumber: syz [ 442.911674][ T5933] usb 4-1: config 0 descriptor?? [ 442.928109][ T5933] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 443.138947][ T912] usb 4-1: USB disconnect, device number 46 [ 443.333318][ T5996] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 443.502112][ T5996] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.510347][ T5996] usb 5-1: config 0 has no interface number 0 [ 443.528893][ T5996] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.548716][ T5996] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 443.567282][ T5996] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.576768][ T30] audit: type=1804 audit(1756301287.537:828): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1443" name="file0" dev="ramfs" ino=36954 res=1 errno=0 [ 443.598132][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.604412][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.614815][ T5996] usb 5-1: Product: syz [ 443.619164][ T5996] usb 5-1: SerialNumber: syz [ 443.625462][ T5996] usb 5-1: config 0 descriptor?? [ 443.631126][T11984] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 443.642715][ T5996] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 443.650369][ T5996] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input51 [ 443.751238][T11993] block nbd1: shutting down sockets [ 443.844377][T11994] overlayfs: missing 'lowerdir' [ 443.859102][ T30] audit: type=1400 audit(1756301287.827:829): avc: denied { mount } for pid=11996 comm="syz.0.1447" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 443.881382][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.043182][ T30] audit: type=1400 audit(1756301287.857:830): avc: denied { search } for pid=11996 comm="syz.0.1447" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 444.172531][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.181143][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.475283][ T30] audit: type=1400 audit(1756301287.857:831): avc: denied { search } for pid=11996 comm="syz.0.1447" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 444.551376][ T30] audit: type=1400 audit(1756301287.857:832): avc: denied { read open } for pid=11996 comm="syz.0.1447" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 444.899265][T12014] netlink: 'syz.0.1449': attribute type 4 has an invalid length. [ 444.954025][T12014] netlink: 'syz.0.1449': attribute type 4 has an invalid length. [ 444.996905][T12017] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 445.043168][ T5890] lo speed is unknown, defaulting to 1000 [ 445.081866][T12019] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 445.090301][ T5890] 3yz0: Port: 1 Link DOWN [ 445.092527][T12020] trusted_key: encrypted_key: insufficient parameters specified [ 445.137355][ T5890] lo speed is unknown, defaulting to 1000 [ 445.156579][ T5890] 3yz0: Port: 1 Link ACTIVE [ 445.243137][T12019] trusted_key: encrypted_key: insufficient parameters specified [ 445.251033][ T5996] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 445.420005][ T5996] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 445.433764][ T5996] usb 2-1: config 0 has no interface number 0 [ 445.443466][ T5996] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 445.456747][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.515749][ T5996] usb 2-1: Product: syz [ 445.537897][ T5996] usb 2-1: Manufacturer: syz [ 445.556884][ T5996] usb 2-1: SerialNumber: syz [ 445.590702][ T5996] usb 2-1: config 0 descriptor?? [ 446.082865][ T5996] usb 2-1: Firmware version (0.0) predates our first public release. [ 446.123195][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 446.123371][ T912] usb 5-1: USB disconnect, device number 60 [ 446.130169][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 446.148229][ T5996] usb 2-1: Please update to version 0.2 or newer [ 446.252628][ T5996] usb 2-1: USB disconnect, device number 68 [ 446.269559][ T912] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 446.310173][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 446.631624][ T5996] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 446.677386][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 447.074202][ T5996] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 447.087814][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.096312][ T5996] usb 2-1: Product: syz [ 447.100485][ T5996] usb 2-1: Manufacturer: syz [ 447.105157][ T5996] usb 2-1: SerialNumber: syz [ 447.109404][ T30] audit: type=1400 audit(1756301291.067:833): avc: denied { append } for pid=12045 comm="syz.3.1457" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 447.235170][ T30] audit: type=1400 audit(1756301291.067:834): avc: denied { map } for pid=12045 comm="syz.3.1457" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 447.330877][ T30] audit: type=1400 audit(1756301291.067:835): avc: denied { execute } for pid=12045 comm="syz.3.1457" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 447.466644][ T5996] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 447.536476][ T5996] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 448.008673][ T5996] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 448.036850][ T5996] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 448.095407][ T5996] usb 2-1: USB disconnect, device number 69 [ 448.175445][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 448.340073][ T10] usb 1-1: config index 0 descriptor too short (expected 10312, got 36) [ 448.352832][ T10] usb 1-1: config 23 has too many interfaces: 62, using maximum allowed: 32 [ 448.374506][ T10] usb 1-1: config 23 has 1 interface, different from the descriptor's value: 62 [ 448.809719][ T10] usb 1-1: config 23 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.819618][ T10] usb 1-1: config 23 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.832539][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 448.841627][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.860927][ T5890] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 449.014844][ T5890] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 449.023466][ T5890] usb 4-1: config 0 has no interface number 0 [ 449.037151][ T5890] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 449.100351][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.115448][ T5890] usb 4-1: Product: syz [ 449.119946][ T5890] usb 4-1: Manufacturer: syz [ 449.124796][ T5890] usb 4-1: SerialNumber: syz [ 449.132160][ T5890] usb 4-1: config 0 descriptor?? [ 449.763140][T12082] ceph: No mds server is up or the cluster is laggy [ 449.864511][ T10] usbhid 1-1:23.0: can't add hid device: -71 [ 449.870641][ T10] usbhid 1-1:23.0: probe with driver usbhid failed with error -71 [ 449.894270][T12065] block nbd2: shutting down sockets [ 449.905425][ T10] usb 1-1: USB disconnect, device number 55 [ 449.918529][T12075] 9pnet_fd: Insufficient options for proto=fd [ 450.024105][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.103322][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.371241][ T5996] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 450.573896][ T5996] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.660381][ T5996] usb 2-1: config 1 interface 0 has no altsetting 0 [ 450.672356][ T5996] usb 2-1: string descriptor 0 read error: -22 [ 450.678762][ T5996] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 450.728023][T12097] futex_wake_op: syz.3.1458 tries to shift op by 32; fix this program [ 450.748892][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.046041][T12098] fuse: Bad value for 'fd' [ 451.072423][ T30] audit: type=1400 audit(1756301295.047:836): avc: denied { create } for pid=12090 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 451.176401][ T5890] usb 4-1: Firmware version (0.0) predates our first public release. [ 451.184623][ T5890] usb 4-1: Please update to version 0.2 or newer [ 451.194315][ T30] audit: type=1400 audit(1756301295.067:837): avc: denied { write } for pid=12090 comm="syz.1.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 451.491166][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 451.783922][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 452.001764][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.027143][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 452.066825][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.075108][ T10] usb 5-1: Product: syz [ 452.079389][ T10] usb 5-1: Manufacturer: syz [ 452.084129][ T10] usb 5-1: SerialNumber: syz [ 452.091507][ T10] usb 5-1: config 0 descriptor?? [ 452.189092][ T5955] usb 4-1: USB disconnect, device number 47 [ 452.303346][T12123] netlink: 'syz.0.1475': attribute type 19 has an invalid length. [ 452.311264][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 452.347892][T12123] netlink: 'syz.0.1475': attribute type 19 has an invalid length. [ 452.355829][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 452.761801][ T9158] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.809627][ T9158] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.837838][ T9158] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.850464][ T9158] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.959614][ T10] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 452.977597][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 453.343133][ T5996] usbhid 2-1:1.0: can't add hid device: -71 [ 453.349109][ T5996] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 453.359984][ T5996] usb 2-1: USB disconnect, device number 70 [ 453.540663][T12146] 9pnet: Unknown protocol version 9p20\++} [ 453.548963][T12148] 9pnet: Unknown protocol version 9p20\++} [ 453.581270][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 453.743607][ T5996] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 453.751418][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 453.759929][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.780948][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 453.815333][ T10] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 453.830923][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.844777][ T10] usb 1-1: Product: syz [ 453.854913][ T10] usb 1-1: Manufacturer: syz [ 453.865051][ T10] usb 1-1: SerialNumber: syz [ 453.877303][ T10] usb 1-1: config 0 descriptor?? [ 453.900912][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 453.916109][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 453.929658][ T5996] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 453.939092][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.949444][ T5996] usb 2-1: config 0 descriptor?? [ 454.097645][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 454.368042][ T30] audit: type=1400 audit(1756301298.337:838): avc: denied { remount } for pid=12137 comm="syz.1.1479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 454.470960][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 454.987629][ T5996] lua 0003:1E7D:2C2E.0013: global environment stack underflow [ 455.002845][ T5996] lua 0003:1E7D:2C2E.0013: item 0 4 1 11 parsing failed [ 455.018741][ T5996] lua 0003:1E7D:2C2E.0013: parse failed [ 455.030968][ T5996] lua 0003:1E7D:2C2E.0013: probe with driver lua failed with error -22 [ 455.198422][T12164] tipc: Enabling of bearer rejected, already enabled [ 455.220120][T12164] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 455.245576][T12164] tipc: Resetting bearer [ 456.023481][ T5996] usb 1-1: USB disconnect, device number 56 [ 456.231210][ T30] audit: type=1400 audit(1756301300.187:839): avc: denied { mount } for pid=12182 comm="syz.0.1492" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 456.273626][T12184] orangefs_mount: mount request failed with -4 [ 456.376719][ T30] audit: type=1400 audit(1756301300.187:840): avc: denied { mounton } for pid=12182 comm="syz.0.1492" path="/294/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 456.401079][ T30] audit: type=1400 audit(1756301300.337:841): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 456.493938][ T10] usb 2-1: USB disconnect, device number 71 [ 456.613901][ T5908] usb 5-1: USB disconnect, device number 61 [ 456.814336][T12199] : entered promiscuous mode [ 457.201672][ T5996] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 457.350950][ T5996] usb 1-1: device descriptor read/64, error -71 [ 457.484373][ T5908] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 457.610911][ T5996] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 457.648331][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.936202][T12216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12216 comm=syz.2.1500 [ 458.019550][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.029461][ T5996] usb 1-1: device descriptor read/64, error -71 [ 458.060847][ T5908] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 458.099274][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.140758][ T5908] usb 5-1: config 0 descriptor?? [ 458.146035][ T5996] usb usb1-port1: attempt power cycle [ 458.493857][ T5996] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 458.532003][ T5996] usb 1-1: device descriptor read/8, error -71 [ 458.565466][T12239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.578580][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.603063][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.612754][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.619879][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.630348][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.643275][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.650391][ T5908] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 458.668826][ T5908] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 458.777178][ T5908] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 458.791099][ T5996] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 458.806784][T12245] netlink: 'syz.2.1508': attribute type 4 has an invalid length. [ 458.821514][ T5996] usb 1-1: device descriptor read/8, error -71 [ 458.832220][T12245] netlink: 'syz.2.1508': attribute type 4 has an invalid length. [ 458.927877][T12246] trusted_key: encrypted_key: insufficient parameters specified [ 458.951177][ T5996] usb usb1-port1: unable to enumerate USB device [ 459.211505][ T30] audit: type=1400 audit(1756301303.187:842): avc: denied { bind } for pid=12247 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 459.268389][T12249] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1509'. [ 459.389253][ T30] audit: type=1400 audit(1756301303.357:843): avc: denied { create } for pid=12197 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 459.454980][T12253] cp2112 0003:10C4:EA90.0014: Error starting transaction: -38 [ 459.462694][ T30] audit: type=1400 audit(1756301303.357:844): avc: denied { write } for pid=12197 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 459.559923][ T30] audit: type=1400 audit(1756301303.357:845): avc: denied { nlmsg_write } for pid=12197 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 459.755594][T12249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.776842][T12249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.813872][T12249] bond0 (unregistering): Released all slaves [ 459.894903][T12198] geneve3: entered promiscuous mode [ 459.928555][ T1316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.944995][ T5908] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71 [ 459.959566][ T1316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.987862][ T5908] usb 5-1: USB disconnect, device number 62 [ 460.000456][ T1316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.053304][ T1316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 460.353518][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 460.479798][T12264] ¶: entered promiscuous mode [ 460.893670][ T30] audit: type=1400 audit(1756301304.807:846): avc: denied { setopt } for pid=12278 comm="syz.4.1517" lport=36453 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 460.964182][ T30] audit: type=1400 audit(1756301304.807:847): avc: denied { write } for pid=12278 comm="syz.4.1517" lport=36453 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 461.125434][T12282] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1515'. [ 461.154792][T12282] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 461.170095][ T30] audit: type=1400 audit(1756301304.807:848): avc: denied { getopt } for pid=12278 comm="syz.4.1517" lport=36453 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 461.227015][T12282] 0ªX¹¦D: entered allmulticast mode [ 461.233250][T12282] veth0_macvtap: entered allmulticast mode [ 461.270024][T12282] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 461.841095][ T5908] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 462.051561][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 462.067867][ T5908] usb 5-1: not running at top speed; connect to a high speed hub [ 462.081979][ T5908] usb 5-1: config 110 has an invalid interface number: 93 but max is 0 [ 462.095053][ T5908] usb 5-1: config 110 has no interface number 0 [ 462.107708][ T5908] usb 5-1: config 110 interface 93 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 462.153700][ T5908] usb 5-1: config 110 interface 93 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 462.218902][ T5908] usb 5-1: config 110 interface 93 altsetting 6 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 462.279567][ T5908] usb 5-1: config 110 interface 93 altsetting 6 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 462.314791][ T5908] usb 5-1: config 110 interface 93 has no altsetting 0 [ 462.354746][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1511'. [ 462.383082][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=9580, bcdDevice=2f.08 [ 462.453481][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.497476][ T5908] usb 5-1: Product: syz [ 462.511451][ T5908] usb 5-1: Manufacturer: syz [ 462.607939][ T5908] usb 5-1: SerialNumber: syz [ 462.623228][T12289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.116796][ T5947] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 463.212921][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1522'. [ 463.310909][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 463.335998][ T5947] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 463.353699][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.372582][ T5908] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in cold state, will try to load a firmware [ 463.397330][ T5947] usb 2-1: config 0 descriptor?? [ 463.513173][ T5908] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 463.544386][ T5908] dib0700: firmware download failed at 7 with -22 [ 463.574137][ T5908] usb 5-1: USB disconnect, device number 63 [ 464.090719][T12327] dlm: no local IP address has been set [ 464.098180][T12327] dlm: cannot start dlm midcomms -107 [ 464.270917][ T5955] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 464.352958][ T5947] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 464.366271][ T5947] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 464.411212][ T5947] asix 2-1:0.0: probe with driver asix failed with error -71 [ 464.435893][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.480219][ T5947] usb 2-1: USB disconnect, device number 72 [ 464.611066][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.670924][ T5955] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 464.693810][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.709021][ T5955] usb 1-1: config 0 descriptor?? [ 465.085331][T12340] bridge0: port 3(gretap0) entered disabled state [ 465.091887][T12340] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.099047][T12340] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.133034][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.176606][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.197220][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.218012][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.236770][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.259086][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.283168][ T5955] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 465.307635][ T5955] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 465.421434][ T5955] cp2112 0003:10C4:EA90.0015: Part Number: 0x00 Device Version: 0x00 [ 465.535240][ T5908] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 465.710942][ T5908] usb 2-1: device descriptor read/64, error -71 [ 465.860245][T12360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.961073][ T5908] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 466.046829][T12326] cp2112 0003:10C4:EA90.0015: Error starting transaction: -38 [ 466.123174][ T5908] usb 2-1: device descriptor read/64, error -71 [ 466.428300][ T5955] cp2112 0003:10C4:EA90.0015: error reading lock byte: -71 [ 466.456212][ T5955] usb 1-1: USB disconnect, device number 61 [ 466.541556][ T5908] usb usb2-port1: attempt power cycle [ 466.941021][ T5908] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 466.963614][ T5908] usb 2-1: device descriptor read/8, error -71 [ 467.234182][ T5908] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 467.264509][ T5908] usb 2-1: device descriptor read/8, error -71 [ 467.381273][ T5908] usb usb2-port1: unable to enumerate USB device [ 468.913348][ T30] audit: type=1400 audit(1756301312.867:849): avc: denied { connect } for pid=12414 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 469.079531][T12413] vxcan1 speed is unknown, defaulting to 1000 [ 469.287641][T12413] lo speed is unknown, defaulting to 1000 [ 469.298473][T12413] lo speed is unknown, defaulting to 1000 [ 469.701466][ T5908] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 469.872386][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.887008][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.901036][ T5947] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 469.963578][ T5908] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 469.976788][T12436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.016470][T12436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.020876][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.051336][ T5908] usb 5-1: config 0 descriptor?? [ 470.091082][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 470.101419][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 470.115573][ T5947] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 470.126436][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.139468][ T5947] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.340920][ T5947] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 470.439925][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.448237][ T5947] usb 4-1: Product: syz [ 470.452483][ T5947] usb 4-1: Manufacturer: syz [ 470.457093][ T5947] usb 4-1: SerialNumber: syz [ 470.474444][ T5947] usb 4-1: config 0 descriptor?? [ 470.491254][T12428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 470.506269][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 470.545537][ T5947] port100 4-1:0.0: NFC: Could not get supported command types [ 470.649182][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.659002][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.667914][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.675070][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.682680][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.690129][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.690651][T12451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.697278][ T5908] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 470.702318][ T5908] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 470.730399][T12451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.730522][ T5955] usb 4-1: USB disconnect, device number 48 [ 470.799399][T12453] netlink: 'syz.1.1559': attribute type 4 has an invalid length. [ 470.820468][ T10] lo speed is unknown, defaulting to 1000 [ 470.834210][T12453] netlink: 'syz.1.1559': attribute type 4 has an invalid length. [ 470.843857][ T10] syz0: Port: 1 Link DOWN [ 470.857721][ T10] lo speed is unknown, defaulting to 1000 [ 470.864597][ T5908] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x00 [ 470.879234][ T10] syz0: Port: 1 Link ACTIVE [ 470.944303][T12454] trusted_key: encrypted_key: insufficient parameters specified [ 471.474764][T12423] cp2112 0003:10C4:EA90.0016: Error starting transaction: -38 [ 471.902336][ T5908] cp2112 0003:10C4:EA90.0016: error reading lock byte: -71 [ 471.947772][ T5908] usb 5-1: USB disconnect, device number 64 [ 472.056909][T12462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1561'. [ 472.931021][ T5947] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 473.051449][ T5908] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 473.117709][T12488] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 473.191260][T12488] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 473.241393][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 473.249867][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.260073][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 473.282449][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 473.314369][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 473.357655][ T5947] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 473.370478][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 473.370761][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.393321][T12488] trusted_key: encrypted_key: insufficient parameters specified [ 473.429403][ T5947] usb 4-1: config 0 descriptor?? [ 473.435275][T12475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 473.443131][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.485497][ T5908] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 473.501102][ T30] audit: type=1400 audit(1756301317.467:850): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 473.510807][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 473.545197][ T5908] usb 2-1: Product: syz [ 473.568271][ T5908] usb 2-1: Manufacturer: syz [ 473.576878][ T5908] usb 2-1: SerialNumber: syz [ 473.597139][ T5908] usb 2-1: config 0 descriptor?? [ 473.680972][ T912] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 473.842360][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.856592][ T5908] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 473.881089][ T912] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 473.898781][ T5947] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 473.930905][ T5908] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 473.940896][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.982712][ T912] usb 1-1: config 0 descriptor?? [ 474.061251][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.082301][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.120658][ T5908] radio-si470x 2-1:0.0: software version 155, hardware version 30 [ 474.148003][ T5908] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 474.440594][ T912] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 474.517646][ T912] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0018/input/input53 [ 474.622782][ T912] keytouch 0003:0926:3333.0018: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 474.701174][ T5908] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 474.774574][ T5908] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 474.808702][ T5908] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 474.838642][ T5908] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 475.250939][ T5947] usb 1-1: USB disconnect, device number 62 [ 475.895172][ T5908] usb 4-1: USB disconnect, device number 49 [ 476.349139][T12522] fuse: Bad value for 'user_id' [ 476.374598][T12522] fuse: Bad value for 'user_id' [ 476.395513][T12522] netlink: 'syz.3.1578': attribute type 20 has an invalid length. [ 476.620058][ T5947] usb 2-1: USB disconnect, device number 77 [ 476.654817][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 476.899271][T12528] loop2: detected capacity change from 0 to 7 [ 476.937127][T12528] Dev loop2: unable to read RDB block 7 [ 476.956778][T12528] loop2: unable to read partition table [ 477.069771][T12528] loop2: partition table beyond EOD, truncated [ 477.106450][T12528] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.143427][T12531] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 477.149965][T12531] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 477.157638][T12531] vhci_hcd vhci_hcd.0: Device attached [ 477.165235][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.173996][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.182997][T12532] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 477.199470][ T30] audit: type=1800 audit(1756301321.167:851): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1581" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 477.238860][ T3591] vhci_hcd: stop threads [ 477.283842][ T3591] vhci_hcd: release socket [ 477.336832][ T3591] vhci_hcd: disconnect device [ 477.361013][ T5947] vhci_hcd: vhci_device speed not set [ 477.575381][T12545] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 478.446792][T12552] vxcan1 speed is unknown, defaulting to 1000 [ 478.760036][T12552] lo speed is unknown, defaulting to 1000 [ 478.780333][T12552] lo speed is unknown, defaulting to 1000 [ 479.028070][T12552] tipc: Enabling of bearer rejected, failed to enable media [ 479.871303][ T5947] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 480.041086][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 480.050869][ T5908] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 480.071596][ T5947] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 480.089847][ T30] audit: type=1400 audit(1756301324.057:852): avc: denied { map } for pid=12579 comm="syz.2.1592" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 480.093115][ T5947] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 480.133552][ T5947] usb 1-1: config 0 interface 0 has no altsetting 0 [ 480.136616][T12578] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.140383][ T5947] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 480.158303][T12578] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 480.158326][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.161865][T12580] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1592'. [ 480.188682][ T5947] usb 1-1: config 0 descriptor?? [ 480.195877][ T30] audit: type=1400 audit(1756301324.127:853): avc: denied { call } for pid=12579 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 480.196564][T12578] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 480.223077][T12578] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 480.225463][ T30] audit: type=1400 audit(1756301324.127:854): avc: denied { transfer } for pid=12579 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 480.252774][ T5933] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 480.286726][ T5908] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 480.295132][ T5908] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 480.315332][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 480.368547][ T5908] usb 2-1: config 1 has no interface number 0 [ 480.383920][T12584] loop2: detected capacity change from 0 to 7 [ 480.390648][T12584] Dev loop2: unable to read RDB block 7 [ 480.398221][T12584] loop2: unable to read partition table [ 480.404262][ T5908] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 480.407426][T12584] loop2: partition table beyond EOD, truncated [ 480.426077][ T5933] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 480.443392][ T5933] usb 4-1: config 0 has no interface number 0 [ 480.453530][ T30] audit: type=1400 audit(1756301324.407:855): avc: denied { write } for pid=12574 comm="syz.4.1591" name="file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.466990][T12578] macsec1: entered promiscuous mode [ 480.481396][ T5996] IPVS: starting estimator thread 0... [ 480.487739][T12578] bridge0: entered promiscuous mode [ 480.495959][ T5908] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 480.498364][T12584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.518437][ T5933] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 480.529933][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.538902][ T5933] usb 4-1: Product: syz [ 480.558089][ T30] audit: type=1400 audit(1756301324.427:856): avc: denied { open } for pid=12574 comm="syz.4.1591" path="/299/file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.585052][ T5933] usb 4-1: Manufacturer: syz [ 480.586130][T12586] FAULT_INJECTION: forcing a failure. [ 480.586130][T12586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.587672][T12586] [ 480.587678][T12586] ====================================================== [ 480.587683][T12586] WARNING: possible circular locking dependency detected [ 480.587689][T12586] syzkaller #0 Not tainted [ 480.587696][T12586] ------------------------------------------------------ [ 480.587701][T12586] syz.0.1588/12586 is trying to acquire lock: [ 480.587709][T12586] ffffffff8e4ce840 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x4d4/0x6d0 [ 480.587748][T12586] [ 480.587748][T12586] but task is already holding lock: [ 480.587753][T12586] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 480.587787][T12586] [ 480.587787][T12586] which lock already depends on the new lock. [ 480.587787][T12586] [ 480.587792][T12586] [ 480.587792][T12586] the existing dependency chain (in reverse order) is: [ 480.587796][T12586] [ 480.587796][T12586] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 480.587814][T12586] _raw_spin_lock_nested+0x31/0x40 [ 480.587836][T12586] raw_spin_rq_lock_nested+0x29/0x130 [ 480.587852][T12586] task_rq_lock+0xcf/0x490 [ 480.587867][T12586] cgroup_move_task+0x81/0x2a0 [ 480.587885][T12586] css_set_move_task+0x288/0x5f0 [ 480.587898][T12586] cgroup_post_fork+0x201/0x9e0 [ 480.587914][T12586] copy_process+0x5cfa/0x7690 [ 480.587932][T12586] kernel_clone+0xfc/0x930 [ 480.587949][T12586] user_mode_thread+0xc7/0x110 [ 480.587967][T12586] rest_init+0x23/0x2b0 [ 480.587985][T12586] start_kernel+0x3ee/0x4d0 [ 480.587997][T12586] x86_64_start_reservations+0x18/0x30 [ 480.588010][T12586] x86_64_start_kernel+0x130/0x190 [ 480.588022][T12586] common_startup_64+0x13e/0x148 [ 480.588043][T12586] [ 480.588043][T12586] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 480.588061][T12586] _raw_spin_lock_irqsave+0x3a/0x60 [ 480.588082][T12586] try_to_wake_up+0xb7/0x1870 [ 480.588096][T12586] __wake_up_common+0x135/0x1f0 [ 480.588117][T12586] __wake_up+0x31/0x60 [ 480.588134][T12586] tty_port_default_wakeup+0x2a/0x40 [ 480.588150][T12586] serial8250_tx_chars+0x68e/0x860 [ 480.588167][T12586] serial8250_handle_irq+0x761/0xcb0 [ 480.588184][T12586] serial8250_default_handle_irq+0x9a/0x250 [ 480.588202][T12586] serial8250_interrupt+0xf8/0x1b0 [ 480.588221][T12586] __handle_irq_event_percpu+0x229/0x7d0 [ 480.588238][T12586] handle_irq_event+0xab/0x1e0 [ 480.588254][T12586] handle_edge_irq+0x3ca/0x9e0 [ 480.588269][T12586] __common_interrupt+0xd0/0x2f0 [ 480.588288][T12586] common_interrupt+0xba/0xe0 [ 480.588306][T12586] asm_common_interrupt+0x26/0x40 [ 480.588319][T12586] pv_native_safe_halt+0xf/0x20 [ 480.588332][T12586] default_idle+0x13/0x20 [ 480.588348][T12586] default_idle_call+0x6d/0xb0 [ 480.588364][T12586] do_idle+0x391/0x510 [ 480.588380][T12586] cpu_startup_entry+0x4f/0x60 [ 480.588396][T12586] start_secondary+0x21d/0x2b0 [ 480.588416][T12586] common_startup_64+0x13e/0x148 [ 480.588430][T12586] [ 480.588430][T12586] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 480.588448][T12586] _raw_spin_lock_irqsave+0x3a/0x60 [ 480.588469][T12586] __wake_up+0x1c/0x60 [ 480.588485][T12586] tty_port_default_wakeup+0x2a/0x40 [ 480.588501][T12586] serial8250_tx_chars+0x68e/0x860 [ 480.588517][T12586] serial8250_handle_irq+0x761/0xcb0 [ 480.588534][T12586] serial8250_default_handle_irq+0x9a/0x250 [ 480.588552][T12586] serial8250_interrupt+0xf8/0x1b0 [ 480.588570][T12586] __handle_irq_event_percpu+0x229/0x7d0 [ 480.588587][T12586] handle_irq_event+0xab/0x1e0 [ 480.588603][T12586] handle_edge_irq+0x3ca/0x9e0 [ 480.588617][T12586] __common_interrupt+0xd0/0x2f0 [ 480.588635][T12586] common_interrupt+0xba/0xe0 [ 480.588653][T12586] asm_common_interrupt+0x26/0x40 [ 480.588666][T12586] pv_native_safe_halt+0xf/0x20 [ 480.588679][T12586] default_idle+0x13/0x20 [ 480.588695][T12586] default_idle_call+0x6d/0xb0 [ 480.588711][T12586] do_idle+0x391/0x510 [ 480.588725][T12586] cpu_startup_entry+0x4f/0x60 [ 480.588741][T12586] start_secondary+0x21d/0x2b0 [ 480.588760][T12586] common_startup_64+0x13e/0x148 [ 480.588775][T12586] [ 480.588775][T12586] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 480.588792][T12586] _raw_spin_lock_irqsave+0x3a/0x60 [ 480.588813][T12586] serial8250_console_write+0x181/0x1890 [ 480.588831][T12586] console_flush_all+0x801/0xc60 [ 480.588847][T12586] console_unlock+0xd8/0x210 [ 480.588862][T12586] vprintk_emit+0x418/0x6d0 [ 480.588878][T12586] _printk+0xc7/0x100 [ 480.588889][T12586] register_console+0xc2d/0x11b0 [ 480.588906][T12586] univ8250_console_init+0x5f/0x90 [ 480.588920][T12586] console_init+0x14f/0x680 [ 480.588933][T12586] start_kernel+0x29f/0x4d0 [ 480.588944][T12586] x86_64_start_reservations+0x18/0x30 [ 480.588957][T12586] x86_64_start_kernel+0x130/0x190 [ 480.588970][T12586] common_startup_64+0x13e/0x148 [ 480.588984][T12586] [ 480.588984][T12586] -> #0 (console_owner){-.-.}-{0:0}: [ 480.589002][T12586] __lock_acquire+0x12a6/0x1ce0 [ 480.589022][T12586] lock_acquire+0x179/0x350 [ 480.589046][T12586] vprintk_emit+0x4e5/0x6d0 [ 480.589061][T12586] _printk+0xc7/0x100 [ 480.589072][T12586] should_fail_ex+0x4e7/0x640 [ 480.589087][T12586] strncpy_from_user+0x3b/0x2e0 [ 480.589099][T12586] strncpy_from_user_nofault+0x7f/0x180 [ 480.589116][T12586] bpf_probe_read_user_str+0x26/0x70 [ 480.589136][T12586] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 480.589146][T12586] bpf_trace_run4+0x252/0x5b0 [ 480.589160][T12586] __bpf_trace_sched_switch+0x145/0x190 [ 480.589176][T12586] __traceiter_sched_switch+0x6f/0xc0 [ 480.589191][T12586] __schedule+0x183b/0x5de0 [ 480.589203][T12586] schedule+0xe7/0x3a0 [ 480.589214][T12586] schedule_timeout+0x257/0x290 [ 480.589232][T12586] __skb_wait_for_more_packets+0x36a/0x5e0 [ 480.589254][T12586] __skb_recv_udp+0x499/0x940 [ 480.589269][T12586] udpv6_recvmsg+0x429/0x1880 [ 480.589286][T12586] inet6_recvmsg+0x444/0x6a0 [ 480.589303][T12586] sock_recvmsg+0xfe/0x250 [ 480.589320][T12586] ____sys_recvmsg+0x218/0x6b0 [ 480.589337][T12586] ___sys_recvmsg+0x114/0x1a0 [ 480.589350][T12586] do_recvmmsg+0x2fe/0x750 [ 480.589363][T12586] __x64_sys_recvmmsg+0x22a/0x280 [ 480.589377][T12586] do_syscall_64+0xcd/0x4c0 [ 480.589391][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.589405][T12586] [ 480.589405][T12586] other info that might help us debug this: [ 480.589405][T12586] [ 480.589409][T12586] Chain exists of: [ 480.589409][T12586] console_owner --> &p->pi_lock --> &rq->__lock [ 480.589409][T12586] [ 480.589430][T12586] Possible unsafe locking scenario: [ 480.589430][T12586] [ 480.589434][T12586] CPU0 CPU1 [ 480.589438][T12586] ---- ---- [ 480.589441][T12586] lock(&rq->__lock); [ 480.589450][T12586] lock(&p->pi_lock); [ 480.589459][T12586] lock(&rq->__lock); [ 480.589469][T12586] lock(console_owner); [ 480.589478][T12586] [ 480.589478][T12586] *** DEADLOCK *** [ 480.589478][T12586] [ 480.589481][T12586] 2 locks held by syz.0.1588/12586: [ 480.589489][T12586] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 480.589524][T12586] #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 480.589557][T12586] [ 480.589557][T12586] stack backtrace: [ 480.589565][T12586] CPU: 0 UID: 0 PID: 12586 Comm: syz.0.1588 Not tainted syzkaller #0 PREEMPT(full) [ 480.589582][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.589592][T12586] Call Trace: [ 480.589596][T12586] [ 480.589602][T12586] dump_stack_lvl+0x116/0x1f0 [ 480.589618][T12586] print_circular_bug+0x275/0x350 [ 480.589641][T12586] check_noncircular+0x14c/0x170 [ 480.589665][T12586] __lock_acquire+0x12a6/0x1ce0 [ 480.589688][T12586] lock_acquire+0x179/0x350 [ 480.589708][T12586] ? vprintk_emit+0x4d4/0x6d0 [ 480.589723][T12586] ? vprintk_emit+0x4c2/0x6d0 [ 480.589740][T12586] vprintk_emit+0x4e5/0x6d0 [ 480.589755][T12586] ? vprintk_emit+0x4d4/0x6d0 [ 480.589771][T12586] ? __pfx_vprintk_emit+0x10/0x10 [ 480.589787][T12586] ? __lock_acquire+0xb97/0x1ce0 [ 480.589807][T12586] _printk+0xc7/0x100 [ 480.589818][T12586] ? __pfx__printk+0x10/0x10 [ 480.589830][T12586] ? __pfx____ratelimit+0x10/0x10 [ 480.589844][T12586] should_fail_ex+0x4e7/0x640 [ 480.589859][T12586] strncpy_from_user+0x3b/0x2e0 [ 480.589870][T12586] ? lock_acquire+0x179/0x350 [ 480.589890][T12586] strncpy_from_user_nofault+0x7f/0x180 [ 480.589906][T12586] bpf_probe_read_user_str+0x26/0x70 [ 480.589925][T12586] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 480.589936][T12586] bpf_trace_run4+0x252/0x5b0 [ 480.589949][T12586] ? __pfx_bpf_trace_run4+0x10/0x10 [ 480.589963][T12586] ? __lock_acquire+0xb97/0x1ce0 [ 480.589985][T12586] __bpf_trace_sched_switch+0x145/0x190 [ 480.590000][T12586] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 480.590015][T12586] ? psi_group_change+0x4d0/0xbe0 [ 480.590041][T12586] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 480.590058][T12586] __traceiter_sched_switch+0x6f/0xc0 [ 480.590073][T12586] __schedule+0x183b/0x5de0 [ 480.590089][T12586] ? __pfx___schedule+0x10/0x10 [ 480.590102][T12586] ? find_held_lock+0x2b/0x80 [ 480.590117][T12586] ? schedule+0x2d7/0x3a0 [ 480.590129][T12586] schedule+0xe7/0x3a0 [ 480.590140][T12586] schedule_timeout+0x257/0x290 [ 480.590158][T12586] ? __pfx_schedule_timeout+0x10/0x10 [ 480.590178][T12586] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 480.590191][T12586] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 480.590210][T12586] __skb_wait_for_more_packets+0x36a/0x5e0 [ 480.590230][T12586] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 480.590251][T12586] ? __pfx_receiver_wake_function+0x10/0x10 [ 480.590270][T12586] ? __skb_recv_udp+0x734/0x940 [ 480.590285][T12586] ? rcu_is_watching+0x12/0xc0 [ 480.590302][T12586] ? __local_bh_enable_ip+0xa4/0x120 [ 480.590322][T12586] __skb_recv_udp+0x499/0x940 [ 480.590337][T12586] ? find_held_lock+0x2b/0x80 [ 480.590350][T12586] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 480.590365][T12586] ? __pfx___skb_recv_udp+0x10/0x10 [ 480.590378][T12586] ? avc_has_perm+0x144/0x1f0 [ 480.590389][T12586] udpv6_recvmsg+0x429/0x1880 [ 480.590404][T12586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 480.590417][T12586] ? __pfx_sock_has_perm+0x10/0x10 [ 480.590431][T12586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 480.590444][T12586] inet6_recvmsg+0x444/0x6a0 [ 480.590459][T12586] ? __pfx_inet6_recvmsg+0x10/0x10 [ 480.590474][T12586] ? __pfx_inet6_recvmsg+0x10/0x10 [ 480.590489][T12586] sock_recvmsg+0xfe/0x250 [ 480.590502][T12586] ____sys_recvmsg+0x218/0x6b0 [ 480.590517][T12586] ? __pfx_____sys_recvmsg+0x10/0x10 [ 480.590534][T12586] ? __lock_acquire+0x62e/0x1ce0 [ 480.590551][T12586] ___sys_recvmsg+0x114/0x1a0 [ 480.590562][T12586] ? __pfx____sys_recvmsg+0x10/0x10 [ 480.590574][T12586] ? find_held_lock+0x2b/0x80 [ 480.590590][T12586] do_recvmmsg+0x2fe/0x750 [ 480.590601][T12586] ? __pfx_do_recvmmsg+0x10/0x10 [ 480.590613][T12586] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 480.590627][T12586] ? __fget_files+0x20e/0x3c0 [ 480.590641][T12586] __x64_sys_recvmmsg+0x22a/0x280 [ 480.590653][T12586] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 480.590667][T12586] do_syscall_64+0xcd/0x4c0 [ 480.590679][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.590690][T12586] RIP: 0033:0x7f32e318ebe9 [ 480.590698][T12586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.590709][T12586] RSP: 002b:00007f32e403d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 480.590719][T12586] RAX: ffffffffffffffda RBX: 00007f32e33b6090 RCX: 00007f32e318ebe9 [ 480.590726][T12586] RDX: 040000000000029d RSI: 0000200000000600 RDI: 0000000000000009 [ 480.590732][T12586] RBP: 00007f32e403d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.590739][T12586] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 480.590745][T12586] R13: 00007f32e33b6128 R14: 00007f32e33b6090 R15: 00007ffdd176b848 [ 480.590754][T12586] [ 481.776845][T12586] CPU: 0 UID: 0 PID: 12586 Comm: syz.0.1588 Not tainted syzkaller #0 PREEMPT(full) [ 481.776860][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.776866][T12586] Call Trace: [ 481.776873][T12586] [ 481.776878][T12586] dump_stack_lvl+0x116/0x1f0 [ 481.776895][T12586] should_fail_ex+0x512/0x640 [ 481.776909][T12586] strncpy_from_user+0x3b/0x2e0 [ 481.776919][T12586] ? lock_acquire+0x179/0x350 [ 481.776937][T12586] strncpy_from_user_nofault+0x7f/0x180 [ 481.776951][T12586] bpf_probe_read_user_str+0x26/0x70 [ 481.776968][T12586] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 481.776977][T12586] bpf_trace_run4+0x252/0x5b0 [ 481.776989][T12586] ? __pfx_bpf_trace_run4+0x10/0x10 [ 481.777001][T12586] ? __lock_acquire+0xb97/0x1ce0 [ 481.777018][T12586] __bpf_trace_sched_switch+0x145/0x190 [ 481.777033][T12586] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 481.777049][T12586] ? psi_group_change+0x4d0/0xbe0 [ 481.777067][T12586] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 481.777082][T12586] __traceiter_sched_switch+0x6f/0xc0 [ 481.777095][T12586] __schedule+0x183b/0x5de0 [ 481.777109][T12586] ? __pfx___schedule+0x10/0x10 [ 481.777120][T12586] ? find_held_lock+0x2b/0x80 [ 481.777133][T12586] ? schedule+0x2d7/0x3a0 [ 481.777143][T12586] schedule+0xe7/0x3a0 [ 481.777152][T12586] schedule_timeout+0x257/0x290 [ 481.777168][T12586] ? __pfx_schedule_timeout+0x10/0x10 [ 481.777186][T12586] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 481.777196][T12586] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 481.777213][T12586] __skb_wait_for_more_packets+0x36a/0x5e0 [ 481.777232][T12586] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 481.777249][T12586] ? __pfx_receiver_wake_function+0x10/0x10 [ 481.777265][T12586] ? __skb_recv_udp+0x734/0x940 [ 481.777277][T12586] ? rcu_is_watching+0x12/0xc0 [ 481.777291][T12586] ? __local_bh_enable_ip+0xa4/0x120 [ 481.777310][T12586] __skb_recv_udp+0x499/0x940 [ 481.777322][T12586] ? find_held_lock+0x2b/0x80 [ 481.777334][T12586] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 481.777350][T12586] ? __pfx___skb_recv_udp+0x10/0x10 [ 481.777363][T12586] ? avc_has_perm+0x144/0x1f0 [ 481.777374][T12586] udpv6_recvmsg+0x429/0x1880 [ 481.777391][T12586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 481.777404][T12586] ? __pfx_sock_has_perm+0x10/0x10 [ 481.777419][T12586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 481.777432][T12586] inet6_recvmsg+0x444/0x6a0 [ 481.777447][T12586] ? __pfx_inet6_recvmsg+0x10/0x10 [ 481.777462][T12586] ? __pfx_inet6_recvmsg+0x10/0x10 [ 481.777477][T12586] sock_recvmsg+0xfe/0x250 [ 481.777491][T12586] ____sys_recvmsg+0x218/0x6b0 [ 481.777507][T12586] ? __pfx_____sys_recvmsg+0x10/0x10 [ 481.777523][T12586] ? __lock_acquire+0x62e/0x1ce0 [ 481.777540][T12586] ___sys_recvmsg+0x114/0x1a0 [ 481.777552][T12586] ? __pfx____sys_recvmsg+0x10/0x10 [ 481.777563][T12586] ? find_held_lock+0x2b/0x80 [ 481.777579][T12586] do_recvmmsg+0x2fe/0x750 [ 481.777591][T12586] ? __pfx_do_recvmmsg+0x10/0x10 [ 481.777603][T12586] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 481.777617][T12586] ? __fget_files+0x20e/0x3c0 [ 481.777631][T12586] __x64_sys_recvmmsg+0x22a/0x280 [ 481.777644][T12586] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 481.777658][T12586] do_syscall_64+0xcd/0x4c0 [ 481.777671][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.777682][T12586] RIP: 0033:0x7f32e318ebe9 [ 481.777692][T12586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.777703][T12586] RSP: 002b:00007f32e403d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 481.777713][T12586] RAX: ffffffffffffffda RBX: 00007f32e33b6090 RCX: 00007f32e318ebe9 [ 481.777720][T12586] RDX: 040000000000029d RSI: 0000200000000600 RDI: 0000000000000009 [ 481.777727][T12586] RBP: 00007f32e403d090 R08: 0000000000000000 R09: 0000000000000000 [ 481.777733][T12586] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 481.777739][T12586] R13: 00007f32e33b6128 R14: 00007f32e33b6090 R15: 00007ffdd176b848 [ 481.777749][T12586] [ 481.779499][ T5933] usb 4-1: SerialNumber: syz [ 481.787226][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.024125][ T5908] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 482.193731][T12578] bridge0: port 4(macsec1) entered blocking state [ 482.197831][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.208614][T12578] bridge0: port 4(macsec1) entered disabled state [ 482.215328][T12578] macsec1: entered allmulticast mode [ 482.220899][T12578] bridge0: entered allmulticast mode [ 482.227074][T12578] macsec1: left allmulticast mode [ 482.232362][T12578] bridge0: left allmulticast mode [ 482.238902][T12578] bridge0: left promiscuous mode [ 482.265051][ T5908] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 482.302007][T12585] IPVS: using max 120 ests per chain, 288000 per kthread [ 482.362363][ T5933] usb 4-1: config 0 descriptor?? [ 482.744205][ T5947] usbhid 1-1:0.0: can't add hid device: -71 [ 482.750196][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 482.760916][ T5947] usb 1-1: USB disconnect, device number 63 [ 482.816241][ T5908] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 483.597509][ T5933] usb 4-1: USB disconnect, device number 50 [ 483.880982][ T5908] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 484.394270][ T78] usb 2-1: USB disconnect, device number 78 [ 484.400525][ T78] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected