last executing test programs: 9.198581695s ago: executing program 0 (id=989): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) get_robust_list(0xffffffffffffffff, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.840733208s ago: executing program 3 (id=992): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2b82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000001c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) close(0x3) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r4}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002001800000000000000000008500"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x0, r0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500174008"], 0x15) 8.357073734s ago: executing program 3 (id=993): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a000008000280040072801400"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r4 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x4, 0x20000002, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x2182) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="59dbe828e5379d2f1107463145aa8a33a999ff865d", 0x15, 0x80, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 7.976368913s ago: executing program 2 (id=994): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) pread64(r1, &(0x7f0000000480)=""/160, 0xa0, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x3ff, 0x3, [0x1000, 0x2, 0xd8]}, 0xe) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r3}) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0xc2) 7.779776838s ago: executing program 2 (id=996): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@bridge_getlink={0x34, 0x12, 0x104fc4407ba7bf0b, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x201, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x24008800) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2007) 7.739187609s ago: executing program 2 (id=997): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000580)=""/4096, 0x1000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xb2e, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x2, 0x2ae}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a", @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r12, @ANYRES16=r8, @ANYBLOB="01000000000000000000020011001400018005000200013090e9adfae5b8e1dd880000000000000050a4f334c4528926bc74959d67aadd993b607647bb8ea946b9b48b15d7a0bb571923f6f1b385c3a2e17fc14a662ee96275f7823aae1aafc1a64171bef0915282c41ac477713c0978e4800abad376347497b568194c6e8f609e719638bcbac4dbd1e9d574fb1e0f6eb78611b80d250a65c02e72df55327646d095e0f15936878de6a5c7882b9c426855d2a02378"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) r14 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r14, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0x0, 0x3}, 0x2}, 0x18) epoll_create(0x2) 7.31567193s ago: executing program 0 (id=999): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x4, 0x20000002, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="59dbe828e5379d2f1107463145aa8a33", 0x10, 0x80, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000007800)={0xa, 0x4, 0xfa00, {r7}}, 0xc) 7.044713853s ago: executing program 3 (id=1001): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0)='g', 0x1, 0xffffffffffffffff) keyctl$read(0x1e, r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xa}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_STATUS={0x8}]}, 0xfffffffffffffe06}, 0x1, 0x0, 0x0, 0xac4bf60f974c3af3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x9, 0x8001, 0x42, @local, @remote, 0x1, 0x7, 0x401, 0xdabd}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x100, 0x0, r2, 0x9, '\x00', r3, r2, 0x4, 0x1, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfd, 0x4c8, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x24000004) 6.692600195s ago: executing program 3 (id=1004): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb353}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000d9000/0x3000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x5}, {0xa, 0x0, 0x0, @loopback, 0x4}, r5}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x8, 0x0, [0x1, 0x5, 0xffffffff, 0xe76, 0xffff, 0x2, 0xc491, 0x7, 0x3, 0x9, 0x9, 0x1, 0x30000, 0x9, 0x7cb, 0x44]}], r5, 0x1, 0x1, 0x48}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 6.530329053s ago: executing program 2 (id=1005): syz_open_dev$dri(0x0, 0x9237, 0x149441) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r5, r4, &(0x7f0000000040)=0x10, 0x80000001) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 5.053457185s ago: executing program 4 (id=1008): r0 = socket$netlink(0x10, 0x3, 0x4) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xf, 0x20000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r4) r5 = socket(0x25, 0x5, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2001, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000380)={0x6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3c, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r12 = userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_ZEROPAGE(r12, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}, 0x1}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r13, 0x104, 0x4, &(0x7f0000000200)=0x6, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.807241734s ago: executing program 4 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000001f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000021c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000400)="eba1d1df7856f0989a07bf86f35334ff0b8fca9411e07eb6f91875738cefd48755c9302c65d5a9f4598c9d9a9fea54c5c2500fa5c158d0f1c99e0cf17b5c79b6889f03d5616a75992e8935326baf6d3cd855f5e5792c94ee9cca59ce10031d5a7459692ef04aef61", 0x68}, {&(0x7f00000001c0)="3a09c74c83a831ded6b1e496cb096d62d885b56a", 0x14}, {&(0x7f0000000480)="7b0fd6ca8ed537a67d2be47cc9e924826de48fd61b2e08edd6ae43e4b5f83c555e66950410eb33709ac6a059333135bba3ccf6a61cc3f3c74907bf4306ecf1037bb03239cd167418163d43cbc3990e5e4181996c0ac1f157484947575654ed5fc41c8c", 0x63}, {&(0x7f00000005c0)="b4008e17806e4e220a89de2dccb72ce5e151e4d171e031aab7163c78f013d428ed7fae78c65ed720c0b4e15c8a2bdac15356c263311dcc80f897a4bcc00e203784f1d1db4839a921828ced204b53aefd5482905ae676f3bd8147ec4f4721c12ea2175e161489c1aa48bfaf76f4aebe100ee3fac900111319878c6a83a1835d2cdc086a9c421efb2ee356250a04bbb06c6b7df1d350c70f208384c68534c9b51947f920a8fd98f01408b3bcd7a3baa6ba9f66b90c6a2e05c1bb929fe1691ca8f7bcc6a39d512cc4055867864ed2046c1b7294c0578ede4561db44e978dbade1fb3b4511d0ef5831af624cf6bb65696cd921827f3f", 0xf4}, {&(0x7f0000000500)="913200f15ad44b83b0ac21126e4b3f186d4f565781e97894b6e7f0e1041f43a08fe983725061eabf9b6ad73aac2060ec1f954b6580dda7806e943b8499c98670c508114c4ab971aa83ff4f681fa84da7545276a4243f9236e166447d143a5f3759f9f252", 0x64}, {&(0x7f00000006c0)="6b6d7fcc5ec5a3f8d725bbc35b3e86523a443b6d8393b16df1ad4b1a9e28cce5475918ce69ed1c34101ea952207c631f3a5745517bf78b17", 0x38}, {&(0x7f0000000700)="13838adfaeaf0af8091891bda58cd270922988dd04ba7eb853ea9c05774e78b30b881e421853d444d59825bcd76ade16b178190dfe0b45c11595b3a16f86395ec2967799c1669c1f87cfca1eda61ee92b91b9b5d7178eb699e1e968659f02313dd5ccd86f43fa4809fae63bb789c88149fe48130ef7a8b9e82d05653003755c3aebdec86f963c72681b6815d5275d64a8c4f69f77eaeb363b3dff9ef264cdd2310fb98b9abbdf487ab78c8658c207e234a93e5b7c3329cdb4898b076fea194b3169330ae3386ebe2f45bfd82898241e2d81f1f14781d4cbf639dd0a5d5a38e3cf83c4c515b7a28c3eae549f1888db2612d762854a6a79aaf", 0xf8}], 0x7, 0x0, 0x0, 0x1}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)="de8eac048d8963ff08b1630e195de171a99e335c95166afe25c621973863817dcd002962b73e9e9836cff1f26a8034199d6b2be74d2cb2d8d29d9d6a8f84cc9b33492dd11a115a20922dfae472593e4f65128bbfe48a461b2e766df8d6cfb5ff872cafdf0a39ac1892c13a581bb4814e9dd9e7375241202283170690bc49fd90f1f214d65ce7d8445fa3b3501b34052a16d87ae9f87484ce5220d5af2a1acc61012684df7706ea287bca1d527f15a467313a74dfbeeeb7e4ef8f6bf1eb0a987ca943e96ddbc3f87a4123186bc45529", 0xcf}, {&(0x7f0000000a00)="148824f910be3091f438d9a1781af3d1c90f634883aecf624d96c4ae772f9afe2aa6e918f9dae8b23c077f5a714e73c065bd02c62b6823688e321a2f42800749fc2bd0eb4e07f8dfd61fd2759b68c3e4e26fca18aa1b6b17746db1d78b4d6314594130212cbacd46ed9a458bfc9739d7c27039c8233def78ed957e130fac49e35326da32a218c51f006b779ce21b541f914313cf264c937dee21045feef717da00f3b4a35f68effd9f500993cd8e4ca81ea84de8f5c2910a50655253c19652578f345d2bb2f71ec191460937d0639c8ec4e387", 0xd3}], 0x2, 0x0, 0x0, 0x20000004}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="43869d80b835a8de659ec8e71df4bc826fcf889201d6980a6572e8d0370b78c045367eee6bf4e7447f255ea5601e089046eea45d8a62aa79ce20fcb54bfcf2ed10305fbd78da315ad8de8f756724bfeffe2bd4c2390fc19c546664b5659996b805037f", 0x63}, {&(0x7f0000001bc0)="86c6793304b4041043df2852e223a06d8dce550182a17db8c0e0c9ae8727f498af5c63b49fc10e643334b456b586653120f11152bfe44184f8a825b63c6c5c4f887fd4a974ab00eeb8305e2130b6e4f4b16fba7e38fe8f424551a656bb985308ddaea8169bb5ed361c4234f5742aa897b0b33d29f621db5ef7a9bb9c6129cbaa231e", 0x82}, {&(0x7f0000001c80)="e371e7db978a8695426565866126a149cc799af4a197ab01220321b8c14b5433732074f519cf69edea45a4aedab4a549bb37712286615c0dc0523077a368edafc5dfa6f643e2aaeef26a7d2dfbd612ec6ca679dad626ec852178354cdabb368b96212343d76ab702ce7a46024498", 0x6e}, {&(0x7f0000001d00)="0e4583fcbed92fc68ceb6501452f85e3defb9f5a65fec0d0c5ca8022e4da323a3a4bda06a5e101b5394f20b5153aad", 0x2f}, {&(0x7f0000001d40)="f747729f606d2d", 0x7}, {&(0x7f0000001d80)="1ae563cdd890d9e275ce88dff9b10057431e2a9bf85cd8c110a5016657d1cb5748b9d809de21ffd83d071558127bcfc0c0bf10654989b8bfdf8db5f10ef4033fea862b506f73cc4fc23ce373a63e018d1a32a1490b78c3ad4671c3487c07fd821397dc0286d4088c1810a302154a0c66730adf0d2a90305bf52324330910eec9b84a62b4", 0x84}, {&(0x7f0000001e40)="e54e57bb8fe89cc5bdf68cee65d2254316c84a674abce77ee1b72cec47da459abcd82ba597714637c865c4faf11ac7a7464dd8a4cc7868e339e683b6eb028486875d0837ba03222468e361c93f23cac8f2cc466c309d25f6ca742d00bdef56bce490e3ed2cc4ac0e0047427f935942db20f4493f8c17e3c8efd611eff9a303f50877d15cd8475e17d763a95acaf2977fd70e4a91c2efba4d55bda7d38f348f15ddc48f0d09e9dd97", 0xa8}], 0x8, &(0x7f0000002140)=[@rights={{0x1c, 0x1, 0x1, [r1, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}], 0x58, 0x20040011}}], 0x3, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) 4.743259253s ago: executing program 0 (id=1010): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x400200c1}) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 4.497602715s ago: executing program 0 (id=1011): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x89}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) sendto$inet6(r1, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a0410520101010203010902"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@timestamp], 0x1) shutdown(r1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100002001800000000000000000008500"], 0x0, 0x4, 0x10}, 0x94) fcntl$setstatus(r2, 0x4, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500174008"], 0x15) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(&(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x81, 0x3}, &(0x7f0000000080)=0x8) 4.412403858s ago: executing program 3 (id=1012): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000300)={0x0, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000002740)='\x00', 0x1}], 0x1) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) sendmsg$nl_netfilter(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xfffffea9, &(0x7f00000000c0)={&(0x7f0000002c80)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32, @ANYRESHEX=r1], 0x2d8}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) 4.241273666s ago: executing program 2 (id=1013): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r3) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) userfaultfd(0x80000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r5, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r6, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) socket$packet(0x11, 0x2, 0x300) 3.659566102s ago: executing program 4 (id=1014): gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) (async) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800"], 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000180)) 3.480292539s ago: executing program 1 (id=1015): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000880)={'gre0\x00', r2, 0x700, 0x10, 0xffffffff, 0x9, {{0x1a, 0x4, 0x0, 0x1a, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1, {[@rr={0x7, 0x27, 0x37, [@rand_addr=0x64010102, @rand_addr=0x64010100, @empty, @local, @multicast2, @multicast2, @private=0xa010102, @broadcast, @loopback]}, @timestamp={0x44, 0x1c, 0x1e, 0x0, 0xd, [0xdd2, 0xc, 0x5, 0x5, 0x1, 0x7]}, @ra={0x94, 0x4}, @cipso={0x86, 0xd, 0x2, [{0x2, 0x7, "2515bfe5bc"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xe, 0x1000, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x80, 0x5, 0x9efd}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r7 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, &(0x7f00000003c0)=@chain) keyctl$link(0x8, r7, r7) request_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='nl80211\x00', r7) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0002"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x3, 0x4, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@noop, @ra={0x94, 0x4, 0x100}, @end, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000780)={&(0x7f0000000940)={0x110, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf881664ff78d3d35}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x18804}, 0x4000) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r13}}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r15, @ANYBLOB="08000100"/16], 0x2c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r10}, 0x8) 3.437139606s ago: executing program 4 (id=1016): accept$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ffa0ffffffbfa100000000000007010000f8ffffffb702000008000000b7030000ffffffd0850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.392307672s ago: executing program 1 (id=1017): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xcb, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x10003, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() (async) munlockall() recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb3139"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="cefed22ea79f7b96abb5e0757fca384d4b90bc5d0d5b47d1307c36cb9da3181e732cdce4471fcc9b59ae35404fb15851c28218c5548eaff6142e75e5b877a01bde4308fd8a2d3088dd75f510cd50bea2d527a8eeb2e4ee949c875da787ec2b74fc8ed54a8526e3fe407448bb3139"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.929614887s ago: executing program 4 (id=1018): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f00005e0000/0x2000)=nil, &(0x7f00003d4000/0x4000)=nil, &(0x7f0000117000/0x4000)=nil, &(0x7f0000503000/0x3000)=nil, &(0x7f00001a7000/0x1000)=nil, &(0x7f0000659000/0x4000)=nil, &(0x7f00002bc000/0x2000)=nil, &(0x7f0000762000/0x2000)=nil, &(0x7f000023f000/0xc000)=nil, &(0x7f0000567000/0x1000)=nil, &(0x7f00006a2000/0x1000)=nil, &(0x7f0000000040)="f9e37ee9285155f2e12d60481f653a62165efd3ed304fd9ec7b91a29836f", 0x1e}, 0x68) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bind$rxrpc(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) 2.927279799s ago: executing program 3 (id=1019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9291) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9291) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) (async) 2.808495596s ago: executing program 4 (id=1020): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x4, 0x20000002, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="59dbe828e5379d2f1107463145aa8a33", 0x10, 0x80, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000007800)={0xa, 0x4, 0xfa00, {r7}}, 0xc) 2.807990801s ago: executing program 1 (id=1021): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x2340, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2.313481061s ago: executing program 1 (id=1022): syz_open_dev$char_usb(0xc, 0xb4, 0x28000000000000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x208000, 0x183) execveat$binfmt(r0, 0x0, &(0x7f0000000140)={[&(0x7f0000000080)='system_u:object_r:hugetlbfs_t:s0\x00', &(0x7f00000000c0)='system_u:object_r:hugetlbfs_t:s0\x00']}, &(0x7f0000000300)={[&(0x7f00000001c0)='))%+%\x00', &(0x7f0000000200)='/proc/thread-self/attr/keycreate\x00', &(0x7f0000000240)='-]\x00', &(0x7f0000000280)='/proc/thread-self/attr/keycreate\x00', &(0x7f00000002c0)='{/{\x00']}, 0x1000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000500)='cachefiles_io_error\x00', r2, 0x0, 0x2000000003}, 0x10) r3 = socket$inet6(0xa, 0x6, 0x85) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)}}], 0x2, 0x4008040) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x600, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x40) r6 = userfaultfd(0xc0801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1006080, 0x0) syz_open_dev$usbmon(0x0, 0x4, 0x8e001) 1.251956741s ago: executing program 0 (id=1023): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x4a, 0x0, &(0x7f0000000400)) bpf$TOKEN_CREATE(0x24, 0x0, 0xf) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000400000004000000070000000000487e7a5cb964bd1af21a81ee45c0d7be7cb8c7eb464bb2e0f53ad2b2e2be1082b589dd4ba61318c648efbec0ed3b9c68cfb5ac0ef7f63efb12", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000f6ffffffff010000000000003a229b67ee937cd281fff32fd5d2bd94b84f22144b0339f626f14da27783c057502c14d3aebeb6ead67ff52b74442367e5b946d088c89d178755d14e7d9fc9e2af54aa03a9c9e0c8830cfb15c769db57a0d3be6250b5f926d755b1c08103b68df0f69087edd5936b20143c2cf94627ed53875d6cacd55d187c545c9a"], 0x50) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000040)={0x18, r7}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x6, 0x8, "f4e56214886a8213"}}) 1.124499924s ago: executing program 1 (id=1024): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6e070989be8440df, 0x80010, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="030000000a00000004000004005f0000000000000000000000010000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) chdir(0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) socket$kcm(0x10, 0x2, 0x0) 307.775351ms ago: executing program 1 (id=1025): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000300)=0xc) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r3, 0x540b, 0xfffffffffffeffff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000340)=r2) (async) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) close(r0) (async) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) r9 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0x15a5, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0xfffffffd, 0x1ac}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 133.802782ms ago: executing program 0 (id=1026): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) syz_pidfd_open(0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000240000000000119078000000000000000000004e2200109078020000000000000085ef1b371648df3d02e87f976bc2ea924288619ff35fc1f8b5e8ef4430319545afe7612eca972d7bb8ed68df4b727e1c18f6e7ef3e0cea660fded6c8483367c38e93ae036c514170c5fe4249e3145d31b0092889152dbfb3750b8b263b1e3cd01814509fb81dbf46a9230900000000000000446b5aecae13bee0504574f513c4b165757ba0d00a848881eac8ea4169c36d5173fbc0b9445ef445cd2e"], 0x0) setns(0xffffffffffffffff, 0x66020000) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003d0007010000000000010000047c0000"], 0x18}}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) 0s ago: executing program 2 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x1000, 0x0) utime(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x4, 0x7fffffffffffffff}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x1000404, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000001c0), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x94, &(0x7f0000000040)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsroot={'smackfsroot', 0x3d, 'lowerdir'}}], 0x2f}) kernel console output (not intermixed with test programs): urb status received: -71 [ 355.946422][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.953722][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.961009][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.968284][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.975578][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.982888][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.990209][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 355.997512][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.004804][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.012099][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.019395][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.031746][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.039037][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.046348][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.053618][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.060894][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.068182][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.075477][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.082753][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.090004][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.097279][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.104550][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.111834][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.119087][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.131777][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.139062][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.146322][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.154476][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.161748][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.169015][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.176278][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.183533][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.190789][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.198056][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.205313][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.212590][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.219845][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.231742][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.239035][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.246323][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.253613][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.260901][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.268209][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.275507][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.282780][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.290031][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.297312][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.304570][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.311857][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.319117][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.326392][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.341789][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.349048][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.356749][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.364035][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.371432][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.378738][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.386208][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.393539][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.400800][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.408084][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.415364][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.422628][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.430232][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.437518][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.444780][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.452041][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.459304][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.466625][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.473884][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.481148][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.488408][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.495736][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.503107][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.510390][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.517652][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.524916][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.541762][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.549046][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.556306][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.563583][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.570840][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.578123][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.585385][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.592653][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.599911][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.607212][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.614476][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.621832][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.629086][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.636494][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.643749][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.650998][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.658847][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.666379][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.673722][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.680986][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.688234][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.695498][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.702751][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.710008][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.717285][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.724553][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.731808][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.739149][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.746412][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.753668][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.760917][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.768191][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.775499][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.782855][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.790107][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.797370][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.804615][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.811874][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.819110][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.826350][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.833596][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.840931][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.848191][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.855454][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.862703][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.869950][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.877205][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.884467][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.891723][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.898975][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.906226][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.913466][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.920700][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.927955][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.935216][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.942584][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.949868][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.957176][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.964445][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.971703][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.978957][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.986212][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 356.993473][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.000725][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.008011][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.015268][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.022525][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.029800][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.037068][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.051838][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.059131][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.066397][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.073683][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.080972][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.088236][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.095515][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.102795][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.110064][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.117342][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.124635][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.131915][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.139177][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.151850][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.159151][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.166413][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.173675][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.180936][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.188204][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.195485][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.202774][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.210155][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.217467][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.224835][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.232129][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.239484][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.246760][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.261736][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.269119][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.276418][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.283682][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.290922][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.298195][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.305486][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.312733][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.319978][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.327247][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.334498][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.341747][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.348997][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.361783][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.369151][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.376403][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.383653][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.390901][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.398179][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.405453][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.412698][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.419942][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.427350][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.434653][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.441916][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.449189][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.461735][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.469098][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.476367][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.483913][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.491192][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.498496][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.505755][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.512999][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.520248][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.527494][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.534777][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.542060][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.549333][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.561791][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.569063][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.576340][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.583628][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.590876][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.598137][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.605413][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.612682][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.619940][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.627202][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.634453][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.641707][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.648957][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.656196][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.671832][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.679227][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.686479][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.693747][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.701007][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.708249][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.715493][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.722783][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.730064][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.737346][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.744629][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.751887][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.759139][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.767251][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.774646][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.781917][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.789167][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.796483][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.803806][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.811125][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.818449][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.825840][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.833128][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.833672][ T30] audit: type=1400 audit(2000000008.790:453): avc: denied { name_bind } for pid=8423 comm="syz.4.608" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 357.840410][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.869447][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.876841][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.884105][ T5201] usb 1-1: control msg error: -110 [ 357.884147][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 357.896501][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 358.061743][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.072216][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.079667][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.087017][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.094315][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.101623][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.108949][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.110952][ T30] audit: type=1400 audit(2000000008.790:454): avc: denied { setopt } for pid=8423 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.116236][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.143580][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.151049][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.161654][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.169168][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.177939][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.185558][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.192991][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.200275][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.207563][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.215678][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.222997][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.230327][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.238462][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.245756][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.253121][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.260406][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.268142][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.275683][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.282976][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 358.287210][ T5970] usb 1-1: USB disconnect, device number 24 [ 358.290086][ C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19 [ 358.294668][ T6321] usb 1-1: control msg error: -19 [ 358.355311][ T8432] netlink: 5384 bytes leftover after parsing attributes in process `syz.2.609'. [ 358.374101][ T30] audit: type=1400 audit(2000000009.360:455): avc: denied { append } for pid=8426 comm="syz.1.610" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 358.427301][ T30] audit: type=1400 audit(2000000009.390:456): avc: denied { setopt } for pid=8429 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 358.449802][ T8432] netlink: 23568 bytes leftover after parsing attributes in process `syz.2.609'. [ 358.485396][ T8430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 360.301229][ T8452] random: crng reseeded on system resumption [ 361.173035][ T30] audit: type=1400 audit(5001288.380:457): avc: denied { write } for pid=8449 comm="syz.3.615" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 361.607026][ T8463] netlink: 'syz.1.619': attribute type 3 has an invalid length. [ 361.614775][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 361.623945][ T30] audit: type=1400 audit(5001289.680:458): avc: denied { getopt } for pid=8459 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 361.650284][ T30] audit: type=1326 audit(5001289.680:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d618eb69 code=0x7ffc0000 [ 361.689547][ T30] audit: type=1326 audit(5001289.680:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d618eb69 code=0x7ffc0000 [ 361.714077][ T30] audit: type=1326 audit(5001289.680:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76d618d4d0 code=0x7ffc0000 [ 361.737409][ T30] audit: type=1326 audit(5001289.680:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8459 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d618eb69 code=0x7ffc0000 [ 361.788634][ T8455] mmap: syz.0.617 (8455): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 362.062336][ T5915] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 362.262170][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 362.262952][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 362.276652][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 362.293822][ T5915] usb 5-1: can't read configurations, error -61 [ 362.322940][ T8473] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 362.421712][ T5915] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 362.640090][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 362.679824][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 362.707610][ T5915] usb 5-1: can't read configurations, error -61 [ 362.733990][ T5915] usb usb5-port1: attempt power cycle [ 363.082399][ T5915] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 363.516553][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 363.528555][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.537436][ T5915] usb 5-1: can't read configurations, error -61 [ 363.571675][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 363.691782][ T5915] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 363.720055][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 363.864341][ T5935] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.873061][ T5935] usb 1-1: config 0 has no interface number 0 [ 363.880470][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.880566][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 363.899952][ T5935] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.910832][ T5915] usb 5-1: can't read configurations, error -61 [ 363.917489][ T5935] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.930862][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 363.940855][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 363.940867][ T30] audit: type=1400 audit(5001291.960:493): avc: denied { read } for pid=8510 comm="syz.3.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.989702][ T5915] usb usb5-port1: unable to enumerate USB device [ 364.035404][ T5935] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 364.045848][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.063805][ T5935] usb 1-1: config 0 descriptor?? [ 364.134349][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 364.141474][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.151905][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.162865][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.177135][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 364.190338][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.206710][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.216330][ T5922] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.228254][ T5922] usb 3-1: Manufacturer: syz [ 364.244459][ T5922] usb 3-1: config 0 descriptor?? [ 364.511786][ T5922] rc_core: IR keymap rc-hauppauge not found [ 364.523205][ T5922] Registered IR keymap rc-empty [ 364.532795][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 364.560743][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 364.733107][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 364.763061][ T5935] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0004/input/input14 [ 364.783379][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 364.805451][ T8523] syzkaller0: entered promiscuous mode [ 364.831774][ T8523] syzkaller0: entered allmulticast mode [ 364.852238][ T8522] tipc: Enabled bearer , priority 0 [ 364.883047][ T5935] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 364.924209][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 364.953139][ T8523] tipc: Resetting bearer [ 364.959157][ T5935] usb 1-1: USB disconnect, device number 25 [ 364.992496][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 365.003735][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.017895][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.033025][ T8525] fido_id[8525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 365.182261][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 365.378756][ T8521] tipc: Resetting bearer [ 365.398937][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 365.462914][ T8521] tipc: Disabling bearer [ 365.477187][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 365.757815][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 365.793704][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.831791][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 369.063945][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 369.104778][ T5922] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 369.113809][ T30] audit: type=1400 audit(5001293.960:494): avc: denied { wake_alarm } for pid=8537 comm="syz.2.638" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.212815][ T5922] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 369.354755][ T5922] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 369.812321][ T5970] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 369.860855][ T5922] usb 3-1: USB disconnect, device number 18 [ 369.971688][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 369.979773][ T5970] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 369.988353][ T5970] usb 1-1: config 0 has no interface number 0 [ 369.997736][ T5970] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 370.022718][ T5970] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 370.039902][ T5970] usb 1-1: config 0 interface 86 has no altsetting 0 [ 370.729385][ T5970] usb 1-1: string descriptor 0 read error: -71 [ 370.751969][ T5970] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 370.773061][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.788065][ T30] audit: type=1326 audit(5001298.870:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 370.853347][ T5970] usb 1-1: config 0 descriptor?? [ 370.871455][ T5970] usb 1-1: can't set config #0, error -71 [ 370.897899][ T30] audit: type=1326 audit(5001298.870:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 370.927126][ T5970] usb 1-1: USB disconnect, device number 26 [ 370.952980][ T30] audit: type=1326 audit(5001298.870:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 371.021753][ T30] audit: type=1326 audit(5001298.910:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 371.101508][ T30] audit: type=1326 audit(5001298.920:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8567 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5fe9c1425 code=0x7ffc0000 [ 371.247199][ T30] audit: type=1326 audit(5001298.920:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 371.731656][ T30] audit: type=1326 audit(5001298.930:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 371.754751][ T30] audit: type=1326 audit(5001298.930:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 371.831767][ T30] audit: type=1326 audit(5001298.930:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 372.063589][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 372.073765][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 372.100093][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 372.147132][ T8590] fuse: Bad value for 'fd' [ 372.399473][ T5915] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 372.418349][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 372.457758][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 373.136542][ T5915] usb 5-1: device descriptor read/64, error -71 [ 373.271655][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 373.299318][ T8602] fuse: Unknown parameter '0x00000000000000030x00000000000000000000000000000000000300000000000000000003" P[j>:voD:BJO'\TdŐifcjмP' [ 373.471873][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 373.484210][ T9] usb 1-1: config 0 has an invalid interface number: 86 but max is 0 [ 373.502076][ T9] usb 1-1: config 0 has no interface number 0 [ 373.508217][ T9] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 373.532204][ T5915] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 373.543687][ T9] usb 1-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.582371][ T9] usb 1-1: config 0 interface 86 has no altsetting 0 [ 373.611086][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 373.624848][ T8610] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 373.632134][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.641440][ T9] usb 1-1: Product: syz [ 373.738118][ T5915] usb 5-1: device descriptor read/64, error -71 [ 373.741635][ T9] usb 1-1: Manufacturer: syz [ 373.749007][ T9] usb 1-1: SerialNumber: syz [ 373.762084][ T9] usb 1-1: config 0 descriptor?? [ 374.195343][ T5915] usb usb5-port1: attempt power cycle [ 374.748867][ T5915] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 375.657736][ T8615] overlayfs: overlapping lowerdir path [ 375.702756][ T5947] usb 1-1: USB disconnect, device number 27 [ 375.721329][ T5915] usb 5-1: device descriptor read/8, error -71 [ 376.203460][ T8635] loop3: detected capacity change from 0 to 1 [ 376.486099][ T5216] Dev loop3: unable to read RDB block 1 [ 376.512937][ T5216] loop3: unable to read partition table [ 376.530063][ T5216] loop3: partition table beyond EOD, truncated [ 376.599089][ T8627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.901779][ T5947] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 377.136781][ T5915] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 377.163112][ T5947] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 377.401709][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 377.413282][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.425472][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.441852][ T5947] usb 2-1: config 0 has no interface number 0 [ 377.450553][ T5915] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 377.466781][ T5947] usb 2-1: config 0 interface 37 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 377.481617][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.500566][ T5947] usb 2-1: New USB device found, idVendor=06f8, idProduct=e002, bcdDevice=6b.b0 [ 377.510149][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.525110][ T5915] usb 4-1: config 0 descriptor?? [ 377.540319][ T5947] usb 2-1: Product: syz [ 377.545303][ T5947] usb 2-1: Manufacturer: syz [ 377.550300][ T5947] usb 2-1: SerialNumber: syz [ 377.564014][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 377.564871][ T5947] usb 2-1: config 0 descriptor?? [ 377.577999][ T9] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 377.601742][ T9] usb 3-1: config 0 has no interface number 0 [ 377.609129][ T9] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 377.628363][ T9] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.658639][ T9] usb 3-1: config 0 interface 86 has no altsetting 0 [ 377.669572][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 377.720991][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.739330][ T9] usb 3-1: Product: syz [ 377.759988][ T9] usb 3-1: Manufacturer: syz [ 377.765038][ T9] usb 3-1: SerialNumber: syz [ 377.784590][ T9] usb 3-1: config 0 descriptor?? [ 377.884351][ T5947] usb 2-1: USB disconnect, device number 18 [ 377.974126][ T5915] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 378.010197][ T5915] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 378.110352][ T8667] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 378.118141][ T8667] netlink: 'syz.2.672': attribute type 4 has an invalid length. [ 378.126127][ T8667] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.672'. [ 378.209386][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.225343][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.223114][ T5915] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 379.344386][ C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 379.385782][ T10] usb 3-1: USB disconnect, device number 19 [ 379.432179][ T5915] usb 4-1: USB disconnect, device number 26 [ 379.490357][ T8666] fido_id[8666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 380.001698][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 380.042042][ T8680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.677'. [ 380.141664][ T5915] usb 2-1: device descriptor read/64, error -71 [ 380.391821][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 380.457757][ T8687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.873349][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 380.961645][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 380.968164][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 380.976732][ T5947] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 380.991793][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.028740][ T5915] usb 2-1: device descriptor read/64, error -71 [ 381.036194][ T5947] usb 3-1: Product: syz [ 381.040423][ T5947] usb 3-1: Manufacturer: syz [ 381.046211][ T5947] usb 3-1: SerialNumber: syz [ 381.068714][ T5947] usb 3-1: config 0 descriptor?? [ 381.077628][ T5947] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 381.220298][ T5915] usb usb2-port1: attempt power cycle [ 381.295077][ T5947] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 381.314419][ T5947] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 381.323297][ T5947] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 381.529759][ T10] usb 3-1: USB disconnect, device number 20 [ 381.561722][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 381.612264][ T5915] usb 2-1: device descriptor read/8, error -71 [ 381.881654][ T5915] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 381.924192][ T5915] usb 2-1: device descriptor read/8, error -71 [ 382.072073][ T5915] usb usb2-port1: unable to enumerate USB device [ 382.218644][ T8703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.095907][ T8712] block nbd0: shutting down sockets [ 384.102339][ T5970] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 384.371954][ T5970] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 384.397366][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.426604][ T5970] usb 4-1: Product: syz [ 384.436077][ T5970] usb 4-1: Manufacturer: syz [ 384.446148][ T5970] usb 4-1: SerialNumber: syz [ 384.464800][ T5970] usb 4-1: config 0 descriptor?? [ 384.481157][ T8733] trusted_key: encrypted_key: insufficient parameters specified [ 384.490441][ T5970] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 027 [ 384.532651][ T8045] Bluetooth: hci5: Frame reassembly failed (-84) [ 384.546439][ T8733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.095067][ T5970] (null): failure reading functionality [ 385.790004][ T5970] i2c i2c-1: failure reading functionality [ 385.839888][ T5970] i2c i2c-1: connected i2c-tiny-usb device [ 385.890493][ T5970] usb 4-1: USB disconnect, device number 27 [ 386.267640][ T8753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.585607][ T5869] Bluetooth: hci5: command 0xfc11 tx timeout [ 386.592737][ T7219] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 386.717292][ T8763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.918879][ T8760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.398631][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.877534][ T8816] Bluetooth: MGMT ver 1.23 [ 391.933630][ T8821] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 392.033557][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 392.042411][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 393.331682][ T5993] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 393.513584][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 393.521178][ T5993] usb 3-1: config 0 has no interfaces? [ 393.522293][ T8857] netlink: 17 bytes leftover after parsing attributes in process `syz.1.730'. [ 393.529717][ T5993] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 393.535946][ T8857] netlink: zone id is out of range [ 393.550372][ T8857] netlink: zone id is out of range [ 393.556048][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.569335][ T5993] usb 3-1: Product: syz [ 393.575287][ T5993] usb 3-1: Manufacturer: syz [ 393.580022][ T5993] usb 3-1: SerialNumber: syz [ 393.603510][ T8857] netlink: zone id is out of range [ 393.608788][ T8857] netlink: zone id is out of range [ 393.614768][ T5993] usb 3-1: config 0 descriptor?? [ 393.620350][ T8857] netlink: zone id is out of range [ 393.641743][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 393.652443][ T8857] netlink: zone id is out of range [ 393.668608][ T8857] netlink: zone id is out of range [ 393.676410][ T8857] netlink: zone id is out of range [ 393.683330][ T8857] netlink: zone id is out of range [ 393.688525][ T8857] netlink: zone id is out of range [ 393.796520][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.836838][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.851502][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.543531][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 394.573913][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 394.573936][ T30] audit: type=1400 audit(5001322.080:528): avc: denied { listen } for pid=8833 comm="syz.2.723" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.938281][ T30] audit: type=1400 audit(5001322.090:529): avc: denied { module_request } for pid=8833 comm="syz.2.723" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 395.237559][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 395.550571][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.559766][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.570616][ T8848] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.586924][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.866188][ T5970] usb 3-1: USB disconnect, device number 21 [ 395.994525][ T30] audit: type=1400 audit(5001324.080:530): avc: denied { write } for pid=8847 comm="syz.0.727" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 396.111655][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 396.182613][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.192320][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.283612][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 397.421830][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 397.450467][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 397.484479][ T24] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 397.510023][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.554662][ T24] usb 5-1: config 0 descriptor?? [ 397.574489][ T8877] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 397.589487][ T24] gspca_main: spca561-2.14.0 probing abcd:cdee [ 397.733664][ T5947] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 397.807463][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.825069][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.912481][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 397.924030][ T5947] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 397.932499][ T5947] usb 4-1: config 0 has no interface number 0 [ 397.944777][ T5947] usb 4-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 397.980681][ T5947] usb 4-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.993959][ T5947] usb 4-1: config 0 interface 86 has no altsetting 0 [ 398.002143][ T30] audit: type=1400 audit(5001326.090:531): avc: denied { write } for pid=8876 comm="syz.4.734" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 398.030405][ T5947] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 398.049409][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.059099][ T5947] usb 4-1: Product: syz [ 398.063654][ T5947] usb 4-1: Manufacturer: syz [ 398.068475][ T5947] usb 4-1: SerialNumber: syz [ 398.077975][ T5947] usb 4-1: config 0 descriptor?? [ 398.084491][ T30] audit: type=1400 audit(5001326.090:532): avc: denied { open } for pid=8876 comm="syz.4.734" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 398.232607][ T24] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 398.255216][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.273376][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 398.493811][ T8895] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 398.501635][ T8895] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 398.509466][ T8895] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.736'. [ 400.011918][ T5947] usb 4-1: USB disconnect, device number 28 [ 400.901718][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 400.994320][ T5947] usb 5-1: USB disconnect, device number 28 [ 401.126981][ T5915] usb 1-1: USB disconnect, device number 28 [ 401.138596][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.191486][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 401.198679][ T7219] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 401.208341][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 401.277828][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.321407][ T24] usb 4-1: config 0 descriptor?? [ 401.347935][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 401.376777][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 401.403427][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 401.422543][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 401.427138][ T8920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=8920 comm=syz.0.747 [ 401.432956][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 401.460452][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.496793][ T9] usb 2-1: config 0 descriptor?? [ 401.543915][ T8901] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.620357][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 401.809640][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 401.822591][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.835732][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.394109][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 402.397570][ T9] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 402.404501][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 402.423292][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 402.450573][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 402.479403][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 402.497648][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.501769][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 402.520308][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 402.543439][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 402.569616][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 402.591033][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 402.616158][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 402.636702][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 402.671757][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 402.823640][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 402.884031][ T24] pwc: Registered as video103. [ 402.913269][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 403.211212][ T24] usb 4-1: USB disconnect, device number 29 [ 403.249022][ T5993] usb 2-1: USB disconnect, device number 23 [ 403.836039][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 403.846469][ T30] audit: type=1400 audit(5001331.840:533): avc: denied { mounton } for pid=8943 comm="syz.0.750" path="/152/file0" dev="tmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 403.881892][ T30] audit: type=1400 audit(5001331.860:534): avc: denied { create } for pid=8943 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 404.013982][ T30] audit: type=1400 audit(5001331.870:535): avc: denied { rename } for pid=8943 comm="syz.0.750" name="file1" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 404.057626][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.436391][ T30] audit: type=1400 audit(5001331.920:536): avc: denied { write } for pid=8943 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 404.547024][ T8931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.559408][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 404.610011][ T30] audit: type=1400 audit(5001332.000:537): avc: denied { remount } for pid=8943 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 404.664649][ T8956] loop6: detected capacity change from 0 to 524287999 [ 404.841738][ T30] audit: type=1400 audit(5001332.750:538): avc: denied { append } for pid=8954 comm="syz.3.755" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.755184][ T8995] loop3: detected capacity change from 0 to 1 [ 405.793686][ T8995] Dev loop3: unable to read RDB block 1 [ 405.858425][ T8995] loop3: unable to read partition table [ 405.867728][ T8995] loop3: partition table beyond EOD, truncated [ 405.875102][ T8995] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 406.047064][ T30] audit: type=1400 audit(5001334.130:539): avc: denied { bind } for pid=8996 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 406.291629][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 406.441611][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 406.448519][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 406.461791][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 406.480289][ T24] usb 2-1: config 0 has no interface number 0 [ 406.547227][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 406.561078][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.569369][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 406.671923][ T24] usb 2-1: Product: syz [ 406.676503][ T24] usb 2-1: Manufacturer: syz [ 406.681297][ T24] usb 2-1: SerialNumber: syz [ 406.712864][ T24] usb 2-1: config 0 descriptor?? [ 406.742231][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 406.767093][ T5922] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 407.160345][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.162793][ T24] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 407.192792][ T24] usb 2-1: No valid video chain found. [ 407.206689][ T5922] usb 1-1: config 0 descriptor?? [ 407.230828][ T5922] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 407.418117][ T30] audit: type=1400 audit(5001335.500:540): avc: denied { create } for pid=8996 comm="syz.1.760" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 407.443783][ T8997] evm: overlay not supported [ 407.487676][ T30] audit: type=1400 audit(5001335.520:541): avc: denied { link } for pid=8996 comm="syz.1.760" name="#1b" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 407.509332][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.542822][ T5935] usb 2-1: USB disconnect, device number 24 [ 407.641308][ T30] audit: type=1400 audit(5001335.720:542): avc: denied { unmount } for pid=5866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 408.085376][ T9002] comedi comedi0: Minor 5 could not be opened [ 408.378972][ T5922] gspca_vc032x: reg_w err -110 [ 408.406283][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.452207][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.506803][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.525953][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.542708][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.557834][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.577758][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.598217][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.616589][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.634206][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.648053][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.661076][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.672655][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.684216][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.694747][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.706309][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.716872][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.741802][ T5922] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.751790][ T5922] gspca_vc032x: Unknown sensor... [ 408.761646][ T5922] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 408.781898][ T5922] usb 1-1: USB disconnect, device number 29 [ 408.872477][ T5993] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 409.046993][ T5993] usb 2-1: config 0 has no interfaces? [ 409.052984][ T5993] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 409.101671][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.113913][ T5993] usb 2-1: config 0 descriptor?? [ 409.715852][ T30] audit: type=1400 audit(5001337.560:543): avc: denied { bind } for pid=9042 comm="syz.1.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 409.734701][ T5922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 409.854177][ T5947] usb 2-1: USB disconnect, device number 25 [ 409.876763][ T30] audit: type=1400 audit(5001337.570:544): avc: denied { ioctl } for pid=9042 comm="syz.1.770" path="socket:[21409]" dev="sockfs" ino=21409 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 409.902770][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 409.914071][ T5922] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 409.936864][ T5922] usb 3-1: config 0 has no interface number 0 [ 409.959160][ T5922] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 410.051659][ T5922] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 410.100526][ T5922] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 410.273205][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.818734][ T5922] usb 3-1: Product: syz [ 410.951481][ T5922] usb 3-1: Manufacturer: syz [ 410.983645][ T5922] usb 3-1: SerialNumber: syz [ 411.467073][ T5922] usb 3-1: config 0 descriptor?? [ 411.490048][ T9064] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 411.553318][ T9064] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.031743][ T5993] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 412.078488][ T5922] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fe:9b:68:5e:f5:a9 [ 412.231739][ T5993] usb 1-1: Using ep0 maxpacket: 32 [ 412.264754][ T5993] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 412.326135][ T5993] usb 1-1: config 0 has no interface number 0 [ 412.354007][ T5993] usb 1-1: config 0 interface 184 has no altsetting 0 [ 412.396699][ T5993] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 412.435416][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.445565][ T5993] usb 1-1: Product: syz [ 412.453095][ T5993] usb 1-1: Manufacturer: syz [ 412.457822][ T5993] usb 1-1: SerialNumber: syz [ 412.473741][ T5993] usb 1-1: config 0 descriptor?? [ 412.489537][ T5993] smsc75xx v1.0.0 [ 414.723229][ T5993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 414.746205][ T5993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 414.780462][ T5993] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 414.803890][ T9] usb 3-1: USB disconnect, device number 22 [ 414.807726][ T5947] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 414.811038][ T9] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 414.833210][ T5993] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 414.848189][ T5993] usb 1-1: USB disconnect, device number 30 [ 415.031719][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 415.048327][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 415.077457][ T5947] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 415.108743][ T5947] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.152714][ T5947] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.172514][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 415.198657][ T5947] usb 5-1: SerialNumber: syz [ 415.221873][ T9095] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 415.311855][ T5993] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 415.409696][ T9105] FAULT_INJECTION: forcing a failure. [ 415.409696][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.467270][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.1.789 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 415.467302][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.467312][ T9105] Call Trace: [ 415.467318][ T9105] [ 415.467325][ T9105] dump_stack_lvl+0x16c/0x1f0 [ 415.467354][ T9105] should_fail_ex+0x512/0x640 [ 415.467381][ T9105] _copy_from_user+0x2e/0xd0 [ 415.467398][ T9105] copy_msghdr_from_user+0x98/0x160 [ 415.467421][ T9105] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 415.467453][ T9105] ___sys_sendmsg+0xfe/0x1d0 [ 415.467476][ T9105] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.467520][ T9105] ? __mutex_unlock_slowpath+0x80/0x800 [ 415.467555][ T9105] __sys_sendmsg+0x16d/0x220 [ 415.467580][ T9105] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.467620][ T9105] do_syscall_64+0xcd/0x4c0 [ 415.467647][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.467665][ T9105] RIP: 0033:0x7f76d618eb69 [ 415.467679][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.467695][ T9105] RSP: 002b:00007f76d7089038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.467713][ T9105] RAX: ffffffffffffffda RBX: 00007f76d63b5fa0 RCX: 00007f76d618eb69 [ 415.467724][ T9105] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000005 [ 415.467734][ T9105] RBP: 00007f76d7089090 R08: 0000000000000000 R09: 0000000000000000 [ 415.467745][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.467755][ T9105] R13: 0000000000000000 R14: 00007f76d63b5fa0 R15: 00007ffcbfec36c8 [ 415.467778][ T9105] [ 415.641705][ T5993] usb 1-1: Using ep0 maxpacket: 8 [ 415.660330][ T9109] FAULT_INJECTION: forcing a failure. [ 415.660330][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 415.782407][ T5947] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 415.796206][ T5947] usb 5-1: USB disconnect, device number 29 [ 415.807528][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.4.791 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 415.807553][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.807564][ T9109] Call Trace: [ 415.807570][ T9109] [ 415.807577][ T9109] dump_stack_lvl+0x16c/0x1f0 [ 415.807608][ T9109] should_fail_ex+0x512/0x640 [ 415.807638][ T9109] should_failslab+0xc2/0x120 [ 415.807658][ T9109] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 415.807678][ T9109] ? skb_clone+0x190/0x3f0 [ 415.807706][ T9109] skb_clone+0x190/0x3f0 [ 415.807731][ T9109] netlink_deliver_tap+0xabd/0xd30 [ 415.807761][ T9109] netlink_unicast+0x64c/0x870 [ 415.807791][ T9109] ? __pfx_netlink_unicast+0x10/0x10 [ 415.807822][ T9109] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 415.807855][ T9109] netlink_sendmsg+0x8d1/0xdd0 [ 415.807884][ T9109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.807918][ T9109] ____sys_sendmsg+0xa95/0xc70 [ 415.807936][ T9109] ? copy_msghdr_from_user+0x10a/0x160 [ 415.807959][ T9109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.807987][ T9109] ___sys_sendmsg+0x134/0x1d0 [ 415.808012][ T9109] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.808054][ T9109] ? __mutex_unlock_slowpath+0x80/0x800 [ 415.808086][ T9109] __sys_sendmsg+0x16d/0x220 [ 415.808109][ T9109] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.808148][ T9109] do_syscall_64+0xcd/0x4c0 [ 415.808175][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.808191][ T9109] RIP: 0033:0x7fd611f8eb69 [ 415.808205][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.808221][ T9109] RSP: 002b:00007fd612d1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.808239][ T9109] RAX: ffffffffffffffda RBX: 00007fd6121b5fa0 RCX: 00007fd611f8eb69 [ 415.808250][ T9109] RDX: 0000000024000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 415.808261][ T9109] RBP: 00007fd612d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 415.808271][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.808281][ T9109] R13: 0000000000000000 R14: 00007fd6121b5fa0 R15: 00007ffd3ebf53f8 [ 415.808303][ T9109] [ 415.809261][ T5993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 415.985976][ T7219] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 416.056584][ T30] audit: type=1400 audit(5001344.030:545): avc: denied { create } for pid=9113 comm="syz.1.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 416.077156][ T30] audit: type=1400 audit(5001344.130:546): avc: denied { setopt } for pid=9106 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 416.166470][ T5993] usb 1-1: config 4 interface 0 has no altsetting 0 [ 416.184421][ T5993] usb 1-1: string descriptor 0 read error: -22 [ 416.213865][ T30] audit: type=1400 audit(5001344.290:547): avc: denied { mount } for pid=9111 comm="syz.4.792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 416.265170][ T30] audit: type=1400 audit(5001344.300:548): avc: denied { mounton } for pid=9111 comm="syz.4.792" path="/145/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 416.272434][ T5993] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 416.416834][ T5993] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 416.479767][ T5993] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 416.499668][ T30] audit: type=1400 audit(5001344.300:549): avc: denied { read } for pid=9111 comm="syz.4.792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 416.534040][ T5993] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.583224][ T5993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 416.698428][ T5993] usb 1-1: media controller created [ 416.706401][ T30] audit: type=1400 audit(5001344.300:550): avc: denied { open } for pid=9111 comm="syz.4.792" path="/145/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 417.023593][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.041764][ T30] audit: type=1400 audit(5001344.300:551): avc: denied { read } for pid=9111 comm="syz.4.792" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 417.163278][ T30] audit: type=1400 audit(5001344.550:552): avc: denied { accept } for pid=9118 comm="syz.2.794" path="socket:[22361]" dev="sockfs" ino=22361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.204575][ T5993] zl10353_read_register: readreg error (reg=127, ret==0) [ 417.328243][ T30] audit: type=1400 audit(5001344.770:553): avc: denied { ioctl } for pid=9099 comm="syz.0.787" path="socket:[22549]" dev="sockfs" ino=22549 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.596228][ T30] audit: type=1400 audit(5001345.680:554): avc: denied { unmount } for pid=5870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 417.831977][ T5970] usb 1-1: USB disconnect, device number 31 [ 417.921718][ T5947] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 418.115626][ T9140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 418.140656][ T9140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.173129][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 418.204949][ T5947] usb 3-1: config 5 has an invalid interface number: 162 but max is 0 [ 418.239690][ T5947] usb 3-1: config 5 has no interface number 0 [ 418.270728][ T5947] usb 3-1: config 5 interface 162 has no altsetting 0 [ 418.722281][ T5947] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 418.731404][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.739462][ T5947] usb 3-1: Product: syz [ 418.753866][ T5947] usb 3-1: Manufacturer: syz [ 418.758497][ T5947] usb 3-1: SerialNumber: syz [ 419.363103][ T5947] usb-storage 3-1:5.162: USB Mass Storage device detected [ 419.497979][ T5947] usb-storage 3-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-syzkaller-11241-g186f3edfdd41) [ 419.497979][ T5947] Please send a copy of this message to and [ 420.158162][ T9164] FAULT_INJECTION: forcing a failure. [ 420.158162][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.291708][ T5947] usb 3-1: USB disconnect, device number 23 [ 420.347060][ T9164] CPU: 1 UID: 0 PID: 9164 Comm: syz.4.803 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 420.347087][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.347097][ T9164] Call Trace: [ 420.347102][ T9164] [ 420.347108][ T9164] dump_stack_lvl+0x16c/0x1f0 [ 420.347137][ T9164] should_fail_ex+0x512/0x640 [ 420.347165][ T9164] _copy_to_user+0x32/0xd0 [ 420.347184][ T9164] simple_read_from_buffer+0xcb/0x170 [ 420.347214][ T9164] proc_fail_nth_read+0x197/0x240 [ 420.347233][ T9164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.347253][ T9164] ? rw_verify_area+0xcf/0x6c0 [ 420.347278][ T9164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.347297][ T9164] vfs_read+0x1e4/0xc60 [ 420.347316][ T9164] ? __pfx___mutex_lock+0x10/0x10 [ 420.347341][ T9164] ? __pfx_vfs_read+0x10/0x10 [ 420.347362][ T9164] ? __fget_files+0x20e/0x3c0 [ 420.347387][ T9164] ksys_read+0x12a/0x250 [ 420.347401][ T9164] ? __pfx_ksys_read+0x10/0x10 [ 420.347424][ T9164] do_syscall_64+0xcd/0x4c0 [ 420.347450][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.347466][ T9164] RIP: 0033:0x7fd611f8d57c [ 420.347479][ T9164] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 420.347494][ T9164] RSP: 002b:00007fd612d1d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.347509][ T9164] RAX: ffffffffffffffda RBX: 00007fd6121b5fa0 RCX: 00007fd611f8d57c [ 420.347519][ T9164] RDX: 000000000000000f RSI: 00007fd612d1d0a0 RDI: 0000000000000004 [ 420.347528][ T9164] RBP: 00007fd612d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 420.347538][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.347547][ T9164] R13: 0000000000000000 R14: 00007fd6121b5fa0 R15: 00007ffd3ebf53f8 [ 420.347569][ T9164] [ 421.272918][ T9180] trusted_key: encrypted_key: insufficient parameters specified [ 421.527266][ T9188] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 421.555325][ T9188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 422.312525][ T5947] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 422.320200][ T5915] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 422.479186][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 422.487179][ T5915] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.497749][ T5915] usb 2-1: config 0 has no interface number 0 [ 422.505748][ T5947] usb 5-1: config 0 has no interfaces? [ 422.513788][ T5947] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 422.523803][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.549559][ T5915] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.561416][ T5947] usb 5-1: Product: syz [ 422.567470][ T5947] usb 5-1: Manufacturer: syz [ 422.592424][ T5915] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.605234][ T5947] usb 5-1: SerialNumber: syz [ 422.642023][ T5947] usb 5-1: config 0 descriptor?? [ 422.675650][ T5915] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 422.685251][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.700813][ T5915] usb 2-1: config 0 descriptor?? [ 422.711673][ T5922] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 422.909287][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 422.927661][ T5922] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 422.938550][ T5922] usb 3-1: config 0 has no interface number 0 [ 422.945414][ T5922] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 422.958238][ T5922] usb 3-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 422.968489][ T5922] usb 3-1: config 0 interface 86 has no altsetting 0 [ 422.979552][ T5922] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 423.069882][ T9216] netlink: 64 bytes leftover after parsing attributes in process `syz.3.819'. [ 423.118728][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.307192][ T5922] usb 3-1: Product: syz [ 423.365841][ T5922] usb 3-1: Manufacturer: syz [ 423.440299][ T5922] usb 3-1: SerialNumber: syz [ 423.765139][ T5922] usb 3-1: config 0 descriptor?? [ 423.776068][ T5915] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0006/input/input17 [ 423.859042][ T9227] netlink: 19 bytes leftover after parsing attributes in process `syz.0.821'. [ 424.801593][ T9228] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 424.809229][ T9228] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 424.822003][ T9227] netlink: 19 bytes leftover after parsing attributes in process `syz.0.821'. [ 424.946373][ T9228] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.817'. [ 426.660750][ T5970] usb 5-1: USB disconnect, device number 30 [ 426.827428][ T5915] holtek_kbd 0003:04D9:A055.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 426.924656][ T5915] usb 2-1: USB disconnect, device number 26 [ 426.934410][ T9] usb 3-1: USB disconnect, device number 24 [ 426.986422][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 427.138876][ T9243] fido_id[9243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 427.293060][ T5922] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 427.453690][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.462553][ T5922] usb 1-1: not running at top speed; connect to a high speed hub [ 427.471377][ T5922] usb 1-1: config 114 has an invalid interface number: 122 but max is 0 [ 427.479954][ T5922] usb 1-1: config 114 has no interface number 0 [ 427.509614][ T5922] usb 1-1: config 114 interface 122 has no altsetting 0 [ 427.654067][ T5922] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=7b.d8 [ 427.663726][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.672023][ T5922] usb 1-1: Product: syz [ 427.676259][ T5922] usb 1-1: Manufacturer: syz [ 427.680828][ T5922] usb 1-1: SerialNumber: syz [ 427.919468][ T9236] overlay: Unknown parameter 'fowner<00000000000000000000' [ 427.927029][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 427.927041][ T30] audit: type=1400 audit(5001356.000:556): avc: denied { mounton } for pid=9235 comm="syz.0.823" path="/169/file0" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 428.030084][ T5922] snd-usb-audio 1-1:114.122: probe with driver snd-usb-audio failed with error -71 [ 428.055136][ T5922] usb 1-1: USB disconnect, device number 32 [ 429.895360][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 430.176732][ T30] audit: type=1400 audit(5001358.260:557): avc: denied { getopt } for pid=9263 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 430.489752][ T30] audit: type=1400 audit(5001358.260:558): avc: denied { bind } for pid=9263 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 430.641732][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 430.787267][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.812606][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.833976][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 430.843097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.853657][ T9] usb 2-1: config 0 descriptor?? [ 430.918142][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.980764][ T30] audit: type=1400 audit(5001359.060:559): avc: denied { write } for pid=9273 comm="syz.4.835" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 431.010011][ T30] audit: type=1400 audit(5001359.060:560): avc: denied { open } for pid=9273 comm="syz.4.835" path="/152/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 431.239175][ T9261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.337456][ T30] audit: type=1400 audit(5001359.390:561): avc: denied { read } for pid=9287 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 431.464223][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 431.470420][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.484364][ T9] usb 2-1: USB disconnect, device number 27 [ 431.861700][ T30] audit: type=1400 audit(5001359.880:562): avc: denied { setopt } for pid=9297 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.863730][ T5993] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 431.930118][ T5915] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 431.944645][ T30] audit: type=1400 audit(5001359.880:563): avc: denied { connect } for pid=9297 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.134723][ T5993] usb 5-1: Using ep0 maxpacket: 8 [ 432.145963][ T5993] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 432.167574][ T5993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 432.182024][ T9304] gretap0: entered promiscuous mode [ 432.187596][ T5993] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.348429][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 432.363185][ T5915] usb 4-1: config 0 has no interfaces? [ 432.370512][ T5915] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 432.371806][ T5993] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.382168][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.415043][ T5915] usb 4-1: Product: syz [ 432.419229][ T5915] usb 4-1: Manufacturer: syz [ 432.424697][ T5915] usb 4-1: SerialNumber: syz [ 432.431428][ T5915] usb 4-1: config 0 descriptor?? [ 432.459937][ T30] audit: type=1400 audit(5001360.490:564): avc: denied { create } for pid=9303 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.470144][ T9304] IPVS: persistence engine module ip_vs_pe_ not found [ 432.487084][ T5993] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.496305][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.582396][ T30] audit: type=1400 audit(5001360.670:565): avc: denied { bind } for pid=9302 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.604116][ T9302] gretap0: left promiscuous mode [ 432.720005][ T5993] usb 5-1: GET_CAPABILITIES returned 0 [ 433.145176][ T9323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.909514][ T5993] usbtmc 5-1:16.0: can't read capabilities [ 436.534302][ T5993] usb 5-1: USB disconnect, device number 31 [ 436.731209][ T5970] usb 4-1: USB disconnect, device number 30 [ 436.804996][ T9344] syz.0.853: attempt to access beyond end of device [ 436.804996][ T9344] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 437.625082][ T9347] ======================================================= [ 437.625082][ T9347] WARNING: The mand mount option has been deprecated and [ 437.625082][ T9347] and is ignored by this kernel. Remove the mand [ 437.625082][ T9347] option from the mount to silence this warning. [ 437.625082][ T9347] ======================================================= [ 438.375509][ T30] audit: type=1400 audit(5001366.460:566): avc: denied { ioctl } for pid=9373 comm="syz.4.862" path="socket:[23009]" dev="sockfs" ino=23009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.691875][ T5970] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 438.882665][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.961845][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 438.982747][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 438.999351][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.027708][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.047708][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.081317][ T5970] usb 4-1: config 0 descriptor?? [ 439.167817][ T9368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.704329][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.204443][ T30] audit: type=1400 audit(5001367.770:567): avc: denied { accept } for pid=9384 comm="syz.0.866" lport=60004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 440.414405][ T5970] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 440.679884][ T5970] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 440.710637][ T30] audit: type=1400 audit(5001368.780:568): avc: denied { bind } for pid=9367 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 441.129503][ T30] audit: type=1400 audit(5001368.950:569): avc: denied { mount } for pid=9419 comm="syz.0.868" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 441.444652][ T30] audit: type=1400 audit(5001369.070:570): avc: denied { read } for pid=9367 comm="syz.3.860" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 441.533587][ T30] audit: type=1400 audit(5001369.190:571): avc: denied { open } for pid=9367 comm="syz.3.860" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 441.575430][ T30] audit: type=1400 audit(5001369.290:572): avc: denied { read write } for pid=9426 comm="syz.4.867" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.612238][ T30] audit: type=1400 audit(5001369.290:573): avc: denied { open } for pid=9426 comm="syz.4.867" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.781632][ T30] audit: type=1400 audit(5001369.300:574): avc: denied { map } for pid=9426 comm="syz.4.867" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 441.926687][ T30] audit: type=1400 audit(5001369.300:575): avc: denied { execute } for pid=9426 comm="syz.4.867" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.009784][ T9438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.030466][ T5970] usb 4-1: USB disconnect, device number 31 [ 444.380263][ T9458] block nbd0: Unsupported socket: shutdown callout must be supported. [ 444.438313][ T30] audit: type=1400 audit(5001372.520:576): avc: denied { bind } for pid=9454 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 444.656781][ T9464] vivid-001: ================= START STATUS ================= [ 444.665892][ T9464] vivid-001: Radio HW Seek Mode: Bounded [ 444.671952][ T9464] vivid-001: Radio Programmable HW Seek: false [ 444.678281][ T9464] vivid-001: RDS Rx I/O Mode: Block I/O [ 444.684060][ T9464] vivid-001: Generate RBDS Instead of RDS: false [ 444.691362][ T9464] vivid-001: RDS Reception: true [ 444.697660][ T9464] vivid-001: RDS Program Type: 0 inactive [ 444.717170][ T9464] vivid-001: RDS PS Name: inactive [ 444.722649][ T9464] vivid-001: RDS Radio Text: inactive [ 444.728245][ T9464] vivid-001: RDS Traffic Announcement: false inactive [ 444.735221][ T9464] vivid-001: RDS Traffic Program: false inactive [ 444.741734][ T9464] vivid-001: RDS Music: false inactive [ 444.747296][ T9464] vivid-001: ================== END STATUS ================== [ 444.941667][ T7219] Bluetooth: hci0: command 0x0406 tx timeout [ 445.631722][ T30] audit: type=1400 audit(5001372.860:577): avc: denied { write } for pid=9461 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 447.213302][ T9486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'. [ 447.231874][ T5970] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 447.411654][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 447.507914][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.518343][ T5970] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.528579][ T5970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.537758][ T5970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.546117][ T5970] usb 4-1: Manufacturer: syz [ 447.552306][ T5970] usb 4-1: config 0 descriptor?? [ 447.693098][ T9498] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 448.617427][ T9507] netlink: 'syz.0.889': attribute type 7 has an invalid length. [ 449.407314][ T30] audit: type=1326 audit(5001377.460:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 449.460263][ T30] audit: type=1326 audit(5001377.530:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 449.585915][ T30] audit: type=1326 audit(5001377.660:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 449.884555][ T30] audit: type=1326 audit(5001377.660:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 449.908684][ T30] audit: type=1326 audit(5001377.760:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 450.033985][ T30] audit: type=1326 audit(5001377.760:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 450.220178][ T30] audit: type=1326 audit(5001377.760:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fe98eb69 code=0x7ffc0000 [ 450.261324][ T5970] usb 4-1: USB disconnect, device number 32 [ 450.561973][ T30] audit: type=1400 audit(5001378.640:585): avc: denied { setopt } for pid=9524 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 450.664204][ T9528] FAULT_INJECTION: forcing a failure. [ 450.664204][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 450.695546][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.2.895 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 450.695573][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.695583][ T9528] Call Trace: [ 450.695588][ T9528] [ 450.695594][ T9528] dump_stack_lvl+0x16c/0x1f0 [ 450.695623][ T9528] should_fail_ex+0x512/0x640 [ 450.695647][ T9528] ? fs_reclaim_acquire+0xae/0x150 [ 450.695672][ T9528] ? tomoyo_encode2+0x100/0x3e0 [ 450.695691][ T9528] should_failslab+0xc2/0x120 [ 450.695712][ T9528] __kmalloc_noprof+0xd2/0x510 [ 450.695729][ T9528] ? d_absolute_path+0x136/0x1a0 [ 450.695757][ T9528] tomoyo_encode2+0x100/0x3e0 [ 450.695782][ T9528] tomoyo_encode+0x29/0x50 [ 450.695801][ T9528] tomoyo_realpath_from_path+0x18f/0x6e0 [ 450.695829][ T9528] tomoyo_path_number_perm+0x245/0x580 [ 450.695847][ T9528] ? tomoyo_path_number_perm+0x237/0x580 [ 450.695867][ T9528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.695888][ T9528] ? find_held_lock+0x2b/0x80 [ 450.695932][ T9528] ? find_held_lock+0x2b/0x80 [ 450.695952][ T9528] ? hook_file_ioctl_common+0x145/0x410 [ 450.695984][ T9528] ? __fget_files+0x20e/0x3c0 [ 450.696012][ T9528] security_file_ioctl+0x9b/0x240 [ 450.696034][ T9528] __x64_sys_ioctl+0xb7/0x210 [ 450.696062][ T9528] do_syscall_64+0xcd/0x4c0 [ 450.696090][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.696107][ T9528] RIP: 0033:0x7ff5fe98eb69 [ 450.696122][ T9528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.696139][ T9528] RSP: 002b:00007ff5ff778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.696156][ T9528] RAX: ffffffffffffffda RBX: 00007ff5febb5fa0 RCX: 00007ff5fe98eb69 [ 450.696168][ T9528] RDX: ffffffffffffffff RSI: 0000000000005410 RDI: 0000000000000003 [ 450.696178][ T9528] RBP: 00007ff5ff778090 R08: 0000000000000000 R09: 0000000000000000 [ 450.696188][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.696199][ T9528] R13: 0000000000000000 R14: 00007ff5febb5fa0 R15: 00007ffe64bfc7a8 [ 450.696224][ T9528] [ 450.696321][ T9528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.999475][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 451.011339][ T9531] netlink: 'syz.4.896': attribute type 30 has an invalid length. [ 451.056208][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 451.068541][ T8960] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.089775][ T8960] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.121850][ T8960] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.146650][ T9531] netlink: 'syz.4.896': attribute type 30 has an invalid length. [ 451.163377][ T8960] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.201913][ T9535] SELinux: failed to load policy [ 451.216753][ T30] audit: type=1400 audit(5001379.290:586): avc: denied { bind } for pid=9530 comm="syz.4.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 452.141667][ T30] audit: type=1400 audit(5001380.020:587): avc: denied { write } for pid=9536 comm="syz.1.898" path="socket:[24092]" dev="sockfs" ino=24092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 452.304676][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.326994][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 452.366560][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.379856][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.395457][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.429382][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.451364][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.484705][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.495747][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 452.506550][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.518708][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 452.519864][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.539732][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.540397][ T5922] hid-generic 00A0:0008:0003.0008: unknown main item tag 0x0 [ 452.758414][ T9] usb 1-1: config 0 descriptor?? [ 452.789392][ T5922] hid-generic 00A0:0008:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 452.928871][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 453.665785][ T92] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 453.696501][ T9570] FAULT_INJECTION: forcing a failure. [ 453.696501][ T9570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.711464][ T9570] CPU: 1 UID: 0 PID: 9570 Comm: syz.1.908 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 453.711489][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.711499][ T9570] Call Trace: [ 453.711504][ T9570] [ 453.711511][ T9570] dump_stack_lvl+0x16c/0x1f0 [ 453.711544][ T9570] should_fail_ex+0x512/0x640 [ 453.711573][ T9570] _copy_to_user+0x32/0xd0 [ 453.711599][ T9570] simple_read_from_buffer+0xcb/0x170 [ 453.711629][ T9570] proc_fail_nth_read+0x197/0x240 [ 453.711650][ T9570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.711672][ T9570] ? rw_verify_area+0xcf/0x6c0 [ 453.711697][ T9570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.711716][ T9570] vfs_read+0x1e4/0xc60 [ 453.711736][ T9570] ? __pfx___mutex_lock+0x10/0x10 [ 453.711762][ T9570] ? __pfx_vfs_read+0x10/0x10 [ 453.711785][ T9570] ? __fget_files+0x20e/0x3c0 [ 453.711812][ T9570] ksys_read+0x12a/0x250 [ 453.711828][ T9570] ? __pfx_ksys_read+0x10/0x10 [ 453.711845][ T9570] ? fput+0x9b/0xd0 [ 453.711871][ T9570] do_syscall_64+0xcd/0x4c0 [ 453.711900][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.711924][ T9570] RIP: 0033:0x7f76d618d57c [ 453.711937][ T9570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.711952][ T9570] RSP: 002b:00007f76d7089030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.711969][ T9570] RAX: ffffffffffffffda RBX: 00007f76d63b5fa0 RCX: 00007f76d618d57c [ 453.711979][ T9570] RDX: 000000000000000f RSI: 00007f76d70890a0 RDI: 0000000000000004 [ 453.711990][ T9570] RBP: 00007f76d7089090 R08: 0000000000000000 R09: 0000000000000000 [ 453.712000][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.712009][ T9570] R13: 0000000000000000 R14: 00007f76d63b5fa0 R15: 00007ffcbfec36c8 [ 453.712034][ T9570] [ 453.976592][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.992717][ T92] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 454.007428][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.049583][ T30] audit: type=1400 audit(5001382.120:588): avc: denied { watch } for pid=9572 comm="syz.1.909" path="/177/bus/file1" dev="overlay" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 454.228558][ T92] usb 4-1: config 0 descriptor?? [ 454.439291][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 454.712741][ T9] gspca_sonixj: reg_w1 err -110 [ 454.737382][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 454.869791][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 454.878772][ T30] audit: type=1400 audit(5001382.960:589): avc: denied { write } for pid=9544 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.919629][ T92] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 454.989298][ T92] usb 4-1: USB disconnect, device number 33 [ 455.319413][ T92] usb 1-1: USB disconnect, device number 33 [ 457.091960][ T30] audit: type=1400 audit(5001385.130:590): avc: denied { getopt } for pid=9602 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.319512][ T30] audit: type=1400 audit(5001385.350:591): avc: denied { setopt } for pid=9596 comm="syz.2.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 457.817507][ T30] audit: type=1400 audit(5001385.350:592): avc: denied { getopt } for pid=9596 comm="syz.2.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.941886][ T9662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 459.182457][ T9662] batman_adv: batadv0: Adding interface: ip6gretap1 [ 459.209141][ T9662] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.269016][ T9662] batman_adv: batadv0: Interface activated: ip6gretap1 [ 460.399310][ T9700] can0: slcan on ptm0. [ 460.667340][ T30] audit: type=1400 audit(5001388.420:593): avc: denied { name_connect } for pid=9693 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 461.022358][ T9693] can0 (unregistered): slcan off ptm0. [ 461.107638][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 461.401391][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.420551][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 461.447117][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.461649][ T92] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 461.494696][ T9] usb 4-1: config 0 descriptor?? [ 461.761856][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 461.769198][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.829984][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.848459][ T92] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 461.858609][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.870351][ T92] usb 2-1: config 0 descriptor?? [ 462.194740][ T9689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.726031][ T9710] block nbd1: shutting down sockets [ 462.775840][ T92] usbhid 2-1:0.0: can't add hid device: -71 [ 462.841342][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 462.883205][ T92] usb 2-1: USB disconnect, device number 28 [ 463.954486][ T9724] fuse: Unknown parameter 'grou00000000000000000000' [ 463.971746][ T5970] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 464.028087][ T9726] SELinux: Context  is not valid (left unmapped). [ 464.063782][ T9726] SELinux: Context GH is not valid (left unmapped). [ 464.072868][ T5947] usb 4-1: USB disconnect, device number 34 [ 464.171834][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 464.174033][ T30] audit: type=1400 audit(5001392.230:594): avc: denied { write } for pid=9725 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 464.182204][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.220406][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.232532][ T5970] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 464.244538][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.260595][ T5970] usb 2-1: config 0 descriptor?? [ 464.292698][ T9731] net_ratelimit: 72 callbacks suppressed [ 464.292717][ T9731] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 464.390234][ T9735] netlink: 72 bytes leftover after parsing attributes in process `syz.0.942'. [ 464.419453][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.942'. [ 464.777138][ T5970] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 464.788501][ T30] audit: type=1400 audit(5001392.870:595): avc: denied { setattr } for pid=9742 comm="syz.0.946" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 464.990382][ T5970] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 465.383748][ T5970] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 465.584165][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.622086][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.721724][ T5970] ft260 0003:0403:6030.0009: failed to retrieve status: -71, no wakeup [ 465.740833][ T30] audit: type=1400 audit(5001393.820:596): avc: denied { read write } for pid=9766 comm="syz.4.951" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 465.742145][ T5970] ft260 0003:0403:6030.0009: failed to retrieve status: -71 [ 465.810573][ T30] audit: type=1400 audit(5001393.820:597): avc: denied { ioctl open } for pid=9766 comm="syz.4.951" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 465.943757][ T9778] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 0, id = 0 [ 465.961659][ T5970] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 466.062235][ T5970] usb 2-1: USB disconnect, device number 29 [ 466.200837][ T30] audit: type=1326 audit(5001394.280:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.227832][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.955'. [ 466.264058][ T30] audit: type=1326 audit(5001394.280:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.293158][ T9787] sg_write: process 662 (syz.4.955) changed security contexts after opening file descriptor, this is not allowed. [ 466.351146][ T30] audit: type=1326 audit(5001394.280:600): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.384753][ T30] audit: type=1326 audit(5001394.280:601): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.408919][ T30] audit: type=1326 audit(5001394.280:602): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.455040][ T9791] netlink: 'syz.1.960': attribute type 11 has an invalid length. [ 466.496466][ T30] audit: type=1326 audit(5001394.280:603): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.531136][ T9791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.960'. [ 466.553622][ T30] audit: type=1326 audit(5001394.280:604): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 466.649208][ T30] audit: type=1326 audit(5001394.280:605): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.4.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd611f8eb69 code=0x7ffc0000 [ 467.003103][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 467.366103][ T9815] netlink: 'syz.2.965': attribute type 7 has an invalid length. [ 467.416464][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.426364][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.440894][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.448926][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.812100][ T92] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 468.621661][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 468.791969][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.818399][ T92] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 468.835873][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.856773][ T92] usb 5-1: Product: syz [ 468.867741][ T92] usb 5-1: Manufacturer: syz [ 468.883785][ T92] usb 5-1: SerialNumber: syz [ 468.891214][ T92] usb 5-1: config 0 descriptor?? [ 468.912377][ T92] rndis_host 5-1:0.0: skipping garbage [ 468.928064][ T92] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 469.835441][ T5947] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 470.018071][ T5947] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 470.036019][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.047435][ T5947] usb 1-1: Product: syz [ 470.051712][ T5947] usb 1-1: Manufacturer: syz [ 470.056428][ T5947] usb 1-1: SerialNumber: syz [ 470.069545][ T5947] usb 1-1: config 0 descriptor?? [ 470.079192][ T9840] input: syz1 as /devices/virtual/input/input20 [ 470.082376][ T5947] gspca_main: spca501-2.14.0 probing 0000:0000 [ 470.261328][ T9848] netlink: 296 bytes leftover after parsing attributes in process `syz.3.973'. [ 470.366149][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.968'. [ 470.447078][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.456609][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.468052][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.477535][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.486137][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.494516][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.503864][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.528870][ T9852] overlayfs: failed lookup in lower (newroot/210, name='bus', err=-40): overlapping layers [ 470.688323][ T5947] gspca_spca501: reg write: error -110 [ 470.696023][ T5947] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 470.709761][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.719005][ T5947] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 470.727914][ T5947] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 470.782146][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.295187][ T5935] usb 5-1: USB disconnect, device number 32 [ 471.574255][ T9869] fuse: Unknown parameter 'fBYDm$񀛂Nvׯ 4LfT́@1 [ 471.574255][ T9869] 8G]O#' [ 471.785976][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.089741][ T5915] usb 1-1: USB disconnect, device number 34 [ 473.198879][ T9885] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 473.215558][ T9885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.223238][ T9885] IPv6: NLM_F_CREATE should be set when creating new route [ 473.230533][ T9885] IPv6: NLM_F_CREATE should be set when creating new route [ 473.274523][ T9885] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 473.288848][ T9885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.340915][ T5935] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 473.741609][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 473.764095][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 473.764114][ T30] audit: type=1400 audit(5001401.830:640): avc: denied { map } for pid=9892 comm="syz.0.985" path="socket:[24909]" dev="sockfs" ino=24909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.828523][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.851937][ T5935] usb 5-1: no configurations [ 473.882751][ T5935] usb 5-1: can't read configurations, error -22 [ 474.232133][ T92] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 474.276509][ T5871] Bluetooth: hci3: link tx timeout [ 474.296603][ T5871] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.325594][ T5871] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 474.534274][ T92] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 474.543948][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.564894][ T92] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 474.575291][ T92] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 474.597363][ T9904] fuse: Unknown parameter 'group_i00000000000000000000' [ 474.682019][ T92] usb 3-1: Manufacturer: syz [ 474.709959][ T92] usb 3-1: config 0 descriptor?? [ 474.901736][ T92] rc_core: IR keymap rc-hauppauge not found [ 474.929935][ T92] Registered IR keymap rc-empty [ 475.022769][ T92] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 475.144305][ T92] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 475.163267][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 475.182322][ T92] usb 3-1: USB disconnect, device number 25 [ 476.134126][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 476.143972][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 476.391842][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 476.472014][ T5947] net_ratelimit: 6 callbacks suppressed [ 476.472030][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.581618][ T30] audit: type=1800 audit(5001404.650:641): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.998" name="/" dev="tmpfs" ino=166 res=0 errno=0 [ 476.950925][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.029934][ T9949] sctp: [Deprecated]: syz.4.1002 (pid 9949) Use of int in max_burst socket option. [ 477.029934][ T9949] Use struct sctp_assoc_value instead [ 477.392238][ T9967] loop2: detected capacity change from 0 to 7 [ 477.411949][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.421196][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.433278][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.442418][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.501896][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.511723][ T5915] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 477.542128][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.551330][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.559813][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.568989][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.577972][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.587185][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.868905][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.878132][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.888789][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 477.899140][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.902973][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 477.908341][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.943341][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.952507][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 477.968505][ T9967] ldm_validate_partition_table(): Disk read failed. [ 477.988244][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.997387][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 478.022853][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 478.024844][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.043130][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 478.068998][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.120130][ T5915] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.130332][ T9967] Dev loop2: unable to read RDB block 0 [ 478.351108][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.453417][ T5915] usb 2-1: config 0 descriptor?? [ 478.460332][ T9967] loop2: unable to read partition table [ 478.467812][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 478.487963][ T9967] loop2: partition table beyond EOD, truncated [ 478.528982][ T9967] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 478.606553][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.632171][ T9954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.743591][ T30] audit: type=1400 audit(5001406.820:642): avc: denied { ioctl } for pid=9977 comm="syz.4.1008" path="socket:[25181]" dev="sockfs" ino=25181 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 479.048303][ T5915] microsoft 0003:045E:07DA.000A: unknown global tag 0xc [ 479.082412][ T5915] microsoft 0003:045E:07DA.000A: item 0 4 1 12 parsing failed [ 479.090616][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 479.121553][ T5915] microsoft 0003:045E:07DA.000A: parse failed [ 479.171700][ T5915] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 479.281272][ T5915] usb 2-1: USB disconnect, device number 30 [ 479.351128][ T9985] Illegal XDP return value 1445756928 on prog (id 218) dev syz_tun, expect packet loss! [ 479.415501][ T9987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.666991][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.691602][ T5935] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 479.972219][ T8973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.057404][ T5935] usb 1-1: config 0 has no interfaces? [ 480.160084][ T5935] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 480.179137][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.199521][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.221806][ T5935] usb 1-1: Product: syz [ 480.226359][ T5935] usb 1-1: Manufacturer: syz [ 480.233603][ T5970] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 480.236494][ T5935] usb 1-1: SerialNumber: syz [ 480.250177][ T5935] usb 1-1: config 0 descriptor?? [ 480.289403][T10000] 9pnet_fd: Insufficient options for proto=fd [ 480.296623][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 480.411662][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 480.589626][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.669653][ T7219] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 480.719149][ T5970] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 480.719306][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.778710][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.815188][ T5970] usb 3-1: config 0 descriptor?? [ 481.002870][ T5935] usb 1-1: USB disconnect, device number 35 [ 481.101627][ T5947] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 481.251608][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 481.265205][ T5947] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 481.282617][ T30] audit: type=1400 audit(5001409.370:643): avc: denied { create } for pid=9990 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 481.291638][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.323720][ T30] audit: type=1400 audit(5001409.390:644): avc: denied { ioctl } for pid=9990 comm="syz.2.1013" path="socket:[25320]" dev="sockfs" ino=25320 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 481.330363][ T5947] usb 4-1: Product: syz [ 481.414248][ T30] audit: type=1400 audit(5001409.390:645): avc: denied { bind } for pid=9990 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 481.433339][ T5947] usb 4-1: Manufacturer: syz [ 481.456231][ T5947] usb 4-1: SerialNumber: syz [ 481.486717][ T5947] usb 4-1: config 0 descriptor?? [ 481.885355][ T92] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 482.344605][ T92] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 482.353171][ T92] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 482.377475][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.417310][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.432442][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 482.438436][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 482.464317][ T5970] usb 3-1: USB disconnect, device number 26 [ 482.638158][T10038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.646892][T10038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.731417][ C0] hrtimer: interrupt took 14263 ns [ 482.737044][ T5947] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 482.754542][ T30] audit: type=1400 audit(5001410.840:646): avc: denied { execute } for pid=10034 comm="syz.1.1024" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 482.946032][T10033] fido_id[10033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.038505][T10041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.393100][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.602622][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.641769][ T5947] airspy 4-1:0.0: Could not detect board [ 483.647517][ T5947] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 483.715405][ T5947] usb 4-1: USB disconnect, device number 35 [ 588.771486][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 588.778456][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6320/1:b..l P10047/1:b..l [ 588.788017][ C1] rcu: (detected by 1, t=10504 jiffies, g=34629, q=681 ncpus=2) [ 588.795720][ C1] task:modprobe state:R running task stack:25416 pid:10047 tgid:10047 ppid:8961 task_flags:0x400000 flags:0x00004002 [ 588.809622][ C1] Call Trace: [ 588.812897][ C1] [ 588.815829][ C1] __schedule+0x1190/0x5de0 [ 588.820337][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.826491][ C1] ? kernel_text_address+0x21/0x100 [ 588.831685][ C1] ? __pfx___schedule+0x10/0x10 [ 588.836540][ C1] ? mark_held_locks+0x49/0x80 [ 588.841302][ C1] preempt_schedule_irq+0x51/0x90 [ 588.846327][ C1] irqentry_exit+0x36/0x90 [ 588.850737][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.856705][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 588.861900][ C1] Code: b8 3d 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 0c 13 0f 0f 82 74 02 00 00 8b 35 ea 3d 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 b8 3d 12 0f 85 c7 02 00 00 48 83 c4 [ 588.881493][ C1] RSP: 0018:ffffc90003286800 EFLAGS: 00000206 [ 588.887552][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c1120 RCX: 0000000099ada81e [ 588.895595][ C1] RDX: 0000000000000000 RSI: ffffffff8de2758d RDI: ffffffff8c15fb80 [ 588.903553][ C1] RBP: 0000000000000002 R08: 5e62e53b1fc7f9c5 R09: 0000000000000000 [ 588.911510][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 588.919552][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 588.927527][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 588.932715][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.938868][ C1] unwind_next_frame+0xd1/0x20a0 [ 588.943799][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 588.948904][ C1] ? mas_wr_bnode+0x13c/0x1c0 [ 588.953581][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.959726][ C1] arch_stack_walk+0x94/0x100 [ 588.964400][ C1] ? mas_wr_bnode+0x13c/0x1c0 [ 588.969076][ C1] stack_trace_save+0x8e/0xc0 [ 588.973745][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 588.979123][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 588.984055][ C1] kasan_save_stack+0x33/0x60 [ 588.988735][ C1] ? kasan_save_stack+0x33/0x60 [ 588.993571][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 588.998933][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 589.004990][ C1] ? mas_topiary_replace+0x1724/0x3520 [ 589.010443][ C1] ? mas_split+0xb39/0x11e0 [ 589.015035][ C1] ? mas_commit_b_node.isra.0+0x76/0xb0 [ 589.020585][ C1] ? mas_wr_bnode+0x13c/0x1c0 [ 589.025306][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 589.030508][ C1] ? __pfx_mt_free_rcu+0x10/0x10 [ 589.035439][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 589.041328][ C1] mas_topiary_replace+0x1724/0x3520 [ 589.046620][ C1] ? __pfx_mas_topiary_replace+0x10/0x10 [ 589.052295][ C1] ? __asan_memset+0x23/0x50 [ 589.056884][ C1] mas_split+0xb39/0x11e0 [ 589.061212][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.067356][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 589.072551][ C1] ? __pfx_mas_split+0x10/0x10 [ 589.077341][ C1] ? mas_mab_cp+0x45e/0x7b0 [ 589.081850][ C1] mas_commit_b_node.isra.0+0x76/0xb0 [ 589.087219][ C1] mas_wr_bnode+0x13c/0x1c0 [ 589.091718][ C1] ? __pfx_mas_wr_bnode+0x10/0x10 [ 589.096783][ C1] ? mprotect_fixup+0x2b3/0xb10 [ 589.101629][ C1] ? do_mprotect_pkey+0x9ca/0xd50 [ 589.106645][ C1] ? __x64_sys_mprotect+0x78/0xc0 [ 589.111662][ C1] ? do_syscall_64+0xcd/0x4c0 [ 589.116333][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.122394][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.128282][ C1] mas_wr_store_entry+0xefa/0x2550 [ 589.133388][ C1] mas_store_prealloc+0x771/0x1680 [ 589.138491][ C1] ? __pfx_mas_store_prealloc+0x10/0x10 [ 589.144101][ C1] ? vma_iter_store_overwrite+0xa3e/0xe90 [ 589.149851][ C1] vma_complete+0x971/0xe80 [ 589.154377][ C1] __split_vma+0xc13/0x1070 [ 589.158887][ C1] ? __pfx___split_vma+0x10/0x10 [ 589.163815][ C1] ? __pfx___might_resched+0x10/0x10 [ 589.169103][ C1] vma_modify+0xee1/0x2030 [ 589.173520][ C1] ? __pfx_vma_modify+0x10/0x10 [ 589.178365][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 589.183401][ C1] vma_modify_flags+0x212/0x2d0 [ 589.188261][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 589.193730][ C1] mprotect_fixup+0x2b3/0xb10 [ 589.198416][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 589.203608][ C1] ? selinux_file_mprotect+0x15b/0x600 [ 589.209071][ C1] do_mprotect_pkey+0x9ca/0xd50 [ 589.213924][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 589.219305][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 589.224786][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 589.229772][ C1] ? do_user_addr_fault+0x843/0x1370 [ 589.235061][ C1] __x64_sys_mprotect+0x78/0xc0 [ 589.239937][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.245136][ C1] do_syscall_64+0xcd/0x4c0 [ 589.249640][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.255530][ C1] RIP: 0033:0x7fe5b411d2c7 [ 589.259935][ C1] RSP: 002b:00007ffe014c5a38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 589.268340][ C1] RAX: ffffffffffffffda RBX: 00007fe5b3df40c0 RCX: 00007fe5b411d2c7 [ 589.276303][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007fe5b3df1000 [ 589.284266][ C1] RBP: 00007ffe014c5d00 R08: 0000000000000000 R09: 00007fe5b3e8fc90 [ 589.292236][ C1] R10: 00007fe5b3df40c0 R11: 0000000000000206 R12: 0000000000000030 [ 589.300203][ C1] R13: 0000013df061e1cf R14: 0000000000000000 R15: 00007fe5b4131310 [ 589.308181][ C1] [ 589.311190][ C1] task:udevd state:R running task stack:25320 pid:6320 tgid:6320 ppid:5216 task_flags:0x400140 flags:0x00004002 [ 589.324752][ C1] Call Trace: [ 589.328019][ C1] [ 589.330943][ C1] __schedule+0x1190/0x5de0 [ 589.335464][ C1] ? __pfx___schedule+0x10/0x10 [ 589.340308][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 589.345251][ C1] ? mark_held_locks+0x49/0x80 [ 589.350013][ C1] preempt_schedule_irq+0x51/0x90 [ 589.355031][ C1] irqentry_exit+0x36/0x90 [ 589.359441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 589.365408][ C1] RIP: 0010:__orc_find+0x0/0xf0 [ 589.370250][ C1] Code: 90 90 90 90 90 90 90 90 90 90 48 8b 07 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 53 48 83 [ 589.389852][ C1] RSP: 0018:ffffc9000cc173b0 EFLAGS: 00000206 [ 589.395915][ C1] RAX: ffffffff915170d8 RBX: 0000000000000001 RCX: ffffffff82409494 [ 589.403869][ C1] RDX: 0000000000000011 RSI: ffffffff915170d8 RDI: ffffffff90c747a8 [ 589.411840][ C1] RBP: ffffc9000cc17470 R08: ffffffff9151713e R09: 0000000000000000 [ 589.419801][ C1] R10: 0000000000000002 R11: 0000000000014094 R12: ffffc9000cc17478 [ 589.427759][ C1] R13: ffffc9000cc17428 R14: ffffc9000cc1745d R15: ffffffff82409494 [ 589.435717][ C1] ? do_setxattr+0x144/0x180 [ 589.440324][ C1] ? do_setxattr+0x144/0x180 [ 589.444908][ C1] unwind_next_frame+0x2ec/0x20a0 [ 589.449931][ C1] ? do_setxattr+0x145/0x180 [ 589.454511][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.460661][ C1] arch_stack_walk+0x94/0x100 [ 589.465333][ C1] ? do_setxattr+0x145/0x180 [ 589.469932][ C1] stack_trace_save+0x8e/0xc0 [ 589.474601][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 589.479967][ C1] ? kernel_text_address+0x8d/0x100 [ 589.485153][ C1] ? __kernel_text_address+0xd/0x40 [ 589.490338][ C1] ? __kernel_text_address+0xd/0x40 [ 589.495523][ C1] ? unwind_get_return_address+0x59/0xa0 [ 589.501147][ C1] kasan_save_stack+0x33/0x60 [ 589.505807][ C1] ? kasan_save_stack+0x33/0x60 [ 589.510640][ C1] ? kasan_save_track+0x14/0x30 [ 589.515473][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 589.520231][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 589.526821][ C1] ? kmemdup_nul+0x49/0xf0 [ 589.531231][ C1] ? security_context_to_sid_core+0xc1/0x860 [ 589.537211][ C1] ? selinux_inode_post_setxattr+0x125/0x4a0 [ 589.543183][ C1] ? security_inode_post_setxattr+0x222/0x240 [ 589.549245][ C1] ? __vfs_setxattr_noperm+0x352/0x660 [ 589.554690][ C1] ? __vfs_setxattr_locked+0x182/0x260 [ 589.560137][ C1] ? vfs_setxattr+0x145/0x360 [ 589.564798][ C1] ? do_setxattr+0x145/0x180 [ 589.569410][ C1] kasan_save_track+0x14/0x30 [ 589.574078][ C1] __kasan_kmalloc+0xaa/0xb0 [ 589.578660][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 589.585064][ C1] ? security_context_to_sid_core+0xc1/0x860 [ 589.591032][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 589.595968][ C1] kmemdup_nul+0x49/0xf0 [ 589.600201][ C1] security_context_to_sid_core+0xc1/0x860 [ 589.606013][ C1] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 589.612440][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 589.617477][ C1] ? __fsnotify_parent+0x24b/0xc40 [ 589.622585][ C1] selinux_inode_post_setxattr+0x125/0x4a0 [ 589.628386][ C1] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 589.634448][ C1] ? __pfx_selinux_inode_post_setxattr+0x10/0x10 [ 589.640772][ C1] ? __pfx___vfs_setxattr+0x10/0x10 [ 589.645959][ C1] ? __pfx_make_vfsgid+0x10/0x10 [ 589.650891][ C1] security_inode_post_setxattr+0x222/0x240 [ 589.656780][ C1] __vfs_setxattr_noperm+0x352/0x660 [ 589.662061][ C1] __vfs_setxattr_locked+0x182/0x260 [ 589.667341][ C1] vfs_setxattr+0x145/0x360 [ 589.671839][ C1] ? lock_acquire+0x179/0x350 [ 589.676518][ C1] ? __pfx_vfs_setxattr+0x10/0x10 [ 589.681533][ C1] ? mnt_get_write_access+0x54/0x300 [ 589.686811][ C1] ? mnt_get_write_access+0x54/0x300 [ 589.692093][ C1] do_setxattr+0x145/0x180 [ 589.696502][ C1] filename_setxattr+0x16b/0x1d0 [ 589.701429][ C1] ? __pfx_filename_setxattr+0x10/0x10 [ 589.706883][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 589.712256][ C1] path_setxattrat+0x1de/0x2a0 [ 589.717009][ C1] ? __pfx_path_setxattrat+0x10/0x10 [ 589.722290][ C1] ? putname+0x154/0x1a0 [ 589.726555][ C1] __x64_sys_lsetxattr+0xc9/0x140 [ 589.731570][ C1] ? do_syscall_64+0x91/0x4c0 [ 589.736247][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.741438][ C1] do_syscall_64+0xcd/0x4c0 [ 589.745939][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.751837][ C1] RIP: 0033:0x7f791871d57a [ 589.756244][ C1] RSP: 002b:00007ffec6f00298 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 589.764643][ C1] RAX: ffffffffffffffda RBX: 0000556fa251c2d0 RCX: 00007f791871d57a [ 589.772600][ C1] RDX: 0000556fa251c2d0 RSI: 00007f7918f6b29c RDI: 00007ffec6f00de0 [ 589.780558][ C1] RBP: 0000556fa22d18d0 R08: 0000000000000000 R09: 0000556fa22d6450 [ 589.788530][ C1] R10: 000000000000001b R11: 0000000000000246 R12: 00007ffec6f00de0 [ 589.796506][ C1] R13: 0000000000000001 R14: 0000556f66f936d7 R15: 0000556fa2517f40 [ 589.804495][ C1] [ 589.807512][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g34629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 589.818689][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 589.828641][ C1] rcu: RCU grace-period kthread stack dump: [ 589.834510][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 589.847990][ C1] Call Trace: [ 589.851257][ C1] [ 589.854180][ C1] __schedule+0x1190/0x5de0 [ 589.858697][ C1] ? __pfx___schedule+0x10/0x10 [ 589.863544][ C1] ? find_held_lock+0x2b/0x80 [ 589.868214][ C1] ? schedule+0x2d7/0x3a0 [ 589.872540][ C1] schedule+0xe7/0x3a0 [ 589.876604][ C1] schedule_timeout+0x123/0x290 [ 589.881442][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 589.886804][ C1] ? __pfx_process_timeout+0x10/0x10 [ 589.892085][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 589.897884][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 589.903340][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 589.908094][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 589.913376][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.918570][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 589.923494][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 589.928338][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 589.934139][ C1] rcu_gp_kthread+0x270/0x380 [ 589.938807][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 589.943991][ C1] ? rcu_is_watching+0x12/0xc0 [ 589.948750][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.953944][ C1] ? __kthread_parkme+0x19e/0x250 [ 589.959395][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 589.964580][ C1] kthread+0x3c5/0x780 [ 589.968638][ C1] ? __pfx_kthread+0x10/0x10 [ 589.973232][ C1] ? rcu_is_watching+0x12/0xc0 [ 589.978007][ C1] ? __pfx_kthread+0x10/0x10 [ 589.982605][ C1] ret_from_fork+0x5d7/0x6f0 [ 589.987196][ C1] ? __pfx_kthread+0x10/0x10 [ 589.991784][ C1] ret_from_fork_asm+0x1a/0x30 [ 589.996560][ C1] [ 589.999568][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 590.005886][ C1] CPU: 1 UID: 0 PID: 10051 Comm: syz.0.1026 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 590.017589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.027630][ C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 590.034299][ C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 05 fe 0b 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 590.053893][ C1] RSP: 0018:ffffc90002f27580 EFLAGS: 00000246 [ 590.059950][ C1] RAX: 0000000000000000 RBX: ffff8880b8442000 RCX: ffffc90005399000 [ 590.067904][ C1] RDX: 0000000000080000 RSI: ffffffff81af8a7b RDI: 0000000000000005 [ 590.075858][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 590.083814][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 590.091771][ C1] R13: ffffed1017088401 R14: 0000000000000001 R15: 0000000000000000 [ 590.099831][ C1] FS: 00007fd3586da6c0(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 590.108751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.115323][ C1] CR2: 00007fd357772920 CR3: 0000000056d5e000 CR4: 00000000003526f0 [ 590.123281][ C1] Call Trace: [ 590.126547][ C1] [ 590.129467][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 590.134489][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 590.140815][ C1] ? __pfx___text_poke+0x10/0x10 [ 590.145750][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 590.150762][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 590.155864][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.161495][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 590.167210][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 590.173443][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 590.178377][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.184004][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.189632][ C1] __static_call_transform+0x33b/0x740 [ 590.195080][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 590.201051][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.206679][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.213088][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.218713][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.225119][ C1] arch_static_call_transform+0xb6/0xc0 [ 590.230662][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.237070][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.243479][ C1] __static_call_update+0xef/0x670 [ 590.248581][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.255005][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 590.260635][ C1] ? __pfx___static_call_update+0x10/0x10 [ 590.266348][ C1] ? trace_kmalloc+0x2b/0xd0 [ 590.270935][ C1] ? __kmalloc_noprof+0x242/0x510 [ 590.275955][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.282364][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.288777][ C1] tracepoint_add_func+0xa88/0xea0 [ 590.293889][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.300309][ C1] tracepoint_probe_register_prio_may_exist+0xb9/0x100 [ 590.307169][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 590.314624][ C1] ? find_held_lock+0x2b/0x80 [ 590.319299][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 590.325711][ C1] ? __anon_inode_getfile+0x17c/0x280 [ 590.331080][ C1] bpf_probe_register+0x189/0x200 [ 590.336100][ C1] bpf_raw_tp_link_attach+0x2ec/0x630 [ 590.341473][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 590.347362][ C1] ? find_held_lock+0x2b/0x80 [ 590.352031][ C1] ? __fget_files+0x204/0x3c0 [ 590.356756][ C1] ? fput+0x9b/0xd0 [ 590.360559][ C1] ? __bpf_prog_get+0x97/0x2a0 [ 590.365313][ C1] __sys_bpf+0x23c2/0x4de0 [ 590.369723][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 590.374479][ C1] ? errseq_sample+0x53/0x70 [ 590.379056][ C1] ? file_init_path+0x4fe/0x760 [ 590.383901][ C1] ? do_futex+0x122/0x350 [ 590.388231][ C1] ? __pfx_do_futex+0x10/0x10 [ 590.392913][ C1] ? __sys_socket+0xac/0x260 [ 590.397496][ C1] ? xfd_validate_state+0x61/0x180 [ 590.402608][ C1] __x64_sys_bpf+0x78/0xc0 [ 590.407022][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.412220][ C1] do_syscall_64+0xcd/0x4c0 [ 590.416726][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.422610][ C1] RIP: 0033:0x7fd35778eb69 [ 590.427013][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.446638][ C1] RSP: 002b:00007fd3586da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.455045][ C1] RAX: ffffffffffffffda RBX: 00007fd3579b5fa0 RCX: 00007fd35778eb69 [ 590.463004][ C1] RDX: 0000000000000018 RSI: 0000200000000200 RDI: 0000000000000011 [ 590.470962][ C1] RBP: 00007fd357811df1 R08: 0000000000000000 R09: 0000000000000000 [ 590.478951][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.486906][ C1] R13: 0000000000000000 R14: 00007fd3579b5fa0 R15: 00007fff28c47558 [ 590.494889][ C1]