last executing test programs: 10.385757134s ago: executing program 2 (id=1910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1001, 0x80000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 9.557928398s ago: executing program 1 (id=1915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x20100, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r2, 0x40096102, &(0x7f0000000140)={{}, 0x8}) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3f00, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x10}]}}}]}, 0x44}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) exit(0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x10, 0x10001, 0x100000000180, 0x4, 0x12, 0xf3, 0x50, 0x12, 0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xbdd], 0xffff1001, 0x61100}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x10, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000480)=@can_newroute={0x14, 0x18, 0x2, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40800) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000000c0)="a7c82409f0e11b") 9.47711761s ago: executing program 3 (id=1916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 9.43853717s ago: executing program 2 (id=1917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x5, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000b40)={{0x2, 0xffffffff, 0xd, 0xd, 0x0, 0x6}, 0x6c, [0x9f64, 0x400, 0x101, 0xff99, 0xf0d, 0x4, 0x80000000, 0x8, 0x5, 0x0, 0x7, 0x98, 0xe8, 0x7, 0xffff0001, 0x2, 0x5, 0x8404, 0x324, 0x5, 0x8, 0x4, 0x3, 0x80000000, 0x7, 0xe0, 0x1, 0x1, 0x2, 0x0, 0x8, 0x0, 0xfffffff9, 0xff, 0x80, 0x3, 0x7ff, 0xa00000, 0xc, 0x4, 0x268a, 0x889, 0xfffffff2, 0x1, 0x200009, 0xfffffffd, 0x4000000, 0x9f7, 0x0, 0x89, 0x1, 0x1, 0x4, 0x64b, 0x6, 0x7fffffff, 0x3e800000, 0x5c05, 0x828, 0xb, 0x2, 0x8000, 0x3, 0x6, 0x8, 0x4, 0x3, 0x5, 0x0, 0x80000000, 0x53, 0x6, 0x6, 0x100, 0x101, 0x4, 0x66, 0x5, 0x2, 0x3, 0x3, 0x8, 0xfffffffa, 0x1, 0x2f5, 0x7ff, 0x3, 0xfffffff9, 0xa693, 0x800, 0x7, 0x401, 0x2, 0x1, 0x8, 0x8001, 0x5c1, 0x1ff, 0x6, 0xaf, 0x3, 0xc, 0x5, 0x10001, 0x4, 0x5, 0xe37, 0x2, 0x5, 0xdc, 0xfff, 0x1, 0x80000001, 0x4, 0xf, 0x10001, 0xd, 0x3, 0x80, 0x3, 0xcd, 0xd68f, 0x3, 0x8, 0x100, 0xfffffffc, 0x1000, 0x2, 0x3d3, 0xfffffffc, 0xfff, 0xfd45, 0xf529, 0x24e2, 0x3, 0x6, 0x1ff, 0x1, 0x7, 0xd7, 0x88, 0x10000, 0xffff, 0x200, 0x80000000, 0x7, 0x100, 0x2, 0x7, 0xf5d, 0x4, 0x400, 0xe, 0x3, 0x5, 0x532be66f, 0x800, 0x9, 0xfffffffd, 0xff, 0xa576, 0x8, 0xb, 0x400, 0x6, 0x8001, 0x0, 0x9, 0xd, 0x7ff, 0x8, 0x4410, 0x1, 0x6, 0x7, 0xfffffff6, 0x0, 0x96, 0x4, 0x6e, 0x7ff, 0x9, 0xdfbf, 0x0, 0x9, 0x9, 0x9, 0x6, 0x4, 0x1ac1, 0x7, 0x4, 0x0, 0xb, 0x1, 0x8, 0xc, 0x3, 0x8, 0x3, 0x400, 0x5, 0x0, 0x101, 0x8, 0x5, 0x4, 0x5, 0x94, 0x7, 0x8, 0x3, 0x2, 0x8, 0x6, 0x7, 0x40, 0x3, 0x8, 0x0, 0x9, 0x2, 0x0, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1, 0x6, 0x51b8, 0xfffffeff, 0xe7ae, 0x9, 0x8001, 0x5, 0xbc, 0xe74, 0x0, 0xffffff98, 0x800, 0x100, 0x6, 0x10001, 0x7, 0x4, 0x80000000, 0x2, 0x8, 0x5, 0x4, 0x3, 0x5, 0x1, 0xc6a, 0x9, 0xbae, 0x4, 0x7, 0x40, 0x2, 0x5f, 0x4, 0x8, 0x6, 0x9, 0xffffecb7, 0x3161, 0xfff, 0x401, 0x1, 0x101, 0x3, 0xf86, 0x3, 0x6, 0x5d, 0x101, 0xfb, 0x0, 0x7, 0x10000, 0x7, 0xfffffff8, 0xe, 0x5, 0x8001, 0xfffffff4, 0x0, 0x629, 0x7, 0x0, 0x9, 0xb, 0xffffff80, 0x1000, 0x7, 0x45baeead, 0xffffddf1, 0x7, 0x65, 0x5913, 0xfffffff8, 0xff, 0x497, 0x4, 0xf9b, 0x7, 0xca, 0x100, 0x67, 0x6, 0x1, 0xffff, 0xffffff4c, 0x3, 0x2, 0xe42, 0x1, 0x20000000, 0x8e, 0x8000, 0x117, 0x5, 0xffffffc0, 0x6d800, 0x0, 0xd, 0x0, 0x6, 0x400, 0x92, 0x8000, 0xff, 0x5, 0x80000001, 0x1000, 0x400, 0x5, 0xfff, 0x6, 0x6, 0x9, 0x9, 0x5, 0x10001, 0x124, 0x8ac, 0x1, 0x1, 0x9, 0x4, 0x7fd, 0xfffffff8, 0x3, 0x0, 0x6, 0xeac7, 0x7, 0x8, 0x3, 0x1, 0x5, 0xfffffffa, 0x5, 0x9, 0x9, 0x8, 0xc871, 0xfffffff9, 0x3, 0xd, 0x1, 0x1, 0xfff, 0x5, 0x7, 0x1000, 0xf45, 0x80000001, 0x0, 0x8, 0x0, 0x6, 0x7ed, 0xfd, 0x2, 0x3, 0x2, 0x9f, 0x0, 0x4, 0x0, 0x5, 0x1, 0xea, 0x5, 0xad, 0xc, 0x15, 0x5, 0xfffffff8, 0xe276, 0x800, 0xfffffffc, 0x1f9, 0x2, 0x7fffffff, 0xfffffffb, 0x8, 0x1, 0xda, 0x84, 0x1, 0xfff, 0xbafd175, 0x0, 0x1, 0x3, 0xfffffff9, 0x40, 0x3, 0xdd, 0x7, 0x3, 0x6, 0xd2e, 0x9371, 0xe, 0x5, 0x401, 0x7, 0x9, 0x5, 0x7fff, 0x5, 0x1, 0xbba, 0x6, 0x6, 0x2, 0x4, 0x100000, 0x5, 0xff, 0x5, 0x6, 0x998, 0x2, 0xcb78, 0x3, 0xe, 0x6, 0x4, 0xf4, 0x7, 0x2, 0x8, 0xa20b, 0x7, 0x2, 0x2, 0x1ff, 0x10001, 0x4, 0x4, 0x5, 0x9, 0x4, 0x5, 0x9, 0xffa, 0x0, 0x200, 0x7662, 0x94c, 0x8, 0x6, 0x5, 0x3ff, 0x1, 0x9, 0xd0, 0xffff, 0xe7, 0x6, 0x8, 0x3f, 0x7ff, 0x4, 0x40, 0x5, 0x9, 0x4, 0x6, 0xffff, 0x8, 0x1800000, 0x1, 0x393e, 0x7, 0xffffffc2, 0x80000001, 0x1, 0x1, 0x7, 0x9, 0xb4e, 0x56, 0x0, 0x8, 0x8, 0xe25e, 0x200, 0xc, 0x5, 0x0, 0x1, 0x5, 0x34b, 0xffffffff, 0x232, 0xad4, 0x68f1, 0xf, 0x8903, 0xc9, 0x0, 0x9, 0x100, 0x2, 0x5, 0x0, 0x9, 0x4, 0x3, 0xf00000, 0x3, 0x4, 0x0, 0x1000100, 0x0, 0x0, 0xb, 0x4, 0x8, 0xa, 0x6, 0xfffff001, 0x1, 0x4, 0xd881, 0x6, 0x2, 0xf47, 0xfffffff9, 0x7, 0x800, 0x7, 0x80, 0xffffff02, 0x5, 0x4, 0x7, 0x2, 0x4, 0x7, 0x8b4, 0x6, 0x10001, 0x3ff, 0xb58, 0x9, 0x2, 0x66, 0xf, 0x6, 0xa5d, 0xea48, 0x7, 0x8, 0x3, 0xd, 0x7, 0x0, 0x4, 0x8820, 0x7, 0x1, 0x8, 0x10000, 0x6, 0x7, 0x40c, 0x6, 0x2, 0xd, 0x4, 0xfffffff7, 0x100, 0x5cd, 0x4, 0x5, 0xb7, 0x6, 0x9, 0xb, 0x4, 0x9, 0x5, 0x9, 0x0, 0xa, 0x57, 0x80000000, 0x80000000, 0x8000000, 0x6, 0x3c00000, 0x3, 0x92, 0xfe9, 0xb, 0x21, 0x847, 0x8, 0x0, 0x9, 0x801, 0x43, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0xa, 0x6, 0x0, 0x9, 0x4, 0x4, 0x7, 0x9, 0x0, 0x5, 0x9, 0x3, 0x0, 0xfd0, 0x2, 0xee5, 0x20000000, 0x9, 0x3ff, 0xd, 0xff, 0x0, 0x9, 0x7, 0x2, 0x9, 0x8000000, 0x3, 0x5, 0x8, 0x3, 0x6, 0x4, 0x5, 0x8, 0x1ff, 0x6000000, 0x0, 0x5c, 0x9, 0xfffffff7, 0x7, 0x8, 0x1, 0x1, 0x5, 0x6, 0x3, 0x1, 0x6, 0x2, 0x4, 0xfffff522, 0x5, 0x5, 0x5, 0x6, 0x81, 0x2, 0x2, 0x3, 0x2, 0x8, 0x4, 0x9, 0x5, 0x6, 0x7, 0x7, 0xfffffff7, 0x1, 0x4, 0xffff7fff, 0x0, 0x2, 0xd, 0x5, 0x8, 0x7f, 0x1000, 0x4, 0x2, 0x1, 0x4, 0x4, 0x9, 0x1, 0x10000, 0x1, 0x1b3, 0x58, 0x1, 0x9, 0x383a, 0x5, 0x1ff, 0x7, 0x2, 0xfffffff2, 0x3, 0x8, 0x1ff, 0xcc, 0x2, 0x9, 0xfffffff7, 0xe, 0x7ff, 0xffffffff, 0x0, 0xcb29, 0xfff, 0x4, 0x400, 0x28de, 0x80, 0x1, 0x7, 0xd, 0x7, 0x1b, 0x5, 0x867b, 0x0, 0x400, 0x1, 0x40, 0x80000000, 0x4, 0x3, 0x5, 0x3, 0x1, 0x7, 0x7cdeb271, 0x2, 0x5, 0x81, 0x5, 0xff, 0x3f40, 0xff, 0x7, 0x137, 0x8, 0x80000000, 0x6, 0x8, 0xb4, 0x5, 0x7fffffff, 0x7, 0xff, 0x7, 0xa, 0xd7, 0x768, 0xfffffffd, 0x7fff, 0xf92, 0x8, 0x3, 0x5, 0x2, 0x4c, 0x16, 0x63b, 0x0, 0xf, 0xfffffff2, 0xf8, 0x3, 0x2, 0x0, 0x0, 0x101, 0x1, 0x1, 0x0, 0xf, 0x800, 0x6, 0x1, 0x401, 0x7, 0x7f, 0x4, 0xb033, 0x401, 0x6, 0x3ff, 0xc7, 0x52f, 0x7e4cf30e, 0x1, 0xff2, 0xfffffffb, 0xa8, 0xfffffffc, 0x9, 0x200, 0xc177, 0x3ff, 0x80000001, 0x7, 0xffffffc7, 0x7, 0x0, 0x0, 0x9, 0x5, 0x1, 0x2, 0x4b7a, 0x0, 0x80, 0xfffffff7, 0xc, 0x7fffffff, 0x2, 0x3, 0x8, 0x1, 0x21b, 0x8, 0x2, 0x8, 0xd18, 0x0, 0xf, 0x2, 0x81, 0xfffffff7, 0x3ff, 0x1000, 0x601d, 0x3, 0x6, 0x2, 0x3ff, 0x3c, 0x2, 0x2, 0x9e, 0x3, 0x8, 0x0, 0x4, 0x3, 0x4, 0x101, 0xffffffff, 0x7, 0x3, 0x300000, 0x7, 0xf, 0x0, 0x6, 0x10000, 0x39fa, 0xff, 0x24a, 0xdc8b, 0x2, 0x3, 0x8, 0x851, 0x1, 0x7fff, 0x4, 0x4, 0x5, 0xfa, 0x7f, 0xdb5, 0x33, 0x2e400000, 0x0, 0x5, 0x8001, 0x4, 0x6, 0x3, 0x9, 0xfff, 0x0, 0x1dae, 0x2, 0x1, 0x1, 0x7, 0x17, 0x6, 0x5, 0x4319, 0xfff, 0x2, 0x3ff, 0x7, 0x6, 0x3dd6ab82, 0x1b, 0x61a6, 0x4, 0x5f, 0x3, 0x81, 0x5, 0xa7d, 0x80000001, 0xd, 0x2, 0x1, 0x101, 0xfd4, 0x15b5, 0x0, 0x1, 0x8c6, 0x9, 0x8, 0x266, 0xc6fa, 0x2, 0x124c, 0x7, 0x3, 0xb000, 0x1, 0xff, 0xfffffffb, 0x80000000, 0x4ce9, 0x7, 0x9, 0x3, 0xffffffff, 0x5, 0x7, 0x10000, 0x3ff, 0xcc, 0x7ff, 0x0, 0x4, 0x3, 0x7, 0x5, 0x3ff, 0x7, 0xfff, 0x1, 0x3, 0x8001, 0xc, 0x4, 0x4, 0xfffffffb, 0x80, 0x7, 0x5, 0x921, 0x6, 0x89b, 0x2, 0x9, 0xfaf1, 0x0, 0x5, 0x10001, 0x459e, 0x2, 0xc, 0xfffffffe, 0x334, 0x0, 0x0, 0xfffffffe, 0x6, 0x17, 0x1, 0x5, 0x0, 0x4]}) 6.513910691s ago: executing program 1 (id=1921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x414}}, 0x0) 6.291014994s ago: executing program 1 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x80000001}]}}}]}, 0x38}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) getsockname$packet(r3, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000240)={r7, 0x1, 0x6, @random}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001240)={0x498, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe5c7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x90b}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) read$FUSE(r1, &(0x7f0000005280)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) r11 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r11, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="20010300000026f1d6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x7}, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(TY,', @ANYRES16=r10, @ANYBLOB="040025bd7000fcdbdf254300000008000300", @ANYRES32=r12, @ANYBLOB='\f\x00X\x00Y\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x864, r9, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x12c, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @private0, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "50ce90403ce7581c2d873384d54d7c51e9702b23492cdbb4d84d7619750171a2"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4ff4468ce20547aae6d112793cddc54f7cd18261aa51575510312633063d63de"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "084b40419244ff2a695687fe9c7ac4eeaba165521f5a6eefe7ab677a065c97cc"}]}]}, @WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x357378d4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xee4d}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x4c, 0x9, 0x0, 0x1, [{0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}]}]}, @WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @private2, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x755}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private0, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b582c56e99ae6b361f4f539bf9068ab186614bdc2549702cc43ef25d4737f4e9"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d25f24625600f51f8769f3482c884dd475feec46fbb389ddab46da22d6a816dd"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9b222a4661fa8e119cae07eea58e621f86f3fe2e742bbbc946523aed92b6e962"}]}, {0x1b0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e947449b15f6aa71c277ca6346062c280624d049c412894d1f9694bafebc4fb"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x864}, 0x1, 0x0, 0x0, 0x4000}, 0x801) 6.031864134s ago: executing program 3 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xa, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.477259036s ago: executing program 0 (id=1925): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.365243262s ago: executing program 0 (id=1926): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000400)) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}}, 0x18) sendmmsg$sock(r7, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@caif=@rfm={0x25, 0x40000000, "ea9246788bef1fd053ced2c2d899b920"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000500)="d0a670ecc63e9f0393017ff093ed70977dbd7fef0f25ec6f8056ca734a4e6aba5afaddf2bb36a28c19e174b88acf", 0x2e}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xe8}}], 0x30}}], 0x2, 0x40) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000f0", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4040800) 5.300135374s ago: executing program 3 (id=1927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.233956895s ago: executing program 2 (id=1928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1001, 0x80000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 4.753705066s ago: executing program 4 (id=1929): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x6, 0xd09a, 0x2, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0x0, 0xffff, 0x100006, 0x5, 0xa, 0x1000, 0x30000, 0x10000, 0x2, 0x1, 0xe2df, 0x2, 0x80008001, 0x7, 0xb, 0x7, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000fdffffff85000000bc000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4de7}, 0x94) io_setup(0x8, &(0x7f0000000000)) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2}, 0x1}, 0x18) r3 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb3, 0x0, 0x21, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40014) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000b40)=""/56, 0x38}, {&(0x7f0000000b80)=""/57, 0x39}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000d40)=""/195, 0xc3}, {&(0x7f0000000e40)=""/11, 0xb}], 0x6, &(0x7f0000000f00)}, 0xa9}, {{&(0x7f0000000f40)=@nfc, 0x80, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/109, 0x6d}], 0x1}, 0xcf}], 0x2, 0x10000, &(0x7f0000001100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$video(&(0x7f00000001c0), 0x8000000000000001, 0x4040) ioctl$VIDIOC_ENUMSTD(r7, 0xc0485619, &(0x7f0000000400)={0x9, 0x10000, "35e02f7196721043ba5aa718b421dac02aeb3b33ce552f90", {0x6, 0x6}, 0x495}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xc72, 0x0, 0x1, 0x3, '\x00', r2, r0, 0x202}, 0x50) r9 = fsmount(0xffffffffffffffff, 0x1, 0xf8) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') setsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8) io_uring_setup(0x48c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227, 0x0, r10}) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x7f, 0x8000}}, './file0\x00'}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/rt_cache\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2a, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000080000000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000000900000018420000060000000000000000000000851000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000004000008500fdfe72cfb723843f12bb9476c5425500"/43, @ANYRES32, @ANYBLOB="000000000000000018480000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x72, &(0x7f0000000ac0)=""/114, 0x100, 0x42, '\x00', r2, 0x25, r11, 0x8, &(0x7f0000000800)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r12, r13, r14], &(0x7f00000009c0)=[{0x4, 0x1, 0x5, 0xb}, {0x3, 0x2, 0x2, 0x2}, {0x2, 0x1, 0xe, 0x9}], 0x10, 0xb09}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d499bcb7b14a63228c3eda45c95de587f3a12d1836fa95d3a720380f2260f1030a365c96058f1a75", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r15}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) 4.048175013s ago: executing program 2 (id=1930): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0x5, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000b40)={{0x2, 0xffffffff, 0xd, 0xd, 0x0, 0x6}, 0x6c, [0x9f64, 0x400, 0x101, 0xff99, 0xf0d, 0x4, 0x80000000, 0x8, 0x5, 0x0, 0x7, 0x98, 0xe8, 0x7, 0xffff0001, 0x2, 0x5, 0x8404, 0x324, 0x5, 0x8, 0x4, 0x3, 0x80000000, 0x7, 0xe0, 0x1, 0x1, 0x2, 0x0, 0x8, 0x0, 0xfffffff9, 0xff, 0x80, 0x3, 0x7ff, 0xa00000, 0xc, 0x4, 0x268a, 0x889, 0xfffffff2, 0x1, 0x200009, 0xfffffffd, 0x4000000, 0x9f7, 0x0, 0x89, 0x1, 0x1, 0x4, 0x64b, 0x6, 0x7fffffff, 0x3e800000, 0x5c05, 0x828, 0xb, 0x2, 0x8000, 0x3, 0x6, 0x8, 0x4, 0x3, 0x5, 0x0, 0x80000000, 0x53, 0x6, 0x6, 0x100, 0x101, 0x4, 0x66, 0x5, 0x2, 0x3, 0x3, 0x8, 0xfffffffa, 0x1, 0x2f5, 0x7ff, 0x3, 0xfffffff9, 0xa693, 0x800, 0x7, 0x401, 0x2, 0x1, 0x8, 0x8001, 0x5c1, 0x1ff, 0x6, 0xaf, 0x3, 0xc, 0x5, 0x10001, 0x4, 0x5, 0xe37, 0x2, 0x5, 0xdc, 0xfff, 0x1, 0x80000001, 0x4, 0xf, 0x10001, 0xd, 0x3, 0x80, 0x3, 0xcd, 0xd68f, 0x3, 0x8, 0x100, 0xfffffffc, 0x1000, 0x2, 0x3d3, 0xfffffffc, 0xfff, 0xfd45, 0xf529, 0x24e2, 0x3, 0x6, 0x1ff, 0x1, 0x7, 0xd7, 0x88, 0x10000, 0xffff, 0x200, 0x80000000, 0x7, 0x100, 0x2, 0x7, 0xf5d, 0x4, 0x400, 0xe, 0x3, 0x5, 0x532be66f, 0x800, 0x9, 0xfffffffd, 0xff, 0xa576, 0x8, 0xb, 0x400, 0x6, 0x8001, 0x0, 0x9, 0xd, 0x7ff, 0x8, 0x4410, 0x1, 0x6, 0x7, 0xfffffff6, 0x0, 0x96, 0x4, 0x6e, 0x7ff, 0x9, 0xdfbf, 0x0, 0x9, 0x9, 0x9, 0x6, 0x4, 0x1ac1, 0x7, 0x4, 0x0, 0xb, 0x1, 0x8, 0xc, 0x3, 0x8, 0x3, 0x400, 0x5, 0x0, 0x101, 0x8, 0x5, 0x4, 0x5, 0x94, 0x7, 0x8, 0x3, 0x2, 0x8, 0x6, 0x7, 0x40, 0x3, 0x8, 0x0, 0x9, 0x2, 0x0, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1, 0x6, 0x51b8, 0xfffffeff, 0xe7ae, 0x9, 0x8001, 0x5, 0xbc, 0xe74, 0x0, 0xffffff98, 0x800, 0x100, 0x6, 0x10001, 0x7, 0x4, 0x80000000, 0x2, 0x8, 0x5, 0x4, 0x3, 0x5, 0x1, 0xc6a, 0x9, 0xbae, 0x4, 0x7, 0x40, 0x2, 0x5f, 0x4, 0x8, 0x6, 0x9, 0xffffecb7, 0x3161, 0xfff, 0x401, 0x1, 0x101, 0x3, 0xf86, 0x3, 0x6, 0x5d, 0x101, 0xfb, 0x0, 0x7, 0x10000, 0x7, 0xfffffff8, 0xe, 0x5, 0x8001, 0xfffffff4, 0x0, 0x629, 0x7, 0x0, 0x9, 0xb, 0xffffff80, 0x1000, 0x7, 0x45baeead, 0xffffddf1, 0x7, 0x65, 0x5913, 0xfffffff8, 0xff, 0x497, 0x4, 0xf9b, 0x7, 0xca, 0x100, 0x67, 0x6, 0x1, 0xffff, 0xffffff4c, 0x3, 0x2, 0xe42, 0x1, 0x20000000, 0x8e, 0x8000, 0x117, 0x5, 0xffffffc0, 0x6d800, 0x0, 0xd, 0x0, 0x6, 0x400, 0x92, 0x8000, 0xff, 0x5, 0x80000001, 0x1000, 0x400, 0x5, 0xfff, 0x6, 0x6, 0x9, 0x9, 0x5, 0x10001, 0x124, 0x8ac, 0x1, 0x1, 0x9, 0x4, 0x7fd, 0xfffffff8, 0x3, 0x0, 0x6, 0xeac7, 0x7, 0x8, 0x3, 0x1, 0x5, 0xfffffffa, 0x5, 0x9, 0x9, 0x8, 0xc871, 0xfffffff9, 0x3, 0xd, 0x1, 0x1, 0xfff, 0x5, 0x7, 0x1000, 0xf45, 0x80000001, 0x0, 0x8, 0x0, 0x6, 0x7ed, 0xfd, 0x2, 0x3, 0x2, 0x9f, 0x0, 0x4, 0x0, 0x5, 0x1, 0xea, 0x5, 0xad, 0xc, 0x15, 0x5, 0xfffffff8, 0xe276, 0x800, 0xfffffffc, 0x1f9, 0x2, 0x7fffffff, 0xfffffffb, 0x8, 0x1, 0xda, 0x84, 0x1, 0xfff, 0xbafd175, 0x0, 0x1, 0x3, 0xfffffff9, 0x40, 0x3, 0xdd, 0x7, 0x3, 0x6, 0xd2e, 0x9371, 0xe, 0x5, 0x401, 0x7, 0x9, 0x5, 0x7fff, 0x5, 0x1, 0xbba, 0x6, 0x6, 0x2, 0x4, 0x100000, 0x5, 0xff, 0x5, 0x6, 0x998, 0x2, 0xcb78, 0x3, 0xe, 0x6, 0x4, 0xf4, 0x7, 0x2, 0x8, 0xa20b, 0x7, 0x2, 0x2, 0x1ff, 0x10001, 0x4, 0x4, 0x5, 0x9, 0x4, 0x5, 0x9, 0xffa, 0x0, 0x200, 0x7662, 0x94c, 0x8, 0x6, 0x5, 0x3ff, 0x1, 0x9, 0xd0, 0xffff, 0xe7, 0x6, 0x8, 0x3f, 0x7ff, 0x4, 0x40, 0x5, 0x9, 0x4, 0x6, 0xffff, 0x8, 0x1800000, 0x1, 0x393e, 0x7, 0xffffffc2, 0x80000001, 0x1, 0x1, 0x7, 0x9, 0xb4e, 0x56, 0x0, 0x8, 0x8, 0xe25e, 0x200, 0xc, 0x5, 0x0, 0x1, 0x5, 0x34b, 0xffffffff, 0x232, 0xad4, 0x68f1, 0xf, 0x8903, 0xc9, 0x0, 0x9, 0x100, 0x2, 0x5, 0x0, 0x9, 0x4, 0x3, 0xf00000, 0x3, 0x4, 0x0, 0x1000100, 0x0, 0x0, 0xb, 0x4, 0x8, 0xa, 0x6, 0xfffff001, 0x1, 0x4, 0xd881, 0x6, 0x2, 0xf47, 0xfffffff9, 0x7, 0x800, 0x7, 0x80, 0xffffff02, 0x5, 0x4, 0x7, 0x2, 0x4, 0x7, 0x8b4, 0x6, 0x10001, 0x3ff, 0xb58, 0x9, 0x2, 0x66, 0xf, 0x6, 0xa5d, 0xea48, 0x7, 0x8, 0x3, 0xd, 0x7, 0x0, 0x4, 0x8820, 0x7, 0x1, 0x8, 0x10000, 0x6, 0x7, 0x40c, 0x6, 0x2, 0xd, 0x4, 0xfffffff7, 0x100, 0x5cd, 0x4, 0x5, 0xb7, 0x6, 0x9, 0xb, 0x4, 0x9, 0x5, 0x9, 0x0, 0xa, 0x57, 0x80000000, 0x80000000, 0x8000000, 0x6, 0x3c00000, 0x3, 0x92, 0xfe9, 0xb, 0x21, 0x847, 0x8, 0x0, 0x9, 0x801, 0x43, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0xa, 0x6, 0x0, 0x9, 0x4, 0x4, 0x7, 0x9, 0x0, 0x5, 0x9, 0x3, 0x0, 0xfd0, 0x2, 0xee5, 0x20000000, 0x9, 0x3ff, 0xd, 0xff, 0x0, 0x9, 0x7, 0x2, 0x9, 0x8000000, 0x3, 0x5, 0x8, 0x3, 0x6, 0x4, 0x5, 0x8, 0x1ff, 0x6000000, 0x0, 0x5c, 0x9, 0xfffffff7, 0x7, 0x8, 0x1, 0x1, 0x5, 0x6, 0x3, 0x1, 0x6, 0x2, 0x4, 0xfffff522, 0x5, 0x5, 0x5, 0x6, 0x81, 0x2, 0x2, 0x3, 0x2, 0x8, 0x4, 0x9, 0x5, 0x6, 0x7, 0x7, 0xfffffff7, 0x1, 0x4, 0xffff7fff, 0x0, 0x2, 0xd, 0x5, 0x8, 0x7f, 0x1000, 0x4, 0x2, 0x1, 0x4, 0x4, 0x9, 0x1, 0x10000, 0x1, 0x1b3, 0x58, 0x1, 0x9, 0x383a, 0x5, 0x1ff, 0x7, 0x2, 0xfffffff2, 0x3, 0x8, 0x1ff, 0xcc, 0x2, 0x9, 0xfffffff7, 0xe, 0x7ff, 0xffffffff, 0x0, 0xcb29, 0xfff, 0x4, 0x400, 0x28de, 0x80, 0x1, 0x7, 0xd, 0x7, 0x1b, 0x5, 0x867b, 0x0, 0x400, 0x1, 0x40, 0x80000000, 0x4, 0x3, 0x5, 0x3, 0x1, 0x7, 0x7cdeb271, 0x2, 0x5, 0x81, 0x5, 0xff, 0x3f40, 0xff, 0x7, 0x137, 0x8, 0x80000000, 0x6, 0x8, 0xb4, 0x5, 0x7fffffff, 0x7, 0xff, 0x7, 0xa, 0xd7, 0x768, 0xfffffffd, 0x7fff, 0xf92, 0x8, 0x3, 0x5, 0x2, 0x4c, 0x16, 0x63b, 0x0, 0xf, 0xfffffff2, 0xf8, 0x3, 0x2, 0x0, 0x0, 0x101, 0x1, 0x1, 0x0, 0xf, 0x800, 0x6, 0x1, 0x401, 0x7, 0x7f, 0x4, 0xb033, 0x401, 0x6, 0x3ff, 0xc7, 0x52f, 0x7e4cf30e, 0x1, 0xff2, 0xfffffffb, 0xa8, 0xfffffffc, 0x9, 0x200, 0xc177, 0x3ff, 0x80000001, 0x7, 0xffffffc7, 0x7, 0x0, 0x0, 0x9, 0x5, 0x1, 0x2, 0x4b7a, 0x0, 0x80, 0xfffffff7, 0xc, 0x7fffffff, 0x2, 0x3, 0x8, 0x1, 0x21b, 0x8, 0x2, 0x8, 0xd18, 0x0, 0xf, 0x2, 0x81, 0xfffffff7, 0x3ff, 0x1000, 0x601d, 0x3, 0x6, 0x2, 0x3ff, 0x3c, 0x2, 0x2, 0x9e, 0x3, 0x8, 0x0, 0x4, 0x3, 0x4, 0x101, 0xffffffff, 0x7, 0x3, 0x300000, 0x7, 0xf, 0x0, 0x6, 0x10000, 0x39fa, 0xff, 0x24a, 0xdc8b, 0x2, 0x3, 0x8, 0x851, 0x1, 0x7fff, 0x4, 0x4, 0x5, 0xfa, 0x7f, 0xdb5, 0x33, 0x2e400000, 0x0, 0x5, 0x8001, 0x4, 0x6, 0x3, 0x9, 0xfff, 0x0, 0x1dae, 0x2, 0x1, 0x1, 0x7, 0x17, 0x6, 0x5, 0x4319, 0xfff, 0x2, 0x3ff, 0x7, 0x6, 0x3dd6ab82, 0x1b, 0x61a6, 0x4, 0x5f, 0x3, 0x81, 0x5, 0xa7d, 0x80000001, 0xd, 0x2, 0x1, 0x101, 0xfd4, 0x15b5, 0x0, 0x1, 0x8c6, 0x9, 0x8, 0x266, 0xc6fa, 0x2, 0x124c, 0x7, 0x3, 0xb000, 0x1, 0xff, 0xfffffffb, 0x80000000, 0x4ce9, 0x7, 0x9, 0x3, 0xffffffff, 0x5, 0x7, 0x10000, 0x3ff, 0xcc, 0x7ff, 0x0, 0x4, 0x3, 0x7, 0x5, 0x3ff, 0x7, 0xfff, 0x1, 0x3, 0x8001, 0xc, 0x4, 0x4, 0xfffffffb, 0x80, 0x7, 0x5, 0x921, 0x6, 0x89b, 0x2, 0x9, 0xfaf1, 0x0, 0x5, 0x10001, 0x459e, 0x2, 0xc, 0xfffffffe, 0x334, 0x0, 0x0, 0xfffffffe, 0x6, 0x17, 0x1, 0x5, 0x0, 0x4]}) 3.563920371s ago: executing program 4 (id=1931): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfec0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)='C', 0x1}, {&(0x7f0000000200)="c5b478", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x60) 3.53603991s ago: executing program 1 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000fff500000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) 3.43688564s ago: executing program 4 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {0x0, 0x0, 0xffff}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) 3.391651154s ago: executing program 0 (id=1934): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.306680516s ago: executing program 3 (id=1935): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000080)) 3.255013598s ago: executing program 1 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x48, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0xa, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x40000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x40b942b37d0000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@delqdisc={0x48, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0xa, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000080)=0x40000000) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x40b942b37d0000) (async) 3.254077895s ago: executing program 4 (id=1937): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.149603465s ago: executing program 0 (id=1938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setrlimit(0x4, &(0x7f0000000180)={0x0, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x448c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000040), 0x49, 0xc10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000000)="14", 0x1, r6) 2.93510663s ago: executing program 4 (id=1939): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd6) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r4, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 2.148142599s ago: executing program 0 (id=1940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1001, 0x80000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 1.266514498s ago: executing program 4 (id=1941): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x406, r0) unshare(0x2040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x1, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) personality(0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x7}, &(0x7f00000000c0)=0x8) uname(&(0x7f0000000000)=""/123) syz_usb_connect(0x0, 0xa7f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x7f, 0x5c, 0xf1, 0x20, 0x403, 0x9e90, 0xd21a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6d, 0x4, 0x7, 0xff, 0x0, 0x8, [{{0x9, 0x4, 0x4a, 0x2, 0x1, 0x9e, 0xf2, 0xdb, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "897a76"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3ff, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0x800, 0x1e}, [@mdlm={0x15, 0x24, 0x12, 0xd4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x29, 0x8}]}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x8, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x99, 0x80, 0xd, 0x97, 0x7e, 0x11, 0x2c, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "80c7"}, {0x5, 0x24, 0x0, 0xf4a1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x87, 0x6}, {0x6, 0x24, 0x1a, 0x7, 0x3}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "34ec72"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7, 0x3, 0xfe}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0xa, 0x4, [@generic={0x3b, 0x22, "42946ee386506ab4c349639744b21409e3dc5aebf74e64b3ba106d7034da1b55eb477ccf718f780b198c7d86700e896c766f5d9f28218e2b09"}]}}, {{0x9, 0x5, 0x3e34c6b0063a15f6, 0x0, 0x200, 0x6e, 0x3, 0x0, [@generic={0xba, 0x10, "fe34591e84e99efadf9fdeeab6c3f6e38ff58192b73e3c65a996aa7bb510c276a4e7e72f8b80782acb0ae9af4844372be92ecf7650b1455e9336ddfdd1575b1c469fc1f68e72f78e43453c26a01bc0f376f0ef56cd7932cbba7e17a8f8e892b0e55f1bf68fa417790d7d01d47c9b53b2062791f32ed28b380639f8c9b2455c2808796b9a44eaa350fb9e0862a16d8f6d5b6da0751970762c03543805f580c689f00694d13b804e74d4b4a3b2691ad50ae189cd41b7f2ab83"}]}}, {{0x9, 0x5, 0x39cf5040f7b304cc, 0x0, 0x3ff, 0xe, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0xe, 0x5, [@generic={0x7, 0x6, "b0d2f76d03"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xe}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0xdd, 0x1, [@generic={0x99, 0xb, "4b6d4644f3da3e57a1ec1f96d7fea95595a6941577fce72d6d0a8cf47802c4c1d5271ff8280c7e413717caf05212005ad33963b6758679b086a38ec6efec68d5e5afc60378d9840bd183cb1c580677e77e9108ff6b770e0ff4719e0fff375140360bff83601b4ff4a91bf0c7e561d8acf0958a5f03e7e987098d003a81449bdddb0bdb2c2dcff1a3e57033e295b5ffdbc4340870c5c6c4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xc, 0x1, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0xc}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xe, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd3, 0x40}]}}, {{0x9, 0x5, 0x553f4bf4a61971ef, 0x0, 0x8, 0xf3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x9, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3cf, 0x3, 0x2b, 0x1}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x6, 0x42, 0x2, [@generic={0xcf, 0xf, "b834fdfed25d123609923102bc9406e5a29d7b96c088216af98bb000e7348b508a13b29c14962a40165fe17c0fcbe501b8f04135e287ac9662330307a3746f32a2bc135a358a5d5995b968ddc92522bad29c003dfb2f98e432fb41c4b05b85892dd4f42775295a2d874fc0c9e9fc984a321a175e6c2bbbf02d67e0c3623e865ba6941e9d82c4a198d3a490360a76c59d560af57bf877b8b689ee67d2e935cd93b72766a8e4cc3dd1f7b3d17d3071d02930e7987413e5cf9af4132fc70d876e38ff54c8b53f32ca38eee4328bac"}, @generic={0x98, 0x21, "8494b56b156607e862f413851f6c1889cf402329e6e1eb4e74a935130f3f9ac25badca2ce73f2d43d045e37b24043c39fe4bf4462ba0f1c9612988cc49ed05234104fc6c0abc342ea1c80d9c83fc338acdf20841689f3546a8d17f930f22ef31707990368e2deb0c437ff539651be3988e010e3721d3780dac235b35058d40f49233eda9fabdd2c2a891a903c2f16fc8b8820848c59d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x80, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x7, 0xd3, 0x7, 0xa5, 0x86, 0x83, 0x9, [], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x5, 0x7f, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0xa9, 0x8, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xd, 0x6, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfe00}, @generic={0x79, 0xd, "db77a829d3f2f287e96720ba22b63e64b46506ca06e4a1c86cd73829ceba0e59dc903203609d07c83d7fdafd7a67c88e33477f58b1f7ea237b94f9c58466e87731544c7add8aa5f8acc359dad9401df0864b5e9253323e982c6122138ed17bba05be4b4435420623efba9454d52505f8a14e182e728ebc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}, @generic={0x10, 0x20, "013d6c7144929c8650fc93aa050d"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x3, 0xd1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x91, 0x3e0}, @generic={0x16, 0x21, "ce6e5a8f0a66e0fd149475ebb643eb2fa0bdb4d0"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x9, 0x6, [@generic={0x90, 0x8, "0e2b1b2fd62ab643b3e27feaf265e4332e0c2d38670a41773bac4d04362e3bf045e71cc0132aeb67422be1344dcf4d359a203bf4d7ef0a4c8b38c775f3cce97867177db6affc633f88f72b11c41d397786bfb0c3a6bee9339ffdff3469b1c2be48306d99a06a24670e0e23a919dcfa4a817c5f8b77e16ea484c933e4143b797268a8ad8ec5192ee4d06883dd6563"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x0, 0xff, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x43, 0x7}, @generic={0x73, 0xe, "2c3e3c09ddb36121e79ecd9ded5c92dde0c1acef43704219fa9b8be7b8b795af5f3ef47bbfc34b7de4fb56c01bf52706a7d0e5f83d42c0fc8111ac28fecec11447ef05e8ce412eb0931ce077bc996c8f14deb36b4b2e9ed4ed9e4ef513fb2580757831b56e26ccaaa024077703552e94d0"}]}}]}}, {{0x9, 0x4, 0x9a, 0x2, 0xb, 0x2d, 0xcd, 0xf7, 0x9, [], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x9, 0x6, [@generic={0xa7, 0x22, "d0ce478daea62f13325c565e2558513fb7fdf6864bcb8e76a2beb90d15fb65995de5de9bdf8db0998aab8b59c8a121515afcbb20021bfc8b4a5d08355065b874c1bd6d9e35394379b0bd91e3aae7b3d83cff25879cb52dcb3aa2c000b2d8dfb29fbedc41236cee93865907b56c34f768a82a0c528f666a1724bf5c470ecbe47d922b95399feab70df33af482e210c276852cf123826b937f75f8a328109d0b23274758baae"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x81, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7af}, @generic={0xc3, 0x30, "d4b5718c450b29250f323773460f5d2ed9261c1e5084b34a61880a530be29d759a8b23b0992f1446ce099b82b8eba13dc323bc4838e5c5435da29352ba53826fea758bb63dbda64af28977a941bbb8417fac2757a5164c3480f8d50199b9af03e17d1c9bdb791bac79fc6a2fce273c1965a031e729661b2cfa52715d802615c10f4a4f45a7e5cc0aa8ac683daab282015763cd126f5a1d2bc6931cfb0036ebe95f6a834c9fb77eca76e4a7b6cffcb3fe1b24dc7a724dcd3eac29300c3a5e8b3a27"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xfa, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0x1, 0x56, [@generic={0x3, 0x3, "bf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x1, 0x2, 0x80}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x0, 0xc0, 0x1, [@generic={0xa2, 0x10, "742d70353daf281d0996f792ed3471ff2eb714c15c0d84ceb4de4b6d134f024d3b2d3097981e4e26f6b7c87e66f1c0b3f10a3aabdb5f1ec7875afe8d0bb1c57f07c0b999c6012e05bf054d18b690e699e81183068225d9ee9e1e0972eeffdebab4f0ef1b9e79e4714a535fdd2aaadb979d55c7568521490af78dd4ce8c319f3eb250e2f0206faa1325ea46d0d4b7f03a8defc57bf2ef89dae2a57e050dc4db9e"}, @generic={0xd9, 0x7, "2c31806a2c2017dd42038d79bd3982dbfa3b420bbadabd11063944f0940dbc2e79348812004e5ac405e72923630c1a84dd7dac6ff7ebe77fb54a067b07ce8d4deeb4a20a876ecfd196dc5074007761daeb179a38d63fcb0948a37ac6335ebfcc6f5a51a1f7fc0d165a89743f3ed831e008aad3bab6aa7da9e5f3fb7264ef603e22364e36e29e063f0ae177222110c790e2aff9482a8d4966c93d3fbaa3b160b781365de00b274da0f8226c33963131fd2dfb1fb2b9e8770f00033d7d58f3835915b3df18bd3d44859f80fa97c806b78f23cc54b640f7bc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0x7, 0x5, [@generic={0x8d, 0x30, "2e72a523fbc4386ddfa5a7c85344f17a43b3e885506fe0317b78a605e12c812c9a1c3c6e295a4294d00b02ce81bb6591f09c76e7d75e667d23c2700f4610eb96220bb903fb3d21d2c8fac4690e9702896e4d22425796bdbbd49ffa1c5819b10e958a61e51a214e9a49b7b04b51fe55f2d7399fed1e81fd1ea266608a97c106b8328b75698260c234dcc3f2"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x9, 0x5e, 0x4}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xa, 0x4, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xfc, 0x2, 0x4}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x141, 0x3e, 0x5, 0xd, 0xb7, 0x6}, 0x101, &(0x7f0000000b40)={0x5, 0xf, 0x101, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x9, 0x0, 0xa34b}, @generic={0xf2, 0x10, 0x1, "31a2b5ba4f9ca92fdb969790ee5fde6fa3d3aedaff0303b726cbf754d02d581a618fb94941bf96bbe3b02f728fd7989879365bc1ec9bdc0ff41bf1e630ac77e42a98344a9eac4b42a9968214a057e566df44b664d4cd9ac2882989ec1be36e879703916eff94622bf239a37da80f5c40347548f16773eb95e6090d4ebfebdb01207ba9329e87a86ce260138c00fbe19f0faa866aeb4a1db289baa41ad8274dc25a9d0aea0c228830795ee7e45d1b6717f6509ddfce8f3903d66dc25ccfba045f4a9c6cbce2026426a155d9319b0ad5300e43a8adc4d32f2f23b738f606164cc1457e9e11e4f99dacbcb1ab63ad57b5"}]}, 0x5, [{0xe, &(0x7f0000000040)=@string={0xe, 0x3, "7ac7b75cc3c1ed3f04a92c9d"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x140a}}, {0x66, &(0x7f0000000cc0)=@string={0x66, 0x3, "ba8315d948a2b2fbcb3a33cb3a949a93ce0f31a769683cbc71028d7204480e4eeb8ee92dba5cac1262f2cd2b4545964993dd71e24f2a82acbf428db44994090f672ecb194b8b23cb0ba4647ecd1f000575628cc12ad1c5041d85775eeb4facc890933b77"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x446}}]}) 1.169876835s ago: executing program 0 (id=1942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9b) mount$nfs(&(0x7f0000000040)='\x00', &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000480), 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.023084697s ago: executing program 2 (id=1943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004500001c0000000000019078ac1e0001e00000010800907800020000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x60500) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x50, 0x0, &(0x7f0000000dc0)=[@enter_looper, @decrefs={0x40046307, 0x1003}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000c00)=""/165, 0xa5, 0x0, 0x800000038}, @flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000cc0)=""/135, 0x87, 0x2, 0x2c}}, &(0x7f0000000e40)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 668.431495ms ago: executing program 3 (id=1944): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x4, &(0x7f0000001180)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYRES16, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x7e385e63}, 0x18) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b06, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000300)={0x0, 0x7}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x20040000) recvmmsg$unix(r10, &(0x7f00000035c0), 0x0, 0x40000382, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r11, &(0x7f0000000040)=""/4109, 0x100d) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) 125.730697ms ago: executing program 1 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 390.251µs ago: executing program 2 (id=1946): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(0xffffffffffffffff, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10c024c, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) gettid() syz_init_net_socket$ax25(0x3, 0x5, 0x0) 0s ago: executing program 3 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000008000f00000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0ff50000000bf8600000000000004080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 478189][ T7932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=7932 comm=syz.1.591 [ 197.532772][ T30] audit: type=1400 audit(1759459455.309:399): avc: denied { write } for pid=7934 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.586125][ T7942] binder: BINDER_SET_CONTEXT_MGR already set [ 197.615304][ T7942] binder: 7930:7942 ioctl 4018620d 200000004a80 returned -16 [ 197.902812][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.062919][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 198.082410][ T5895] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 198.097185][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 198.114714][ T5895] usb 4-1: Product: syz [ 198.124467][ T5895] usb 4-1: Manufacturer: syz [ 198.134650][ T5895] usb 4-1: SerialNumber: syz [ 198.257477][ T5895] usb 4-1: config 0 descriptor?? [ 198.373370][ T10] lec:lec_start_xmit: lec0:No lecd attached [ 198.839148][ T7997] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 199.636447][ T8007] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 200.106611][ T30] audit: type=1400 audit(1759459457.859:400): avc: denied { connect } for pid=8022 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.125927][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.174001][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 200.204725][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 200.334611][ T30] audit: type=1400 audit(1759459458.119:401): avc: denied { ioctl } for pid=8022 comm="syz.1.618" path="socket:[16713]" dev="sockfs" ino=16713 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.521606][ T5832] udevd[5832]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 201.152458][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 201.389936][ T30] audit: type=1400 audit(1759459459.169:402): avc: denied { module_request } for pid=8063 comm="syz.1.631" kmod=63727970746F2D5F44E4CE2D712D2828DA0A9423DEBBB86F9DBA4A2DBA4DBE076C292C28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.416596][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.663934][ T30] audit: type=1400 audit(1759459459.249:403): avc: denied { bind } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.722064][ T5930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 201.765255][ T30] audit: type=1400 audit(1759459459.419:404): avc: denied { write } for pid=8062 comm="syz.0.630" path="socket:[16277]" dev="sockfs" ino=16277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.803685][ T30] audit: type=1400 audit(1759459459.589:405): avc: denied { connect } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.836619][ T5887] usb 4-1: USB disconnect, device number 7 [ 201.860674][ T30] audit: type=1400 audit(1759459459.639:406): avc: denied { connect } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.902775][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 201.951977][ T5930] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 201.965791][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.045091][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.059964][ T30] audit: type=1400 audit(1759459459.669:407): avc: denied { create } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.108169][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.147854][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.216903][ T30] audit: type=1400 audit(1759459459.669:408): avc: denied { listen } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.239470][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.264940][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.287759][ T30] audit: type=1400 audit(1759459459.669:409): avc: denied { connect } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.318326][ T30] audit: type=1400 audit(1759459459.669:410): avc: denied { read } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.407382][ T30] audit: type=1400 audit(1759459459.969:411): avc: denied { ioctl } for pid=8062 comm="syz.0.630" path="socket:[16782]" dev="sockfs" ino=16782 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.437069][ T30] audit: type=1400 audit(1759459459.969:412): avc: denied { getopt } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.462953][ T30] audit: type=1400 audit(1759459459.969:413): avc: denied { bind } for pid=8062 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.587509][ T5930] usb 3-1: GET_CAPABILITIES returned 0 [ 202.599047][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 202.802066][ T5989] usb 3-1: USB disconnect, device number 4 [ 203.422731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 203.431082][ C0] lec:lec_tx_timeout: lec0 [ 203.442429][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 204.152786][ T5930] IPVS: starting estimator thread 0... [ 204.252924][ T8120] IPVS: using max 43 ests per chain, 103200 per kthread [ 204.260409][ T8127] random: crng reseeded on system resumption [ 204.432825][ T30] audit: type=1400 audit(1759459462.209:414): avc: denied { append } for pid=8132 comm="syz.3.656" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.453781][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 204.487585][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 204.506518][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'. [ 204.523298][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 204.537911][ T8136] hsr_slave_0: left promiscuous mode [ 204.562219][ T8136] hsr_slave_1: left promiscuous mode [ 204.696325][ T8149] overlayfs: missing 'lowerdir' [ 204.802367][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 204.909057][ T8157] netlink: 52 bytes leftover after parsing attributes in process `syz.2.665'. [ 205.019659][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.256820][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 205.566387][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.578703][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.591662][ T8170] random: crng reseeded on system resumption [ 205.607387][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.672806][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.719118][ T8172] lo speed is unknown, defaulting to 1000 [ 205.722825][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.743568][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.748364][ T8172] lo speed is unknown, defaulting to 1000 [ 205.761833][ T8174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8174 comm=syz.2.669 [ 205.786819][ T10] usb 5-1: config 0 descriptor?? [ 205.839814][ T8167] lec:lec_atm_close: lec0: Shut down! [ 206.202284][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 206.218470][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.247844][ T10] usb 5-1: USB disconnect, device number 8 [ 206.507158][ T8210]  (uninitialized): option downdelay: invalid value (18446744073709551615) [ 206.518236][ T8210]  (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 206.755217][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.785246][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 206.901316][ T8237] overlayfs: missing 'workdir' [ 206.912981][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 206.925424][ T5930] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 206.944936][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.965137][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.986794][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.998392][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.016054][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.030307][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.049385][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 207.049397][ T30] audit: type=1400 audit(1759459464.829:420): avc: denied { setopt } for pid=8248 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 207.103568][ T8251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8251 comm=syz.1.702 [ 207.133538][ T30] audit: type=1400 audit(1759459464.919:421): avc: denied { read } for pid=8242 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 207.248636][ T5930] usb 3-1: GET_CAPABILITIES returned 0 [ 207.254676][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 207.402796][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 207.457340][ T10] usb 3-1: USB disconnect, device number 5 [ 207.564493][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.576917][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.587836][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.597605][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.610567][ T5887] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.619604][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.630757][ T5887] usb 2-1: config 0 descriptor?? [ 207.841591][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 207.894705][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.707'. [ 208.071467][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 208.089909][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 208.125784][ T5887] usb 2-1: USB disconnect, device number 10 [ 208.244408][ T10] IPVS: starting estimator thread 0... [ 208.348983][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 208.362465][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 208.395311][ T8294] tc_dump_action: action bad kind [ 208.566868][ T8288] IPVS: using max 41 ests per chain, 98400 per kthread [ 208.939890][ T30] audit: type=1400 audit(1759459466.709:422): avc: denied { getopt } for pid=8299 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.959187][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.249912][ T8316] syz_tun: entered promiscuous mode [ 209.286734][ T8316] syz_tun: left promiscuous mode [ 209.292942][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 209.452129][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 209.472321][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.733'. [ 209.555514][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.734'. [ 209.886831][ T8342] net_ratelimit: 10 callbacks suppressed [ 209.886848][ T8342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.252380][ T8381] netlink: 'syz.0.748': attribute type 2 has an invalid length. [ 211.288099][ T8385] random: crng reseeded on system resumption [ 211.432749][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 211.440859][ C0] lec:lec_tx_timeout: lec0 [ 211.445900][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 211.973207][ T5989] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.047586][ T8413] lo speed is unknown, defaulting to 1000 [ 212.054710][ T8413] lo speed is unknown, defaulting to 1000 [ 212.214522][ T5989] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.261386][ T8429] __nla_validate_parse: 1 callbacks suppressed [ 212.261403][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 212.276957][ T5989] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.286852][ T5989] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.296275][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 212.298660][ T8406] lec:lec_atm_close: lec0: Shut down! [ 212.305200][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.322655][ T8403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.337012][ T5989] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.579967][ T5887] usb 5-1: USB disconnect, device number 9 [ 212.746417][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 212.779804][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.767'. [ 212.946970][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 213.000615][ T8447] macvtap1: entered promiscuous mode [ 213.021184][ T8447] bond0: entered promiscuous mode [ 213.030502][ T8447] macvtap1: entered allmulticast mode [ 213.037914][ T8447] bond0: entered allmulticast mode [ 213.044498][ T8447] bond_slave_0: entered allmulticast mode [ 213.050319][ T8447] bond_slave_1: entered allmulticast mode [ 213.056368][ T8447] syz_tun: entered allmulticast mode [ 213.085580][ T8447] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 213.187192][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 213.710287][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 213.736073][ T8484] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.762810][ T8484] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 213.846585][ T8484] bridge_slave_0: default FDB implementation only supports local addresses [ 213.897873][ T8489] fuse: Unknown parameter 'group_i00000000000000000000' [ 214.197668][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 214.293800][ T30] audit: type=1400 audit(1759459472.069:423): avc: denied { setopt } for pid=8495 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 214.444788][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.469149][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.509971][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.525291][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.547970][ T8486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.570881][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.779309][ T5989] usb 5-1: USB disconnect, device number 10 [ 214.999478][ T8519] fuse: Unknown parameter 'group_id00000000000000000000' [ 215.933229][ T8534] fuse: Bad value for 'fd' [ 216.526859][ T8540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8540 comm=syz.3.804 [ 216.580763][ T30] audit: type=1400 audit(1759459474.359:424): avc: denied { getopt } for pid=8541 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.716776][ T8547] lo speed is unknown, defaulting to 1000 [ 216.748328][ T8547] lo speed is unknown, defaulting to 1000 [ 216.909799][ T8542] lec:lec_atm_close: lec0: Shut down! [ 217.066337][ T30] audit: type=1400 audit(1759459474.849:425): avc: denied { write } for pid=8562 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 217.362244][ T8584] syzkaller0: entered promiscuous mode [ 217.370115][ T8584] syzkaller0: entered allmulticast mode [ 217.773976][ T30] audit: type=1400 audit(1759459475.559:426): avc: denied { create } for pid=8567 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 217.793453][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.966427][ T8593] lo speed is unknown, defaulting to 1000 [ 217.982424][ T8593] lo speed is unknown, defaulting to 1000 [ 218.193539][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 218.302261][ T8612] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.831'. [ 218.313318][ T8615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8615 comm=syz.0.827 [ 218.701959][ T8637] tipc: Enabled bearer , priority 0 [ 218.714215][ T8637] syzkaller0: entered promiscuous mode [ 218.723692][ T8637] syzkaller0: entered allmulticast mode [ 218.785078][ T8637] tipc: Resetting bearer [ 218.969239][ T8636] tipc: Resetting bearer [ 218.980180][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'. [ 219.020191][ T8636] tipc: Disabling bearer [ 219.100728][ T8649] netlink: 'syz.2.846': attribute type 4 has an invalid length. [ 219.104742][ T8653] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 219.227351][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 219.335007][ T8658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8658 comm=syz.4.848 [ 219.476553][ T8666] lo speed is unknown, defaulting to 1000 [ 219.536447][ T8666] lo speed is unknown, defaulting to 1000 [ 219.655067][ T8670] lo speed is unknown, defaulting to 1000 [ 219.666083][ T8670] lo speed is unknown, defaulting to 1000 [ 219.743816][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 219.754219][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 219.832942][ T5929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 219.916399][ T8677] syzkaller0: entered promiscuous mode [ 219.951190][ T8677] syzkaller0: entered allmulticast mode [ 220.041823][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.069228][ T5929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.112825][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.141847][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.182706][ T8672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.204940][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.428260][ T5929] usb 3-1: USB disconnect, device number 6 [ 220.497533][ T8708] netlink: 'syz.3.867': attribute type 25 has an invalid length. [ 220.596786][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 220.662107][ T8716] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 220.759895][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 220.785434][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 220.796146][ T8718] netlink: 'syz.3.872': attribute type 7 has an invalid length. [ 221.517835][ T8713] [U]  [ 222.462763][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 222.470778][ C0] lec:lec_tx_timeout: lec0 [ 222.482799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.878862][ T8757] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.888' sets config #0 [ 223.252860][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.445028][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.462800][ T5929] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.472644][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.516419][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.545437][ T8751] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.555820][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.566461][ T8764] lo speed is unknown, defaulting to 1000 [ 223.587559][ T8764] lo speed is unknown, defaulting to 1000 [ 223.799758][ T5929] usb 4-1: USB disconnect, device number 8 [ 224.656015][ T8792] fuse: Bad value for 'fd' [ 225.318373][ T8816] tipc: Enabled bearer , priority 0 [ 225.366441][ T8816] syzkaller0: entered promiscuous mode [ 225.381852][ T8816] syzkaller0: entered allmulticast mode [ 225.411462][ T8823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.908'. [ 225.456601][ T8818] bridge0: port 3(syz_tun) entered blocking state [ 225.474031][ T8818] bridge0: port 3(syz_tun) entered disabled state [ 225.488902][ T8818] syz_tun: entered allmulticast mode [ 225.501024][ T8824] loop6: detected capacity change from 0 to 2640 [ 225.507629][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.532024][ T8824] buffer_io_error: 11 callbacks suppressed [ 225.532037][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.544606][ T8818] syz_tun: entered promiscuous mode [ 225.564751][ T8816] tipc: Resetting bearer [ 225.566566][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.581408][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.607297][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.619920][ T8813] tipc: Resetting bearer [ 225.625386][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.645238][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.666158][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.670228][ T8813] tipc: Disabling bearer [ 225.684158][ T5929] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.695848][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.705855][ T5929] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.722913][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.739656][ T8824] ldm_validate_partition_table(): Disk read failed. [ 225.748368][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.778073][ T8815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.787955][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.828783][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.841255][ T8824] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.861901][ T8824] Dev loop6: unable to read RDB block 0 [ 225.874476][ T8824] loop6: unable to read partition table [ 225.928368][ T8824] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 226.055203][ T5929] usb 4-1: USB disconnect, device number 9 [ 226.223364][ T8825] infiniband syz1: set down [ 226.230223][ T8825] infiniband syz1: added syz_tun [ 226.243394][ T8825] syz1: rxe_create_cq: returned err = -12 [ 226.249436][ T8825] infiniband syz1: Couldn't create ib_mad CQ [ 226.268021][ T8825] infiniband syz1: Couldn't open port 1 [ 226.326027][ T8825] RDS/IB: syz1: added [ 226.330523][ T8825] smc: adding ib device syz1 with port count 1 [ 226.348155][ T8825] smc: ib device syz1 port 1 has pnetid [ 226.460304][ T30] audit: type=1400 audit(1759459484.229:427): avc: denied { map } for pid=8838 comm="syz.0.918" path="socket:[20543]" dev="sockfs" ino=20543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.514733][ T30] audit: type=1400 audit(1759459484.229:428): avc: denied { read } for pid=8838 comm="syz.0.918" path="socket:[20543]" dev="sockfs" ino=20543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.492908][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 227.500939][ C0] lec:lec_tx_timeout: lec0 [ 227.506695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.616649][ T8728] Set syz1 is full, maxelem 65536 reached [ 228.668180][ T8875] loop6: detected capacity change from 0 to 2640 [ 228.722610][ T8875] ldm_validate_partition_table(): Disk read failed. [ 228.740833][ T8879] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.932' sets config #0 [ 228.933599][ T8875] Dev loop6: unable to read RDB block 0 [ 228.952988][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.002103][ T8883] tipc: Started in network mode [ 229.007110][ T8883] tipc: Node identity aefcea77581f, cluster identity 4711 [ 229.008388][ T8875] loop6: unable to read partition table [ 229.014352][ T30] audit: type=1400 audit(1759459486.769:429): avc: denied { setopt } for pid=8881 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 229.069612][ T8875] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 229.069760][ T8883] tipc: Enabled bearer , priority 0 [ 229.136106][ T8884] syzkaller0: entered promiscuous mode [ 229.141621][ T8884] syzkaller0: entered allmulticast mode [ 229.187362][ T8883] tipc: Resetting bearer [ 229.206821][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.228270][ T8881] tipc: Resetting bearer [ 229.244355][ T5929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.283457][ T8881] tipc: Disabling bearer [ 229.289431][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.310919][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.375056][ T8888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.934'. [ 229.391465][ T8888] Sensor B: ================= START STATUS ================= [ 229.399083][ T8888] Sensor B: Test Pattern: 75% Colorbar [ 229.404654][ T8888] Sensor B: Show Information: All [ 229.409744][ T8888] Sensor B: Vertical Flip: false [ 229.414769][ T8888] Sensor B: Horizontal Flip: false [ 229.419949][ T8888] Sensor B: Brightness: 128 [ 229.424562][ T8888] Sensor B: Contrast: 128 [ 229.428969][ T8888] Sensor B: Hue: 0 [ 229.432778][ T8888] Sensor B: Saturation: 128 [ 229.437364][ T8888] Sensor B: ================== END STATUS ================== [ 229.726349][ T8877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.753710][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.628498][ T5929] usb 3-1: USB disconnect, device number 7 [ 231.697798][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 231.851897][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 232.522719][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 232.530760][ C0] lec:lec_tx_timeout: lec0 [ 232.540568][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 234.462404][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 234.540557][ T8972] bridge2: entered allmulticast mode [ 234.597773][ T8974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.685326][ T8982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8982 comm=syz.4.963 [ 234.698828][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 234.708171][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 235.167588][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 235.263357][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.967'. [ 235.379094][ T8998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.968'. [ 235.869831][ T9002] tipc: Started in network mode [ 235.887116][ T9002] tipc: Node identity 7eb4fea327ce, cluster identity 4711 [ 235.924989][ T9002] tipc: Enabled bearer , priority 0 [ 235.966521][ T9008] syzkaller0: entered promiscuous mode [ 235.972567][ T9008] syzkaller0: entered allmulticast mode [ 235.999538][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.162629][ T9008] tipc: Resetting bearer [ 236.174590][ T9001] tipc: Resetting bearer [ 236.567594][ T9001] tipc: Disabling bearer [ 236.598324][ T9020] fuse: Bad value for 'group_id' [ 236.614000][ T9020] fuse: Bad value for 'group_id' [ 237.071050][ T9010] ALSA: mixer_oss: invalid OSS volume '' [ 237.138096][ T9029] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.552723][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 237.560769][ C0] lec:lec_tx_timeout: lec0 [ 237.572790][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.317970][ T9042] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.984' sets config #0 [ 238.707325][ T9049] fuse: Bad value for 'rootmode' [ 238.754200][ T9054] tipc: Enabling of bearer rejected, failed to enable media [ 238.770870][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 239.124925][ T9072] tipc: Started in network mode [ 239.130719][ T9072] tipc: Node identity 122d88d3f877, cluster identity 4711 [ 239.142382][ T9072] tipc: Enabled bearer , priority 0 [ 239.183701][ T9072] syzkaller0: entered promiscuous mode [ 239.438345][ T9072] syzkaller0: entered allmulticast mode [ 239.520981][ T9081] tipc: Resetting bearer [ 239.526478][ T9082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9082 comm=syz.3.995 [ 239.539625][ T9071] tipc: Resetting bearer [ 239.568210][ T9071] tipc: Disabling bearer [ 239.992953][ T30] audit: type=1400 audit(1759459497.749:430): avc: denied { ioctl } for pid=9067 comm="syz.4.992" path="socket:[21100]" dev="sockfs" ino=21100 ioctlcmd=0x61d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 240.982064][ T9108] fuse: Bad value for 'group_id' [ 240.988391][ T9108] fuse: Bad value for 'group_id' [ 241.112168][ T9114] tipc: Enabling of bearer rejected, failed to enable media [ 241.809586][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 242.592725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 242.600748][ C0] lec:lec_tx_timeout: lec0 [ 242.605269][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 242.781131][ T9154] fuse: Bad value for 'group_id' [ 242.802757][ T9154] fuse: Bad value for 'group_id' [ 242.827251][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 243.154533][ T9162] tipc: Enabled bearer , priority 0 [ 243.180424][ T9162] syzkaller0: entered promiscuous mode [ 243.227385][ T9162] syzkaller0: entered allmulticast mode [ 243.244372][ T9162] tipc: Resetting bearer [ 243.271173][ T9161] tipc: Resetting bearer [ 243.351401][ T9161] tipc: Disabling bearer [ 243.590707][ T9172] tipc: Enabling of bearer rejected, failed to enable media [ 243.644434][ T9177] tipc: Enabled bearer , priority 0 [ 243.665153][ T9177] syzkaller0: entered promiscuous mode [ 243.681037][ T9177] syzkaller0: entered allmulticast mode [ 243.731078][ T9177] tipc: Resetting bearer [ 243.768279][ T9174] tipc: Resetting bearer [ 243.812880][ T9174] tipc: Disabling bearer [ 243.998310][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 244.930079][ T9198] ALSA: mixer_oss: invalid OSS volume '' [ 245.428902][ T9225] overlayfs: missing 'lowerdir' [ 245.671461][ T9235] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1043' sets config #0 [ 246.003687][ T9243] fuse: Unknown parameter 'use00000000000000000000' [ 246.412834][ T5930] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 246.572876][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 246.588267][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 246.697833][ T5930] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 246.785918][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.841381][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.468129][ T9277] fuse: Unknown parameter 'user_i00000000000000000000' [ 247.622893][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 247.630964][ C0] lec:lec_tx_timeout: lec0 [ 247.635683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.646670][ T9315] fuse: Unknown parameter 'user_i00000000000000000000' [ 248.900053][ T30] audit: type=1400 audit(2000000000.500:431): avc: denied { read write } for pid=9301 comm="syz.1.1065" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 248.946536][ T30] audit: type=1400 audit(2000000000.500:432): avc: denied { open } for pid=9301 comm="syz.1.1065" path="/192/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 249.179779][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.298385][ T9325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 249.314354][ T9325] Sensor B: ================= START STATUS ================= [ 249.321926][ T9325] Sensor B: Test Pattern: 75% Colorbar [ 249.327506][ T9325] Sensor B: Show Information: All [ 249.332612][ T9325] Sensor B: Vertical Flip: false [ 249.338015][ T9325] Sensor B: Horizontal Flip: false [ 249.343515][ T9325] Sensor B: Brightness: 128 [ 249.348086][ T9325] Sensor B: Contrast: 128 [ 249.352480][ T9325] Sensor B: Hue: 0 [ 249.356306][ T9325] Sensor B: Saturation: 128 [ 249.360877][ T9325] Sensor B: ================== END STATUS ================== [ 249.374180][ T5929] usb 2-1: device descriptor read/64, error -71 [ 249.646164][ T5887] usb 5-1: USB disconnect, device number 11 [ 249.747418][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 249.855900][ T9329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9329 comm=syz.3.1074 [ 250.436517][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.667634][ T9326] ALSA: mixer_oss: invalid OSS volume '' [ 250.758865][ T5929] usb 2-1: device descriptor read/64, error -71 [ 250.885915][ T5929] usb usb2-port1: attempt power cycle [ 250.920002][ T9353] overlayfs: failed to resolve './file0': -2 [ 251.242813][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.262748][ T5887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.393542][ T9335] ALSA: mixer_oss: invalid OSS volume '' [ 251.465187][ T5929] usb 2-1: device descriptor read/8, error -71 [ 251.494347][ T5887] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.540400][ T5887] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.553066][ T5887] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.585266][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.047745][ T9358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.066768][ T5887] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.422752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 253.430802][ C0] lec:lec_tx_timeout: lec0 [ 253.435614][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.472580][ T9410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 253.479117][ T9410] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.489776][ T9410] vhci_hcd vhci_hcd.0: Device attached [ 253.718710][ T9383] [U]  [ 253.725284][ T9411] vhci_hcd: connection closed [ 253.729487][ T5981] vhci_hcd: stop threads [ 253.740870][ T5981] vhci_hcd: release socket [ 253.748776][ T5981] vhci_hcd: disconnect device [ 254.236792][ T5929] usb 5-1: USB disconnect, device number 12 [ 255.267132][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.274967][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.330835][ T9436] geneve2: entered promiscuous mode [ 255.339829][ T9436] geneve2: entered allmulticast mode [ 255.379201][ T9438] tipc: Enabled bearer , priority 0 [ 255.710312][ T9435] tipc: Disabling bearer [ 256.739048][ T9445] ALSA: mixer_oss: invalid OSS volume '' [ 257.038420][ T9458] ALSA: mixer_oss: invalid OSS volume '' [ 257.946595][ T9482] geneve3: entered promiscuous mode [ 257.966002][ T9482] geneve3: entered allmulticast mode [ 257.995646][ T9485] tipc: Enabled bearer , priority 0 [ 258.049554][ T9480] tipc: Disabling bearer [ 258.118018][ T9496] tipc: Enabling of bearer rejected, failed to enable media [ 258.463008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 258.471041][ C0] lec:lec_tx_timeout: lec0 [ 258.482885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.027860][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 259.118038][ T9515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9515 comm=syz.0.1124 [ 259.259680][ T9515] binder: BINDER_SET_CONTEXT_MGR already set [ 259.278133][ T9515] binder: 9514:9515 ioctl 4018620d 200000004a80 returned -16 [ 259.311061][ T9521] tipc: Enabled bearer , priority 0 [ 259.419669][ T9525] syzkaller0: entered promiscuous mode [ 259.427550][ T9525] syzkaller0: entered allmulticast mode [ 259.458773][ T9521] tipc: Resetting bearer [ 259.537534][ T9528] fuse: Bad value for 'group_id' [ 259.542546][ T9528] fuse: Bad value for 'group_id' [ 259.632249][ T9520] tipc: Resetting bearer [ 259.797632][ T9520] tipc: Disabling bearer [ 260.241159][ T9541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25176 sclass=netlink_route_socket pid=9541 comm=syz.4.1134 [ 260.339221][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 260.539756][ T9556] fuse: Unknown parameter 'group_id00000000000000000000' [ 260.768121][ T9562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1136'. [ 262.200301][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 262.498665][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 262.900170][ T9601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25176 sclass=netlink_route_socket pid=9601 comm=syz.1.1148 [ 263.076149][ T5833] Bluetooth: hci1: ACL packet too small [ 263.492715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.500728][ C0] lec:lec_tx_timeout: lec0 [ 263.512905][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.835669][ T9625] loop6: detected capacity change from 0 to 2640 [ 264.873537][ T9625] buffer_io_error: 32 callbacks suppressed [ 264.873554][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.409986][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.436511][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.472916][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.504510][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.560605][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.598669][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.647216][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.666921][ T9628] ALSA: mixer_oss: invalid OSS volume '' [ 265.714627][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 265.780482][ T9625] ldm_validate_partition_table(): Disk read failed. [ 265.841099][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.902101][ T9625] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.964427][ T9625] Dev loop6: unable to read RDB block 0 [ 265.996728][ T9625] loop6: unable to read partition table [ 266.005336][ T9625] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 266.189619][ T9651] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1162' sets config #0 [ 266.531455][ T9660] tipc: Enabled bearer , priority 0 [ 266.546333][ T9660] tipc: Resetting bearer [ 266.576590][ T9659] tipc: Disabling bearer [ 266.815864][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 266.982932][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 267.030450][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 267.326550][ T5887] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 267.337378][ T5887] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 267.349117][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.366443][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 267.382402][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.407362][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.425683][ T5887] usbtmc 2-1:16.0: bulk endpoints not found [ 267.490001][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 267.505125][ T5867] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 267.518053][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.542941][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.555300][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.576816][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.597160][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.622381][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.975543][ T5867] usb 1-1: usb_control_msg returned -71 [ 267.981579][ T5867] usbtmc 1-1:16.0: can't read capabilities [ 268.017203][ T5867] usb 1-1: USB disconnect, device number 2 [ 268.532736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 268.540848][ C0] lec:lec_tx_timeout: lec0 [ 268.546045][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.576509][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 268.679753][ T9691] ALSA: mixer_oss: invalid OSS volume '' [ 269.675715][ T5989] usb 2-1: USB disconnect, device number 15 [ 269.721195][ T9721] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1184'. [ 270.715869][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1192'. [ 270.731456][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 270.811682][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 270.939810][ T9745] fuse: Unknown parameter 'group_i00000000000000000000' [ 272.044629][ T9742] ALSA: mixer_oss: invalid OSS volume '' [ 273.181995][ T9751] [U]  [ 273.210071][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 273.326539][ T9777] fuse: Unknown parameter 'fd0x0000000000000003' [ 273.552710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.560759][ C0] lec:lec_tx_timeout: lec0 [ 273.566588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.737028][ T9786] ALSA: mixer_oss: invalid OSS volume '' [ 275.883356][ T5929] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.335965][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 276.373195][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 276.409379][ T9831] geneve3: entered promiscuous mode [ 276.414829][ T9831] geneve3: entered allmulticast mode [ 276.461567][ T9831] tipc: Enabled bearer , priority 0 [ 276.483856][ T5929] usb 3-1: device descriptor read/64, error -71 [ 276.617190][ T9837] tipc: Enabled bearer , priority 0 [ 276.637354][ T9837] syzkaller0: entered promiscuous mode [ 276.648619][ T9837] syzkaller0: entered allmulticast mode [ 276.685636][ T9836] tipc: Resetting bearer [ 276.709379][ T9836] tipc: Disabling bearer [ 276.812846][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 276.927577][ T9842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9842 comm=syz.1.1223 [ 276.952801][ T5929] usb 3-1: device descriptor read/64, error -71 [ 277.063024][ T5929] usb usb3-port1: attempt power cycle [ 277.507973][ T10] tipc: Node number set to 621089984 [ 277.572775][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 277.581200][ T9829] tipc: Disabling bearer [ 277.638606][ T5929] usb 3-1: device descriptor read/8, error -71 [ 277.828231][ T9855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'. [ 277.841890][ T9843] ALSA: mixer_oss: invalid OSS volume '' [ 277.915505][ T5929] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.967371][ T5929] usb 3-1: device descriptor read/8, error -71 [ 278.150544][ T5929] usb usb3-port1: unable to enumerate USB device [ 278.572709][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 278.580744][ C0] lec:lec_tx_timeout: lec0 [ 278.586320][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.953442][ T5833] Bluetooth: hci3: ACL packet too small [ 279.023017][ T9858] ALSA: mixer_oss: invalid OSS volume '' [ 279.128446][ T9877] lo speed is unknown, defaulting to 1000 [ 279.174171][ T9877] lo speed is unknown, defaulting to 1000 [ 279.347303][ T9891] geneve3: entered promiscuous mode [ 279.369093][ T9891] geneve3: entered allmulticast mode [ 279.471060][ T9895] tipc: Enabled bearer , priority 0 [ 279.712749][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 279.871294][ T9901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1242'. [ 280.025035][ T5867] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.097025][ T5867] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.113953][ T5867] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.124602][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.148948][ T9896] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.163716][ T9889] tipc: Disabling bearer [ 280.183303][ T5867] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.404945][ T9910] loop6: detected capacity change from 0 to 2640 [ 280.415417][ T9910] buffer_io_error: 11 callbacks suppressed [ 280.415428][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.461228][ T5867] usb 4-1: USB disconnect, device number 10 [ 280.461318][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.564160][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.577108][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.586286][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.602316][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.612598][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.649045][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.660464][ T9910] ldm_validate_partition_table(): Disk read failed. [ 280.676708][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.685736][ T9910] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.699159][ T9910] Dev loop6: unable to read RDB block 0 [ 280.716627][ T9910] loop6: unable to read partition table [ 280.769528][ T9910] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 281.771264][ T9923] tipc: Enabled bearer , priority 0 [ 281.923762][ T9926] tipc: Resetting bearer [ 281.954312][ T9923] syzkaller0: entered promiscuous mode [ 282.027125][ T9922] tipc: Resetting bearer [ 282.543259][ T9922] tipc: Disabling bearer [ 282.649408][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1254'. [ 282.689372][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1255'. [ 283.061562][ T9951] Sensor B: ================= START STATUS ================= [ 283.069249][ T9951] Sensor B: Test Pattern: 75% Colorbar [ 283.071870][ T5929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 283.082357][ T9951] Sensor B: Show Information: All [ 283.089067][ T9951] Sensor B: Vertical Flip: false [ 283.094088][ T9951] Sensor B: Horizontal Flip: false [ 283.099209][ T9951] Sensor B: Brightness: 128 [ 283.103752][ T9951] Sensor B: Contrast: 128 [ 283.108110][ T9951] Sensor B: Hue: 0 [ 283.111927][ T9951] Sensor B: Saturation: 128 [ 283.116612][ T9951] Sensor B: ================== END STATUS ================== [ 283.592714][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 283.600726][ C0] lec:lec_tx_timeout: lec0 [ 283.612768][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 283.833826][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 283.843933][ T5929] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 284.802932][ T5929] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 284.815972][ T5929] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.834038][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.427460][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.487779][ T9966] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1260'. [ 285.688350][ T5929] usb 5-1: can't set config #16, error -71 [ 285.710766][ T9970] loop6: detected capacity change from 0 to 2640 [ 285.759486][ T5929] usb 5-1: USB disconnect, device number 13 [ 285.763205][ T9970] buffer_io_error: 11 callbacks suppressed [ 285.763225][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.806779][ T9976] fuse: Bad value for 'fd' [ 285.923661][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.931609][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.022957][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.031075][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.039722][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.868912][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.888911][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 286.949045][ T9970] ldm_validate_partition_table(): Disk read failed. [ 286.978298][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.024989][ T9970] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.055038][ T9970] Dev loop6: unable to read RDB block 0 [ 287.060945][ T9970] loop6: unable to read partition table [ 287.462965][ T9970] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 287.756465][T10008] fuse: Unknown parameter 'grou00000000000000000000' [ 288.622759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 288.630751][ C0] lec:lec_tx_timeout: lec0 [ 288.636938][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.355952][T10022] Sensor B: ================= START STATUS ================= [ 290.363608][T10022] Sensor B: Test Pattern: 75% Colorbar [ 290.369076][T10022] Sensor B: Show Information: All [ 290.374121][T10022] Sensor B: Vertical Flip: false [ 290.379037][T10022] Sensor B: Horizontal Flip: false [ 290.384166][T10022] Sensor B: Brightness: 128 [ 290.388645][T10022] Sensor B: Contrast: 128 [ 290.392964][T10022] Sensor B: Hue: 0 [ 290.396661][T10022] Sensor B: Saturation: 128 [ 290.401405][T10022] Sensor B: ================== END STATUS ================== [ 290.570766][T10034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1282'. [ 290.860123][T10041] tipc: Enabled bearer , priority 0 [ 290.957751][T10041] tipc: Resetting bearer [ 291.118866][T10039] tipc: Disabling bearer [ 291.212055][T10056] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.771565][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 294.462706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 294.470759][ C0] lec:lec_tx_timeout: lec0 [ 294.475435][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.669785][T10151] Sensor B: ================= START STATUS ================= [ 296.677485][T10151] Sensor B: Test Pattern: 75% Colorbar [ 296.683073][T10151] Sensor B: Show Information: All [ 296.688102][T10151] Sensor B: Vertical Flip: false [ 296.693091][T10151] Sensor B: Horizontal Flip: false [ 296.698208][T10151] Sensor B: Brightness: 128 [ 296.702759][T10151] Sensor B: Contrast: 128 [ 296.707089][T10151] Sensor B: Hue: 0 [ 296.710828][T10151] Sensor B: Saturation: 128 [ 296.715431][T10151] Sensor B: ================== END STATUS ================== [ 296.735335][T10150] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1321'. [ 298.403011][ T30] audit: type=1804 audit(2000000050.050:433): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1324" name="file0" dev="ramfs" ino=25901 res=1 errno=0 [ 299.353642][T10173] fuse: Invalid rootmode [ 299.482723][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.490780][ C0] lec:lec_tx_timeout: lec0 [ 299.495560][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.570221][T10183] tipc: Enabled bearer , priority 0 [ 299.592311][T10183] syzkaller0: entered promiscuous mode [ 299.601619][T10183] syzkaller0: entered allmulticast mode [ 299.637207][T10183] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1330'. [ 299.656760][T10183] tipc: Resetting bearer [ 299.697667][T10182] tipc: Resetting bearer [ 299.751278][T10182] tipc: Disabling bearer [ 300.272753][ T5867] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 300.484097][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 300.501384][ T5867] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 300.510705][ T5867] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 300.555695][ T5867] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.604895][ T5867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.790990][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.809395][ T5867] usbtmc 2-1:16.0: bulk endpoints not found [ 301.982489][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 303.088913][ T5887] usb 2-1: USB disconnect, device number 16 [ 303.853965][T10272] fuse: Bad value for 'fd' [ 304.013971][ T30] audit: type=1804 audit(2000000000.830:434): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1353" name="file0" dev="ramfs" ino=26672 res=1 errno=0 [ 304.123812][T10280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10280 comm=syz.3.1356 [ 304.352892][ T5867] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 304.502746][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 304.510770][ C0] lec:lec_tx_timeout: lec0 [ 304.515499][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.523022][ T5867] usb 3-1: device descriptor read/64, error -71 [ 304.972832][ T5867] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 305.049521][T10292] binder: 10289:10292 ioctl 4018620d 0 returned -22 [ 305.107614][ T5867] usb 3-1: device descriptor read/64, error -71 [ 305.244158][ T5867] usb usb3-port1: attempt power cycle [ 305.785250][T10303] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1362'. [ 305.806132][T10303] Sensor B: ================= START STATUS ================= [ 305.813754][T10303] Sensor B: Test Pattern: 75% Colorbar [ 305.819324][T10303] Sensor B: Show Information: All [ 305.824477][T10303] Sensor B: Vertical Flip: false [ 305.829485][T10303] Sensor B: Horizontal Flip: false [ 305.834700][T10303] Sensor B: Brightness: 128 [ 305.839293][T10303] Sensor B: Contrast: 128 [ 305.843717][T10303] Sensor B: Hue: 0 [ 305.847513][T10303] Sensor B: Saturation: 128 [ 305.852078][T10303] Sensor B: ================== END STATUS ================== [ 306.121625][ T5867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 306.219801][ T5867] usb 3-1: device descriptor read/8, error -71 [ 306.802161][T10318] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1366'. [ 306.822530][T10318] Sensor B: ================= START STATUS ================= [ 306.830196][T10318] Sensor B: Test Pattern: 75% Colorbar [ 306.835802][T10318] Sensor B: Show Information: All [ 306.840905][T10318] Sensor B: Vertical Flip: false [ 306.845912][T10318] Sensor B: Horizontal Flip: false [ 306.851096][T10318] Sensor B: Brightness: 128 [ 306.855704][T10318] Sensor B: Contrast: 128 [ 306.860108][T10318] Sensor B: Hue: 0 [ 306.863923][T10318] Sensor B: Saturation: 128 [ 306.868491][T10318] Sensor B: ================== END STATUS ================== [ 308.738204][T10339] binder: 10334:10339 ioctl 4018620d 0 returned -22 [ 308.952877][ T5930] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 309.523765][ T5930] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 309.532705][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.541976][ C0] lec:lec_tx_timeout: lec0 [ 309.546555][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.655529][ T5930] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 309.666567][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.680668][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.007689][ T5930] usb 3-1: USB disconnect, device number 16 [ 310.061339][T10362] fuse: Unknown parameter 'user_id00000000000000000000' [ 310.082170][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1383'. [ 310.156566][T10366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10366 comm=syz.4.1383 [ 310.764182][T10386] binder: 10381:10386 ioctl 4018620d 0 returned -22 [ 310.794608][T10384] tipc: Enabled bearer , priority 0 [ 310.829067][T10384] tipc: Resetting bearer [ 310.851001][T10383] tipc: Disabling bearer [ 310.991490][T10392] fuse: Unknown parameter 'user_id00000000000000000000' [ 311.712794][ T5989] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.829717][T10418] tipc: Enabling of bearer rejected, failed to enable media [ 311.885069][ T5989] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 311.901609][ T5989] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 311.941709][ T5989] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.967159][T10427] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1403'. [ 311.973308][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.200733][T10436] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1405'. [ 312.319286][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1406'. [ 312.577726][ T5989] usb 4-1: USB disconnect, device number 11 [ 314.005392][T10480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10480 comm=syz.3.1420 [ 314.372754][ T5867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.552697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.560713][ C0] lec:lec_tx_timeout: lec0 [ 314.568620][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.564283][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 315.777429][ T5867] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 315.988116][ T5867] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 316.001613][ T5867] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.063001][ T5867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 316.101505][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.191496][ T5867] usbtmc 2-1:16.0: bulk endpoints not found [ 316.232784][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 316.244255][T10515] syzkaller0: entered promiscuous mode [ 316.249769][T10515] syzkaller0: entered allmulticast mode [ 316.362742][ T48] usb 4-1: device descriptor read/64, error -71 [ 316.665472][T10522] geneve2: entered promiscuous mode [ 316.670708][T10522] geneve2: entered allmulticast mode [ 316.692549][T10524] tipc: Enabled bearer , priority 0 [ 316.709936][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.716528][ T48] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 316.724430][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.882880][ T48] usb 4-1: device descriptor read/64, error -71 [ 317.048126][ T48] usb usb4-port1: attempt power cycle [ 317.184385][T10519] tipc: Disabling bearer [ 317.729972][T10542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 317.744236][T10542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10542 comm=syz.2.1438 [ 317.829713][ T5989] usb 2-1: USB disconnect, device number 17 [ 318.227420][T10531] [U]  [ 318.794860][T10559] fuse: Unknown parameter '0x0000000000000003' [ 318.892836][T10561] geneve2: entered promiscuous mode [ 318.927571][T10561] geneve2: entered allmulticast mode [ 319.001984][T10565] tipc: Enabled bearer , priority 0 [ 319.077744][T10560] tipc: Disabling bearer [ 319.582733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.590739][ C0] lec:lec_tx_timeout: lec0 [ 319.601610][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.476727][T10598] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1456' sets config #0 [ 323.684319][T10625] fuse: Unknown parameter 'user_id00000000000000000000' [ 323.887100][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1467'. [ 324.032202][T10642] tipc: Enabled bearer , priority 0 [ 324.057485][T10642] syzkaller0: entered promiscuous mode [ 324.070364][T10642] syzkaller0: entered allmulticast mode [ 324.192924][T10641] tipc: Resetting bearer [ 324.321063][T10641] tipc: Disabling bearer [ 324.612724][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.620788][ C0] lec:lec_tx_timeout: lec0 [ 324.625442][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.884613][T10651] fuse: Bad value for 'fd' [ 325.591866][T10656] tipc: Enabling of bearer rejected, failed to enable media [ 325.657757][T10647] ALSA: mixer_oss: invalid OSS volume '' [ 325.791079][T10668] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1475' sets config #0 [ 325.857997][T10660] geneve3: entered promiscuous mode [ 326.054493][T10660] geneve3: entered allmulticast mode [ 326.201552][T10675] tipc: Enabled bearer , priority 0 [ 326.255214][T10658] tipc: Disabling bearer [ 326.348230][ T5833] Bluetooth: hci2: ACL packet too small [ 326.363827][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 326.704282][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 326.742049][ T10] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.767441][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.856211][T10700] tipc: Enabled bearer , priority 0 [ 327.019992][T10707] syzkaller0: entered promiscuous mode [ 327.027621][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.047335][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.059711][T10707] syzkaller0: entered allmulticast mode [ 327.168324][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.191301][T10700] tipc: Resetting bearer [ 327.204623][T10699] tipc: Resetting bearer [ 327.298409][T10699] tipc: Disabling bearer [ 327.302321][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 327.368969][ T10] usb 5-1: USB disconnect, device number 14 [ 328.370006][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 329.632754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.640845][ C0] lec:lec_tx_timeout: lec0 [ 329.642632][T10748] tipc: Enabling of bearer rejected, failed to enable media [ 329.645726][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 329.724885][T10748] syzkaller0: entered promiscuous mode [ 329.730385][T10748] syzkaller0: entered allmulticast mode [ 330.163191][T10750] ALSA: mixer_oss: invalid OSS volume '' [ 330.779281][T10765] tipc: Enabling of bearer rejected, failed to enable media [ 330.852939][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 330.872631][T10763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10763 comm=syz.4.1502 [ 331.067882][T10763] binder: BINDER_SET_CONTEXT_MGR already set [ 331.090854][T10763] binder: 10762:10763 ioctl 4018620d 200000004a80 returned -16 [ 331.138789][ T48] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 331.174844][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.216309][ T48] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.238470][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.269861][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.313563][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.323805][ T48] usb 1-1: invalid MIDI out EP 0 [ 331.771372][ T48] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 331.843175][ T48] usb 1-1: USB disconnect, device number 3 [ 332.290355][ T5833] Bluetooth: hci4: ACL packet too small [ 332.307025][T10800] tipc: Enabling of bearer rejected, failed to enable media [ 332.701403][T10807] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1512'. [ 332.792529][T10815] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1513'. [ 333.753240][T10830] loop6: detected capacity change from 0 to 2640 [ 333.782125][ T5832] buffer_io_error: 11 callbacks suppressed [ 333.782133][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.881542][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.920715][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.959192][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.989424][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.023218][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.074474][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.132414][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.151136][ T5832] ldm_validate_partition_table(): Disk read failed. [ 334.177129][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.205884][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 334.544770][ T5832] Dev loop6: unable to read RDB block 0 [ 334.583121][ T5832] loop6: unable to read partition table [ 334.611667][T10830] ldm_validate_partition_table(): Disk read failed. [ 334.629416][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 334.675430][T10830] Dev loop6: unable to read RDB block 0 [ 334.774685][T10830] loop6: unable to read partition table [ 334.802428][T10830] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 334.854947][T10850] fuse: Unknown parameter 'fd0x0000000000000003' [ 335.902687][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6250 ms [ 335.910704][ C0] lec:lec_tx_timeout: lec0 [ 335.915499][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.452730][ T48] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 336.656407][T10872] tipc: Enabled bearer , priority 0 [ 336.693922][T10872] syzkaller0: entered promiscuous mode [ 336.713818][T10872] syzkaller0: entered allmulticast mode [ 336.758179][T10872] tipc: Resetting bearer [ 336.764068][ T48] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.776301][T10871] tipc: Resetting bearer [ 336.789084][ T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.800527][T10871] tipc: Disabling bearer [ 336.801559][ T48] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.819317][ T48] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.830770][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.839785][T10875] syzkaller0: entered promiscuous mode [ 336.845327][T10875] syzkaller0: entered allmulticast mode [ 337.094993][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.123308][ T48] usb 4-1: invalid MIDI out EP 0 [ 337.547478][ T48] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 338.147935][ T48] usb 4-1: USB disconnect, device number 15 [ 338.503512][ T5833] Bluetooth: hci2: ACL packet too small [ 339.119158][T10907] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1539' sets config #0 [ 339.636232][T10902] Sensor B: ================= START STATUS ================= [ 339.667069][T10902] Sensor B: Test Pattern: 75% Colorbar [ 339.695783][T10902] Sensor B: Show Information: All [ 339.711788][T10902] Sensor B: Vertical Flip: false [ 339.755646][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 339.766851][T10902] Sensor B: Horizontal Flip: false [ 339.777204][T10902] Sensor B: Brightness: 128 [ 339.781745][T10902] Sensor B: Contrast: 128 [ 339.796240][T10902] Sensor B: Hue: 0 [ 339.803245][T10902] Sensor B: Saturation: 128 [ 339.820354][T10902] Sensor B: ================== END STATUS ================== [ 340.010590][T10920] tipc: Enabled bearer , priority 0 [ 340.030668][T10920] syzkaller0: entered promiscuous mode [ 340.057805][T10920] syzkaller0: entered allmulticast mode [ 340.145861][T10923] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1544'. [ 340.215737][T10920] tipc: Resetting bearer [ 340.228593][T10919] tipc: Resetting bearer [ 340.420302][T10919] tipc: Disabling bearer [ 340.842822][ T5929] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 341.276922][ T5929] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 341.421675][ T5929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.466673][ T5929] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.492286][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.513782][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.569390][ T5929] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.584342][ T5929] usb 5-1: invalid MIDI out EP 0 [ 341.662691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 341.670757][ C0] lec:lec_tx_timeout: lec0 [ 341.675642][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.799456][ T5929] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 341.813174][ T5929] usb 5-1: USB disconnect, device number 15 [ 341.910076][T10946] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1552'. [ 342.363202][T10966] fuse: Invalid rootmode [ 343.325409][T10974] geneve2: entered promiscuous mode [ 343.330848][T10974] geneve2: entered allmulticast mode [ 343.630148][T10974] tipc: Enabled bearer , priority 0 [ 343.737599][T10973] tipc: Disabling bearer [ 344.454722][T10997] Sensor B: ================= START STATUS ================= [ 344.600036][T10997] Sensor B: Test Pattern: 75% Colorbar [ 344.613159][T10997] Sensor B: Show Information: All [ 344.622918][T10997] Sensor B: Vertical Flip: false [ 344.638355][T10997] Sensor B: Horizontal Flip: false [ 344.653305][T10997] Sensor B: Brightness: 128 [ 344.668307][T10997] Sensor B: Contrast: 128 [ 344.682560][T10997] Sensor B: Hue: 0 [ 344.698588][T10997] Sensor B: Saturation: 128 [ 344.756750][T10997] Sensor B: ================== END STATUS ================== [ 345.455859][T11009] lo speed is unknown, defaulting to 1000 [ 345.464167][T11009] lo speed is unknown, defaulting to 1000 [ 345.486144][T11012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11012 comm=syz.2.1571 [ 346.002585][T11005] lec:lec_atm_close: lec0: Shut down! [ 346.625467][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 346.676658][T11032] loop6: detected capacity change from 0 to 2640 [ 346.694942][T11032] buffer_io_error: 27 callbacks suppressed [ 346.694959][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.745185][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.850095][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.143099][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.206808][T11043] tipc: Enabled bearer , priority 0 [ 347.244314][T11038] tipc: Resetting bearer [ 347.245716][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.283635][T11037] tipc: Disabling bearer [ 347.391451][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.399652][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.803128][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.833489][T11032] ldm_validate_partition_table(): Disk read failed. [ 347.840386][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.856409][T11032] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.867050][T11032] Dev loop6: unable to read RDB block 0 [ 347.875079][T11032] loop6: unable to read partition table [ 347.884449][T11032] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 347.971161][T11053] geneve3: entered promiscuous mode [ 347.987762][T11053] geneve3: entered allmulticast mode [ 348.021132][T11056] tipc: Enabled bearer , priority 0 [ 348.040270][T11044] ALSA: mixer_oss: invalid OSS volume '' [ 348.853592][T11052] tipc: Disabling bearer [ 351.230181][T11078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11078 comm=syz.0.1586 [ 351.422740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 351.430795][ C0] lec:lec_tx_timeout: lec0 [ 351.435472][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.759190][T11079] geneve2: entered promiscuous mode [ 351.790945][T11079] geneve2: entered allmulticast mode [ 351.818155][T11083] tipc: Enabled bearer , priority 0 [ 352.413878][T11076] tipc: Disabling bearer [ 352.840320][T11103] loop6: detected capacity change from 0 to 2640 [ 353.625552][T11103] buffer_io_error: 11 callbacks suppressed [ 353.625569][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.639833][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.647933][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.770304][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.816553][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.942904][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.950929][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.958891][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 353.966888][T11103] ldm_validate_partition_table(): Disk read failed. [ 354.082838][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.164209][T11103] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.841049][T11103] Dev loop6: unable to read RDB block 0 [ 355.000150][T11103] loop6: unable to read partition table [ 355.020021][ T30] audit: type=1804 audit(2000000040.610:435): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1597" name="file0" dev="ramfs" ino=30527 res=1 errno=0 [ 355.055552][T11103] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 355.255928][T11129] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1600' sets config #0 [ 356.462722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 356.470760][ C0] lec:lec_tx_timeout: lec0 [ 356.482635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 357.075279][T11144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11144 comm=syz.3.1603 [ 358.010732][T11158] loop6: detected capacity change from 0 to 2640 [ 358.019997][T11158] ldm_validate_partition_table(): Disk read failed. [ 358.030782][T11158] Dev loop6: unable to read RDB block 0 [ 358.048753][T11158] loop6: unable to read partition table [ 358.232971][T11158] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 359.105189][T11174] fuse: Unknown parameter 'use00000000000000000000' [ 359.589680][T11159] ALSA: mixer_oss: invalid OSS volume '' [ 361.492675][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.500694][ C0] lec:lec_tx_timeout: lec0 [ 361.508414][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.785877][T11200] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1615'. [ 361.982186][T11205] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1619' sets config #0 [ 362.052498][T11209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11209 comm=syz.4.1620 [ 362.880720][T11206] ALSA: mixer_oss: invalid OSS volume '' [ 364.436469][T11223] syzkaller0: entered promiscuous mode [ 364.473420][T11223] syzkaller0: entered allmulticast mode [ 364.807973][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'. [ 364.840418][T11231] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1625'. [ 364.852087][T11230] loop6: detected capacity change from 0 to 2640 [ 364.858976][T11230] buffer_io_error: 32 callbacks suppressed [ 364.858984][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.883392][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.895435][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.896383][T11234] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11234 comm=syz.0.1628 [ 364.918632][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.994784][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.026577][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.087991][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.104879][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.137398][T11230] ldm_validate_partition_table(): Disk read failed. [ 365.194758][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.204040][ T5929] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 365.248683][T11230] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.372454][T11230] Dev loop6: unable to read RDB block 0 [ 365.413061][T11230] loop6: unable to read partition table [ 365.418894][T11230] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 365.582081][ T5929] usb 5-1: device descriptor read/64, error -71 [ 366.492746][ T5929] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 366.532720][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 366.540746][ C0] lec:lec_tx_timeout: lec0 [ 366.545399][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 366.653095][ T5929] usb 5-1: device descriptor read/64, error -71 [ 366.943032][ T5929] usb usb5-port1: attempt power cycle [ 367.137676][T11260] tipc: Enabled bearer , priority 0 [ 367.162745][ T5930] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 367.172162][T11260] syzkaller0: entered promiscuous mode [ 367.212257][T11260] syzkaller0: entered allmulticast mode [ 367.274030][T11260] tipc: Resetting bearer [ 367.287780][T11259] tipc: Resetting bearer [ 367.293791][ T5930] usb 4-1: device descriptor read/64, error -71 [ 367.302832][ T5929] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 367.334178][ T5929] usb 5-1: device descriptor read/8, error -71 [ 367.334649][T11259] tipc: Disabling bearer [ 368.035089][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 368.118815][T11279] syzkaller0: entered promiscuous mode [ 368.124969][T11279] syzkaller0: entered allmulticast mode [ 368.147824][T11279] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1641'. [ 368.262803][ T5930] usb 4-1: device descriptor read/64, error -71 [ 368.654292][ T5930] usb usb4-port1: attempt power cycle [ 368.663181][ T5833] Bluetooth: hci2: ACL packet too small [ 368.695491][T11285] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1643' sets config #0 [ 368.880272][T11272] ALSA: mixer_oss: invalid OSS volume '' [ 369.467582][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 369.475195][ T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 369.569934][ T5930] usb 4-1: device descriptor read/8, error -71 [ 369.597518][T11296] syzkaller0: entered promiscuous mode [ 369.630693][T11296] syzkaller0: entered allmulticast mode [ 369.668813][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.735943][ T48] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.747408][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.765456][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.796786][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.836285][ T5989] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 369.850255][ T48] usb 1-1: invalid MIDI out EP 0 [ 370.034026][ T5989] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.035866][ T48] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 370.092749][ T5989] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.132711][ T5989] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.152159][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.162505][ T48] usb 1-1: USB disconnect, device number 4 [ 370.206749][ T5989] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.273353][ T5989] usb 2-1: invalid MIDI out EP 0 [ 370.822240][ T5989] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 371.485205][ T5989] usb 2-1: USB disconnect, device number 18 [ 371.552677][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.560694][ C0] lec:lec_tx_timeout: lec0 [ 371.565375][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.808134][T11323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11323 comm=syz.0.1655 [ 371.937014][T11328] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1656' sets config #0 [ 372.314447][T11332] fuse: Unknown parameter 'user_i00000000000000000000' [ 374.520102][T11361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11361 comm=syz.3.1668 [ 374.742556][T11367] syzkaller0: entered promiscuous mode [ 374.748488][T11367] syzkaller0: entered allmulticast mode [ 375.104754][T11353] [U]  [ 375.343930][ T48] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 375.813726][ T48] usb 4-1: device descriptor read/64, error -71 [ 376.052721][ T48] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 376.088723][T11383] Sensor B: ================= START STATUS ================= [ 376.096366][T11383] Sensor B: Test Pattern: 75% Colorbar [ 376.101838][T11383] Sensor B: Show Information: All [ 376.107336][T11383] Sensor B: Vertical Flip: false [ 376.112278][T11383] Sensor B: Horizontal Flip: false [ 376.117425][T11383] Sensor B: Brightness: 128 [ 376.121928][T11383] Sensor B: Contrast: 128 [ 376.126278][T11383] Sensor B: Hue: 0 [ 376.129999][T11383] Sensor B: Saturation: 128 [ 376.134559][T11383] Sensor B: ================== END STATUS ================== [ 376.143823][T11377] ALSA: mixer_oss: invalid OSS volume '' [ 376.322872][ T48] usb 4-1: device descriptor read/64, error -71 [ 376.459269][ T48] usb usb4-port1: attempt power cycle [ 376.495139][T11388] syzkaller0: entered promiscuous mode [ 376.502272][T11388] syzkaller0: entered allmulticast mode [ 376.538278][T11388] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1675'. [ 376.582736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 376.590751][ C0] lec:lec_tx_timeout: lec0 [ 376.595492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.167695][ T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 377.193222][ T48] usb 4-1: device descriptor read/8, error -71 [ 377.620086][ T5929] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 377.811945][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 377.856364][ T48] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 377.867828][T11389] ALSA: mixer_oss: invalid OSS volume '' [ 377.922271][ T48] usb 4-1: device descriptor read/8, error -71 [ 378.014573][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.032705][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 378.045308][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.057939][ T5929] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 378.070352][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.235296][ T48] usb usb4-port1: unable to enumerate USB device [ 378.303019][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.310773][T11399] ALSA: mixer_oss: invalid OSS volume '' [ 378.536602][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.546383][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.554157][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.556191][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.571020][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.585733][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.626090][T11412] syzkaller0: entered promiscuous mode [ 378.631780][T11412] syzkaller0: entered allmulticast mode [ 378.653504][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.677402][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.726736][ T10] usb 5-1: config 0 descriptor?? [ 378.857601][ T5929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 378.907391][ T5929] usb 2-1: USB disconnect, device number 19 [ 379.142934][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 379.644533][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.646974][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 379.692217][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.727952][ T48] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 379.730747][ T10] usb 5-1: USB disconnect, device number 20 [ 379.745591][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 379.833229][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.841537][T11420] ALSA: mixer_oss: invalid OSS volume '' [ 379.919085][T11416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.944290][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.168195][ T48] usb 1-1: USB disconnect, device number 5 [ 380.389576][ T30] audit: type=1400 audit(2000000005.750:436): avc: denied { write } for pid=11432 comm="syz.1.1689" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.439062][ T30] audit: type=1400 audit(2000000006.730:437): avc: denied { setattr } for pid=11432 comm="syz.1.1689" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.602782][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.610797][ C0] lec:lec_tx_timeout: lec0 [ 381.622794][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.402726][ T5989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 382.602992][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 382.609728][ T5989] usb 1-1: config index 0 descriptor too short (expected 63268, got 36) [ 382.620051][ T5989] usb 1-1: config 60 has too many interfaces: 252, using maximum allowed: 32 [ 382.636758][ T5989] usb 1-1: config 60 has 1 interface, different from the descriptor's value: 252 [ 382.672235][ T5989] usb 1-1: config 60 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.730036][ T5989] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 382.779599][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.056376][ T5833] Bluetooth: hci1: ACL packet too small [ 384.339489][ T5989] usb 1-1: string descriptor 0 read error: -71 [ 384.351005][ T5989] usbhid 1-1:60.0: can't add hid device: -22 [ 384.362888][ T5989] usbhid 1-1:60.0: probe with driver usbhid failed with error -22 [ 384.382234][ T5989] usb 1-1: USB disconnect, device number 6 [ 384.920086][ T30] audit: type=1400 audit(2000000010.280:438): avc: denied { setopt } for pid=11476 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 385.458064][T11490] syzkaller0: entered promiscuous mode [ 385.478586][T11490] syzkaller0: entered allmulticast mode [ 385.662173][T11495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1706'. [ 385.737955][T11495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11495 comm=syz.2.1706 [ 386.632729][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.640770][ C0] lec:lec_tx_timeout: lec0 [ 386.645417][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.655496][T11491] [U]  [ 388.943505][T11518] ALSA: mixer_oss: invalid OSS volume '' [ 389.195247][T11536] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1716' sets config #0 [ 391.081606][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1729'. [ 391.106927][T11584] binder: 11583:11584 ioctl c00c620f 200000000700 returned -22 [ 392.872667][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6230 ms [ 392.880729][ C0] lec:lec_tx_timeout: lec0 [ 392.885334][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 394.036040][ T30] audit: type=1400 audit(2000000019.400:439): avc: denied { getopt } for pid=11627 comm="syz.4.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.802928][T11642] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1744'. [ 396.167631][T11650] ALSA: mixer_oss: invalid OSS volume '' [ 396.192809][ T30] audit: type=1400 audit(2000000021.550:440): avc: denied { remount } for pid=11670 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 396.302744][ T5989] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 396.473237][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 396.479344][ T5833] Bluetooth: hci2: ACL packet too small [ 396.489932][ T5989] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.519938][ T5989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 396.527882][ T5989] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 396.537105][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.553214][ T5989] usb 2-1: config 0 descriptor?? [ 397.255996][ T5989] usbhid 2-1:0.0: can't add hid device: -71 [ 397.270762][ T5989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 397.327941][ T5989] usb 2-1: USB disconnect, device number 20 [ 398.622697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 398.630739][ C0] lec:lec_tx_timeout: lec0 [ 398.635436][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 399.013288][T11706] cgroup: Unknown subsys name 'hash' [ 399.854900][T11721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1766'. [ 399.913320][T11721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11721 comm=syz.2.1766 [ 400.382868][T11738] fuse: Bad value for 'fd' [ 400.840176][T11742] tipc: Enabling of bearer rejected, failed to enable media [ 400.849275][T11742] syzkaller0: entered promiscuous mode [ 400.854829][T11742] syzkaller0: entered allmulticast mode [ 401.450116][T11752] lo speed is unknown, defaulting to 1000 [ 401.458070][T11752] lo speed is unknown, defaulting to 1000 [ 401.513057][T11722] ALSA: mixer_oss: invalid OSS volume '' [ 404.027629][T11797] fuse: Unknown parameter '0x0000000000000005' [ 404.462669][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 404.470775][ C0] lec:lec_tx_timeout: lec0 [ 404.475469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.472742][T11807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.495843][T11818] syzkaller0: entered promiscuous mode [ 406.501344][T11818] syzkaller0: entered allmulticast mode [ 406.528803][ T30] audit: type=1400 audit(2000000031.890:441): avc: denied { map } for pid=11817 comm="syz.0.1791" path="socket:[33397]" dev="sockfs" ino=33397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 406.583171][T11818] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1792'. [ 406.668801][T11823] overlayfs: workdir and upperdir must reside under the same mount [ 406.940928][T11809] ALSA: mixer_oss: invalid OSS volume '' [ 406.993745][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 407.021247][T11839] lo speed is unknown, defaulting to 1000 [ 407.028242][T11839] lo speed is unknown, defaulting to 1000 [ 407.155513][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.166781][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.179353][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.210281][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.263204][T11828] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 407.282435][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.393701][T11843] Sensor B: ================= START STATUS ================= [ 407.401349][T11843] Sensor B: Test Pattern: 75% Colorbar [ 407.407635][T11843] Sensor B: Show Information: All [ 407.412780][T11843] Sensor B: Vertical Flip: false [ 407.418909][T11843] Sensor B: Horizontal Flip: false [ 407.424322][T11843] Sensor B: Brightness: 128 [ 407.428842][T11843] Sensor B: Contrast: 128 [ 407.433234][T11843] Sensor B: Hue: 0 [ 407.436963][T11843] Sensor B: Saturation: 128 [ 407.441979][T11843] Sensor B: ================== END STATUS ================== [ 407.549611][ T5867] usb 3-1: USB disconnect, device number 17 [ 408.474063][T11860] syzkaller0: entered promiscuous mode [ 408.479664][T11860] syzkaller0: entered allmulticast mode [ 408.561827][T11861] fuse: Unknown parameter '0x0000000000000005' [ 409.028753][T11864] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1805'. [ 409.207198][T11871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1807'. [ 409.225162][T11871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11871 comm=syz.4.1807 [ 409.240875][ T30] audit: type=1400 audit(2000000034.600:442): avc: denied { read } for pid=11865 comm="syz.1.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 409.413611][ T30] audit: type=1400 audit(2000000034.660:443): avc: denied { read write } for pid=11865 comm="syz.1.1806" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 409.482785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.490801][ C0] lec:lec_tx_timeout: lec0 [ 409.495815][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 409.548927][ T30] audit: type=1400 audit(2000000034.660:444): avc: denied { open } for pid=11865 comm="syz.1.1806" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 410.391950][T11873] ALSA: mixer_oss: invalid OSS volume '' [ 412.244725][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1818'. [ 412.327272][T11911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11911 comm=syz.2.1818 [ 412.743873][ T48] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 412.917140][ T48] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 413.042832][ T48] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 413.054626][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 413.065048][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.090150][T11918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 413.201296][ T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.390644][ T48] usb 1-1: USB disconnect, device number 7 [ 414.502684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 414.510707][ C0] lec:lec_tx_timeout: lec0 [ 414.515707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.074781][T11945] block device autoloading is deprecated and will be removed. [ 416.271733][T11972] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 416.290260][T11972] batman_adv: batadv0: Adding interface: team0 [ 416.296817][T11972] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 416.309034][ T30] audit: type=1400 audit(2000000041.620:445): avc: denied { ioctl } for pid=11963 comm="syz.0.1833" path="socket:[34819]" dev="sockfs" ino=34819 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.333867][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.406333][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 417.004364][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.012502][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.024645][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.032811][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.042425][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.050470][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.060483][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.073413][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 417.138457][T11980] netlink: 'syz.1.1836': attribute type 3 has an invalid length. [ 418.384352][T11985] ALSA: mixer_oss: invalid OSS volume '' [ 418.515775][ T30] audit: type=1400 audit(2000000043.870:446): avc: denied { read write } for pid=12001 comm="syz.3.1842" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.559045][ T30] audit: type=1400 audit(2000000043.880:447): avc: denied { open } for pid=12001 comm="syz.3.1842" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.604522][T12002] loop6: detected capacity change from 0 to 2640 [ 418.617299][ T5832] buffer_io_error: 11 callbacks suppressed [ 418.617313][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.632094][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.659180][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.667343][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.687808][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.697810][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.708749][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.719463][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.729003][ T5832] ldm_validate_partition_table(): Disk read failed. [ 418.739556][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.748712][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.760615][ T5832] Dev loop6: unable to read RDB block 0 [ 418.766847][ T5832] loop6: unable to read partition table [ 418.782829][ T5867] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 418.833872][T12002] ldm_validate_partition_table(): Disk read failed. [ 418.840773][T12002] Dev loop6: unable to read RDB block 0 [ 418.847611][T12002] loop6: unable to read partition table [ 418.863587][T12002] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 419.409909][ T5867] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.429770][ T5867] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.440128][ T5867] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.452072][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.460788][ T48] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 419.479501][T12007] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.500853][ T5867] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.522700][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.530815][ C0] lec:lec_tx_timeout: lec0 [ 419.535497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.862785][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 419.880782][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 419.901584][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.941757][ T5867] usb 1-1: USB disconnect, device number 8 [ 419.951548][ T48] usb 5-1: Product: syz [ 419.965954][ T48] usb 5-1: Manufacturer: syz [ 419.998577][ T48] usb 5-1: SerialNumber: syz [ 420.020185][ T48] usb 5-1: config 0 descriptor?? [ 420.265809][ T48] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.815092][ T48] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.909850][ T48] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 420.938096][ T48] usb 5-1: media controller created [ 421.016139][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.856458][ T48] i2c i2c-1: Added multiplexed i2c bus 2 [ 421.862150][ T48] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 421.871240][ T48] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 421.883600][ T48] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 422.093893][ T48] DVB: Unable to find symbol mxl5005s_attach() [ 422.105182][T12045] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 422.131059][T12045] block device autoloading is deprecated and will be removed. [ 422.426849][ T48] usb 5-1: USB disconnect, device number 21 [ 423.302417][T12049] ALSA: mixer_oss: invalid OSS volume '' [ 423.819939][T12072] loop6: detected capacity change from 0 to 2640 [ 423.874866][ T30] audit: type=1400 audit(2000000001.020:448): avc: denied { checkpoint_restore } for pid=12073 comm="syz.1.1856" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 423.896739][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.913255][T12072] buffer_io_error: 27 callbacks suppressed [ 423.913270][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.026940][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.123074][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.138975][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.202425][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.386305][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.416768][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.434477][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.467234][T12072] ldm_validate_partition_table(): Disk read failed. [ 424.494148][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.510442][T12072] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.528075][T12072] Dev loop6: unable to read RDB block 0 [ 424.545703][T12072] loop6: unable to read partition table [ 424.552686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 424.560720][ C0] lec:lec_tx_timeout: lec0 [ 424.565329][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 424.581493][T12072] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 424.599441][ T30] audit: type=1400 audit(2000000001.830:449): avc: denied { write } for pid=12083 comm="syz.0.1860" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 424.626344][ T30] audit: type=1400 audit(2000000001.830:450): avc: denied { open } for pid=12083 comm="syz.0.1860" path="/401/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 424.649368][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.847798][T12093] lo speed is unknown, defaulting to 1000 [ 424.866377][T12093] lo speed is unknown, defaulting to 1000 [ 425.202891][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 425.466824][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.511664][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 425.534221][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 425.550795][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.587140][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.612786][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.625722][ T10] usb 5-1: config 0 descriptor?? [ 426.157578][T12103] ALSA: mixer_oss: invalid OSS volume '' [ 426.524411][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 426.567422][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 426.585174][ T10] usb 5-1: USB disconnect, device number 22 [ 426.733010][ T5989] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 426.902677][ T5989] usb 2-1: Using ep0 maxpacket: 16 [ 426.927567][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.956009][ T5989] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 426.975681][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.446678][ T5989] usb 2-1: config 0 descriptor?? [ 428.086497][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.535614][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.007154][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.028596][ T5833] Bluetooth: hci2: ACL packet too small [ 429.050104][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.572706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 429.580774][ C0] lec:lec_tx_timeout: lec0 [ 429.585301][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.617481][T12159] cgroup: No subsys list or none specified [ 429.945497][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 430.172816][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 430.179560][ T5929] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 430.190914][ T5929] usb 1-1: config 0 has no interface number 0 [ 430.229443][ T5989] usbhid 2-1:0.0: can't add hid device: -71 [ 430.245882][ T5989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 430.261417][ T5929] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 430.281596][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.305693][ T5989] usb 2-1: USB disconnect, device number 21 [ 430.335414][ T5929] usb 1-1: Product: syz [ 430.339609][ T5929] usb 1-1: Manufacturer: syz [ 430.370846][ T5929] usb 1-1: SerialNumber: syz [ 430.380827][ T5929] usb 1-1: config 0 descriptor?? [ 430.391833][ T5929] smsc95xx v2.0.0 [ 430.452591][T12155] ALSA: mixer_oss: invalid OSS volume '' [ 430.830932][ T5929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 430.852317][ T5929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 432.339564][T12185] tipc: Enabled bearer , priority 0 [ 432.357260][T12185] syzkaller0: entered promiscuous mode [ 432.513009][T12185] syzkaller0: entered allmulticast mode [ 432.585856][T12185] tipc: Resetting bearer [ 432.696691][T12183] tipc: Resetting bearer [ 432.764878][T12183] tipc: Disabling bearer [ 432.800897][T12187] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1885'. [ 432.982385][ T5929] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 433.176675][ T5929] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 433.225051][ T5929] usb 1-1: USB disconnect, device number 9 [ 434.036730][T12209] validate_nla: 39 callbacks suppressed [ 434.042364][T12209] netlink: 'syz.1.1890': attribute type 4 has an invalid length. [ 434.435090][ T10] lo speed is unknown, defaulting to 1000 [ 434.461681][ T10] syz: Port: 1 Link DOWN [ 434.592678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 434.600716][ C0] lec:lec_tx_timeout: lec0 [ 434.610655][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 434.963017][T12214] ALSA: mixer_oss: invalid OSS volume '' [ 435.455519][ T30] audit: type=1400 audit(2000000012.690:451): avc: denied { transfer } for pid=12221 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 436.542848][T12235] tipc: Enabled bearer , priority 10 [ 437.266988][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 437.276152][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 437.295664][T12241] vivid-007: ================= START STATUS ================= [ 437.304609][T12241] vivid-007: Enable Output Cropping: true [ 437.310583][T12241] vivid-007: Enable Output Composing: true [ 437.316579][T12241] vivid-007: Enable Output Scaler: true [ 437.322211][T12241] vivid-007: Tx RGB Quantization Range: Automatic [ 437.328890][T12241] vivid-007: Transmit Mode: HDMI [ 437.333977][T12241] vivid-007: Hotplug Present: 0x00000000 [ 437.339689][T12241] vivid-007: RxSense Present: 0x00000000 [ 437.345809][T12241] vivid-007: EDID Present: 0x00000000 [ 437.351277][T12241] vivid-007: ================== END STATUS ================== [ 437.554263][ T5867] tipc: Node number set to 3931801811 [ 438.147149][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 439.257136][T12258] ALSA: mixer_oss: invalid OSS volume '' [ 439.411848][T12266] tipc: Enabled bearer , priority 0 [ 439.483167][T12271] syzkaller0: entered promiscuous mode [ 439.505215][T12271] syzkaller0: entered allmulticast mode [ 439.530278][T12266] tipc: Resetting bearer [ 439.622706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.630814][ C0] lec:lec_tx_timeout: lec0 [ 439.660600][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.669900][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.745555][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 439.751924][ T30] audit: type=1400 audit(2000000016.980:452): avc: denied { setattr } for pid=12273 comm="syz.1.1911" path="socket:[35476]" dev="sockfs" ino=35476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.791115][T12264] tipc: Resetting bearer [ 440.013544][T12264] tipc: Disabling bearer [ 440.166620][T12281] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 440.268852][T12261] [U]  [ 440.539010][T12297] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 440.553308][T12291] ALSA: mixer_oss: invalid OSS volume '' [ 440.631878][T12297] bridge1: entered promiscuous mode [ 440.644928][ T5929] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 440.645497][T12297] bridge1: entered allmulticast mode [ 441.802135][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.813795][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.826497][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 442.772716][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.803989][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.007866][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.039357][ T5929] usb 3-1: config 0 descriptor?? [ 443.182496][ T30] audit: type=1400 audit(2000000020.410:453): avc: denied { ioctl } for pid=12307 comm="syz.4.1920" path="socket:[36829]" dev="sockfs" ino=36829 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 443.234616][ T30] audit: type=1400 audit(2000000020.470:454): avc: denied { bind } for pid=12307 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 443.673072][ T30] audit: type=1400 audit(2000000020.900:455): avc: denied { create } for pid=12314 comm="syz.1.1922" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 443.684437][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 443.727333][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 443.805652][ T5929] usb 3-1: USB disconnect, device number 18 [ 443.920320][T12323] tipc: Enabled bearer , priority 0 [ 444.099360][T12325] netlink: 'syz.0.1923': attribute type 9 has an invalid length. [ 444.152979][ T5930] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 444.192612][T12326] syzkaller0: entered promiscuous mode [ 444.206721][T12326] syzkaller0: entered allmulticast mode [ 444.272587][T12323] tipc: Resetting bearer [ 444.298642][T12322] tipc: Resetting bearer [ 444.314571][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.326578][ T5930] usb 2-1: not running at top speed; connect to a high speed hub [ 444.337142][T12322] tipc: Disabling bearer [ 444.337237][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.353435][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.365833][ T5930] usb 2-1: string descriptor 0 read error: -22 [ 444.372898][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.382024][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.409303][ T5930] usb 2-1: 0:2 : does not exist [ 444.909407][T12335] binder: BINDER_SET_CONTEXT_MGR already set [ 444.925327][T12335] binder: 12334:12335 ioctl 4018620d 200000004a80 returned -16 [ 445.422661][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 445.430733][ C0] lec:lec_tx_timeout: lec0 [ 445.446916][ T5930] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 445.459415][ T5930] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 445.482360][ T5930] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 445.526722][ T5930] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 445.561716][ T5930] usb 2-1: USB disconnect, device number 22 [ 445.992832][ T5929] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 446.154513][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.182896][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 446.212780][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 446.245524][ T30] audit: type=1400 audit(2000000023.460:456): avc: denied { unlink } for pid=5816 comm="syz-executor" name="file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.272732][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.352956][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.368292][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 446.389224][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.415086][ T5929] usb 3-1: config 0 descriptor?? [ 447.307199][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 447.387891][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 447.542221][ T5929] usb 3-1: USB disconnect, device number 19 [ 448.801827][T12395] nfs: Bad value for 'source' [ 449.040608][ T5989] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 449.232856][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 449.248281][ T5989] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 449.335513][ T5989] usb 5-1: config 162 has no interface number 0 [ 449.355517][ T5989] usb 5-1: config 162 interface 97 has no altsetting 0 [ 449.424448][ T5989] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 449.446661][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.447753][T12399] mmap: syz.3.1944 (12399): VmData 25841664 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 449.488976][ T5989] usb 5-1: Product: syz [ 449.516541][ T5989] usb 5-1: Manufacturer: syz [ 449.531731][ T5989] usb 5-1: SerialNumber: syz [ 449.689208][T12403] syzkaller0: entered promiscuous mode [ 449.705178][T12403] syzkaller0: entered allmulticast mode [ 449.807625][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.816537][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.028837][T12409] [ 450.031214][T12409] ====================================================== [ 450.038240][T12409] WARNING: possible circular locking dependency detected [ 450.045260][T12409] syzkaller #0 Not tainted [ 450.049681][T12409] ------------------------------------------------------ [ 450.056701][T12409] syz.2.1946/12409 is trying to acquire lock: [ 450.062783][T12409] ffffffff90123a18 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x810 [ 450.072289][T12409] [ 450.072289][T12409] but task is already holding lock: [ 450.079719][T12409] ffffffff901239b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 450.089284][T12409] [ 450.089284][T12409] which lock already depends on the new lock. [ 450.089284][T12409] [ 450.099664][T12409] [ 450.099664][T12409] the existing dependency chain (in reverse order) is: [ 450.108654][T12409] [ 450.108654][T12409] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 450.116544][T12409] _raw_spin_lock_bh+0x33/0x40 [ 450.121819][T12409] nr_rt_ioctl+0xc66/0x29b0 [ 450.126832][T12409] nr_ioctl+0x19a/0x2e0 [ 450.131501][T12409] sock_do_ioctl+0x115/0x280 [ 450.136595][T12409] sock_ioctl+0x227/0x6b0 [ 450.141427][T12409] __x64_sys_ioctl+0x18b/0x210 [ 450.146696][T12409] do_syscall_64+0xcd/0x4e0 [ 450.151707][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.158100][T12409] [ 450.158100][T12409] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 450.166070][T12409] _raw_spin_lock_bh+0x33/0x40 [ 450.171338][T12409] nr_rt_ioctl+0x816/0x29b0 [ 450.176348][T12409] nr_ioctl+0x19a/0x2e0 [ 450.181011][T12409] sock_do_ioctl+0x115/0x280 [ 450.186100][T12409] sock_ioctl+0x227/0x6b0 [ 450.190931][T12409] __x64_sys_ioctl+0x18b/0x210 [ 450.196202][T12409] do_syscall_64+0xcd/0x4e0 [ 450.201213][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.207609][T12409] [ 450.207609][T12409] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 450.215405][T12409] __lock_acquire+0x12a6/0x1ce0 [ 450.220759][T12409] lock_acquire+0x179/0x350 [ 450.225762][T12409] _raw_spin_lock_bh+0x33/0x40 [ 450.231031][T12409] nr_rt_device_down+0xd3/0x810 [ 450.236382][T12409] nr_device_event+0x126/0x170 [ 450.241655][T12409] notifier_call_chain+0xbc/0x410 [ 450.247186][T12409] call_netdevice_notifiers_info+0xbe/0x140 [ 450.253581][T12409] __dev_notify_flags+0x1f7/0x2e0 [ 450.259110][T12409] netif_change_flags+0x108/0x160 [ 450.264638][T12409] dev_change_flags+0xba/0x250 [ 450.269910][T12409] dev_ifsioc+0x1498/0x1f70 [ 450.274917][T12409] dev_ioctl+0x223/0x10e0 [ 450.279750][T12409] sock_do_ioctl+0x19d/0x280 [ 450.284839][T12409] sock_ioctl+0x227/0x6b0 [ 450.289669][T12409] __x64_sys_ioctl+0x18b/0x210 [ 450.294944][T12409] do_syscall_64+0xcd/0x4e0 [ 450.299956][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.306350][T12409] [ 450.306350][T12409] other info that might help us debug this: [ 450.306350][T12409] [ 450.316553][T12409] Chain exists of: [ 450.316553][T12409] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 450.316553][T12409] [ 450.330353][T12409] Possible unsafe locking scenario: [ 450.330353][T12409] [ 450.337809][T12409] CPU0 CPU1 [ 450.343152][T12409] ---- ---- [ 450.348499][T12409] lock(nr_neigh_list_lock); [ 450.353157][T12409] lock(&nr_node->node_lock); [ 450.360427][T12409] lock(nr_neigh_list_lock); [ 450.367602][T12409] lock(nr_node_list_lock); [ 450.372172][T12409] [ 450.372172][T12409] *** DEADLOCK *** [ 450.372172][T12409] [ 450.380294][T12409] 2 locks held by syz.2.1946/12409: [ 450.385479][T12409] #0: ffffffff8fed7288 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x212/0x10e0 [ 450.394275][T12409] #1: ffffffff901239b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x810 [ 450.404259][T12409] [ 450.404259][T12409] stack backtrace: [ 450.410127][T12409] CPU: 0 UID: 0 PID: 12409 Comm: syz.2.1946 Not tainted syzkaller #0 PREEMPT(full) [ 450.410144][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.410153][T12409] Call Trace: [ 450.410158][T12409] [ 450.410163][T12409] dump_stack_lvl+0x116/0x1f0 [ 450.410190][T12409] print_circular_bug+0x275/0x350 [ 450.410205][T12409] check_noncircular+0x14c/0x170 [ 450.410220][T12409] __lock_acquire+0x12a6/0x1ce0 [ 450.410236][T12409] ? __pfx___schedule+0x10/0x10 [ 450.410254][T12409] lock_acquire+0x179/0x350 [ 450.410267][T12409] ? nr_rt_device_down+0xd3/0x810 [ 450.410283][T12409] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.410301][T12409] _raw_spin_lock_bh+0x33/0x40 [ 450.410318][T12409] ? nr_rt_device_down+0xd3/0x810 [ 450.410333][T12409] nr_rt_device_down+0xd3/0x810 [ 450.410348][T12409] ? preempt_schedule_thunk+0x16/0x30 [ 450.410372][T12409] nr_device_event+0x126/0x170 [ 450.410393][T12409] notifier_call_chain+0xbc/0x410 [ 450.410407][T12409] ? __pfx_nr_device_event+0x10/0x10 [ 450.410429][T12409] call_netdevice_notifiers_info+0xbe/0x140 [ 450.410444][T12409] __dev_notify_flags+0x1f7/0x2e0 [ 450.410463][T12409] ? __pfx___dev_notify_flags+0x10/0x10 [ 450.410482][T12409] ? __pfx___dev_change_flags+0x10/0x10 [ 450.410500][T12409] ? do_raw_spin_lock+0x12c/0x2b0 [ 450.410518][T12409] netif_change_flags+0x108/0x160 [ 450.410537][T12409] dev_change_flags+0xba/0x250 [ 450.410559][T12409] dev_ifsioc+0x1498/0x1f70 [ 450.410577][T12409] ? __pfx_dev_ifsioc+0x10/0x10 [ 450.410594][T12409] ? __pfx___mutex_lock+0x10/0x10 [ 450.410617][T12409] ? dev_load+0x8e/0x240 [ 450.410635][T12409] dev_ioctl+0x223/0x10e0 [ 450.410652][T12409] sock_do_ioctl+0x19d/0x280 [ 450.410666][T12409] ? __pfx_sock_do_ioctl+0x10/0x10 [ 450.410681][T12409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 450.410700][T12409] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 450.410721][T12409] sock_ioctl+0x227/0x6b0 [ 450.410735][T12409] ? __pfx_sock_ioctl+0x10/0x10 [ 450.410748][T12409] ? irqentry_exit+0x3b/0x90 [ 450.410767][T12409] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.410788][T12409] ? __x64_sys_ioctl+0x130/0x210 [ 450.410803][T12409] ? __pfx_sock_ioctl+0x10/0x10 [ 450.410817][T12409] __x64_sys_ioctl+0x18b/0x210 [ 450.410835][T12409] do_syscall_64+0xcd/0x4e0 [ 450.410855][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.410869][T12409] RIP: 0033:0x7faff258eec9 [ 450.410882][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.410895][T12409] RSP: 002b:00007faff33eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.410908][T12409] RAX: ffffffffffffffda RBX: 00007faff27e6090 RCX: 00007faff258eec9 [ 450.410917][T12409] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 450.410926][T12409] RBP: 00007faff2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.410935][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.410943][T12409] R13: 00007faff27e6128 R14: 00007faff27e6090 R15: 00007ffdabfce728 [ 450.410957][T12409] [ 450.711314][ C0] vkms_vblank_simulate: vblank timer overrun [ 451.040011][ T5989] metro_usb 5-1:162.97: interrupt-out endpoint missing [ 451.330679][ T5989] usb 5-1: USB disconnect, device number 23 [ 452.879653][ T8021] lec:lec_start_xmit: lec0:No lecd attached [ 458.462693][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 458.470699][ C0] lec:lec_tx_timeout: lec0