last executing test programs: 8.552348435s ago: executing program 0 (id=3861): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (fail_nth: 1) 8.372344681s ago: executing program 1 (id=3862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) r4 = getpgrp(r1) prlimit64(r4, 0xe, &(0x7f0000000000)={0x800000000000005, 0xf}, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/185, 0xb9}], 0x4, &(0x7f00000005c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000680)=""/131, 0x83}], 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r6, 0x3}, 0x12) 7.496677257s ago: executing program 0 (id=3865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x587, 0x0, 0x7d}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r3, @ANYBLOB="6465ebdf5e119905d7bf6b33af45af2019ef5ff937c4b6d07a7430672f42429c4838e42862f40125c7d7a0a2c33b9b3e4559b4efc29aaf74636ddf7789b04134e46f6140d35bce07000000000000e3fdcc588769245c8dbfee9b28574ebb7b3e1759b56cab07bde9c4d4ed4fe6f18cf0cdb5865fa8c2940911ed45a44d4839d79117000012d5ee2009d37bfa71de61208950bb1545db1eb675a2d1bed73c44635d163cf0f2732e23c974fa64fc77377338675b65ea4169cd0be3", @ANYBLOB="01000080d34100000000000006000000000000000000000500000001000100667573650000000004bf63c68c985ade89f2c6dc5e61ee133f0dc14e26f43b64c86068168535587ceec551c4301ae3af2814de981da4bd1e54e2a39a1b6d0e8b07f03a0ccbcef9f63abeca7e25012d46563ae14cc6e3a18978e0730bfc882200c824396944ee46e9877c3059dc7297fea3b8c85487e96a56a372dc536c3e1a520203b456", @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESHEX=r3], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd5) r8 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x1, @name="2114fd8b83eee70000e2ad51db638a23ac8f4292198c0b7f2254e5ded74a9e78"}) r11 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc", 0x18, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r11, r12, r11}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) 7.105867953s ago: executing program 1 (id=3866): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x1e}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) syz_emit_ethernet(0x66, &(0x7f0000004680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x30, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x2, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x11, "e6673fcf0b051e0000000000000000"}, @fastopen={0x22, 0x9, "6f6007d68673ad"}]}}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 7.016337251s ago: executing program 4 (id=3867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) r4 = getpgrp(r1) prlimit64(r4, 0xe, &(0x7f0000000000)={0x800000000000005, 0xf}, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/185, 0xb9}], 0x4, &(0x7f00000005c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000680)=""/131, 0x83}], 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r6, 0x3}, 0x12) 6.457549167s ago: executing program 2 (id=3868): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e0e0000108000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x40) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) pread64(r4, &(0x7f0000000040)=""/138, 0x8a, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x800, 0x5, 0xffffffffffffff81}, &(0x7f0000000480)={0x800000000, 0x7, 0x1, 0xfff, 0x2, 0x8, 0x68, 0x400}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0xfffffffffffffe86, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 5.702191895s ago: executing program 4 (id=3869): socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\b\t\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYRESOCT=0x0], 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00ff0015000100000002000500"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000780)=""/68, 0x44}, {&(0x7f00000027c0)=""/4112, 0x1010}], 0x3, &(0x7f0000000800)=""/227, 0xe3}, 0x2}], 0x1, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) (async) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000240), 0x0, 0x0) (async) semop(r3, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="b16950000000000000004a"], 0x14}}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) (async) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) link(&(0x7f0000001240)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) (async) socket(0x10, 0x803, 0x0) 5.384484156s ago: executing program 4 (id=3870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a", 0x4e}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3.801820779s ago: executing program 4 (id=3872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010028bd7000fe52812500000000", @ANYRES8=r0, @ANYRES8=r0], 0x20}}, 0x4050) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket(0x2, 0x6f87f2fbefb3af9a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002300)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000500)="40664613a479c13a0fc21466bad04988239d2207977d1aceca1e26dcf030b2040ee64e1b34d413cbbd33c39d28dbbc020000a1794d14f60121d30699376d874603e620c68c64664ef6c24ac88ab36f7ca935a0fc00539ad12697c2e954a8e8e38c2d2cfc6ff14e6e4e3b70973ca52c48ccf2f9e97591050662f1e1db5da68c391777b9c862ed3853a0e662607a2194bb41a1787b5b37f0135c7e516d10a6ed38b788657ea8922980576db1", 0xab}], 0x1, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r0, r2, r4, 0xffffffffffffffff]}}], 0x28, 0x20000811}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="8ad7ad95c6e9d17fbcbccfae452837e9bfb4a49754f7133031007b8d54a59f701e15337706bdc67ba81d6ba445a45dd2f07d53fa7f0c2b5b2db344ae40ca8317fcacbaff899e7aeb8ee0096e90192ac4803054a4f21f92030bd4648f653624e91d00efa7832cb4ab2b107f", 0x6b}], 0x1, 0x0, 0x0, 0x2002c9c0}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)="c402b3a2db618de6ea8ea55d1a9b8ecc8a48cb0c0e014d47a96482d1faab6c8b5d6513350a1a28c8a55ac2ab9d09190174f6661f7b9e54c39bc101b9c1486505470026ba67b718746ebbbd8a5a24704f53c3e88d58775fcc36b060a208ea9f5b22133791cc3a58d6c6457e420a39d388fee859d2b9369091fe96258783", 0x7d}, {&(0x7f00000007c0)}], 0x2, &(0x7f0000000c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r5, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x20000000}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="9fefc591178051427ee5afa09faf4ddd9c0e7e13dae842084eeba5364e99683b5585397b35771abf9950eb11251a0976bb7d135025c2983e2fc81be04abf7c0e61e7eda1305a3ee9c6b15beb0c3663609ab787236915f5071b9a2901dfd72975a0c2c0eb645b98a5edea37c7832fb0379b0d67eabe2d7c74365462f5191ba9c1d0f9ac7d39ac276372e5665dcd807a7770203e9b70e3597a13ac9abeea9af32d6462439d2af1b7b37b0286f0d316a86348f554b0323e973ba2686724a9304682bdedceed8d01450e3e23b81c244ee53f3e8a4e5dfa1f6758d38e64af15a61e14cee897", 0xe3}, {&(0x7f00000025c0)="1cfa80364b6dfed9457f13b6bdf752e869254c4d54247b5b4599378d2346cd9fdd97376571a5d91419c09656872bd76fbbc47cc749c3476ea9a170ae05a47250388d31fec2393b74673b4380adc6933860b8b63988e4cb09289815e97c919fab3a184a8bad9fbff7fab5cd69d92116a1804942c078c4a4f8dd7b9f99e45c19eb0d7a0f5d53057b703bf9beac17def3c89157592a763e66e39d6705703ebb9e7fe94bb79d51b5a94c8ffc3b1adc4c56bbd0602278f2d1e9c7076df94401969be1d688815978f6b1a9c56a5bc7dae021e83cf01bd0d708e1e005369af5fc55f26124f30ff16f4bb6609189593a0fc7878c6bf5a7293aae77143c3c6ab56b57bddbd76d4bc4b9e8f3ffcee456b7f758047d131098410379f51f2e99f62c265cbc3e65c3046a1a3c6e5b7de4afcda8044e49aea4cc169ac1dde8cce7af5309ae6ee75620973fc761198d256a9cdd58ff91707bf76f11bf0b60a5cce1d28ea0448e5e38d8f3edea714408148e632cbb37d78edb85297ca596e31fda99a592fbf0a168e4ff2ef1601773f2d6798a1eadbe445cf35b65b494a19ee4ab907ef7274c550d882aa7453b9b59705958e519c0637e37bd1813d27d9c75255bf1e429bc0da695a497127e63fe074d27a12581676bab91e8f222aa5b57ceda1e652c1bb33e3cb98e29da53975b389218a14401dfba836fd55a4771e788675f21628205b84974aeefdedb0d87082ef28cac5da850db3b1756eb1ae683a482e62c33479a55214abb318f131e31d6909e82768f4add599b5379082c6b8ec36db4dd3ad27eba36059457edc88533bf10c2270a71fdb004ced6402aaffbeedd0837a2f35233562bf5ae6bfc2dbb7fbde4a625e0988f86f32df7848525481265cc89a24b1c867289d6b42613eb9b217fabfcdf71f02dbdd3605d2d60c778b4a8861d9446288fc31f0e7de9245927eecf150620ee112bbebb84b5c53e63302a07a581096f4262aa600fb84f08a3c1723d9370db285abd4ad2af27dee7578a4208f7e4c8c73b0add8156b80bf75076afd7c809d3dc1143f9a607cd11e7545092fd3ed5f91e1182bd7e3a6cba8df7982790d5f65c5d7d5f520f04450f1256cdde70cf365f86f05e3fecbc11a0d74592dc344e475087fa227a760a86ab4d5fea2713b795d41d6b8ba0cfbabf4689f99bb64523fe3e3675e14641c2718afe160233aad34dff92c0dc546ee0a6448cef69e4e2dcd71cf8ab4a8c5ba909be033d313474dc133f1b0cbeec423192bb88ef408580c1496d5218c58ac1d28559f229855cfe6777e48fc4f9db2cbab67ec5a08edacd36ab883024818e54908a75593618334e75e2e7f27db2704c1abd8eb92c4da16e10b9106c9cfd9981eeeb3e79844958565d6e0a81ba56aeec3b93270dd8b8a2b6fbce5e53e6e8c822de4a1471ace4174dbc739a52d439904fb38ff7b82d8feceb6e982edf37d2e63cb5f885cd6075349cb530e74087396df8a4a9dd2190b9cce6bef7d8850758caea7da504c382a1eaaa0e6cad7da2ad61b62f98b086a0f6455fa5d037191e4a46233f8f1a8efae0231ea54561c13c2e2bbbf0b24f650c9d0a619c60fa5c3b10b88f8637925e72720e66c9080a6492006cd616da98d2226f08c5125f89ce65ea178796ab9ae7f47e03f2349f843fd1d3fb9056297221775d446dc18f82558c74feaa02fbe12dc08e6be305d89eda647bac8403fb86a314b5d618f49ac27f8104a59d449e42b4013eb36ef7b2042df30f866f3614fe2a14a5c803523ddffaae78290e4968f4ee868d6128d3901587e2a908d79fc86e6e999ab42d54dc62ac7e92f4150578ce5be95797916d77077041e132f5f50500288fd2b3c80d915842fed10c1c20839034abd3c2c4ca87bf148fe5da20a3899d54393179b2b4e249bec19c546984408004d733f483349fee489bdcc98090f91d12272170f81401a2de208e3d3001ffc5a533eb0eda98fce6eabb7afc75a1260fd7f14fa75cae1a9004860d76765cc227f8bc4a82c05be77cf45a05bad147dd349483abc427f173d6fa211714bd02e0278824aa0818bac0214232e1e2df504787d096a57148ba22d14925f0d6558ec2ffc3d54829b32b34b5cf3e6d47d730002632f486be75b864041df27ed158f48f0728b071a4307b36cca3f48aa5e3c5c82d947c605b97d35cc0390871fe98611521a487cce9290f3bcfdf5eeedf0ed29331fba98bc5a74a7de4a46eda6321e0337e8472e728113617121398acbe47b0479069ed4d8abe9229daa5fc5807b96ab7fa4938517f35264e351ef751eb07f87cf9ae94c31e621b637e251a81187f7816c77d885cbe2628fc4129178e87e1d9de20565f00d1ccd17082ee4385647a1aa5e99179dbf9b6c95b9733b2e8c4a60f0d49c8ef01a9279092009b3fa029f961626c2e74a7c9696c523412284dd30470514634252f0ca578b41d5c52ea706816e2a5fa43a50b3a51c486644991c6ed3027942132dd0e3c12b4031bb955f5dd82cbe81bb0f878f3143ca4d5f0ed0f278267b17e85f5de65bffd8c5917f334a8dfa7f5ee23e8436070713625b4b5f60194e7b8355a5de4dec3d2bb51e4048c24ac1447333a5cfabd594fabd8b3f54a9936de5e922a3beb7b4e1512c18cc1bb08afa53517f64e755e4ea7b0bd4e052fa781d92694e4ec7ed31288fab4b1ec66f180c7d7e3052b558cda23d4c0074d770d84793f56503c24ccb7813f40fb23aba7646a13cb2922c49c54908411d31ea60703b7f923c2f28eae98131a58cf065148e7901121fbe485dec67fda9c770920baf27e759350e59fde6a0f3055a1657dd40435f77a1f3309a5a15f9fd8d74f5f128f25ba9649eb01ba54e1c90d71c00823b0571f506bb49e69248fa95d2173263cbbb65f6bc6751f6966eb37c6ed04ab1108a9efd5298d0d9826e140be3afad285ef66788c939531fe8341bb5b158b0b84c493ab8d7e83110f1379a1f9be2bdcbc24d3463bbaf8d2b2225e6c9d56844e3f293d070e03cf6b66b21bb8064b31a581d0dc3ab27751e648ba0ee1b92e4d9e91bca27ead60cd168d0fe26859a391fa3884b2c3806ecbd29f0abec7429a6a6e584103feb13e794d5ae3ca94d7ecba6a5ceff5d30019b3e057c52e36816adbd711bffe0132744128b4fcce3112aabb0e4ac4e13ea5e41a47a04145a5f51d908899d0bafcfdef0f0bc8daac3948e3284757b2248b577af000db16244de35e3cc97ab779b7337243a1cb16ec147bf636661730f9200f5215dc2ffb252ae9fe4a6c889f27e5d4128fde8cbc9afd5f13c0091b634fdd14043632864c443e92a8ab63e9679461bb319fcf82c20aa605eddc783bab58b5dd6b8cc024c416955a4eb4085e870deef73332ece6efc6345c8b66acd0a6dabc8c03e2352a633e75d0f97fd98428c6cb5e9bbbb156baf033966e254e327875d8d80b45acda5fca334c5e2fb5a74ccbe5fddd69882cefb5967b38e503a4379f9528ec29f49c70f68b2099a8c21a01250dc94f8e112eff75eb8587998258eae592e51ff2153b3df782e3fe10ac8e129bc444d13aa621c41605ac42959e0d120f104c3a14dbc3491aec356c8fd0acc1c6efb57a3e8c546c9b3620010444cd32b19c792600f13ade3144e482477e4da8421a1bf3d7f3a3aed6c1a2f21f055f0614ba36b9b26d499bedf09fc590950d505bc9fd480edbd4e5ec1d15e208bdf30f222baaa6335a24648b1718c5f5ff2893cba9209209f5e4b36e74b6ce75f1c315e678b46c539c53d1268d22613777b47996afe519107a5b0ba3fcb0cbcc04c9eba0525ef3cdb93598764c49217aa912c52302565c1c55bf5401c3f2773aebda7a93079ff6af1baa8b5b53edff86252ce13eae99f8588fa7b729fcd6523e2992f73cd8851b36d7cb3de02f1ad2252b3ffb6993f3b33680241da6512574f9483040d51c330fa3dab1e08c59a016b1ede01010c14ec5876fbf8edef2d9efd7ebbfa295c709695b955183a21ca0fbd91503cb33e410bb4eb5ee081044ee9f9091422ee6e8ff363a7835e853cbdf337bb8d5190211aa45c57b48f5d435d3c70de84832dcb343ed49e9f1f832cf7b51ab83756cc6569ded48fe701079070d4e2b0d3021b3dafc366e38f109de5773003bfd90ebfbbb8b434bdf59edcf86a0e36a52db0457abb41b4c97c7a04936a55b2fb66c5d4c5b84fdc3507c3f3f7b3a2599b5556b7a016de31d4119d6e95c12a6809972e7698a3ad2e2960a71c0b7df53ab56cc079ecab17c2d82f3e52cf9f6562cc35158c29a7340cd8d92bc71769d3f2157a3b4d3419f386010e0ee50f3b05429a095fc26d2fa9c98d0c9667707918619552480a639ae78ba23dfb51aff8b81b1f1ede5af5f17977a8994c76f27a43a7e3200e95e190303d089f3e68bf343ff4c1fa3def32ab939dd5b3d4ceeff0e74d288cbe52a4f4bbf2188c562e20aa26398b9aa0e22912d82799d558c2e53d17f9579b52708407c9edf82dca2555e8955cc79b5723ccfcdd32911e6c7cb814a92059a04a4a631743eb1947a46de6e4c317878a337cd54f3c3f6207cb3bd5f18ae1922c58e88f702b757e7b4075657402f25c24920149b9376d901f5884a9f2a889744af59601df68e6f356831fee21816cb60d062b683e4c2f6888e96e2dcc5c35af5aff1ab208d41fa02250809bb9717e9341cc7b62a9dbb8e1f64e1b2426beb40041b2803c6c8aab8425c24ba650617ab4637622e4031060761db08b2f051caab44e829bd347a4d6f46c775f789fac965be2d697d51cd3a83f4a69a38b1673c487d6078fb263a5d138e3cc9a58e16bf61b298dca67914d32ee117a354bbf9794e575b3fd62bfa8818cb21f8a9cf4faa959944e90b19fbca53cd8bece644fe1ae70fa89c5a3c05074c5ffa3a92aab4c54bdbb407b6507739b9f98a4f7cb2365919c1aa80ea11423dace719af8338b0c4318f8e8ce526e44ab5c8f82e0e64a56c3d56e3fcfa10d102afca0bd3e0bea06586282faa14eb61416dc82338b79ec68369a764270d6b9f3059be29d8cd8838f479c753fb4d2f1e51917641658443e131cd3e9f97c8240ebafda8f64e3dc5e9ec84b3eb84b33e98aa41c2b31cdc99b9b26d784dd52cdfbc5e89fa460802a9477e8efc9dabc3317547da020338ec94c91b20097201aa1c8a2d4a64e3f78de80591ddde79874bf5c3d22dddf5b3d036142f1486333e1654f1cef70e9631a3e03dab6a3b3c0a9fedc37512ad9390204d09cddc9583a2020f1ccc5447b316df29444a398aed9cc61475e3638aabe83aa01f864e17c0df56021098c27e5b6c591e15ce12c3cfcc111894bcda0274480254b8463de7b696cc61c4c4cd926a4e8c98b972e6f2c920cbc8e4fb139691d6542a50a5008bccd5db892912d6e70f01a603d03efc0cde327c012e9551d672e637e63652163f55dcf350e77538467e98bcc47306f3165eb4325c9be7bcf23041ed684d8030330d4ba2a9cc08e0a9f4b1fff4af84123ddb045911a1b2e7179129e5c86ca1733dee48cc51727049000b0df484acb2503dd0292c48d8184daf469539f9d44695f9067d4d13a07b148901af18d74dc0754ce8627e475af830d3164922f5abe9ef5365fa3f1a3a32bcda228a1a1a166e8b0afe00f4cf49a0c1fae1ecc747668cc79a03e8c2007189719f53507650608039e6f367586bd53e79d922b028539863266e03a6f70ca1ac88fcfa1d1751fe4edf82d0c2afc82c1891587e50928ab2a0818f8e235cd1cf315a0dd0248109f09b81b592822652c3e30c60378bb3dd5ce9ffa68cc844", 0x1000}, {&(0x7f0000001e00)="7d6a85f51fe8ab68e2a5cb3b02d79b9d3e31748dfc6231b05dd71359c5045e4ab2c8c610ff8dced4a860de223703eb3ad003e1ab50c578182c7765e870f841fb7110f05fb11ebce568c6393c78eaa203e68b658f51d5b57af1efd4994d3a03d5c143fd845a22e559f9817db9bce6bee13ec8a6dd49d189bb39c32115423aa6e3f377db19f2697339e68dff282bb4611535c0120e1fe3363677fe0ba91c7ffd9404a4f26fd4cdd9436a41214ede86d39f66675224878b8074076d2509bb4a3acd4c100ac59066fe039f6379a393ba82b4591b8c1b6a211fdbe36325", 0xdb}], 0x4, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r5, r2, r0, r5, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, r3]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xc8, 0x90}}], 0x4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000340)={0x8000000, 0xe, 0x3}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x672182, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000000)={0x8080000, 0x14000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x1000000, 0x3}, 0x0) 3.643892602s ago: executing program 0 (id=3874): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000006c0)=0x5e3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xbe4, 0x0, 0x6e, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x40, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000cc0)={0x1, 0x0, {0xfffff982, 0x8, 0x300f, 0x9, 0x7, 0x0, 0x2, 0x5}}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) connect$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 3.280522186s ago: executing program 3 (id=3875): r0 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 3.1404873s ago: executing program 1 (id=3876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) r4 = getpgrp(r1) prlimit64(r4, 0xe, &(0x7f0000000000)={0x800000000000005, 0xf}, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/185, 0xb9}], 0x4, &(0x7f00000005c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000680)=""/131, 0x83}], 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r6, 0x3}, 0x12) 3.048749889s ago: executing program 3 (id=3877): keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000280), &(0x7f0000000500)="78e56f648c3fe5df5d0a41e4d50090c434d8aaa93e95e3fec9e142d5e568ee20ef97fe1e4029509f12f4ee3f9408201ab86c8206da0a0015afaef636c067416fb640d1f702fb06414c5ea3c5df11f965fba989449582628b42d9fa7bb61f29d4f73b8f0dae43436a085317b2cabd79e5847c06165701f78bd9d22329bd7ec66d3eb1be78e8521232da6264155189757ce8db2d1fdd45d03d9900"/168, 0xa8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) 2.378212724s ago: executing program 4 (id=3878): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x4da06c03) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 2.214836848s ago: executing program 4 (id=3879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000010"], 0x50) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8b04, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000140), 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14}}, 0x3c}, 0x1, 0x1200, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341d0400000000000001090224000700000001090400000103000000092100000001220700090581030000000003"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002400), 0x20000, 0x0) read$FUSE(r7, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000029c0)={0x658, 0x0, 0x0, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, 0x0, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0x8, 0x2, 0xfffffe01, 0x3000, 0x2, 0x0, 0x0, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, 0x0, 0x0, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, 0x0, 0x0, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, 0x0, 0x0, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x20006, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, 0x0, 0x0, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf53, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, 0x0, 0x0, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, 0x0, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) syz_fuse_handle_req(r1, &(0x7f0000004600)="d8de4df75f0630c73d4f2c068c78fbc280c703581d2db55a566fd10ebb4047b3db1f5446cfc730e88e3765c04565707c8d96dcb414569021178e1d7305e254fad079365471e74ac181c4d712bdc253cf2ab9e6e032368faad3931f4abf234b89af7ab23b8f0f6a84d03513aec8a848ef0387486c84d1763db333f5d1a8eaa65961995a79114f8094621ad6696d405b8dca8873c99a35a09ab20661eeac5ccf16972edb55a20daebb8a02067467e068d85acfbcfb1bf8c7cd0e3b1e87ed0c55ef340038300830d764779dd064ce426a9b88fba61a1cb0f12b9ea6726c60129f3b9b12d5177f1d29fa953f9ec914d997cbcb7efefe3d0e050c49e0c34be386e29596729927d3d12bf8ec6080c16ed9cb020438b1cc9201949d18d50e69df7d11e5b56df8751a09e3835eef9b4de06c88443aa79015ce2c5a88cd23dfb9b596ef6e05f192c37409e9db5b86eb1eaa7582a6d49d92e82079e0c1878c4fc5a4256311ed373226b3399ffa71408598dfe5aac3a2eff1450f06e277c23c670ffd111435d531a7ee63253a8f23ea3330022e8f40f6e5d8d30b37a64c1bb7428629bd55ab2af8b2f21d603b93ed87d71f91de8929dee769243f10fa4f71398ff9b33afc2b4037ba65c292018f7bb65124a9715abe412ad802590d23d304033895fbdc7cc0f1dc9023b75ca763d8ce4be6c2a649019c25bb66bfbb20a923fd77b5c04844d7a3141057bf48dd8da0179710fc69afa70d021dbd24bae97b1810db5d57e0fe750d4a23b22e06c847a09dbd63dbf63b2266f98d79389c39dd5a1a51b9dc3668da1f5fe56461e3d2df1a9d66849a398a4ae18f4e2db9fcf50cd6ae865087b0d95b842194f2ee50401d10b493dc3d9fe7e4d9f19050546994f56a424f41d8279986e2f736c10d40ef71af27fcac746d8ea2cbb2e6bb44f447511d405d381256285fb92d3a49bb55f82810f2ca00487c8d7f6411d8e528ad0b0f270cd19743dd6738a39022f833aa94ca8485e858a2fc2a00b389a33f3639d0b4c27188f90f4fcbbc579ba4ea52daa185eedb6da6d65769474964a52a5958f759693abcf84391bde02f787b5d736e76aaab2971de9529209ea65f0f2b508615ebc9bf9f851d5258e4a7453226eefb1f6119e875aaa0c17b8670b4654062203166ee13091e767b31d6343c100c966297ce1df8e36592730133581e5e227266f01cbfdee84a0a7dcf20bc7bb621ffe4f5e26d566ff52a52b3dd9435ed26f482ee59f31f1d72594f859d51d167aa5937edf2e506902fad606cd32d720c04ed68c8bc948fe1b24363dc93935d765ac42ecfa2d8095e07ad95fcfcfd4c165ac39c177fb460b76e26ac8e7bb797378c1ec8a77c4fada4b17deea00a2795d632ff15225607eb94e569b63100315a78076570c8f39ef5a18b289e8fc2a1306faf21f926bd3c316196632b03933ffb56c28a94ece4e141594ed6ccba9bc7999cba6d6dbde7e43b222419925461d660c4d2be511691a21be348f67710990f80488c3311cf2364527e70861d816c6201d81c9c098309343af9cbc4bf7ccefcefa3d0c7b70cbacb94ada4add64aa54768751d6a4ff4913357eee5b3ba24dc23da39dbdce8600df249b4c6d628c8c128b7e81c2cbcca8ef6b082f9689471ec96de4aa0479314470d36bf6c65163b8c3212d66ee8c048e25afb137ceccdadbe23e28b2f57ba3aa5505f5ae5b887f1801e923e05ab03b92734473df50e0d90676d47e78bf5b2be11be9eef7dd8167483015d56e472ef86d17e03970953f758fcb31715bcfbacc2e634fc2db4e150fe48f0dc792b041a2137af0732a912f1ab68a518e07f7095a414f1b2d99d2c3e045e2cea91d0650237426ccc93c521439207ea7aa0fb0b8e06d8022b14f297c2336835b36a9a66d597befed1f854c8f064cbd1072b31759363ec44f1323c5d819fac46774d173e3d61b8e33d7343cecd75f1045794c5a4803bbe50d3dd0c380b9fcb22550027d7fb4a79f567f3548851af39758df74a3c5e22b8a100cef8749a6aa629a7eae102de61323ff19b52df674994aa913549d5d9dd08c043451ef9bbed6a39da038a144c9ca8fcc05484386b6585b60bb93288995dad4751ba964493abe138d4f241c3e2a5a3174ecd9dde45e9a2f50e61444d3aac1b6060b6da6c308bec5a2971daebca4e9af09203db4add4dfb9506363dc71b9ad69867755856a06d63ffdca5ff481712f3c19664568ccd482bf3031c91e587593f2d01b2fc7b5244c4626281056cd481a5cda4b63c912684d599a4628c938d92d4ef5f685c80cb84a4c628cab6c66178442e9e400909181d6745e232bb85fb2545f306628cd5222e4c52c9295217ba11ded9341bd48349a5af4c6ae23439a61faecc73d87a710abd113a4daa9454bf6857f39bcc93b8f0686796cc77b1980f982dc6ec9548282a0d91fd1fae9f98ca6a115faf29f8d91e98114473b5df7374598ff1b0872aad012d8d3c9e27e6ef5227545dc94a222ab68042c0827439d4d72ab2d9d7bb33b319d11cb5cc7c4a05951d061674dca2a81aeeaecee558c99426709ff94a78bc623b5e6b8ed40be1418043ce1dd65c8466e607daabe7689ab20629d092b0133d6c0050498849e88f806c59d842c50a06f3d44ff7dc781f7cb12ebab5a1fb58978d8f6f74b212cf67a6b5c541db22097a4d2c3329bda7a73a4c6a756af7073b6c480d764951d7b297bdbd3e911286cc83d0672a19c6f2c434e11d931409ee27b396b7b2da62b6054909d1641d80c4c8a16ad5d58e19667f1f28b8acac4825d82a15579caedfe3e3b5effac77c6a392f63169e1b12e891e4531fd488bae43dbb610479eaba66449a8cdbbdee4ff6e4050f7c5c3aa21a34e96444110bc9552cc2bfbc955da9e9aa647717360969a375299a9bfcad7badea155223e29dde4a5b92d65e96842888d16f6d1531ce6d604eceb128c7c014774706947a9e2d8a20d76ca11811c840ae9d292b7d57aa411f604df28256a34658ea8e35ca2c88b938f9a077367fc0a9204d520a4700c8aa48a5d6a275da8b057be84f9683418b5ea9517a601bba8f330662a7ef525e5e37005c5ec83a9038694d6e68981f17fc6b93c58347d5142b8d7b48f7310962c360b8bf2bb8da1a8d4b7fc54298d79ba5547de820486cef7a9bb7e31c4581a0fddb4a892fe14232bee291129f68b11440ba83ccc6058645eb6ddb11e4fb0e31b261efff113fabaa2836254979d433fa6cbbc3cf5f7619396d75f0c4c93d23ad68fe6422c07aaf24fdf375615cfc86b063d05639be52c5a88daa9a5c89ae1c8ef3fd8d73546cf4f7a7c89b3eb1e3e26ec0c01de8797cb25554fdb39f2df5e6a2f38b546bfa9758985488c322d7fe03a80a8418da93010b53735813d43593cae7339e2d149c4891252d8e8f7917e730b8a0c2f5c16238ddd44619d987ca9017c60fa93406d6e14622953a1b6efd59f67b2ff0e81499cbc88adac1b335fde90578ef3f319dcb761b240b07059ac4a95fc318645b1157b847498f3f5e4f2ce94d9ddd817687636e74a01937435e1e69b0f70bf4e286f577eeb97c10b944aa5d25efa652414f4f966cb15eb260a046c519a145bb4f16b2a7f75d858aec2a9282a69817ec7f8b70ca4cefc886db6fe4f1f5d059b1243c4cd5d24cd3dcd759164bf64d2dce09869dd5f1e0ba763c7fb0a983a449d73a49d559e5deb20e0d36ca8ca0d0bdb7a522f8f5d8edf86f329c037207f26b48b8172ab62db5413d322799ef340d11aef942752ffeb9ce20422826597568c57dfac0ebfbde154db660ffe62c18fe250010c4728a009ee9bd61e01b452f45513080a1a7eef30f6343d8459a7bb1a0bd4f5036061b216cd132ac416ac7158d322738d11402f5dbcd2b5557a40ca9286e610a32b4cd93d24f0a28aee6b02ad8fb86d3f1e77e2804d41f99ea4e70c70e2e0b50404e30082723c97f21dcc974225b3918c49724aa983edafa58d14f28dc02fe7b7bce8cc184a805502fc26a1e4cec95d59fd4ddb9c68a7f6af7b56592f3aba43a531d8f08912e64ee76c2c8603608b09acf8b241adc4e9687207bbeda350638d74b8880030d14d757860afd860c8b80870499122f4562e834fbd9271f70f0d06a7891dadb2aa8b79f8f24209f98dd68e8b7943ad78b64697dccd743e7686653f04e2cdff285dee8f412e2c89ad9bf42e8894025df559b9c5d8fd601e823d1a59b7b39008747972666af439d23bb24d629e437126e94c4e407e1d535af482c603cd419a627236a5da46d3fd5c44aeb63226c6b92a1d9ec2891f23ffe763a81308da9d22ea1be3fef8e974445ecf7ff171fea0c17bbe3e8d7ff7c0be24163618cd7e33bb249b6a04474bf01311340415e10d23316d651c306547d181007fbcd631d390d497ed2fecede8861655c9de88e2b30ca0c4885a2e7a898d3e8b806894900e966f8d6798eaf36cde5946020f1564e8af27fde88970001ea08b0969ef90b0cf8cee501f8cc3d5819edcff77921150db74d6427af078010b6da1b6dcc66e7ee858d861b9201a0e82d755ae83140a09cc6a811bda494ec1fbe9f829958906465e07f1813d8c5cd386001ddf3546b89bcc53266b5c885ca4e009e78ab356a1e189f1335cb3db5070d2e3a4a9d75c6272027cff8bc74d9cb5c8b9957d4e94afb2795f76c308a974d08ac386e44c86b02d23598c53e040118342812f5e6a946504d25052d838c15951969442070738b995dece5318e16e2f69b19cbab5a81a24b91c49fc7e8265becb43b2d43e90382a15405b7364d53f297b92df928748ba939cf7a60d3336b4f21098562470a1340a10e970e119115538807081c0d70631e6cd11d17b404868de830c45427fd8234ceabe0d688ac8b7837350d7e80c3a31e5c682a4656f65513f6f6d37e3b51767d01b77aaaa7626a2889c163ec4f90ee6917ec2547ab1ed27beb7229bc268f25d81768fef2ae5e75c0f9c91288214de424d6024e9f0d915e80245972203e10899d52d6add9ebc130a632d3e57122b303c8b6764d07c27e9a5dcedd3e533331932c338568bbd7c1cc27f4dcdeae2091156e067e0b351f0cd52b68c878c636b10a7f7034843874c248711d76ee9ff4699dd3c86e77920c54f9748763dbee8ff545e5c4b8fc5641a1d54eecdff43aa37e6b330f4a273459f48c43802efe72e52074a2c823db911bb61c434e9e1467a4ab6ba01785494957c73159c84708392f4eb2c12f3f0533ee05c88de26549d55b22cae65108b829545baa5a56c09672db1eab31498d33378fdb983dbc8fcabc3741dbbf7deb1d728021f1195f56a7f74c6f8145b8a2dfa42533b6d27dd67bda52c48830e50f37e4f3a62bb31812b7e27f9b6ffa318e4fb3c6bc99de91da348d8e0b77708cd86333f57dc3d18e6048405954f3a4657d1e5ec46612867c8d7dc1ed8cc1f791140480ceaf86996055debca275fd9f2acbb071ebe891a07a6866f0726b1b29970f48ba04b1784f7f4bb1383c692fc4f4ef3e6f4e812ec4d012fc33c27840410d5aaf6887cc3922579917637e6ce96e0544e3ec725ef6a478a941f3588e66c4f0ee290915a8ccb15cb8e335d8183605fd046b7ad86ea928f5e213b494b1f0fd53f3dfcc1b1461b4421e928dbe5fa56b3a57c0ef76a74d421484b9bfe767c7e400c3ed076afb2aba4741f112c64a817dce14f92e03967479206773b468b08eee17d5b994a8abc19e03422aa2d7d5f957dbc5e6bf907f1f62e9259138a522b9cc625cd4a6a91cd090d564596fdf0488782806820b955fa64c92f14c97d048be0b908ac4c97d97e2fef9a649a3511264d95f9006b3df436f806373ddff0a8799d4a1796bbd034a68b6faec89a501fb096eff45e9337b3457ab2265bdd4eb4032e63a41f700ede9defca20f66306456a573c67515862a53f32dfe364738f594daf0ec117a02f9488a5e6df07077a5630ed6f874279dcc5e1ae9284a57d79f75ecff73749678cfd1e2308cd0d1a2aad997b5b64f4a206df1624e933658360b2a92b4b6618b19e403ebce7112f79edf5b0a9007db5509bd873e79585ca996bd32ea9902185e51f635ef3dc129a1a3031a72bd2d1c09a79a7039a3034c1786c5a2bb4b5f94ee3a1b3bda762280986d565054025996946482425a8d1f9f2090b1bbc406644678032c867805a339e99807528e76ad6f2ee9fd34695fd475819c67d94349e99675fa5a0af788931b555d9a7981cb63f12d327a9c28f9902f7a17b0786c95466278deb13e05e60b6aa51728dfe5976458a0bc67ff705a891fd153bc264d3787cbf6e335b0ed5383dcf2e9adf33305bb9c8265ea8ae904c7d3e0e3e3c18ca5e5402e2b4f44ad9935da829441cf39e0eeb2e3e5f9fd95b3428903931bea1aa40f65b8d2eca713bae7aa99d6a2f59898f9994efe78daa86378b205502d461ffa7f30e56bb189399a313b9282aef437e89d6d9237c09f5ee41fd5de3554f418c5b10ce924bcfb257bc295d9d6e56a0ef6a21f8465e2687deefadc407fd51e3554c5469dff5facfca2ce11b1e7db3338921a5e757c99a100996c16ee52499541a54c6604d795bed26da2ff17597261311f0fcf56057a796ce1ae2553fb805346e4283897d74f4b2cfe5de99f5a1b38f1959bc96d0e3e578b97d857027660e6ea752128211e5349fd6901d3c2226521ffadc78e7ed527a53151c661dcfc7047c7d47f275a85af5241e3f15179e2deec2f8ceacf74aa5fa6f0d0fff3ae6ed473b67322e6b2d1ced8f938c3a8ba67eac05ee11a24ece225dfd412f02ee38e6a7ce584a9739c474702391553e92aabb43b1c186fa6ceb1c9cb7361e4881332f79af3ab5c34e66208a3d0eab5f077880feca9ce14fc2d57151f49b8b21acbe500781fc5582e396869cd37ee00f27b1fdbdfaf3c301b505b869d2655ff78a76f19c5cd3aaa79af6bb289dec2c20eb9f16cbb536ec2550e9e48ce62d6b9b986ddfb2eac90b3fe0a714154ef8f614792a94cd4569f7abc9c1919a9d84c9d7e7a5115df3f55db14cc9a94b75d2ed1c1f009c9ee5d97e550121f52bda9d2de82702afca96be9433d88d8df1e2ec46c1cbe7776f1132ac6ac59d422d84bd1136b68295a4b8176ef63ae26e9658dfc3ba40ad74dba0a1accc3a21ad03e33835795fc768e37f8e5ac10072292133358eee31890819e81a1202cd986d2300601e934cc0d6c41e102599ed21df67765a83c661c5401317be25d4019df609e561273b88493732990b934ccce19fe29d931624bf16edb9811195fa62db2431230b0a10642a866fad92f6d168601e4bf37579091fb566350ae6aa83db0700b106dfd97a1430ee68580047bab7aca996d49256c92906c480a244fb03863eddabe43e96ca1c668c881291ce618bbfbc6164ca75e4f6555844d7259b35090663b9550ca45bf14399f0a94aafeea28a7de252a4bd1f6dbe28b2dc87bb99a4303514cffdce9bf183fcbbdd53b625d83a81f4fd6a9bbb2c584624ce01d3f5d71ec7e74fd65533d1b6abd37302c43eee1f563cea834561ab762988ee4c0742be52fc7c364fab9cbdf89d8497301c87ab288d81314f7526316aaf99ccdccd1cd4831c4e747649bead4f1c7b7a49dc80f11e8b85ad61abb2d206e54d10babdd20aef4f9d33bc96046da5ceac01dbb8dfbee74b47d288499cbb2f6e4821248d63bc750cd57211be0a3c3f2f057fb0b9f8ea0b913dbfa23ee0f2952fa8f539501a80290e9e326fb3f387890e468d07d7deaa0cdba12ad43dbe7c1a24777be5a3736734198ec6b4b2005be7f1a51871dd363bc42ef195813d8ffb180f4f37956ff0d88717541fbe30557d3d71138be7c79c30c845740dc61237c696413215c50f7fe779d52f79b74283504da64a1a2bb310cf706a4dba3ce274447e5591bcf157c550d34b20da086b6c644b30b047728fdfd03c54df688d0177842567aeb7439ad214fd46024e52763bb8d71f57a12bc2f80f4319751e38209a6c221abd2d270616b29e227ebdd2eafb7a4aea54cb7b7bbe54241072d2b2aac78d75cfa6c623ee86681c0a4bb7f11b865d81e37c5856be6a859bec732005d81fdf8c5246b39584bb96e00576aee6edb72a29d7c8b488861cfc201bac214894730a65329f6812f24aa9ce4dfebc24e4a1e8f279c21a72c70be385801cf44fcdd1b5c22cfc9bc305a84d3c7535d17f0b51b0d970575f8f5027ad721debf66687695c31be236876fb4ddb0e6429b2a4803eae431e53d3d4269b3fa3eb39e9ef9c38d8a8827d6fb560cc272329bf5a5e88d3b7ee7efeec5cd00a5fcec59dd58727c92a9d0e1d48030c2400055114dd371902fb70d135026d79730ca6f2437cea0da293ff0bed6975119a06c72a694b736c025117f59dbff155e42608db0cf20334867193d3c8a0c2ce2a1140a056c27e5f58c01afa56d6d2ab99aef5ad4b8b3d175cf0fd1bb059156392fda1da50f979c4856eec07dc80902685da1275a2e84a99cfce1f66e873626a810c3bbd4f58c74cf218c911447b10f2a121f516107705b19fc1573aaaf697d67380f05b023ea25a0a10e4c79cbd45cbffb3de6a24d8105ffde6e0827590af99d050bc10505bba5a0ee25a884b2b3055955aa6bf9efdf062fc58c2ba9a4977579ddf4922b1fe9bfff810ca5daaff4cfb9c805624cf4097ee73ebc72da6944c5da8816722d55c05eca5069ba089f50f9f4cfc45896edaef6eef993cb2e70a11ed60ece1c67bfabf6d6de03a3916091c95d10a6114d4962de7b080a6b9b28f17c6a6c76139b5155d7fa8d1b2542b4b20929e66662008d3c3e5e38e37c9a1aa71b4c086f507fb9e0168d0240054ccdc1c1d62d61716f8892a0420a789a9250396a6d9240c812375c346140ab8642263ff20ceb52cbe8001f39eda67e87fe76859975acd3c30ce11928c0f11b4d392f1b5025c0f6d638b0806c22986632b8b3241f152dfb955190bc5c78a27bea9370e16cc86006c584198e02d647414f9f06e1d7aff6398a57bb3d2925beed294c50d00733b135f6616f1cc7da5ba3dc6f97e04f548d9058c063e4be99f5d6c2e8d25e463fb2aaf43193bd37f38e6c4bf0900e05d6a5b607f3c135b2e1d22a79086cb30bd1d04c82ba06b96e8361672b7a8db79e8bd0434206f332f01af9eff95960f5f1216758d0f0f3c3d269a35efcf9c2e57549293c77afd3ffcd6d1646f7cdc1f13e4c167893874d5aba40ccf2ffdce41fdb6243a0070526bf52c5548ad176926598adce20f097336ba59b7b7ee8104f52229320f6573710e615c5ee5524f56ca13e346507a77cc0b38ef8d0c3d652ca86547fffde9be6cf4dc9c21158e4fbc2b68d7db65555c3d53a58595999ea72ca968a7c8c1cdaba118e5d2463d9569650150ceacf479b92c71657263a3297d8b6cd383f42b7e5194b95bc68e8a81da843f39f4a917433a54169e49d08fdfd1bf2cbfc4b4a74affaed395e251936f0fea395685a8111aff7d2c765776efed41da0e12ce8c66278a1a4c5b8f0900741db6e5d7067903390360f71192fd66cca629e25d07937d98525b1528d23d35d679c4abbd9440e82d2655ecaedc601e275676fdfc84d1a33df53334331994370845f6eae7cec0954ed5168053a5bcfbf25f9670ed00524e2bb42ed0a6533b6a0c09cc3587c08f982f7e5744f444da96bf03e9c87ed47a3b586615dd7409038d610a4148c5d82e0714d2478708fd43aaceb34342d231fbd7f678d200a9c9804dfdc11b1bca276ce5705dbda4a7b04a3ebd7cc1cea8bb9bd92547cacf0d74942886bc7f407f3f93619ef969ab7b855cf1a61d0cc6308cd4527c5c3619ee18618f2916dfd5e945c520ff8c888f010a66768d5f6df7b455e940c686a34fced2364984b24eda715dd1ebdc3e8bd6b9f14936d76d8bcbdb1fef7e9f4f31bce0b0f0599549cc0e56583232c0b19e3e8451b8f1e4df7ab4f927ffa1575939b11acc0f17aebe11a7ab1989a9cede50ca1c793006fea11160c394d2f4c5be1835820344ac91886ef592f375df4d2af05c0730891b39a828238a2a5447132cbe441bc5b94a038b130dbd304c0373dd3bc18170c8338b2f5c3efeea022e87673e3cb36e45e0b227e99cddaf240ae179bf8c6a51717ecf02b64d34fc36d268f15c1ef106a59c7e0436d5b1ef0c0650f142f3ae8a80d18da364d4987f3d7d100bfe3647ac9aeb315248659e0bf229beb9bfebaf83a2003645c0488da20782cca0957e615737fbdff260cec6514a6309e30818c232856fc7101f226e7589404d70f7d7ad488bdb115b9cc5b0743722a8e365dff6b130d03b44768bc31aff7d326f953410e5e52801cf18c13aa1490a90c485b00881bbec5978bc3476377fb123e92aac492579a424b596f8773ca81bf826b539d88f6a1152cb6acc0d36611e319830193e34665f950e43e5c7db02717d79196d207bd3d0908a891f828ee379f8a7017eeb15b7d079720a340dbf8f5103adf791e2705a384058a8c6ad2ffd4fbf004a55dfa5cb8d789b483e0dc4946640c0364063db9d54a057dcb5ba3c2a647c76ceb6fcb217e1dbdefc3aacb686424f6792f7338b5769ae74a51aa799e3e8a280ca59a53fc1afc151618a7ffa9787d08a453d2eab85f568a1b1197a622a7faad4b2058d565b0c2c36509e61f1d72849a72c735d0a3a31e81e11cd4294d6a38eef0d53e8683069f70b2a5fc1983bff09baee963e776c72877fc6cd2723f21f91441454924edb309e98533d8258134bffafcfe4ad925c4111b071720866bb375b39e395ead8d90f5b1ec9b1143f7921dfdfd6c46ae7365b3f0fb34d1db78c59daa72a24392f83828ea23224291c28a25859612de81b2cb6819ae2ddc8e0b4451f2bd38995371cfbc0af4e4bba230f3a7abf6c519668b10525a0bed258620bb7830f1442161d15a0efc35589f5f63f9e31b8384037c4e59311280deb14bee50db98d945655897c1991881172c9cba4d552521d24bb16ae90b2779ea686a6cd00793c994643c447f3f9af7762f886688b60fdc850900e27d8bf811ae90d9f6ef72437ed641ff7f56b842083bfd944ce855d4ecabcd79a6876bfb753b801d91b089faf295fed76734c64e83e9d2e6196fc02995cd68717bea240bdcab1b30ba850cce7776d2d296d7dacbe7631f63f99542ab109da472ba90443c1aa9ccc13bcab816503f7aa500f382a47d0fdee56c22d1e606732b5e50becfb3ad6a85ba8cd4c8b8305ba4361cf416c18836a0a70fcbc7bc455bc090f487fb72b7b4b722b4130d2aac89a95fcb84603799686ad6ae37920ac6c34cdf9fdb62b68d2e818d960284543272365efa56f151b6c1baaa41ff8aba11f86c6bfb1bc623a5ebea2b71b53e5acb7ecda86a4273bfab5ac6b2b0d0dc0af8d0d21d128e84bd665319f22fae4f23fb4c512a7f003b7abcbc7af83e1ae5eb73f20ef775193e0394b2b59cd2d611627a87feca93a29d81141c3a2a950fb82e4ec57fb737bdbee25f1b8ff58e131c0b4aeea2cd213dae8914c2ca38a23e207e96ad477575b558bce8bc8c6cce318333804f2328795901f7e217c250802c666700b427f16c286b7f114f811e076537132b4f971912", 0x2000, &(0x7f00000070c0)={&(0x7f0000000300)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x2b, 0xfff, 0x10000000, 0x8, 0x800, 0xa36, 0xffffffff, 0x0, 0x0, 0x40, 0x8}}, &(0x7f00000003c0)={0x18, 0x0, 0x200}, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x8, {0xfffffffffffffffc}}, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x9}}, &(0x7f0000000500)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x4}}, &(0x7f0000006600)={0x28, 0xfffffffffffffff5, 0x6, {{0x9, 0x4, 0x2, r10}}}, &(0x7f0000006640)={0x60, 0x0, 0xb3, {{0x3, 0x25, 0x3, 0x6a2d, 0x5, 0x2, 0x1, 0x370}}}, &(0x7f00000066c0)={0x18, 0x0, 0x4, {0x3}}, &(0x7f0000006700)={0x19, 0x0, 0xc80, {'.*)#!/-@\x00'}}, &(0x7f0000006740)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x6}}, &(0x7f0000006780)={0x78, 0xfffffffffffffff5, 0x9, {0xd, 0x5, 0x0, {0x4, 0x7, 0x7f, 0xfffffffffffffffa, 0x1, 0x9, 0x4, 0x8, 0x2, 0x0, 0x7, r8, r9, 0x2, 0xff}}}, &(0x7f0000006940)={0x90, 0x0, 0xa, {0x0, 0x1, 0xec, 0xb854, 0x4f, 0x4, {0x3, 0x2, 0x4, 0x10001, 0x4, 0x89, 0xa6ff, 0x4, 0x5, 0x2000, 0x66f3, 0x0, r9, 0x6, 0x2}}}, &(0x7f0000006a00)={0xd0, 0x0, 0x1, [{0x1, 0xfffffffffffffffc, 0x0, 0xf}, {0x3, 0x1fffe00000000, 0x10, 0x9, 'kmem_cache_free\x00'}, {0x5, 0x4, 0x4, 0xfffffff7, 'GPL\x00'}, {0x4, 0xf, 0x3, 0x7f, '/h['}, {0x3, 0x8, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x6, '-*+'}]}, &(0x7f0000006bc0)={0x2a8, 0x0, 0xffffffffffffffff, [{{0x0, 0x2, 0x3319, 0x46f, 0x1, 0x1ff, {0x4, 0x5, 0x1ff, 0x80000000, 0x9, 0x6, 0x9, 0x5, 0x1, 0x2000, 0x3ff, r8, r9, 0x8, 0x7}}, {0x1, 0x2, 0xa, 0xffffffff, 'syzkaller\x00'}}, {{0x4, 0x3, 0x100000001, 0x0, 0x5, 0x6, {0x6, 0x816d, 0x1, 0x1, 0x8, 0x3, 0xcb, 0x1, 0x0, 0x6000, 0x2, r8, 0x0, 0x7, 0x80}}, {0x2, 0x5, 0x10, 0x5, 'kmem_cache_free\x00'}}, {{0x4, 0x2, 0x2, 0x8, 0x2, 0x8, {0x6, 0x3, 0x9, 0xa87, 0x5, 0x80, 0x0, 0x76, 0x7, 0x1000, 0x4, 0x0, r9, 0x7, 0xfffffffb}}, {0xb63, 0x9, 0xa, 0x77, 'syzkaller\x00'}}, {{0x2, 0x2, 0x2, 0x1, 0x8, 0x921, {0x3, 0x9, 0x40, 0x8, 0x2a, 0x7ff000, 0x7, 0x1, 0x3ff, 0x2000, 0x2, r8, r9, 0x1, 0xb5}}, {0x0, 0x10001, 0x4, 0x6b91, 'GPL\x00'}}]}, &(0x7f0000006e80)={0xa0, 0x0, 0x5, {{0x3, 0x2, 0x0, 0x5, 0x6, 0x101, {0x6, 0x80, 0x26, 0x2, 0x0, 0x3, 0x7fff, 0x6, 0x80000001, 0xa000, 0xffffff43, r8, r9, 0x3, 0x3}}, {0x0, 0x1}}}, &(0x7f0000006f40)={0x20, 0xfffffffffffffffe, 0x10001, {0x80d, 0x0, 0x6, 0xb}}, &(0x7f0000006f80)={0x130, 0xfffffffffffffff5, 0x4, {0x8, 0x2, 0x0, '\x00', {0x400, 0x4000000, 0xdd, 0x7, 0x0, r9, 0x6000, '\x00', 0x3, 0x1, 0x0, 0xffffffffffffffff, {0xe47, 0x8001}, {0x7, 0xce32}, {0x7, 0x3}, {0x0, 0x10}, 0x81, 0xc000, 0x1505c01b, 0x4}}}}) read$FUSE(r7, &(0x7f0000000540)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000001cc0), 0x80000) 2.211871352s ago: executing program 0 (id=3880): syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009a9ffb4000000000a8500000000109021200010100000009df4f00007ccd1200"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x75, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e381"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xfff9}, {0x6, 0x24, 0x1a, 0xb, 0x34}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7f, 0x5, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x26, 0xf, 0xe8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x3, 0xa}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x2, 0x9, 0x0, 0xff, 0x5}, 0xe5, &(0x7f00000000c0)={0x5, 0xf, 0xe5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "2e36b9f65bb58d917f8435d895cf5919"}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x6, 0xf00, 0x5, [0xff0000, 0xffc0c0, 0x1ff403f, 0xc000, 0xf, 0x3f00]}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3, 0x960f, 0xb, [0x30, 0x0, 0xc00f, 0x3f, 0x3f, 0xf]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x5, 0x7}, @generic={0x7a, 0x10, 0xb, "c88b91924ac892fb4088303c89a538c62bb65d2f3b954cef982ef81bf1d2f2d4a06d1110cfbac894cd3c3186582a63e4220210b88348c4f99ed6364c4ef75ec275d29c2ffd74cc62faf7c3b80943def1dd1deb3f776758843e3fd35ed57e4bd89a88801bb52ce7b12fed630ba877fa94a6edd10983d535"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c01}}]}) 2.149409504s ago: executing program 3 (id=3881): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) (fail_nth: 1) 2.079321004s ago: executing program 1 (id=3882): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e0e0000108000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x40) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) pread64(r4, &(0x7f0000000040)=""/138, 0x8a, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x800, 0x5, 0xffffffffffffff81}, &(0x7f0000000480)={0x800000000, 0x7, 0x1, 0xfff, 0x2, 0x8, 0x68, 0x400}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0xfffffffffffffe86, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x0) 1.705042112s ago: executing program 3 (id=3883): socket$inet6_sctp(0xa, 0x5, 0x84) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xcc1, 0x400, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002340)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000280)={r6, 0x1, 0x0, 0x1, &(0x7f0000000140)=[{0x800, 0x2, 0x0, 0x7}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.598381141s ago: executing program 2 (id=3884): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x7f, 0x401, 0x4, 0x10}}) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000240)=0x80) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010400000000edadafa942b4abe4", @ANYRES32=0x0, @ANYBLOB="0000000006000000"], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) writev(r2, &(0x7f0000000300), 0x3f) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000140)={0xc}) 1.263150032s ago: executing program 3 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x24, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.10903611s ago: executing program 2 (id=3886): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000002c0)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000640), &(0x7f00000006c0)=0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e0e0000108000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24084854}, 0x400c810) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x40) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) pread64(r4, &(0x7f0000000040)=""/138, 0x8a, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pselect6(0x40, &(0x7f0000000400)={0xffffffffffffff81, 0x600, 0x100000001, 0x26, 0xffffffff, 0x7, 0x400, 0x7}, &(0x7f0000000440)={0x2, 0x2f, 0x75, 0x2, 0xffff, 0x800, 0x5, 0xffffffffffffff81}, &(0x7f0000000480)={0x800000000, 0x7, 0x1, 0xfff, 0x2, 0x8, 0x68, 0x400}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x100000001]}, 0x8}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0xfffffffffffffe86, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0), 0x0) 991.043688ms ago: executing program 3 (id=3887): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000380)="2781f1b2d0fc8d64f7", 0x9) open(&(0x7f0000000040)='./file1\x00', 0x1a58c2, 0x14c) 883.225134ms ago: executing program 1 (id=3888): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000123942, 0x0) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x9, 0x1, 0x10001, 0x2, 0x3e, 0xeea, 0x39f, 0x40, 0x2a4, 0x6, 0x100, 0x38, 0x1, 0x0, 0x1, 0xfff}, [{0x6474e552, 0x7, 0x6, 0x6, 0xfff, 0x5, 0x5}]}, 0x78) mmap(&(0x7f0000628000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r1, 0x3554000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r0, 0x18, 0x0, 0x4) 766.459075ms ago: executing program 1 (id=3889): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0xd0a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept4$netrom(r3, &(0x7f0000000180)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pwritev2(r4, 0x0, 0x0, 0x6, 0xde, 0x30) 364.201941ms ago: executing program 0 (id=3890): r0 = socket$netlink(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f00000000c0)=0x1ba4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x404c840) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xc9e1}]}}}]}, 0x3c}}, 0x8000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0200ffffffecfbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) 313.173366ms ago: executing program 2 (id=3891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000140)={0x0, 0x0}, 0x10) (fail_nth: 1) 767.954µs ago: executing program 2 (id=3892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 319.16µs ago: executing program 0 (id=3893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) r4 = getpgrp(r1) prlimit64(r4, 0xe, &(0x7f0000000000)={0x800000000000005, 0xf}, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/185, 0xb9}], 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=3894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x4e, 0x0) (fail_nth: 1) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) kernel console output (not intermixed with test programs): ror -32 req 02 val 2c00 [ 1009.010312][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 1009.022201][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 1009.144545][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 1009.203013][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 1009.430992][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 1009.447982][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 1009.462888][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 1009.480305][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 1009.495980][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3396'. [ 1009.526937][T17522] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 1009.534827][T17522] netlink: 'syz.0.3396': attribute type 3 has an invalid length. [ 1009.542670][T17522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3396'. [ 1009.560047][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 1009.566813][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 1009.583812][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 1009.594270][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 1009.655063][ T5897] pwc: Registered as video103. [ 1009.675190][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 1009.707677][ T5897] usb 4-1: USB disconnect, device number 49 [ 1010.299042][ T5924] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1010.460181][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1011.203310][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1011.263674][ T5924] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1011.289746][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.338751][ T5924] usb 2-1: Product: syz [ 1011.359146][ T980] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1011.368997][ T5924] usb 2-1: Manufacturer: syz [ 1011.373643][ T5924] usb 2-1: SerialNumber: syz [ 1011.398521][ T5924] usb 2-1: config 0 descriptor?? [ 1011.529086][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1011.567886][ T980] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1011.578771][ T980] usb 4-1: config 0 has no interface number 0 [ 1011.677667][ T980] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1011.768893][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.806055][ T980] usb 4-1: Product: syz [ 1011.824993][ T980] usb 4-1: Manufacturer: syz [ 1011.841091][ T5924] usb 2-1: USB disconnect, device number 60 [ 1011.881897][ T980] usb 4-1: SerialNumber: syz [ 1012.084516][ T980] usb 4-1: config 0 descriptor?? [ 1012.159064][T17378] udevd[17378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.231206][ T980] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1012.464536][ T980] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1012.492705][ T980] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1012.585478][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1012.795646][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1012.852051][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1012.863555][ T9] usb 1-1: config 0 has no interface number 0 [ 1012.874715][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1012.884481][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.884503][ T9] usb 1-1: Product: syz [ 1012.884518][ T9] usb 1-1: Manufacturer: syz [ 1012.884533][ T9] usb 1-1: SerialNumber: syz [ 1012.894182][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1012.894945][ T980] usb 4-1: USB disconnect, device number 50 [ 1012.897087][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1012.901266][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1012.901577][ T980] quatech2 4-1:0.51: device disconnected [ 1012.907560][ T9] usb 1-1: config 0 descriptor?? [ 1013.020879][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1013.228885][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1013.242272][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1013.456341][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3413'. [ 1013.477971][T17569] netlink: 'syz.4.3413': attribute type 1 has an invalid length. [ 1013.485845][T17569] netlink: 'syz.4.3413': attribute type 3 has an invalid length. [ 1013.493619][T17569] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3413'. [ 1013.760546][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1013.762128][ T5952] usb 1-1: USB disconnect, device number 54 [ 1014.490244][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1014.583951][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1014.647333][ T5952] quatech2 1-1:0.51: device disconnected [ 1014.929071][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1015.329858][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1015.342049][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.364604][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1015.378459][ T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1015.404550][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1015.418713][ T9] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1015.434079][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1015.442722][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1015.495351][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.672875][ T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1017.843183][ T9] usb 4-1: USB disconnect, device number 51 [ 1021.231687][T17652] IPv6: Can't replace route, no match found [ 1021.520164][ T934] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 1021.653072][ T5924] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1021.883368][ T934] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1021.891064][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1021.907185][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1021.921239][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1021.944495][ T934] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.049823][ T5924] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1022.079151][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.108889][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.153065][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1022.168818][ T5924] usb 3-1: Product: syz [ 1022.177475][ T5924] usb 3-1: Manufacturer: syz [ 1022.196830][ T5924] usb 3-1: SerialNumber: syz [ 1022.224646][ T5924] usb 3-1: config 0 descriptor?? [ 1022.348718][ T934] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.376753][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1022.384277][T17667] kAFS: Can only specify source 'none' with -o dyn [ 1022.650113][ T934] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.661826][ T980] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1022.681533][ T5924] usb 3-1: USB disconnect, device number 74 [ 1022.712390][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.752860][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1022.765217][ T934] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.776111][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1022.788771][ T934] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.870691][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.879030][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 1022.906261][ T980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.942760][ T980] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.942814][ T934] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1023.005476][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1023.054684][T17671] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.148551][T17671] kAFS: Can only specify source 'none' with -o dyn [ 1023.311758][ T934] usb 1-1: string descriptor 0 read error: -22 [ 1023.318044][ T934] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1023.331725][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1023.354352][ T934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.376392][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.397167][ T934] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1023.409764][ T980] usb 5-1: config 0 descriptor?? [ 1024.113434][ T980] hid_parser_main: 792 callbacks suppressed [ 1024.113448][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.129277][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.137043][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.145207][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.153429][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.160358][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.167428][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.175078][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.632593][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.650952][ T980] apple 0003:05AC:0247.002A: unknown main item tag 0x0 [ 1024.675808][ T980] apple 0003:05AC:0247.002A: collection stack underflow [ 1024.691564][ T980] apple 0003:05AC:0247.002A: item 0 0 0 12 parsing failed [ 1024.715292][ T980] apple 0003:05AC:0247.002A: parse failed [ 1024.733529][ T980] apple 0003:05AC:0247.002A: probe with driver apple failed with error -22 [ 1024.753210][ T980] usb 5-1: USB disconnect, device number 71 [ 1024.988027][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1025.006253][T17693] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 1025.014049][T17693] netlink: 'syz.2.3451': attribute type 3 has an invalid length. [ 1025.022835][T17693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1025.029132][ T5952] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1025.189853][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 1025.202155][ T5952] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1025.211425][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1025.241458][ T5952] usb 4-1: Product: syz [ 1025.248987][ T5952] usb 4-1: Manufacturer: syz [ 1025.253618][ T5952] usb 4-1: SerialNumber: syz [ 1025.290130][ T5952] usb 4-1: config 0 descriptor?? [ 1025.397575][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 1025.800987][ T934] usb 1-1: USB disconnect, device number 55 [ 1025.899307][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.949246][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.164954][ T5952] usb 4-1: USB disconnect, device number 52 [ 1027.906633][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 1028.342966][T17721] trusted_key: encrypted_key: insufficient parameters specified [ 1029.273345][T17731] netlink: 'syz.3.3460': attribute type 5 has an invalid length. [ 1030.074644][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1031.197586][T17743] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 1031.205675][T17743] netlink: 'syz.4.3463': attribute type 3 has an invalid length. [ 1031.299127][ T934] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1031.876212][T17743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3463'. [ 1032.370325][ T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1032.383908][ T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1032.531201][ T934] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1032.633352][ T934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.641522][ T934] usb 1-1: Product: syz [ 1032.645687][ T934] usb 1-1: Manufacturer: syz [ 1032.650294][ T934] usb 1-1: SerialNumber: syz [ 1033.632184][ T934] usb 1-1: config 0 descriptor?? [ 1033.647700][ T934] usb 1-1: can't set config #0, error -71 [ 1033.664572][ T934] usb 1-1: USB disconnect, device number 56 [ 1034.208993][ T9] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 1034.376687][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1034.418479][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1034.447084][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.556609][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1034.587456][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1034.760816][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1034.806160][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1034.817313][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.829396][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1034.841029][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1034.854892][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1034.898252][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1034.910197][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.932279][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1034.970508][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1035.079092][ T980] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1035.329104][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 1035.344706][ T980] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1035.463349][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.589742][ T980] usb 1-1: config 0 has no interface number 0 [ 1035.597048][ T980] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.650777][ T980] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1035.671132][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.689566][ T980] usb 1-1: Product: syz [ 1035.697008][ T980] usb 1-1: Manufacturer: syz [ 1035.719607][ T980] usb 1-1: SerialNumber: syz [ 1035.910691][ T980] usb 1-1: config 0 descriptor?? [ 1035.912182][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1035.946530][ T980] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1036.481575][T17799] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 1036.489640][T17799] netlink: 'syz.2.3478': attribute type 3 has an invalid length. [ 1036.497556][T17799] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3478'. [ 1036.505527][ T980] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1036.515436][ T980] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 1036.717435][ T5897] usb 1-1: USB disconnect, device number 57 [ 1036.911128][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1037.048695][T17806] bridge0: port 3(gretap0) entered blocking state [ 1037.056677][T17806] bridge0: port 3(gretap0) entered disabled state [ 1037.065095][T17806] gretap0: entered allmulticast mode [ 1037.079420][T17806] gretap0: entered promiscuous mode [ 1037.086561][T17806] bridge0: port 3(gretap0) entered blocking state [ 1037.093062][T17806] bridge0: port 3(gretap0) entered forwarding state [ 1037.277667][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1037.295567][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.321530][ T9] usb 2-1: can't set config #168, error -71 [ 1037.337885][ T9] usb 2-1: USB disconnect, device number 61 [ 1037.721084][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1038.427584][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1038.470947][T17821] ieee802154 phy0 wpan0: encryption failed: -22 [ 1038.565275][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1038.736794][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.753399][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.846386][ T9] usb 2-1: Product: syz [ 1038.850592][ T9] usb 2-1: Manufacturer: syz [ 1038.855429][T17821] kAFS: Can only specify source 'none' with -o dyn [ 1038.862077][ T9] usb 2-1: SerialNumber: syz [ 1038.868768][ T9] usb 2-1: config 0 descriptor?? [ 1039.235633][ T9] usb 2-1: USB disconnect, device number 62 [ 1039.355086][T17831] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.661553][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.769587][T17834] ieee802154 phy0 wpan0: encryption failed: -22 [ 1044.364663][T17873] IPv6: Can't replace route, no match found [ 1044.498985][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1045.710758][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1045.739135][T17888] netlink: 'syz.4.3504': attribute type 2 has an invalid length. [ 1045.754260][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1045.769018][T17888] netlink: 'syz.4.3504': attribute type 11 has an invalid length. [ 1045.802132][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1045.811540][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.939003][T16518] Bluetooth: hci2: command 0x0406 tx timeout [ 1046.321732][T17888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1046.341847][ T9] usb 1-1: Product: syz [ 1046.358483][ T9] usb 1-1: Manufacturer: syz [ 1046.367540][ T9] usb 1-1: SerialNumber: syz [ 1046.487022][ T9] usb 1-1: config 0 descriptor?? [ 1047.064984][ T9] usb 1-1: USB disconnect, device number 58 [ 1047.238399][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.452902][T17908] kAFS: Can only specify source 'none' with -o dyn [ 1049.154268][T17917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1050.218181][ T5924] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1050.355984][ T5924] usb 4-1: device descriptor read/64, error -71 [ 1050.445745][T17937] IPv6: Can't replace route, no match found [ 1050.838993][ T5924] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 1050.889001][ T934] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1051.108998][ T5924] usb 4-1: device descriptor read/64, error -71 [ 1051.178977][ T934] usb 3-1: Using ep0 maxpacket: 8 [ 1051.224131][ T5924] usb usb4-port1: attempt power cycle [ 1051.230580][ T934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1051.673911][ T934] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1051.701995][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.751914][ T934] usb 3-1: config 0 descriptor?? [ 1052.003593][ T5924] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 1052.083141][ T5924] usb 4-1: device descriptor read/8, error -71 [ 1052.798200][ T5924] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 1052.805776][ T934] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1052.863104][ T5924] usb 4-1: device descriptor read/8, error -71 [ 1053.009217][ T5924] usb usb4-port1: unable to enumerate USB device [ 1054.476154][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.484499][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.628393][ T934] usb 3-1: USB disconnect, device number 75 [ 1056.704245][ T5952] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1057.219137][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1057.722880][ T30] audit: type=1326 audit(1760143830.747:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18007 comm="syz.1.3539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981cf8eec9 code=0x0 [ 1057.810514][ T5952] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1057.858887][ T980] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1057.969013][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1057.982440][T18014] netlink: 'syz.4.3540': attribute type 1 has an invalid length. [ 1058.047520][T18014] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 1058.056374][T18014] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3540'. [ 1058.058997][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 1058.109102][ T5952] usb usb4-port1: attempt power cycle [ 1058.175047][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.197200][ T980] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1058.207439][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.313113][ T980] usb 1-1: config 0 descriptor?? [ 1058.369207][ T5924] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1058.538994][ T5952] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 1058.561021][ T5952] usb 4-1: device descriptor read/8, error -71 [ 1058.813788][ T5952] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1058.941086][ T5924] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1058.951753][ T5924] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1058.959457][ T5952] usb 4-1: device descriptor read/8, error -71 [ 1058.961913][ T5924] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1058.978716][ T5924] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1058.994588][ T5924] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1058.998458][ T980] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1059.052419][ T5924] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1059.069283][ T5952] usb usb4-port1: unable to enumerate USB device [ 1059.115782][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 1059.185223][ T5924] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1059.338974][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.403800][ T5924] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 1059.439704][ T5924] usb 2-1: no configuration chosen from 3 choices [ 1060.034606][ T5924] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1060.042687][T18032] netlink: 'syz.4.3543': attribute type 5 has an invalid length. [ 1060.054469][T18032] ip6erspan0: entered promiscuous mode [ 1060.212364][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1060.219985][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.230235][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1060.239868][ T5924] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1060.249901][ T5924] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1061.103970][ T5924] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.135910][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1061.173811][ T5924] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1061.182041][ T980] usb 1-1: USB disconnect, device number 59 [ 1061.209056][ T5952] usb 2-1: USB disconnect, device number 63 [ 1061.233581][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.299472][ T5924] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1061.385398][T18052] trusted_key: encrypted_key: insufficient parameters specified [ 1062.544452][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1062.883491][T18055] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 1062.891939][T18055] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 1062.900043][T18055] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1063.943163][ T9] usb 4-1: USB disconnect, device number 61 [ 1064.237607][T18081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1064.238992][ T5924] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 1064.379420][ T5924] usb 5-1: device descriptor read/64, error -71 [ 1064.401034][ T9] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 1064.466614][T18088] IPv6: Can't replace route, no match found [ 1064.859216][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1064.909570][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1064.955574][T18087] netlink: 'syz.1.3560': attribute type 5 has an invalid length. [ 1065.100662][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1065.113467][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1065.126639][ T5924] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1065.531161][ T5924] usb 5-1: device descriptor read/64, error -71 [ 1065.593396][ T9] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1065.621408][ T9] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1065.661970][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1065.671200][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1065.684282][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.709195][ T5924] usb usb5-port1: attempt power cycle [ 1065.715164][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 1065.933056][ T9] usb 1-1: USB disconnect, device number 60 [ 1066.059066][ T5924] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 1066.101137][ T5924] usb 5-1: device descriptor read/8, error -71 [ 1066.350837][ T5924] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1066.369602][ T5924] usb 5-1: device descriptor read/8, error -71 [ 1066.519154][ T5924] usb usb5-port1: unable to enumerate USB device [ 1066.706769][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1066.719974][T18108] trusted_key: encrypted_key: insufficient parameters specified [ 1067.480724][T18110] netlink: 'syz.1.3565': attribute type 1 has an invalid length. [ 1067.580477][T18110] netlink: 'syz.1.3565': attribute type 3 has an invalid length. [ 1067.642354][T18110] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1068.025138][T18123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3570'. [ 1068.547239][T18137] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.639480][T18137] kAFS: Can only specify source 'none' with -o dyn [ 1068.689411][ T5952] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1068.791062][T18139] netlink: 'syz.2.3569': attribute type 5 has an invalid length. [ 1068.969896][ T30] audit: type=1326 audit(1760143842.147:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18124 comm="syz.3.3571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf65d8eec9 code=0x0 [ 1069.190385][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1069.200584][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1069.220724][ T5952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1069.230061][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.238296][ T5952] usb 5-1: Product: syz [ 1069.242839][ T5952] usb 5-1: Manufacturer: syz [ 1069.247916][ T5952] usb 5-1: SerialNumber: syz [ 1069.261065][ T5952] usb 5-1: config 0 descriptor?? [ 1069.387804][T18146] IPv6: Can't replace route, no match found [ 1069.595056][ T5952] usb 5-1: USB disconnect, device number 76 [ 1069.639083][ T24] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 1069.840759][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1069.848302][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1069.878673][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1069.902086][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1069.919375][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1069.959023][ T980] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1070.797894][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.897360][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1070.944736][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.968686][ T980] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.998125][ T980] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.037068][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1071.159014][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1071.181241][ T980] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1071.190899][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1071.213170][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.234825][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1071.242522][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1071.331163][ T980] usb 4-1: config 0 descriptor?? [ 1071.386409][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1072.361155][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1072.392767][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1072.673658][ T24] usb 1-1: string descriptor 0 read error: -71 [ 1072.681436][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1072.692343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.710011][ T24] usb 1-1: can't set config #168, error -71 [ 1072.731076][ T24] usb 1-1: USB disconnect, device number 61 [ 1072.772237][T18171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3583'. [ 1072.830568][ T980] usb 4-1: string descriptor 0 read error: -22 [ 1073.018589][T18180] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.051027][T18180] kAFS: Can only specify source 'none' with -o dyn [ 1073.260236][ T980] uclogic 0003:256C:006D.002B: interface is invalid, ignoring [ 1073.287154][ T980] usb 4-1: USB disconnect, device number 62 [ 1074.346907][T18197] IPv6: Can't replace route, no match found [ 1074.964897][ T9] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1074.979137][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1075.301564][ T5924] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1075.379513][ T9] usb 5-1: device descriptor read/64, error -32 [ 1075.560924][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 1075.568396][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.824946][ T5924] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1075.849040][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.864936][ T5924] usb 2-1: config 0 descriptor?? [ 1075.932786][ T9] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1076.134976][T18216] IPv6: Can't replace route, no match found [ 1076.181580][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.189091][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1076.208263][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.240332][ T5924] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1076.264384][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1076.327525][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1076.374724][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.382962][ T980] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1076.383310][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1076.413987][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.451307][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1076.564900][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1076.591952][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.710605][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1076.721641][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.786960][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.815374][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1076.826589][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1076.826620][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.826643][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1076.826667][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1076.873888][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.906266][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1076.923730][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1076.932161][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1076.944159][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.992491][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1077.051025][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1077.070043][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1077.159835][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1077.191821][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1077.248979][ T980] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1077.264845][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1077.301830][ T980] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1077.338409][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1077.363005][ T980] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1077.563699][ T980] usb 4-1: string descriptor 0 read error: -22 [ 1077.586108][ T980] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1077.598804][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.816240][ T980] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 1077.816342][ T9] usb 5-1: USB disconnect, device number 78 [ 1078.261034][ T30] audit: type=1326 audit(1760143851.447:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18225 comm="syz.4.3597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb658eec9 code=0x0 [ 1078.583585][ T9] usb 2-1: USB disconnect, device number 64 [ 1079.111227][ T24] usb 4-1: USB disconnect, device number 63 [ 1079.451887][T18242] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.520375][ T5952] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1079.525375][T18242] kAFS: Can only specify source 'none' with -o dyn [ 1079.989100][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 1080.040984][T18252] kAFS: No cell specified [ 1080.610777][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1080.635592][ T5952] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1080.701588][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.762204][ T5952] usb 2-1: config 0 descriptor?? [ 1080.964140][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1081.061814][ T30] audit: type=1326 audit(1760143854.207:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18247 comm="syz.4.3604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb658eec9 code=0x0 [ 1081.364989][ T5952] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1081.794041][T16518] Bluetooth: hci1: command 0x0406 tx timeout [ 1082.081751][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1082.100421][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1082.108513][ T9] usb 4-1: config 0 has no interface number 0 [ 1082.151221][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1082.160404][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.168413][ T9] usb 4-1: Product: syz [ 1082.223214][ T9] usb 4-1: Manufacturer: syz [ 1082.228978][ T9] usb 4-1: SerialNumber: syz [ 1082.247702][ T9] usb 4-1: config 0 descriptor?? [ 1082.274265][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1082.588056][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1082.602297][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1082.893976][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1082.897036][ T24] usb 4-1: USB disconnect, device number 64 [ 1082.920180][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1082.947411][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1082.971408][ T24] quatech2 4-1:0.51: device disconnected [ 1083.027385][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1083.360137][T18288] IPv6: Can't replace route, no match found [ 1084.209003][ T24] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 1084.218230][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1084.302836][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1084.386119][ T978] usb 2-1: USB disconnect, device number 65 [ 1084.395081][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1084.398947][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1084.681575][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1084.697747][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.767577][T18298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.795279][T18298] kAFS: Can only specify source 'none' with -o dyn [ 1085.054425][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1085.066676][T18300] trusted_key: encrypted_key: insufficient parameters specified [ 1085.078947][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1085.265127][ T9] usb 3-1: config 0 descriptor?? [ 1085.282632][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1085.835336][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1085.959117][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1085.973130][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1085.985940][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1085.997349][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1086.269355][ T934] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1086.388841][ T9] usb 3-1: can't set config #0, error -71 [ 1086.418164][ T9] usb 3-1: USB disconnect, device number 76 [ 1086.428970][ T934] usb 4-1: Using ep0 maxpacket: 16 [ 1086.442285][ T934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.467120][ T934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1086.477564][ T934] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1086.490823][ T934] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1086.517726][ T934] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.540133][ T934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1086.546978][ T934] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1086.557726][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.588807][ T934] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1086.631290][T18313] trusted_key: encrypted_key: insufficient parameters specified [ 1087.360153][ T24] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 1087.530920][ T24] usb 5-1: can't read configurations, error -71 [ 1088.248989][ T934] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1088.340340][T18335] IPv6: Can't replace route, no match found [ 1088.571076][ T934] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.587691][ T934] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.639058][ T5952] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1088.909673][ T934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1088.925640][ T934] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1088.938994][ T934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.987409][ T934] usb 3-1: config 0 descriptor?? [ 1089.019682][ T24] usb 4-1: USB disconnect, device number 65 [ 1089.078290][ T5952] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1089.093094][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1089.191037][ T30] audit: type=1326 audit(1760143862.357:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18336 comm="syz.1.3626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981cf8eec9 code=0x0 [ 1089.194621][ T5952] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1089.333048][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1089.344655][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1090.155024][ T934] usb 3-1: string descriptor 0 read error: -22 [ 1090.155908][ T5952] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1090.183233][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1090.198744][ T5952] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1090.240438][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1090.443072][ T934] uclogic 0003:256C:006D.002C: interface is invalid, ignoring [ 1090.457276][ T934] usb 3-1: USB disconnect, device number 77 [ 1090.523043][T18354] fuse: Unknown parameter 'user_i00000000000000000000' [ 1091.255651][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1091.699009][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1092.559479][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1092.611681][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1092.970415][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1093.160802][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.731048][ T24] usb 5-1: config 0 descriptor?? [ 1093.950169][ T5952] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 1094.097899][ T5952] usb 1-1: can't read configurations, error -71 [ 1094.528771][ T24] usb 5-1: can't set config #0, error -71 [ 1094.604179][T18383] IPv6: Can't replace route, no match found [ 1094.631202][ T24] usb 5-1: USB disconnect, device number 81 [ 1094.863707][ T9] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1095.480970][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1095.488396][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1095.508715][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1095.527306][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1095.558450][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.297752][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.311011][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1096.328651][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.351495][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1096.362760][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.375896][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.383748][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1096.394684][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.407575][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1096.420591][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1096.437318][ T9] usb 4-1: string descriptor 0 read error: -22 [ 1096.443870][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1096.464768][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.495370][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1097.389256][ T5952] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1097.624370][ T30] audit: type=1326 audit(1760143870.817:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18403 comm="syz.1.3643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f981cf8eec9 code=0x0 [ 1097.827970][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 1097.841211][ T5952] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1097.849652][ T5952] usb 1-1: config 0 has no interface number 0 [ 1097.858495][ T5952] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1097.869697][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.877794][ T5952] usb 1-1: Product: syz [ 1097.886492][ T5952] usb 1-1: Manufacturer: syz [ 1097.893724][ T5952] usb 1-1: SerialNumber: syz [ 1097.911375][ T5952] usb 1-1: config 0 descriptor?? [ 1097.925810][ T5952] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1098.131660][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1098.167694][ T5952] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1098.385681][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1098.677290][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1098.769009][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1098.781827][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1099.537881][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1099.547003][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.579867][ T9] usb 5-1: config 0 descriptor?? [ 1099.623547][ T5952] usb 1-1: USB disconnect, device number 64 [ 1099.654908][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1099.788826][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1099.800694][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1100.032404][T18433] kAFS: No cell specified [ 1100.101057][ T5952] quatech2 1-1:0.51: device disconnected [ 1100.166955][T16583] gretap0: left allmulticast mode [ 1100.196992][T16583] gretap0: left promiscuous mode [ 1100.216626][T16583] bridge0: port 3(gretap0) entered disabled state [ 1100.236543][T16583] bridge_slave_1: left allmulticast mode [ 1100.249000][T16583] bridge_slave_1: left promiscuous mode [ 1100.256503][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.310663][T16583] bridge_slave_0: left allmulticast mode [ 1100.316326][T16583] bridge_slave_0: left promiscuous mode [ 1100.340644][ T934] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1100.556095][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.609143][ T5952] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1100.650624][ T934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1100.658018][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1100.679896][ T934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1100.708969][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1100.768009][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1100.770245][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.789440][ T5952] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.815826][ T5952] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1100.826845][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.826898][ T934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1100.834996][ T5952] usb 2-1: Product: syz [ 1100.854140][ T5952] usb 2-1: Manufacturer: syz [ 1100.856414][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1100.859793][ T5952] usb 2-1: SerialNumber: syz [ 1100.896935][ T934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1100.897904][ T5952] usb 2-1: config 0 descriptor?? [ 1100.927931][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1101.009514][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1101.034340][ T934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1101.041940][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1101.056245][ T934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1101.082191][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1101.094317][ T934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1101.124909][ T934] usb 3-1: string descriptor 0 read error: -22 [ 1101.131179][ T934] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1101.140316][ T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.280275][T16610] usb 2-1: USB disconnect, device number 66 [ 1101.289781][ T934] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 1101.341661][T16583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.364353][T16583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.398452][T16583] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1101.407687][T16583] bond0 (unregistering): Released all slaves [ 1101.422752][ T934] usb 5-1: USB disconnect, device number 82 [ 1101.487255][T16583] tipc: Left network mode [ 1101.780195][ T978] usb 4-1: USB disconnect, device number 66 [ 1101.794721][ T934] usb 3-1: USB disconnect, device number 78 [ 1103.544014][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 1103.552998][ T978] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1103.843751][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1103.999556][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1104.615562][T18459] netlink: 'syz.3.3656': attribute type 1 has an invalid length. [ 1104.623548][T18459] netlink: 'syz.3.3656': attribute type 3 has an invalid length. [ 1104.636289][T18459] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3656'. [ 1104.636402][ T978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1104.685039][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.111984][ T978] usb 2-1: Product: syz [ 1105.116368][ T978] usb 2-1: Manufacturer: syz [ 1105.121512][ T978] usb 2-1: SerialNumber: syz [ 1105.158734][ T978] usb 2-1: config 0 descriptor?? [ 1105.447097][T16583] hsr_slave_0: left promiscuous mode [ 1105.463092][T16583] hsr_slave_1: left promiscuous mode [ 1105.472575][T16583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.490752][T16583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.530766][T16583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.558329][T16583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.559889][ T978] usb 2-1: USB disconnect, device number 67 [ 1105.653436][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.675130][T16583] veth1_macvtap: left promiscuous mode [ 1105.683884][T16583] veth0_macvtap: left promiscuous mode [ 1105.691033][T16583] veth1_vlan: left promiscuous mode [ 1105.696339][T16583] veth0_vlan: left promiscuous mode [ 1105.814553][T18487] IPv6: Can't replace route, no match found [ 1106.183493][ T30] audit: type=1326 audit(1760143879.287:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18483 comm="syz.0.3665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bcb98eec9 code=0x0 [ 1106.307766][ T9] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 1106.741240][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1106.759508][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1106.806987][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1106.912033][T18498] netlink: 'syz.4.3668': attribute type 5 has an invalid length. [ 1107.317046][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1107.353940][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1107.377301][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1107.384870][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1107.398666][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1107.423559][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1107.435077][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1107.711390][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1107.718861][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1107.892459][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1107.939261][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1107.957069][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1107.992483][T16583] team0 (unregistering): Port device team_slave_1 removed [ 1108.028292][T16583] team0 (unregistering): Port device team_slave_0 removed [ 1108.043111][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1108.049484][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1108.058608][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.077897][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1109.773703][T18519] IPv6: Can't replace route, no match found [ 1109.892081][T16583] IPVS: stop unused estimator thread 0... [ 1109.918688][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1110.029037][ T24] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 1110.392397][ T30] audit: type=1326 audit(1760143883.487:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18516 comm="syz.4.3674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb658eec9 code=0x0 [ 1110.536470][T18524] netlink: 'syz.0.3675': attribute type 1 has an invalid length. [ 1110.544503][T18524] netlink: 'syz.0.3675': attribute type 3 has an invalid length. [ 1110.553492][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1110.582261][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1110.616745][T18524] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1110.636032][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1110.681033][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1110.809158][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1110.934477][T18535] kAFS: Can only specify source 'none' with -o dyn [ 1111.234502][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1111.262599][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1111.285569][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.383217][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1111.394623][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1111.416667][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1111.424310][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1111.435137][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.446990][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1111.474732][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1111.522615][ T24] usb 4-1: string descriptor 0 read error: -22 [ 1111.532571][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1111.542206][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.602165][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1111.626691][ T9] usb 3-1: USB disconnect, device number 79 [ 1111.699084][T16610] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1112.000529][T16610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1112.024963][T16610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1112.051280][T16610] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1112.063807][T16610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.084897][T16610] usb 1-1: Product: syz [ 1112.092673][T16610] usb 1-1: Manufacturer: syz [ 1112.101603][T16610] usb 1-1: SerialNumber: syz [ 1112.121445][T16610] usb 1-1: config 0 descriptor?? [ 1112.469646][ T30] audit: type=1326 audit(1760143885.657:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18548 comm="syz.2.3681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778bd8eec9 code=0x0 [ 1112.562665][T16610] usb 1-1: USB disconnect, device number 65 [ 1112.620572][T17548] udevd[17548]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.878952][ T9] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1113.016567][ T24] usb 4-1: USB disconnect, device number 67 [ 1113.046216][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.058389][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1113.116483][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.128805][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1113.160305][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1113.183992][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1113.191619][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1113.238959][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.388932][T16610] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1114.002026][T16610] usb 5-1: Using ep0 maxpacket: 8 [ 1114.108852][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1114.126436][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1114.138386][T16610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1114.149291][T16610] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1114.158288][T16610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.170029][T16610] usb 5-1: config 0 descriptor?? [ 1114.176059][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1114.187328][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1114.196214][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1114.207112][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1114.218964][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1114.230637][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1114.244913][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1114.251146][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1114.260599][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.277726][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1114.332786][T18568] netlink: 'syz.3.3686': attribute type 1 has an invalid length. [ 1114.340645][T18568] netlink: 'syz.3.3686': attribute type 3 has an invalid length. [ 1114.348433][T18568] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1114.400221][T16610] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1115.121392][ T9] usb 2-1: USB disconnect, device number 68 [ 1115.459286][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.466120][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.077779][T18587] kAFS: Can only specify source 'none' with -o dyn [ 1116.857594][T18600] IPv6: Can't replace route, no match found [ 1116.879155][ T934] usb 5-1: USB disconnect, device number 83 [ 1116.928949][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1117.101814][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1117.145963][T18607] IPv6: Can't replace route, no match found [ 1117.242842][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1117.319051][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1117.328283][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.337238][ T9] usb 2-1: Product: syz [ 1117.348927][ T9] usb 2-1: Manufacturer: syz [ 1117.354499][ T9] usb 2-1: SerialNumber: syz [ 1117.372476][ T9] usb 2-1: config 0 descriptor?? [ 1117.393710][ T9] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1117.776526][ T9] usb 2-1: USB disconnect, device number 69 [ 1118.396348][T17376] udevd[17376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.680876][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1118.783038][T18627] netlink: 'syz.2.3700': attribute type 1 has an invalid length. [ 1118.895733][T18627] netlink: 'syz.2.3700': attribute type 3 has an invalid length. [ 1118.906158][T18627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1119.698469][ T9] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1119.850682][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1119.858420][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1119.872227][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1119.922264][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1119.930045][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1119.974927][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1120.022327][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1120.030050][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1120.072349][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1120.102475][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1120.108795][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1120.139005][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.265478][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 1120.365031][T18646] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.404072][T18646] kAFS: Can only specify source 'none' with -o dyn [ 1120.722622][ T9] usb 2-1: USB disconnect, device number 70 [ 1121.003558][T18655] netlink: 'syz.2.3706': attribute type 5 has an invalid length. [ 1123.339397][T18681] IPv6: Can't replace route, no match found [ 1123.809090][ T24] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1124.526964][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1126.059312][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1126.142441][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1126.154423][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1126.169694][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1126.585966][T18700] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.623390][T18700] kAFS: Can only specify source 'none' with -o dyn [ 1128.210010][ T24] usb 3-1: unable to read config index 1 descriptor/all [ 1128.289040][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 1128.305523][ T24] usb 3-1: can't read configurations, error -71 [ 1128.318553][T18717] netlink: 'syz.3.3724': attribute type 1 has an invalid length. [ 1128.326453][T18717] netlink: 'syz.3.3724': attribute type 3 has an invalid length. [ 1128.334193][T18717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3724'. [ 1128.508194][T18724] IPv6: Can't replace route, no match found [ 1129.480688][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1129.588955][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1129.728911][T18735] netlink: 'syz.2.3729': attribute type 1 has an invalid length. [ 1129.736727][T18735] netlink: 'syz.2.3729': attribute type 3 has an invalid length. [ 1129.745704][T18735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1129.821754][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1129.832603][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1129.853226][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1129.862578][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.874495][ T9] usb 2-1: Product: syz [ 1129.880773][ T9] usb 2-1: Manufacturer: syz [ 1129.885592][ T9] usb 2-1: SerialNumber: syz [ 1129.939501][ T9] usb 2-1: config 0 descriptor?? [ 1130.249123][ T9] usb 2-1: USB disconnect, device number 71 [ 1131.113620][T16610] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1131.542349][T16610] usb 5-1: Using ep0 maxpacket: 16 [ 1131.554833][T16610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.566131][T16610] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1131.579489][T16610] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1131.589531][T16610] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1131.609582][T16610] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.636534][T16610] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1131.643512][T16610] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1131.664590][T16610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.690757][T16610] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1131.795944][ T42] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1133.895486][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1133.903486][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1133.915303][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1133.929018][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1133.940599][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.048295][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1134.062608][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.168990][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.205841][T18771] IPv6: Can't replace route, no match found [ 1134.353512][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.365606][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.378189][ T42] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1134.385704][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.399472][ T42] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.411656][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.423705][ T42] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.488906][ T24] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1134.507880][ T42] usb 1-1: string descriptor 0 read error: -22 [ 1134.514199][ T42] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1134.541214][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.588182][ T42] usb 1-1: can't set config #168, error -71 [ 1134.629143][ T42] usb 1-1: USB disconnect, device number 66 [ 1134.750171][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1134.842849][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.944132][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.960564][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.987596][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1135.010292][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.017684][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1135.137554][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1135.339015][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1135.350302][ T42] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1135.405902][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1135.450694][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1135.458091][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1135.515681][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1135.564315][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1135.594100][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.614349][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1135.644819][ T42] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1135.664102][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1135.723053][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.756032][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1135.762548][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1135.792529][ T42] usb 1-1: config 0 descriptor?? [ 1135.839945][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.910842][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1136.190631][ T42] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1137.424609][ T5952] usb 5-1: USB disconnect, device number 84 [ 1137.509126][ T42] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1137.716331][ T42] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1137.746315][ T42] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1138.209694][T18802] IPv6: Can't replace route, no match found [ 1138.276908][ T934] usb 1-1: USB disconnect, device number 67 [ 1138.282445][ T42] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.299711][ T42] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1138.307643][ T42] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1138.320181][ T42] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.354377][ T42] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1138.363437][ T42] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1138.374643][ T42] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.392002][ T42] usb 2-1: string descriptor 0 read error: -22 [ 1138.398690][ T42] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1138.408366][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.571781][T18810] IPv6: Can't replace route, no match found [ 1138.654435][ T42] adutux 2-1:168.0: interrupt endpoints not found [ 1138.918911][ T934] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1139.129107][ T934] usb 4-1: Using ep0 maxpacket: 16 [ 1139.149088][ T934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.159325][ T934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1139.169297][ T934] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1139.179824][ T934] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1139.190351][ T934] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.203970][ T934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1139.211451][ T934] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1139.221346][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.570209][ T5924] usb 3-1: USB disconnect, device number 82 [ 1139.592295][T18792] adutux: adu_open - error, can't find device for minor 0 [ 1139.606380][ T934] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1139.618718][ T24] usb 2-1: USB disconnect, device number 72 [ 1140.940757][T18838] netlink: 'syz.2.3752': attribute type 5 has an invalid length. [ 1141.142414][ T5924] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1141.601849][T18841] vlan0: entered promiscuous mode [ 1141.799003][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 1141.946423][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.957420][ T5924] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1141.976103][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.031696][ T5924] usb 5-1: config 0 descriptor?? [ 1142.331482][ T42] usb 4-1: USB disconnect, device number 68 [ 1142.378324][ T5924] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1146.054067][ T5924] usb 5-1: USB disconnect, device number 85 [ 1146.460570][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1146.475875][T18874] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 1146.483649][T18874] netlink: 'syz.0.3760': attribute type 3 has an invalid length. [ 1146.491680][T18874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1147.648897][ T30] audit: type=1326 audit(1760143920.837:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.4.3766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb658eec9 code=0x0 [ 1148.754956][T18904] FAULT_INJECTION: forcing a failure. [ 1148.754956][T18904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.793448][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 1148.804713][ T30] audit: type=1400 audit(1760143921.967:502): avc: denied { remount } for pid=18899 comm="syz.0.3772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1148.851525][T18904] CPU: 1 UID: 0 PID: 18904 Comm: syz.1.3773 Not tainted syzkaller #0 PREEMPT(full) [ 1148.851549][T18904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1148.851559][T18904] Call Trace: [ 1148.851565][T18904] [ 1148.851571][T18904] dump_stack_lvl+0x16c/0x1f0 [ 1148.851601][T18904] should_fail_ex+0x512/0x640 [ 1148.851630][T18904] copy_fpstate_to_sigframe+0x854/0xaf0 [ 1148.851659][T18904] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1148.851688][T18904] ? collect_signal+0x263/0x540 [ 1148.851713][T18904] ? x86_task_fpu+0x5f/0x90 [ 1148.851735][T18904] get_sigframe+0x4a8/0x9c0 [ 1148.851759][T18904] ? __pfx_get_sigframe+0x10/0x10 [ 1148.851780][T18904] ? _raw_spin_unlock_irq+0x23/0x50 [ 1148.851803][T18904] ? siginfo_layout+0x1d2/0x290 [ 1148.851825][T18904] x64_setup_rt_frame+0x12e/0xcf0 [ 1148.851847][T18904] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1148.851869][T18904] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1148.851897][T18904] arch_do_signal_or_restart+0x5e4/0x7c0 [ 1148.851918][T18904] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1148.851945][T18904] ? find_held_lock+0x2b/0x80 [ 1148.851973][T18904] exit_to_user_mode_loop+0x85/0x130 [ 1148.851991][T18904] do_syscall_64+0x426/0xfa0 [ 1148.852017][T18904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.852034][T18904] RIP: 0033:0x7f981cf8eec9 [ 1148.852049][T18904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.852066][T18904] RSP: 002b:00007f981ddf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1148.852083][T18904] RAX: ffffffffffffffe0 RBX: 00007f981d1e5fa0 RCX: 00007f981cf8eec9 [ 1148.852095][T18904] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000005 [ 1148.852106][T18904] RBP: 00007f981ddf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.852123][T18904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.852133][T18904] R13: 00007f981d1e6038 R14: 00007f981d1e5fa0 R15: 00007ffd946e6698 [ 1148.852160][T18904] [ 1149.194686][T18906] netlink: 'syz.4.3770': attribute type 1 has an invalid length. [ 1149.203977][T18906] netlink: 'syz.4.3770': attribute type 3 has an invalid length. [ 1149.212016][T18906] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3770'. [ 1149.259099][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1149.281427][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1149.292961][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1149.303449][T18911] netlink: 'syz.1.3775': attribute type 15 has an invalid length. [ 1149.311644][T18911] netlink: 'syz.1.3775': attribute type 18 has an invalid length. [ 1149.412789][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.423279][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1149.523263][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1149.542418][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.586846][T18914] ieee802154 phy0 wpan0: encryption failed: -22 [ 1149.710355][T18914] kAFS: Can only specify source 'none' with -o dyn [ 1149.871527][ T24] usb 3-1: Product: syz [ 1149.895000][ T24] usb 3-1: Manufacturer: syz [ 1149.913416][ T24] usb 3-1: SerialNumber: syz [ 1149.937972][ T24] usb 3-1: config 0 descriptor?? [ 1150.310056][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1150.395395][ T30] audit: type=1326 audit(1760143923.587:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18929 comm="syz.0.3780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bcb98eec9 code=0x0 [ 1150.474321][T17376] udevd[17376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.511416][ T978] usb 3-1: USB disconnect, device number 83 [ 1152.033104][ T5924] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1152.570434][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.629034][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1152.650275][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1152.667811][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.688967][ T5924] usb 1-1: Product: syz [ 1152.693198][ T5924] usb 1-1: Manufacturer: syz [ 1152.697782][ T5924] usb 1-1: SerialNumber: syz [ 1153.024763][ T5924] usb 1-1: config 0 descriptor?? [ 1153.063832][ T5924] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1153.121045][T17376] udevd[17376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.209333][ T30] audit: type=1326 audit(1760143926.407:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18980 comm="syz.2.3799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778bd8eec9 code=0x0 [ 1153.304249][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 1153.439597][ T978] usb 1-1: USB disconnect, device number 68 [ 1153.678931][ T5924] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1153.851429][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.874316][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1153.898548][T18995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1153.903881][ T5924] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1153.931546][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.940698][ T5924] usb 2-1: Product: syz [ 1153.948098][ T5924] usb 2-1: Manufacturer: syz [ 1153.953050][ T5924] usb 2-1: SerialNumber: syz [ 1153.989393][ T5924] usb 2-1: config 0 descriptor?? [ 1154.063981][ T5924] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1154.233839][T17376] udevd[17376]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.239345][ T5924] usb 2-1: USB disconnect, device number 73 [ 1154.740993][T18999] fuse: root generation should be zero [ 1154.748008][T19002] FAULT_INJECTION: forcing a failure. [ 1154.748008][T19002] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.822568][T19002] CPU: 0 UID: 0 PID: 19002 Comm: syz.4.3805 Not tainted syzkaller #0 PREEMPT(full) [ 1154.822594][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1154.822604][T19002] Call Trace: [ 1154.822609][T19002] [ 1154.822614][T19002] dump_stack_lvl+0x16c/0x1f0 [ 1154.822635][T19002] should_fail_ex+0x512/0x640 [ 1154.822652][T19002] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1154.822671][T19002] should_failslab+0xc2/0x120 [ 1154.822684][T19002] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1154.822701][T19002] ? __d_alloc+0x32/0xae0 [ 1154.822716][T19002] ? __d_alloc+0x32/0xae0 [ 1154.822726][T19002] __d_alloc+0x32/0xae0 [ 1154.822740][T19002] d_alloc_parallel+0x111/0x1480 [ 1154.822767][T19002] ? find_held_lock+0x2b/0x80 [ 1154.822792][T19002] ? schedule+0x2d7/0x3a0 [ 1154.822825][T19002] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1154.822842][T19002] ? rcu_is_watching+0x12/0xc0 [ 1154.822856][T19002] ? lockdep_init_map_type+0x5c/0x280 [ 1154.822867][T19002] ? lockdep_init_map_type+0x5c/0x280 [ 1154.822881][T19002] __lookup_slow+0x193/0x460 [ 1154.822896][T19002] ? __pfx___lookup_slow+0x10/0x10 [ 1154.822920][T19002] ? lookup_fast+0x156/0x610 [ 1154.822938][T19002] walk_component+0x353/0x5b0 [ 1154.822956][T19002] path_lookupat+0x142/0x6d0 [ 1154.822967][T19002] filename_lookup+0x224/0x5f0 [ 1154.822979][T19002] ? __pfx_filename_lookup+0x10/0x10 [ 1154.823003][T19002] ? getname_flags.part.0+0x1c5/0x550 [ 1154.823020][T19002] user_path_at+0x3a/0x60 [ 1154.823031][T19002] user_statfs+0x9f/0x180 [ 1154.823047][T19002] ? __pfx_user_statfs+0x10/0x10 [ 1154.823065][T19002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1154.823085][T19002] __do_sys_statfs+0x89/0x100 [ 1154.823101][T19002] ? __pfx___do_sys_statfs+0x10/0x10 [ 1154.823123][T19002] ? rcu_is_watching+0x12/0xc0 [ 1154.823138][T19002] do_syscall_64+0xcd/0xfa0 [ 1154.823156][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.823167][T19002] RIP: 0033:0x7fbfb658eec9 [ 1154.823176][T19002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.823187][T19002] RSP: 002b:00007fbfb747b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 1154.823198][T19002] RAX: ffffffffffffffda RBX: 00007fbfb67e6090 RCX: 00007fbfb658eec9 [ 1154.823205][T19002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1154.823211][T19002] RBP: 00007fbfb747b090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.823218][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.823224][T19002] R13: 00007fbfb67e6128 R14: 00007fbfb67e6090 R15: 00007fff89f23b18 [ 1154.823239][T19002] [ 1155.321943][ T30] audit: type=1400 audit(1760143928.507:505): avc: denied { getattr } for pid=19019 comm="syz.4.3812" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1155.453059][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1155.518000][T19017] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 1155.525947][T19017] netlink: 'syz.0.3809': attribute type 3 has an invalid length. [ 1155.535089][T19017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1155.581091][T19021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.709297][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1155.892662][T19027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1156.206696][T19034] FAULT_INJECTION: forcing a failure. [ 1156.206696][T19034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.238554][T19034] CPU: 1 UID: 0 PID: 19034 Comm: syz.4.3818 Not tainted syzkaller #0 PREEMPT(full) [ 1156.238578][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1156.238589][T19034] Call Trace: [ 1156.238595][T19034] [ 1156.238602][T19034] dump_stack_lvl+0x16c/0x1f0 [ 1156.238631][T19034] should_fail_ex+0x512/0x640 [ 1156.238661][T19034] _copy_from_user+0x2e/0xd0 [ 1156.238679][T19034] bpf_test_init.isra.0+0xce/0x130 [ 1156.238707][T19034] bpf_prog_test_run_skb+0x261/0x2290 [ 1156.238735][T19034] ? __fget_files+0x204/0x3c0 [ 1156.238757][T19034] ? __fget_files+0x20e/0x3c0 [ 1156.238772][T19034] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1156.238801][T19034] ? fput+0x9b/0xd0 [ 1156.238825][T19034] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1156.238855][T19034] __sys_bpf+0x1035/0x4980 [ 1156.238886][T19034] ? __pfx___sys_bpf+0x10/0x10 [ 1156.238910][T19034] ? find_held_lock+0x2b/0x80 [ 1156.238938][T19034] ? find_held_lock+0x2b/0x80 [ 1156.238966][T19034] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1156.238999][T19034] ? fput+0x9b/0xd0 [ 1156.239020][T19034] ? ksys_write+0x1ac/0x250 [ 1156.239035][T19034] ? __pfx_ksys_write+0x10/0x10 [ 1156.239061][T19034] __x64_sys_bpf+0x78/0xc0 [ 1156.239086][T19034] ? lockdep_hardirqs_on+0x7c/0x110 [ 1156.239112][T19034] do_syscall_64+0xcd/0xfa0 [ 1156.239139][T19034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.239159][T19034] RIP: 0033:0x7fbfb658eec9 [ 1156.239173][T19034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.239190][T19034] RSP: 002b:00007fbfb749c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1156.239207][T19034] RAX: ffffffffffffffda RBX: 00007fbfb67e5fa0 RCX: 00007fbfb658eec9 [ 1156.239219][T19034] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1156.239229][T19034] RBP: 00007fbfb749c090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.239239][T19034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.239250][T19034] R13: 00007fbfb67e6038 R14: 00007fbfb67e5fa0 R15: 00007fff89f23b18 [ 1156.239275][T19034] [ 1156.445744][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.801161][T19042] bond0: entered promiscuous mode [ 1156.809357][T19042] bond_slave_0: entered promiscuous mode [ 1156.815232][T19042] bond_slave_1: entered promiscuous mode [ 1157.045663][T19042] dummy0: entered promiscuous mode [ 1157.110432][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3822'. [ 1157.197151][T19042] hsr1: entered promiscuous mode [ 1157.240119][T19042] hsr1: entered allmulticast mode [ 1157.290041][T19042] bond0: entered allmulticast mode [ 1157.323681][T19042] bond_slave_0: entered allmulticast mode [ 1157.362500][T19042] bond_slave_1: entered allmulticast mode [ 1157.407079][T19042] dummy0: entered allmulticast mode [ 1157.898908][ T42] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1157.898983][ T5924] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1158.048915][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1158.055909][ T42] usb 5-1: config 5 has an invalid interface number: 102 but max is 0 [ 1158.064316][ T42] usb 5-1: config 5 has no interface number 0 [ 1158.072544][ T42] usb 5-1: config 5 interface 102 has no altsetting 0 [ 1158.087209][ T42] usb 5-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice=ea.33 [ 1158.092273][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.116624][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1158.166611][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1158.183256][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.208901][ T5924] usb 1-1: Product: syz [ 1158.219081][ T5924] usb 1-1: Manufacturer: syz [ 1158.229077][ T5924] usb 1-1: SerialNumber: syz [ 1158.249953][ T5924] usb 1-1: config 0 descriptor?? [ 1158.343490][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.357923][ T42] usb 5-1: Product: syz [ 1158.362140][ T42] usb 5-1: Manufacturer: syz [ 1158.366726][ T42] usb 5-1: SerialNumber: syz [ 1158.378323][ T5924] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1158.552448][ T5924] usb 1-1: USB disconnect, device number 69 [ 1158.796617][T19068] netlink: 'syz.4.3819': attribute type 4 has an invalid length. [ 1158.811210][T19043] netlink: 'syz.4.3819': attribute type 4 has an invalid length. [ 1158.846197][T17376] udevd[17376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.889193][ T42] usb 5-1: USB disconnect, device number 86 [ 1159.290327][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 1159.667723][ T5924] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1159.799012][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1160.103201][ T5924] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1160.260484][ T5924] usb 2-1: device descriptor read/64, error -71 [ 1160.415353][ T5924] usb usb2-port1: attempt power cycle [ 1161.680570][T19110] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1161.739381][T19111] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1161.857981][ T5924] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1162.004426][ T5924] usb 2-1: device descriptor read/8, error -71 [ 1162.579253][ T5924] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1162.714957][ T9] hid_parser_main: 790 callbacks suppressed [ 1162.715008][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1162.840269][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1162.850559][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1162.939950][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1162.970727][ T5924] usb 2-1: device descriptor read/8, error -32 [ 1163.015947][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.048745][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.093820][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.158766][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.200410][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.262491][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.326560][ T9] hid-generic 0006:0004:0009.002D: unknown main item tag 0x0 [ 1163.415018][ T5924] usb usb2-port1: unable to enumerate USB device [ 1163.563907][T19133] FAULT_INJECTION: forcing a failure. [ 1163.563907][T19133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.639437][T19133] CPU: 0 UID: 0 PID: 19133 Comm: syz.3.3845 Not tainted syzkaller #0 PREEMPT(full) [ 1163.639463][T19133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1163.639475][T19133] Call Trace: [ 1163.639481][T19133] [ 1163.639490][T19133] dump_stack_lvl+0x16c/0x1f0 [ 1163.639521][T19133] should_fail_ex+0x512/0x640 [ 1163.639553][T19133] _copy_from_user+0x2e/0xd0 [ 1163.639571][T19133] copy_from_sockptr_offset+0x15c/0x1b0 [ 1163.639596][T19133] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 1163.639621][T19133] ? bpf_lsm_capable+0x9/0x10 [ 1163.639642][T19133] ? security_capable+0x7e/0x260 [ 1163.639672][T19133] do_ipt_set_ctl+0x479/0xae0 [ 1163.639696][T19133] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1163.639722][T19133] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1163.639746][T19133] ? lockdep_hardirqs_on+0x7c/0x110 [ 1163.639774][T19133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1163.639816][T19133] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1163.639838][T19133] nf_setsockopt+0x8a/0xf0 [ 1163.639860][T19133] ip_setsockopt+0xcb/0xf0 [ 1163.639886][T19133] raw_setsockopt+0xb7/0x2a0 [ 1163.639912][T19133] ? __pfx_raw_setsockopt+0x10/0x10 [ 1163.639938][T19133] ? selinux_socket_setsockopt+0x6a/0x80 [ 1163.639965][T19133] ? sock_common_setsockopt+0x2e/0xf0 [ 1163.639984][T19133] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1163.640005][T19133] do_sock_setsockopt+0xf3/0x1d0 [ 1163.640028][T19133] __sys_setsockopt+0x1a0/0x230 [ 1163.640064][T19133] __x64_sys_setsockopt+0xbd/0x160 [ 1163.640087][T19133] ? do_syscall_64+0x91/0xfa0 [ 1163.640113][T19133] ? lockdep_hardirqs_on+0x7c/0x110 [ 1163.640139][T19133] do_syscall_64+0xcd/0xfa0 [ 1163.640167][T19133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.640186][T19133] RIP: 0033:0x7fbf65d8eec9 [ 1163.640201][T19133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.640219][T19133] RSP: 002b:00007fbf66b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1163.640237][T19133] RAX: ffffffffffffffda RBX: 00007fbf65fe5fa0 RCX: 00007fbf65d8eec9 [ 1163.640249][T19133] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1163.640260][T19133] RBP: 00007fbf66b87090 R08: 00000000000003b8 R09: 0000000000000000 [ 1163.640271][T19133] R10: 0000200000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 1163.640282][T19133] R13: 00007fbf65fe6038 R14: 00007fbf65fe5fa0 R15: 00007fff72185518 [ 1163.640309][T19133] [ 1164.122164][T19134] trusted_key: encrypted_key: key user:syz not found [ 1164.338139][ T9] hid-generic 0006:0004:0009.002D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1164.601257][T19135] fido_id[19135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1164.620151][T19140] SELinux: failed to load policy [ 1164.659538][ T30] audit: type=1400 audit(1760143937.807:506): avc: denied { load_policy } for pid=19139 comm="syz.3.3846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1164.667023][T19141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1164.774441][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1164.926232][T19152] FAULT_INJECTION: forcing a failure. [ 1164.926232][T19152] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.971144][T19152] CPU: 0 UID: 0 PID: 19152 Comm: syz.3.3851 Not tainted syzkaller #0 PREEMPT(full) [ 1164.971169][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.971180][T19152] Call Trace: [ 1164.971187][T19152] [ 1164.971194][T19152] dump_stack_lvl+0x16c/0x1f0 [ 1164.971226][T19152] should_fail_ex+0x512/0x640 [ 1164.971253][T19152] ? fs_reclaim_acquire+0xae/0x150 [ 1164.971275][T19152] should_failslab+0xc2/0x120 [ 1164.971296][T19152] __kmalloc_noprof+0xdd/0x880 [ 1164.971321][T19152] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1164.971346][T19152] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1164.971364][T19152] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1164.971385][T19152] ? tomoyo_profile+0x47/0x60 [ 1164.971409][T19152] tomoyo_path_number_perm+0x245/0x580 [ 1164.971434][T19152] ? tomoyo_path_number_perm+0x237/0x580 [ 1164.971463][T19152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1164.971490][T19152] ? find_held_lock+0x2b/0x80 [ 1164.971536][T19152] ? find_held_lock+0x2b/0x80 [ 1164.971557][T19152] ? hook_file_ioctl_common+0x145/0x410 [ 1164.971585][T19152] ? __fget_files+0x20e/0x3c0 [ 1164.971607][T19152] security_file_ioctl+0x9b/0x240 [ 1164.971627][T19152] __x64_sys_ioctl+0xb7/0x210 [ 1164.971653][T19152] do_syscall_64+0xcd/0xfa0 [ 1164.971681][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.971700][T19152] RIP: 0033:0x7fbf65d8eec9 [ 1164.971718][T19152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.971734][T19152] RSP: 002b:00007fbf66b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.971751][T19152] RAX: ffffffffffffffda RBX: 00007fbf65fe5fa0 RCX: 00007fbf65d8eec9 [ 1164.971764][T19152] RDX: 0000200000000280 RSI: 00000000c040565f RDI: 0000000000000003 [ 1164.971774][T19152] RBP: 00007fbf66b87090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.971789][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.971800][T19152] R13: 00007fbf65fe6038 R14: 00007fbf65fe5fa0 R15: 00007fff72185518 [ 1164.971825][T19152] [ 1164.973059][T19152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1165.730248][ T30] audit: type=1400 audit(1760143938.877:507): avc: denied { getopt } for pid=19157 comm="syz.3.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1166.758093][ T30] audit: type=1400 audit(1760143939.947:508): avc: denied { connect } for pid=19167 comm="syz.3.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1168.236699][T19176] FAULT_INJECTION: forcing a failure. [ 1168.236699][T19176] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.319050][T19176] CPU: 0 UID: 0 PID: 19176 Comm: syz.0.3856 Not tainted syzkaller #0 PREEMPT(full) [ 1168.319081][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1168.319092][T19176] Call Trace: [ 1168.319099][T19176] [ 1168.319106][T19176] dump_stack_lvl+0x16c/0x1f0 [ 1168.319138][T19176] should_fail_ex+0x512/0x640 [ 1168.319165][T19176] ? fs_reclaim_acquire+0xae/0x150 [ 1168.319188][T19176] should_failslab+0xc2/0x120 [ 1168.319209][T19176] __kmalloc_noprof+0xdd/0x880 [ 1168.319234][T19176] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.319260][T19176] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.319279][T19176] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.319302][T19176] ? tomoyo_profile+0x47/0x60 [ 1168.319327][T19176] tomoyo_path_number_perm+0x245/0x580 [ 1168.319353][T19176] ? tomoyo_path_number_perm+0x237/0x580 [ 1168.319383][T19176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1168.319411][T19176] ? find_held_lock+0x2b/0x80 [ 1168.319458][T19176] ? find_held_lock+0x2b/0x80 [ 1168.319480][T19176] ? hook_file_ioctl_common+0x145/0x410 [ 1168.319509][T19176] ? __fget_files+0x20e/0x3c0 [ 1168.319532][T19176] security_file_ioctl+0x9b/0x240 [ 1168.319553][T19176] __x64_sys_ioctl+0xb7/0x210 [ 1168.319581][T19176] do_syscall_64+0xcd/0xfa0 [ 1168.319610][T19176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.319629][T19176] RIP: 0033:0x7f1bcb98eec9 [ 1168.319643][T19176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.319661][T19176] RSP: 002b:00007f1bcc77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.319679][T19176] RAX: ffffffffffffffda RBX: 00007f1bcbbe5fa0 RCX: 00007f1bcb98eec9 [ 1168.319690][T19176] RDX: 0000200000000500 RSI: 0000000040085618 RDI: 0000000000000003 [ 1168.319702][T19176] RBP: 00007f1bcc77d090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.319713][T19176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.319724][T19176] R13: 00007f1bcbbe6038 R14: 00007f1bcbbe5fa0 R15: 00007ffe7f73edb8 [ 1168.319751][T19176] [ 1168.319763][T19176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1168.768949][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1168.921766][ T30] audit: type=1400 audit(1760143942.117:509): avc: denied { watch watch_reads } for pid=19179 comm="syz.0.3861" path="/178/file0" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1168.939993][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.958916][ T9] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1168.972651][T19181] FAULT_INJECTION: forcing a failure. [ 1168.972651][T19181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.009170][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.039651][ T9] usb 4-1: config 0 descriptor?? [ 1169.044702][T19181] CPU: 0 UID: 0 PID: 19181 Comm: syz.0.3861 Not tainted syzkaller #0 PREEMPT(full) [ 1169.044725][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.044737][T19181] Call Trace: [ 1169.044743][T19181] [ 1169.044751][T19181] dump_stack_lvl+0x16c/0x1f0 [ 1169.044782][T19181] should_fail_ex+0x512/0x640 [ 1169.044812][T19181] strncpy_from_user+0x3b/0x2e0 [ 1169.044841][T19181] path_removexattrat+0xc6/0x5e0 [ 1169.044860][T19181] ? __pfx_path_removexattrat+0x10/0x10 [ 1169.044900][T19181] ? ksys_write+0x1ac/0x250 [ 1169.044917][T19181] ? __pfx_ksys_write+0x10/0x10 [ 1169.044939][T19181] __x64_sys_removexattr+0x5b/0x80 [ 1169.044960][T19181] do_syscall_64+0xcd/0xfa0 [ 1169.044989][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.045006][T19181] RIP: 0033:0x7f1bcb98eec9 [ 1169.045022][T19181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.045038][T19181] RSP: 002b:00007f1bcc75c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 1169.045056][T19181] RAX: ffffffffffffffda RBX: 00007f1bcbbe6090 RCX: 00007f1bcb98eec9 [ 1169.045073][T19181] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 1169.045084][T19181] RBP: 00007f1bcc75c090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.045095][T19181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.045105][T19181] R13: 00007f1bcbbe6128 R14: 00007f1bcbbe6090 R15: 00007ffe7f73edb8 [ 1169.045130][T19181] [ 1171.019006][ T978] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1171.715110][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1171.882275][ T978] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1171.891684][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.899790][ T978] usb 2-1: Product: syz [ 1171.904045][ T978] usb 2-1: Manufacturer: syz [ 1171.909386][ T978] usb 2-1: SerialNumber: syz [ 1171.926911][ T978] usb 2-1: config 0 descriptor?? [ 1171.996731][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1172.002794][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1172.030140][ T9] usb 4-1: USB disconnect, device number 69 [ 1172.522188][ T978] airspy 2-1:0.0: Board ID: 00 [ 1173.619862][ T978] airspy 2-1:0.0: Firmware version: [ 1173.627338][ T978] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 1173.671738][ T978] airspy 2-1:0.0: Registered as swradio24 [ 1173.764726][T19232] FAULT_INJECTION: forcing a failure. [ 1173.764726][T19232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.777936][T19232] CPU: 0 UID: 0 PID: 19232 Comm: syz.3.3873 Not tainted syzkaller #0 PREEMPT(full) [ 1173.777960][T19232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1173.777971][T19232] Call Trace: [ 1173.777977][T19232] [ 1173.777984][T19232] dump_stack_lvl+0x16c/0x1f0 [ 1173.778015][T19232] should_fail_ex+0x512/0x640 [ 1173.778045][T19232] _copy_from_user+0x2e/0xd0 [ 1173.778063][T19232] copy_msghdr_from_user+0x98/0x160 [ 1173.778089][T19232] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1173.778125][T19232] ___sys_sendmsg+0xfe/0x1d0 [ 1173.778152][T19232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1173.778207][T19232] __sys_sendmsg+0x16d/0x220 [ 1173.778233][T19232] ? __pfx___sys_sendmsg+0x10/0x10 [ 1173.778271][T19232] do_syscall_64+0xcd/0xfa0 [ 1173.778296][T19232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.778313][T19232] RIP: 0033:0x7fbf65d8eec9 [ 1173.778328][T19232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.778345][T19232] RSP: 002b:00007fbf66b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.778362][T19232] RAX: ffffffffffffffda RBX: 00007fbf65fe5fa0 RCX: 00007fbf65d8eec9 [ 1173.778373][T19232] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 1173.778384][T19232] RBP: 00007fbf66b87090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.778394][T19232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.778404][T19232] R13: 00007fbf65fe6038 R14: 00007fbf65fe5fa0 R15: 00007fff72185518 [ 1173.778428][T19232] [ 1173.787128][ T978] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1174.011078][ T978] usb 2-1: USB disconnect, device number 78 [ 1174.305271][ T30] audit: type=1400 audit(1760143947.497:510): avc: denied { write } for pid=19234 comm="syz.0.3874" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1175.071204][T19247] trusted_key: encrypted_key: insufficient parameters specified [ 1175.303646][T19255] FAULT_INJECTION: forcing a failure. [ 1175.303646][T19255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.334120][T19257] netlink: 'syz.4.3879': attribute type 13 has an invalid length. [ 1175.348490][T19255] CPU: 0 UID: 0 PID: 19255 Comm: syz.3.3881 Not tainted syzkaller #0 PREEMPT(full) [ 1175.348514][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1175.348524][T19255] Call Trace: [ 1175.348530][T19255] [ 1175.348537][T19255] dump_stack_lvl+0x16c/0x1f0 [ 1175.348569][T19255] should_fail_ex+0x512/0x640 [ 1175.348600][T19255] _copy_from_user+0x2e/0xd0 [ 1175.348618][T19255] copy_msghdr_from_user+0x98/0x160 [ 1175.348645][T19255] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1175.348675][T19255] ? __pfx__kstrtoull+0x10/0x10 [ 1175.348701][T19255] ___sys_sendmsg+0xfe/0x1d0 [ 1175.348729][T19255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.348771][T19255] ? find_held_lock+0x2b/0x80 [ 1175.348795][T19255] __sys_sendmmsg+0x200/0x420 [ 1175.348813][T19255] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1175.348846][T19255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1175.348883][T19255] ? fput+0x9b/0xd0 [ 1175.348904][T19255] ? ksys_write+0x1ac/0x250 [ 1175.348919][T19255] ? __pfx_ksys_write+0x10/0x10 [ 1175.348940][T19255] __x64_sys_sendmmsg+0x9c/0x100 [ 1175.348965][T19255] ? lockdep_hardirqs_on+0x7c/0x110 [ 1175.348991][T19255] do_syscall_64+0xcd/0xfa0 [ 1175.349018][T19255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.349035][T19255] RIP: 0033:0x7fbf65d8eec9 [ 1175.349050][T19255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.349067][T19255] RSP: 002b:00007fbf66b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1175.349085][T19255] RAX: ffffffffffffffda RBX: 00007fbf65fe5fa0 RCX: 00007fbf65d8eec9 [ 1175.349096][T19255] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000004 [ 1175.349107][T19255] RBP: 00007fbf66b87090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.349118][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.349128][T19255] R13: 00007fbf65fe6038 R14: 00007fbf65fe5fa0 R15: 00007fff72185518 [ 1175.349152][T19255] [ 1175.678931][ T980] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1175.753691][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1175.830642][ T980] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1175.840052][ T980] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=50.a8 [ 1175.859094][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1175.866771][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.963414][T19265] tipc: Enabled bearer , priority 0 [ 1175.975489][T19265] syzkaller0: entered promiscuous mode [ 1175.981857][T19265] syzkaller0: entered allmulticast mode [ 1176.036897][T19265] tipc: Resetting bearer [ 1176.040361][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 7 [ 1176.051922][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.085464][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.085596][T19264] tipc: Resetting bearer [ 1176.098889][ T9] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1176.130960][T19264] tipc: Disabling bearer [ 1176.150285][T19258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.162469][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.179541][T19258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.266223][ T9] usb 5-1: config 0 descriptor?? [ 1176.320520][ T980] usb 1-1: USB disconnect, device number 70 [ 1176.337777][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1176.555516][ T30] audit: type=1400 audit(1760143949.747:511): avc: denied { map } for pid=19273 comm="syz.1.3888" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1176.579733][ T30] audit: type=1400 audit(1760143949.747:512): avc: denied { execute } for pid=19273 comm="syz.1.3888" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1176.603052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.719111][ T978] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 1176.854064][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.860515][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.986735][ T9] hid_parser_main: 7 callbacks suppressed [ 1176.986766][ T9] hid-led 0003:1D34:0004.002E: unknown main item tag 0x0 [ 1177.089380][ T30] audit: type=1400 audit(1760143950.257:513): avc: denied { setopt } for pid=19279 comm="syz.0.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1177.114212][T19283] FAULT_INJECTION: forcing a failure. [ 1177.114212][T19283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.127616][T19283] CPU: 1 UID: 0 PID: 19283 Comm: syz.2.3891 Not tainted syzkaller #0 PREEMPT(full) [ 1177.127641][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1177.127656][T19283] Call Trace: [ 1177.127662][T19283] [ 1177.127669][T19283] dump_stack_lvl+0x16c/0x1f0 [ 1177.127699][T19283] should_fail_ex+0x512/0x640 [ 1177.127740][T19283] _copy_from_user+0x2e/0xd0 [ 1177.127759][T19283] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 1177.127783][T19283] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1177.127806][T19283] ? __pfx_avc_has_perm+0x10/0x10 [ 1177.127830][T19283] ? get_pid_task+0x106/0x250 [ 1177.127850][T19283] sk_setsockopt+0x162/0x3ac0 [ 1177.127870][T19283] ? __pfx_sk_setsockopt+0x10/0x10 [ 1177.127887][T19283] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1177.127906][T19283] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1177.127931][T19283] ? find_held_lock+0x2b/0x80 [ 1177.127957][T19283] ? selinux_socket_setsockopt+0x6a/0x80 [ 1177.127989][T19283] do_sock_setsockopt+0x193/0x1d0 [ 1177.128011][T19283] __sys_setsockopt+0x1a0/0x230 [ 1177.128040][T19283] __x64_sys_setsockopt+0xbd/0x160 [ 1177.128063][T19283] ? do_syscall_64+0x91/0xfa0 [ 1177.128088][T19283] ? lockdep_hardirqs_on+0x7c/0x110 [ 1177.128114][T19283] do_syscall_64+0xcd/0xfa0 [ 1177.128140][T19283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.128158][T19283] RIP: 0033:0x7f778bd8eec9 [ 1177.128173][T19283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.128190][T19283] RSP: 002b:00007f778cb8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1177.128208][T19283] RAX: ffffffffffffffda RBX: 00007f778bfe5fa0 RCX: 00007f778bd8eec9 [ 1177.128220][T19283] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 1177.128230][T19283] RBP: 00007f778cb8a090 R08: 0000000000000010 R09: 0000000000000000 [ 1177.128241][T19283] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1177.128251][T19283] R13: 00007f778bfe6038 R14: 00007f778bfe5fa0 R15: 00007fffc481df48 [ 1177.128276][T19283] [ 1177.433683][ T30] audit: type=1326 audit(1760143950.627:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19252 comm="syz.4.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb658eec9 code=0x7ffc0000 [ 1177.531422][ T978] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1177.541947][ T978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1177.543495][ T30] audit: type=1326 audit(1760143950.627:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19252 comm="syz.4.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb658eec9 code=0x7ffc0000 [ 1177.554083][ T978] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.616115][T19291] FAULT_INJECTION: forcing a failure. [ 1177.616115][T19291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.617450][T19291] [ 1177.617457][T19291] ====================================================== [ 1177.617464][T19291] WARNING: possible circular locking dependency detected [ 1177.617471][T19291] syzkaller #0 Not tainted [ 1177.617479][T19291] ------------------------------------------------------ [ 1177.617485][T19291] syz.2.3894/19291 is trying to acquire lock: [ 1177.617493][T19291] ffffffff8e2d16c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 1177.617538][T19291] [ 1177.617538][T19291] but task is already holding lock: [ 1177.617543][T19291] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1177.617581][T19291] [ 1177.617581][T19291] which lock already depends on the new lock. [ 1177.617581][T19291] [ 1177.617586][T19291] [ 1177.617586][T19291] the existing dependency chain (in reverse order) is: [ 1177.617592][T19291] [ 1177.617592][T19291] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1177.617612][T19291] _raw_spin_lock_nested+0x31/0x40 [ 1177.617634][T19291] raw_spin_rq_lock_nested+0x29/0x130 [ 1177.617653][T19291] task_rq_lock+0xcf/0x490 [ 1177.617671][T19291] cgroup_move_task+0x81/0x2a0 [ 1177.617693][T19291] css_set_move_task+0x288/0x5f0 [ 1177.617709][T19291] cgroup_post_fork+0x201/0x9d0 [ 1177.617729][T19291] copy_process+0x602d/0x76a0 [ 1177.617756][T19291] kernel_clone+0xfc/0x930 [ 1177.617775][T19291] user_mode_thread+0xc8/0x110 [ 1177.617796][T19291] rest_init+0x23/0x2b0 [ 1177.617813][T19291] start_kernel+0x3f3/0x4e0 [ 1177.617835][T19291] x86_64_start_reservations+0x18/0x30 [ 1177.617859][T19291] x86_64_start_kernel+0x130/0x190 [ 1177.617881][T19291] common_startup_64+0x13e/0x148 [ 1177.617898][T19291] [ 1177.617898][T19291] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1177.617917][T19291] _raw_spin_lock_irqsave+0x3a/0x60 [ 1177.617938][T19291] try_to_wake_up+0xb7/0x1870 [ 1177.617956][T19291] __wake_up_common+0x135/0x1f0 [ 1177.617981][T19291] __wake_up+0x31/0x60 [ 1177.618001][T19291] tty_port_default_wakeup+0x47/0x60 [ 1177.618021][T19291] serial8250_tx_chars+0x68e/0x860 [ 1177.618041][T19291] serial8250_handle_irq+0x761/0xcb0 [ 1177.618062][T19291] serial8250_default_handle_irq+0x9e/0x270 [ 1177.618084][T19291] serial8250_interrupt+0xf8/0x1d0 [ 1177.618107][T19291] __handle_irq_event_percpu+0x236/0x920 [ 1177.618127][T19291] handle_irq_event+0xab/0x1e0 [ 1177.618146][T19291] handle_edge_irq+0x3ca/0x9e0 [ 1177.618164][T19291] __common_interrupt+0xcd/0x2f0 [ 1177.618185][T19291] common_interrupt+0x61/0xe0 [ 1177.618202][T19291] asm_common_interrupt+0x26/0x40 [ 1177.618218][T19291] handle_softirqs+0x1dd/0x8e0 [ 1177.618238][T19291] __irq_exit_rcu+0x109/0x170 [ 1177.618256][T19291] irq_exit_rcu+0x9/0x30 [ 1177.618275][T19291] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1177.618298][T19291] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1177.618314][T19291] write_comp_data+0x11/0x90 [ 1177.618331][T19291] avc_has_perm+0x102/0x1f0 [ 1177.618352][T19291] inode_has_perm+0x168/0x1d0 [ 1177.618373][T19291] file_has_perm+0x2e4/0x350 [ 1177.618394][T19291] selinux_file_permission+0x498/0x660 [ 1177.618410][T19291] security_file_permission+0x1e3/0x210 [ 1177.618428][T19291] rw_verify_area+0xb9/0x6c0 [ 1177.618450][T19291] vfs_read+0x150/0xcf0 [ 1177.618463][T19291] ksys_read+0x1f8/0x250 [ 1177.618475][T19291] do_syscall_64+0xcd/0xfa0 [ 1177.618499][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.618514][T19291] [ 1177.618514][T19291] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1177.618535][T19291] _raw_spin_lock_irqsave+0x3a/0x60 [ 1177.618557][T19291] __wake_up+0x1c/0x60 [ 1177.618576][T19291] tty_port_default_wakeup+0x47/0x60 [ 1177.618594][T19291] serial8250_tx_chars+0x68e/0x860 [ 1177.618614][T19291] serial8250_handle_irq+0x761/0xcb0 [ 1177.618635][T19291] serial8250_default_handle_irq+0x9e/0x270 [ 1177.618657][T19291] serial8250_interrupt+0xf8/0x1d0 [ 1177.618680][T19291] __handle_irq_event_percpu+0x236/0x920 [ 1177.618700][T19291] handle_irq_event+0xab/0x1e0 [ 1177.618718][T19291] handle_edge_irq+0x3ca/0x9e0 [ 1177.618736][T19291] __common_interrupt+0xcd/0x2f0 [ 1177.618761][T19291] common_interrupt+0xba/0xe0 [ 1177.618778][T19291] asm_common_interrupt+0x26/0x40 [ 1177.618794][T19291] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1177.618816][T19291] uart_write+0x2a4/0xb30 [ 1177.618836][T19291] n_tty_write+0x41e/0x11e0 [ 1177.618856][T19291] file_tty_write.constprop.0+0x500/0x9b0 [ 1177.618873][T19291] redirected_tty_write+0xd4/0x150 [ 1177.618889][T19291] vfs_write+0x7d0/0x11d0 [ 1177.618902][T19291] ksys_write+0x12a/0x250 [ 1177.618915][T19291] do_syscall_64+0xcd/0xfa0 [ 1177.618938][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.618954][T19291] [ 1177.618954][T19291] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1177.618974][T19291] _raw_spin_lock_irqsave+0x3a/0x60 [ 1177.618996][T19291] serial8250_console_write+0x181/0x1890 [ 1177.619019][T19291] console_flush_all+0x801/0xc60 [ 1177.619037][T19291] console_unlock+0xd8/0x210 [ 1177.619055][T19291] vprintk_emit+0x3d7/0x680 [ 1177.619075][T19291] _printk+0xc7/0x100 [ 1177.619088][T19291] register_console+0xc2d/0x11b0 [ 1177.619108][T19291] univ8250_console_init+0x5f/0x90 [ 1177.619133][T19291] console_init+0x14f/0x680 [ 1177.619157][T19291] start_kernel+0x29f/0x4e0 [ 1177.619177][T19291] x86_64_start_reservations+0x18/0x30 [ 1177.619200][T19291] x86_64_start_kernel+0x130/0x190 [ 1177.619222][T19291] common_startup_64+0x13e/0x148 [ 1177.619238][T19291] [ 1177.619238][T19291] -> #0 (console_owner){-.-.}-{0:0}: [ 1177.619258][T19291] __lock_acquire+0x12a6/0x1ce0 [ 1177.619283][T19291] lock_acquire+0x179/0x350 [ 1177.619295][T19291] console_lock_spinning_enable+0x72/0x80 [ 1177.619314][T19291] console_flush_all+0x7aa/0xc60 [ 1177.619333][T19291] console_unlock+0xd8/0x210 [ 1177.619350][T19291] vprintk_emit+0x3d7/0x680 [ 1177.619369][T19291] _printk+0xc7/0x100 [ 1177.619383][T19291] should_fail_ex+0x4e7/0x640 [ 1177.619408][T19291] strncpy_from_user+0x3b/0x2e0 [ 1177.619429][T19291] strncpy_from_user_nofault+0x7f/0x180 [ 1177.619455][T19291] bpf_bprintf_prepare+0xe90/0x13f0 [ 1177.619471][T19291] bpf_trace_printk+0xda/0x190 [ 1177.619488][T19291] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1177.619501][T19291] bpf_trace_run2+0x239/0x590 [ 1177.619519][T19291] __bpf_trace_contention_begin+0xc9/0x110 [ 1177.619546][T19291] trace_contention_begin.constprop.0+0xde/0x160 [ 1177.619563][T19291] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1177.619588][T19291] do_raw_spin_lock+0x20e/0x2b0 [ 1177.619605][T19291] raw_spin_rq_lock_nested+0x7e/0x130 [ 1177.619625][T19291] __schedule+0x307/0x5de0 [ 1177.619645][T19291] preempt_schedule_irq+0x51/0x90 [ 1177.619669][T19291] irqentry_exit+0x36/0x90 [ 1177.619691][T19291] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1177.619707][T19291] __sanitizer_cov_trace_pc+0x17/0x70 [ 1177.619726][T19291] get_pipe_info+0x87/0x110 [ 1177.619744][T19291] do_tee+0x44/0x1020 [ 1177.619764][T19291] __x64_sys_tee+0x136/0x1f0 [ 1177.619779][T19291] do_syscall_64+0xcd/0xfa0 [ 1177.619802][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.619818][T19291] [ 1177.619818][T19291] other info that might help us debug this: [ 1177.619818][T19291] [ 1177.619823][T19291] Chain exists of: [ 1177.619823][T19291] console_owner --> &p->pi_lock --> &rq->__lock [ 1177.619823][T19291] [ 1177.619845][T19291] Possible unsafe locking scenario: [ 1177.619845][T19291] [ 1177.619850][T19291] CPU0 CPU1 [ 1177.619854][T19291] ---- ---- [ 1177.619859][T19291] lock(&rq->__lock); [ 1177.619869][T19291] lock(&p->pi_lock); [ 1177.619880][T19291] lock(&rq->__lock); [ 1177.619891][T19291] lock(console_owner); [ 1177.619900][T19291] [ 1177.619900][T19291] *** DEADLOCK *** [ 1177.619900][T19291] [ 1177.619904][T19291] 4 locks held by syz.2.3894/19291: [ 1177.619914][T19291] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1177.619954][T19291] #1: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 1177.619992][T19291] #2: ffffffff8e3b1b00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1177.620025][T19291] #3: ffffffff8e3b1b70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1177.620065][T19291] [ 1177.620065][T19291] stack backtrace: [ 1177.620073][T19291] CPU: 1 UID: 0 PID: 19291 Comm: syz.2.3894 Not tainted syzkaller #0 PREEMPT(full) [ 1177.620092][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1177.620102][T19291] Call Trace: [ 1177.620107][T19291] [ 1177.620114][T19291] dump_stack_lvl+0x116/0x1f0 [ 1177.620141][T19291] print_circular_bug+0x275/0x350 [ 1177.620167][T19291] check_noncircular+0x14c/0x170 [ 1177.620195][T19291] __lock_acquire+0x12a6/0x1ce0 [ 1177.620225][T19291] lock_acquire+0x179/0x350 [ 1177.620239][T19291] ? console_lock_spinning_enable+0x61/0x80 [ 1177.620260][T19291] ? console_lock_spinning_enable+0x4a/0x80 [ 1177.620282][T19291] console_lock_spinning_enable+0x72/0x80 [ 1177.620302][T19291] ? console_lock_spinning_enable+0x61/0x80 [ 1177.620322][T19291] console_flush_all+0x7aa/0xc60 [ 1177.620344][T19291] ? __pfx_console_flush_all+0x10/0x10 [ 1177.620368][T19291] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1177.620392][T19291] console_unlock+0xd8/0x210 [ 1177.620411][T19291] ? __pfx_console_unlock+0x10/0x10 [ 1177.620430][T19291] ? do_raw_spin_unlock+0xe0/0x230 [ 1177.620449][T19291] ? _printk+0xc7/0x100 [ 1177.620464][T19291] ? __down_trylock_console_sem+0xb0/0x140 [ 1177.620482][T19291] vprintk_emit+0x3d7/0x680 [ 1177.620503][T19291] ? __pfx_vprintk_emit+0x10/0x10 [ 1177.620524][T19291] ? bpf_trace_run2+0x3e1/0x590 [ 1177.620545][T19291] _printk+0xc7/0x100 [ 1177.620560][T19291] ? __pfx__printk+0x10/0x10 [ 1177.620577][T19291] ? __pfx____ratelimit+0x10/0x10 [ 1177.620603][T19291] should_fail_ex+0x4e7/0x640 [ 1177.620630][T19291] strncpy_from_user+0x3b/0x2e0 [ 1177.620651][T19291] ? nmi_uaccess_okay+0x78/0xb0 [ 1177.620668][T19291] strncpy_from_user_nofault+0x7f/0x180 [ 1177.620694][T19291] bpf_bprintf_prepare+0xe90/0x13f0 [ 1177.620714][T19291] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1177.620733][T19291] ? __lock_acquire+0xb97/0x1ce0 [ 1177.620766][T19291] ? bpf_trace_run2+0x3e1/0x590 [ 1177.620785][T19291] bpf_trace_printk+0xda/0x190 [ 1177.620803][T19291] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1177.620824][T19291] ? bpf_trace_run2+0x3e1/0x590 [ 1177.620848][T19291] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1177.620862][T19291] bpf_trace_run2+0x239/0x590 [ 1177.620882][T19291] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1177.620906][T19291] __bpf_trace_contention_begin+0xc9/0x110 [ 1177.620932][T19291] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1177.620965][T19291] trace_contention_begin.constprop.0+0xde/0x160 [ 1177.620985][T19291] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1177.621013][T19291] ? __lock_acquire+0xb97/0x1ce0 [ 1177.621038][T19291] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1177.621064][T19291] ? _parse_integer_limit+0x17f/0x1d0 [ 1177.621089][T19291] do_raw_spin_lock+0x20e/0x2b0 [ 1177.621108][T19291] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1177.621126][T19291] ? rcu_qs+0x2b/0xe0 [ 1177.621146][T19291] ? rcu_note_context_switch+0x192/0x1e00 [ 1177.621170][T19291] raw_spin_rq_lock_nested+0x7e/0x130 [ 1177.621190][T19291] ? preempt_schedule_irq+0x51/0x90 [ 1177.621214][T19291] __schedule+0x307/0x5de0 [ 1177.621239][T19291] ? find_held_lock+0x2b/0x80 [ 1177.621259][T19291] ? get_pid_task+0xfc/0x250 [ 1177.621276][T19291] ? __pfx___schedule+0x10/0x10 [ 1177.621298][T19291] ? get_pid_task+0x106/0x250 [ 1177.621313][T19291] ? find_held_lock+0x2b/0x80 [ 1177.621336][T19291] preempt_schedule_irq+0x51/0x90 [ 1177.621361][T19291] irqentry_exit+0x36/0x90 [ 1177.621385][T19291] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1177.621402][T19291] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 1177.621424][T19291] Code: 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 58 bb e7 11 65 8b 05 69 bb e7 11 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 [ 1177.621441][T19291] RSP: 0018:ffffc90003d77e08 EFLAGS: 00000246 [ 1177.621453][T19291] RAX: 0000000080000000 RBX: ffffffff8b9fb520 RCX: ffffffff823a3451 [ 1177.621465][T19291] RDX: ffff8880272c8000 RSI: ffffffff823a3447 RDI: ffff88807a35f8c8 [ 1177.621476][T19291] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1177.621486][T19291] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056476800 [ 1177.621496][T19291] R13: 0000000000000001 R14: ffff88807a35f880 R15: ffff888065455500 [ 1177.621510][T19291] ? get_pipe_info+0x91/0x110 [ 1177.621529][T19291] ? get_pipe_info+0x87/0x110 [ 1177.621550][T19291] get_pipe_info+0x87/0x110 [ 1177.621569][T19291] do_tee+0x44/0x1020 [ 1177.621585][T19291] ? __fget_files+0x20e/0x3c0 [ 1177.621605][T19291] __x64_sys_tee+0x136/0x1f0 [ 1177.621622][T19291] do_syscall_64+0xcd/0xfa0 [ 1177.621647][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.621663][T19291] RIP: 0033:0x7f778bd8eec9 [ 1177.621675][T19291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.621691][T19291] RSP: 002b:00007f778cb8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 1177.621706][T19291] RAX: ffffffffffffffda RBX: 00007f778bfe5fa0 RCX: 00007f778bd8eec9 [ 1177.621717][T19291] RDX: 000000000000004e RSI: 0000000000000008 RDI: 0000000000000005 [ 1177.621727][T19291] RBP: 00007f778cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.621737][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.621747][T19291] R13: 00007f778bfe6038 R14: 00007f778bfe5fa0 R15: 00007fffc481df48 [ 1177.621770][T19291] [ 1178.971810][T19291] CPU: 1 UID: 0 PID: 19291 Comm: syz.2.3894 Not tainted syzkaller #0 PREEMPT(full) [ 1178.971830][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1178.971839][T19291] Call Trace: [ 1178.971844][T19291] [ 1178.971851][T19291] dump_stack_lvl+0x116/0x1f0 [ 1178.971877][T19291] should_fail_ex+0x512/0x640 [ 1178.971900][T19291] strncpy_from_user+0x3b/0x2e0 [ 1178.971922][T19291] ? nmi_uaccess_okay+0x78/0xb0 [ 1178.971936][T19291] strncpy_from_user_nofault+0x7f/0x180 [ 1178.971960][T19291] bpf_bprintf_prepare+0xe90/0x13f0 [ 1178.971978][T19291] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1178.971993][T19291] ? __lock_acquire+0xb97/0x1ce0 [ 1178.972021][T19291] ? bpf_trace_run2+0x3e1/0x590 [ 1178.972039][T19291] bpf_trace_printk+0xda/0x190 [ 1178.972056][T19291] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1178.972073][T19291] ? bpf_trace_run2+0x3e1/0x590 [ 1178.972093][T19291] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1178.972105][T19291] bpf_trace_run2+0x239/0x590 [ 1178.972122][T19291] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1178.972142][T19291] __bpf_trace_contention_begin+0xc9/0x110 [ 1178.972165][T19291] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1178.972194][T19291] trace_contention_begin.constprop.0+0xde/0x160 [ 1178.972211][T19291] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1178.972235][T19291] ? __lock_acquire+0xb97/0x1ce0 [ 1178.972256][T19291] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1178.972278][T19291] ? _parse_integer_limit+0x17f/0x1d0 [ 1178.972298][T19291] do_raw_spin_lock+0x20e/0x2b0 [ 1178.972315][T19291] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1178.972330][T19291] ? rcu_qs+0x2b/0xe0 [ 1178.972347][T19291] ? rcu_note_context_switch+0x192/0x1e00 [ 1178.972366][T19291] raw_spin_rq_lock_nested+0x7e/0x130 [ 1178.972384][T19291] ? preempt_schedule_irq+0x51/0x90 [ 1178.972405][T19291] __schedule+0x307/0x5de0 [ 1178.972426][T19291] ? find_held_lock+0x2b/0x80 [ 1178.972443][T19291] ? get_pid_task+0xfc/0x250 [ 1178.972458][T19291] ? __pfx___schedule+0x10/0x10 [ 1178.972476][T19291] ? get_pid_task+0x106/0x250 [ 1178.972488][T19291] ? find_held_lock+0x2b/0x80 [ 1178.972508][T19291] preempt_schedule_irq+0x51/0x90 [ 1178.972528][T19291] irqentry_exit+0x36/0x90 [ 1178.972548][T19291] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1178.972563][T19291] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 1178.972583][T19291] Code: 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 58 bb e7 11 65 8b 05 69 bb e7 11 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 [ 1178.972598][T19291] RSP: 0018:ffffc90003d77e08 EFLAGS: 00000246 [ 1178.972610][T19291] RAX: 0000000080000000 RBX: ffffffff8b9fb520 RCX: ffffffff823a3451 [ 1178.972619][T19291] RDX: ffff8880272c8000 RSI: ffffffff823a3447 RDI: ffff88807a35f8c8 [ 1178.972629][T19291] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1178.972637][T19291] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056476800 [ 1178.972645][T19291] R13: 0000000000000001 R14: ffff88807a35f880 R15: ffff888065455500 [ 1178.972657][T19291] ? get_pipe_info+0x91/0x110 [ 1178.972674][T19291] ? get_pipe_info+0x87/0x110 [ 1178.972691][T19291] get_pipe_info+0x87/0x110 [ 1178.972707][T19291] do_tee+0x44/0x1020 [ 1178.972723][T19291] ? __fget_files+0x20e/0x3c0 [ 1178.972740][T19291] __x64_sys_tee+0x136/0x1f0 [ 1178.972755][T19291] do_syscall_64+0xcd/0xfa0 [ 1178.972777][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.972790][T19291] RIP: 0033:0x7f778bd8eec9 [ 1178.972801][T19291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.972814][T19291] RSP: 002b:00007f778cb8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 1178.972827][T19291] RAX: ffffffffffffffda RBX: 00007f778bfe5fa0 RCX: 00007f778bd8eec9 [ 1178.972836][T19291] RDX: 000000000000004e RSI: 0000000000000008 RDI: 0000000000000005 [ 1178.972845][T19291] RBP: 00007f778cb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.972855][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.972864][T19291] R13: 00007f778bfe6038 R14: 00007f778bfe5fa0 R15: 00007fffc481df48 [ 1178.972878][T19291] [ 1179.400797][ T978] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1179.411276][ T978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1179.415604][ T9] hid-led 0003:1D34:0004.002E: probe with driver hid-led failed with error -71 [ 1179.421973][ T978] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.422460][ T30] audit: type=1326 audit(1760143950.647:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19252 comm="syz.4.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbfb658eec9 code=0x7ffc0000 [ 1179.437799][ T9] usb 5-1: USB disconnect, device number 87 [ 1179.446035][ T30] audit: type=1326 audit(1760143950.657:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19252 comm="syz.4.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb658eec9 code=0x7ffc0000 [ 1179.467655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1179.473610][ T30] audit: type=1326 audit(1760143950.657:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19252 comm="syz.4.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb658eec9 code=0x7ffc0000 [ 1179.528147][ T978] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1179.538663][ T978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1179.549398][ T978] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.617379][ T978] usb 4-1: string descriptor 0 read error: -71 [ 1179.623637][ T978] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1179.632967][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.642119][ T978] usb 4-1: can't set config #168, error -71 [ 1179.651595][ T978] usb 4-1: USB disconnect, device number 70