last executing test programs: 25.344180237s ago: executing program 2 (id=966): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={0x0, 0x39, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0103848d0000ffdbdf2502000000d69ee26fff469c98ca858eb90c1dae98653237e4be3076330b985b7591acbba49585708931482d8a1e430ae371456736a6879434abbcf79a15df8cb45413cf9e7169c14e6d842e1047625028c6a82bff5a7c64a422c4189112f1f38ecef00c0f84d4c5b0b72280e26cd1c12782e0a5db74afbc54951d00650c4874987fae37e310f5dd21a16ea39b0aa0fc7485984624f1c63f1b27fe82a0f592c1aea41c05935d3b4c0d12b1be90674306e02c203ae6b37bd43fb97d57f4b9117448ecf77f7fba8e6763cf936d2285be41"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x84) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) close(r2) r4 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050016000000000004001200292ac9eb6030213f"], 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) socket(0xa, 0x3, 0x3a) 24.795107961s ago: executing program 2 (id=969): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x72d1, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x0, 0x181}, &(0x7f00000002c0), &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x6, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 23.95858737s ago: executing program 2 (id=972): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x82}, 0x3}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x7, &(0x7f0000000280)=[{0x9, 0x0, 0x0, 0x7fff7ffc}, {0x8, 0x3, 0x6, 0x3}, {0x5174, 0xfb, 0x9, 0x1}, {0x0, 0x12, 0x80, 0x5}, {0x1, 0xd, 0x9, 0x1000006}, {0x100, 0x7, 0x4, 0x10001}, {0x6, 0x7, 0x2, 0x1dbd}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000e9ffffff17100000", @ANYRES32, @ANYBLOB="0000000000000000185400000a00000000000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRESDEC=r5], 0x6c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r7, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) 22.997041548s ago: executing program 2 (id=974): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r1, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a80)=@newtaction={0x29c, 0x30, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{0x288, 0x1, [@m_nat={0x74, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x49, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3da"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1a8, 0x13, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x1, 0x8, 0x6}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x84, 0x0, 0x0, 0x5, 0x6}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x103, 0x6, 0x20000000, 0x0, 0x10}, 0x800001b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6e54, 0x20000000, 0xff, 0x9}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x1, 0x5, 0x200, 0x1}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ef, 0x40, 0x8, 0x94, 0x1000}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x5, 0x6}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf, 0x2, 0x7, 0x10}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x0, 0x3, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000004, 0xbace, 0x20000000, 0x5, 0x6}, 0x55}}]}, {0x61, 0x6, "e38eb63fbdb3bc45bb4051cfb76972cdb68bad203261c1b12b495021574e131e9a0619b357d9d746680c9aebbd5930e2b8a00611cb81725f9a5943f3ad933acaa7ddd5d893fbdfa5ac320e926d0ad0e960a292d9bf8cb161a02cfff28a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x68, 0x7, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x220, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xffffffff, 0x7, 0x2, 0x1ef1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x237c}}]}, {0x9, 0x6, "c12022d2b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x9e39045b2d85d482, 0x3}}}}]}]}, 0x29c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) finit_module(r1, 0x0, 0x100000000000007) 22.782600062s ago: executing program 2 (id=976): mkdir(&(0x7f00000002c0)='./file0\x00', 0x191) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) 22.220075674s ago: executing program 2 (id=977): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x8}) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000015c0)={&(0x7f0000001180)={{@host, 0x6}, {@any, 0x8}, 0x400, "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"}, 0xfffffffffffffdc7, 0x1008}) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000feffffffdd110000000000007301"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) sendmsg$rds(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/217, 0xdc}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/141, 0x4}], 0x6, 0x0, 0x0, 0x20008804}, 0x20008080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r6}, 0x10) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 21.935728206s ago: executing program 32 (id=977): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x8}) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f00000015c0)={&(0x7f0000001180)={{@host, 0x6}, {@any, 0x8}, 0x400, "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"}, 0xfffffffffffffdc7, 0x1008}) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000feffffffdd110000000000007301"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) write(r3, &(0x7f0000000180)="01010101", 0x4) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) sendmsg$rds(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/217, 0xdc}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/141, 0x4}], 0x6, 0x0, 0x0, 0x20008804}, 0x20008080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r6}, 0x10) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 10.351927361s ago: executing program 1 (id=1014): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000440)={{0x6, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) connect$netrom(r0, &(0x7f0000000240)={{0x6, @rose}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="330f28bd7000ffdbdf251c0000000c00060001000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, r2, 0x0) 10.05660098s ago: executing program 3 (id=1016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x404042bbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x100000000}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x8) mount(&(0x7f0000000200)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x111000) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000100)={0x14, 0x76, &(0x7f0000000080)="e937b39e42c679f80050354c403542f0b92658dcd03b2c5adb89f110a02337d022adfee25cadbe33f9df809898604881a6150bf62253c1d9585a557f1d4623f0581c1cd34ae0b574aab4b2eefc5116bb13035ef994e87349d743d085ef3babc739ce203ce56ab1e363e97661e2d6544c4b07290e2a32"}) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) 9.08888347s ago: executing program 3 (id=1019): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25010000000c00018008000100", @ANYRES32, @ANYBLOB="c1874b1ce7e06663d157076837796482cc3db175afe6cbaff4ceb30ef29e07a24fff90eef071"], 0x20}}, 0x0) 8.711960684s ago: executing program 1 (id=1020): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050016000000000004001200292ac9eb6030213f"], 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) socket(0xa, 0x3, 0x3a) 5.759353063s ago: executing program 0 (id=1028): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x6}], 0x17) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = getpid() prlimit64(r2, 0x6, &(0x7f0000000000)={0x11ad, 0x200}, &(0x7f0000000040)) bind$802154_raw(r1, 0x0, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) fsmount(r3, 0x0, 0x79) 5.646784402s ago: executing program 0 (id=1030): openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) ioprio_set$uid(0x0, 0x0, 0x4004) ioprio_get$pid(0x2, 0x0) 5.522407915s ago: executing program 0 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x40000000, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b36, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000ff", @ANYRES32], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x48031}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x38}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x6, 0x0, 0x9, 0x9, 0xb, 0x651, 0xfffffffffffffffc, 0x9647, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc1, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x3fd7}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$rose(r4, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000040)={0x11}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x4000000}, {0x0, 0xffff}, {}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {0x5d, 0xf3}, {0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x1000}, {0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fe3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0xfffffffc}, {0x0, 0x40000000}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 4.821129275s ago: executing program 1 (id=1032): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e9af1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffc, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x4, 0x1}, {0x0, 0x5}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x100e, &(0x7f00000005c0)={@link_local, @empty, @void, {@generic={0x8810, "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"}}}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x200) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x6f, 0x4d, 0x21, 0x40, 0xf3d, 0x68aa, 0x8e4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x9, [{{0x9, 0x4, 0x14, 0x9, 0x0, 0xff, 0xff, 0xff, 0x9}}]}}]}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x680040, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000140)=0x9, 0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r8, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, r5, 0x1, 0x1, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4}, 0x0) 4.756987062s ago: executing program 3 (id=1033): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) 4.710937761s ago: executing program 0 (id=1034): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x2, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x690482) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x47cdc) socket$pptp(0x18, 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) r5 = syz_io_uring_setup(0x17c9, &(0x7f00000006c0)={0x0, 0x6, 0x10100, 0xffffffff, 0x5}, &(0x7f0000000200), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1828, &(0x7f0000000480)={0x0, 0xbaa6, 0x80, 0x0, 0x110}, &(0x7f0000000440)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0x208e24b) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x7293e54752f3b4d6, r10, 0x0) preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = mq_open(&(0x7f00000003c0)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x800, 0x8, &(0x7f0000000300)={0x0, 0x5, 0x400000000000ec, 0x4}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r12, 0x0, 0x0, 0x0, 0x0) 4.298558882s ago: executing program 4 (id=1036): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x702, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x802}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0xfffffdef, 0x0, 0x0) 3.76754031s ago: executing program 4 (id=1037): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x9a2d, 0x20000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x20000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000040)={&(0x7f0000001680)=[0xffff, 0x7, 0x2, 0x5, 0xff, 0xf1b3, 0x3, 0x8, 0xff, 0x8, 0x0, 0x1228, 0x1, 0x7, 0x8177, 0x7, 0x88, 0xffffd4f7, 0x2, 0x2, 0xfffffff7, 0x9, 0xfffffffb, 0x80000000, 0x6, 0x1, 0x3, 0x2c, 0x5, 0xd, 0x1, 0x800000, 0x3, 0x0, 0x7, 0x40, 0x9, 0x3, 0x1, 0x0, 0x3, 0x7, 0x9, 0x4f09a530, 0xb08, 0x80000000, 0x1, 0xfff, 0xb, 0x1, 0x6, 0xce41, 0x7f, 0x6, 0xd2f8, 0x9, 0x1, 0x6, 0x8, 0x451, 0x6, 0x401, 0x39, 0x3ff, 0x5, 0x1, 0x4, 0x9, 0x6, 0x9, 0x5, 0x4, 0x3ff, 0x7, 0x8dd0, 0x1, 0x1000, 0xe5, 0x8, 0x8ea5, 0xfff, 0x6, 0x5c, 0x5, 0x101, 0x7, 0x0, 0x9, 0x3, 0x5, 0x8, 0x7d38, 0x6, 0x5, 0x0, 0x80000001, 0x8, 0xc5672000, 0xfffff800, 0xb161, 0x7, 0x3, 0x8, 0x8, 0x5, 0xffffff93, 0x5, 0x203, 0x7f, 0x3, 0x6, 0x2cbf, 0x9, 0x1, 0x2, 0x3e, 0xc9, 0x0, 0xb6, 0x0, 0x2, 0x0, 0x2, 0x3, 0x8, 0xfffffffd, 0x5d63, 0x9, 0x4, 0x2, 0xfff, 0x7480, 0x1, 0x0, 0x9, 0x4, 0x9, 0x3, 0x74, 0x6, 0x8a, 0x7, 0x6833, 0x40000000, 0x9, 0x9, 0x3, 0x4, 0x400, 0x1, 0xffffffff, 0xc9, 0x9ffd, 0x2, 0x2, 0x0, 0x6, 0x6, 0x6, 0x6, 0x1000, 0x2, 0xc4, 0xff, 0x4, 0x0, 0x401, 0xffffffff, 0x5, 0x9, 0x8, 0x1, 0x7, 0x7, 0x10, 0x3ff, 0x1, 0x1ff, 0x4, 0x4, 0x7, 0x200, 0x1, 0x6, 0x6, 0x1ff, 0x0, 0x4, 0x0, 0x7, 0x1000, 0x401, 0x7, 0xb2, 0x7, 0x7f, 0x8, 0x7, 0x9, 0x66a, 0x228b, 0x1ff80000, 0xd, 0xa, 0x3, 0x6, 0x49797321, 0xd, 0x80000001, 0x1ff, 0x1, 0x4, 0x59d71bf0, 0x8, 0x1, 0x1, 0x5, 0x3, 0x4, 0x6, 0x6, 0x5, 0x4, 0x7, 0xd, 0x40, 0x8, 0x10001, 0x6, 0x1, 0xe2, 0x8, 0x7, 0x9, 0x8000, 0xfffffffe, 0x5, 0xaf57, 0x0, 0x10000, 0x9, 0x1, 0xfff, 0x9, 0x7fffffff, 0xd, 0x4, 0x4, 0x1, 0x0, 0xe9ad, 0x350b, 0x10001, 0x1, 0x3ff8000, 0x1, 0x1, 0x8, 0xff, 0x0, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0x1, 0x9850, 0x8, 0x7fff, 0x9, 0x5, 0x20000000, 0x0, 0x0, 0x9, 0x4, 0x0, 0x6, 0x7, 0x4, 0x3, 0x0, 0xb, 0xffff, 0x81, 0x1, 0x80000001, 0xf, 0x1, 0x8, 0xef48, 0x5, 0x3ff, 0x6, 0x1000, 0x1, 0x6, 0x7, 0x5, 0x400, 0x7fffffff, 0x4, 0x0, 0x7, 0xaa6, 0x5, 0x9748, 0xef1, 0x8, 0x7, 0x3, 0x80, 0x8, 0xea5, 0xb, 0x7, 0x9, 0x80000001, 0x7, 0x8, 0x0, 0x0, 0xfbf, 0xf00, 0x7, 0x80, 0x5, 0x200, 0x400, 0xdd8, 0xdf, 0x8, 0x9, 0x9, 0xb, 0x7fffffff, 0x8000, 0xffff, 0x8, 0x8, 0x40, 0xd, 0x800, 0x8000, 0x6, 0x0, 0xf4, 0xe06, 0xfffffffc, 0x10001, 0x6, 0x0, 0x3, 0x3a21, 0x4, 0x100, 0x5, 0x4, 0x80000000, 0xffffff7f, 0x1, 0x3, 0xe, 0x401, 0x4, 0x8, 0xa, 0x10, 0xced1, 0x1, 0x2, 0x5, 0xffffffe0, 0x7, 0x11b, 0xfffffffb, 0x8ae1, 0x80, 0x401, 0x7, 0x6, 0x0, 0x5, 0x1000, 0xa5, 0x6, 0xfffffffd, 0x0, 0x1, 0x9, 0xfffffffe, 0x1, 0xe30, 0xb, 0xfd, 0x5, 0x6, 0x2, 0x8, 0x3, 0x4a0, 0xd, 0x0, 0x2, 0x4, 0xe903, 0x556, 0x6, 0x5, 0x6, 0x5, 0x5, 0xfffffff8, 0x2, 0x338, 0x8efd, 0x1f9cfc8f, 0x1, 0x3ff, 0x4cd, 0xa, 0x2, 0xdc75, 0x4, 0x2, 0x0, 0x81, 0x1ff, 0x8, 0x8, 0x8001, 0xfffffffb, 0x1, 0x10001, 0x7, 0x9, 0x800, 0x0, 0x40, 0x5, 0xffffa140, 0x520, 0x3, 0x7ff, 0x5, 0x901b, 0x7, 0x0, 0x80, 0x40, 0xe, 0x5, 0xe871, 0x9, 0x2, 0x27e30b66, 0x3, 0x2, 0x2, 0x200000, 0x101, 0x3, 0x6, 0x9, 0x2, 0xf6, 0x0, 0x81, 0x3, 0x7fffffff, 0xfff, 0x0, 0x6cee, 0x1, 0x7, 0xfffffffd, 0x6, 0xf, 0x4, 0x2, 0x2, 0xfffff286, 0xa, 0x9, 0x26d27fed, 0xf1be, 0x2, 0x7114, 0x1, 0x6, 0x612, 0x6, 0xfffffe00, 0x7d, 0xf, 0x1, 0x5, 0xfc79, 0x1ff, 0xfff, 0x1, 0x2, 0x2, 0x8, 0x7a, 0x8000, 0xff, 0x0, 0x138a, 0x1000, 0xb, 0xf417, 0x30, 0x1, 0xf, 0x5, 0x3, 0x5, 0x80000001, 0x4, 0x2, 0x81, 0x7, 0x8, 0x1, 0x4, 0xed8, 0x9, 0x5b2, 0x1, 0x0, 0x9, 0xb8, 0x7c31, 0xffff5b4f, 0x4, 0x5, 0x8d86, 0x4, 0x7fff, 0x4, 0x3, 0x8, 0x5, 0x4, 0x8, 0x3, 0x400, 0x4, 0x4, 0xfffffffd, 0x7fffffff, 0xfff, 0x7, 0x5a, 0x644d, 0xffc00, 0x0, 0x5, 0x9, 0xb, 0x0, 0xffffffff, 0x10000, 0x4, 0x7fffffff, 0x9, 0x6, 0x6, 0x9, 0x3, 0x44, 0x5, 0x1, 0x218, 0x4, 0x701e, 0x5, 0x27, 0x80000001, 0x6, 0x1000, 0x9, 0x9, 0x8, 0x2, 0x5, 0x5, 0x81, 0xffff, 0x10000, 0x0, 0x8, 0x8, 0xb7, 0xfffffffe, 0x8000, 0x9ab8, 0x1000, 0x78, 0x7, 0x9, 0x3, 0x7, 0x87, 0x3, 0x1, 0x6, 0x2, 0x5, 0x5, 0x0, 0x6, 0x5, 0xe4b6, 0x8000, 0x3, 0x1ff, 0x4, 0x2, 0xfffff001, 0x800, 0x80, 0xffff82ea, 0x100, 0x8, 0x1, 0x6, 0xffff, 0x0, 0x81, 0x3, 0xbf, 0x5, 0x5, 0x5, 0x7a, 0x8, 0x9, 0xe12, 0x6c8, 0x3, 0x0, 0xf76a, 0x2, 0x3, 0xfff, 0x5, 0x6, 0x4, 0xc22e, 0x0, 0x8, 0x4, 0x9, 0x287e, 0x5, 0x1, 0x6, 0x558d, 0x8, 0x3, 0x3, 0x6, 0xb, 0x2, 0x3ff, 0xae, 0x7fff, 0x3, 0x8, 0x0, 0x4, 0x8001, 0x7fffffff, 0x7, 0x5, 0x8, 0x1, 0x8, 0x9, 0x101, 0x101, 0x1000, 0x3, 0x8, 0x8, 0x2, 0x0, 0x6, 0x4, 0x3, 0x5, 0x100, 0x2, 0x7, 0xc, 0x1000, 0x7, 0x1, 0x6, 0x4, 0x20, 0x3, 0x2, 0x2, 0x8ed, 0x7, 0x1, 0x3, 0xfffff270, 0xfa, 0x8, 0x5, 0x6, 0x8, 0x9, 0x2, 0x866, 0x3, 0xc711, 0x3, 0x3a9, 0xba2, 0x10000, 0x20, 0x1, 0x3ff, 0x10000, 0xb37, 0x2, 0xffffffff, 0x764, 0x5, 0x7e, 0x8, 0x4, 0x17a7e645, 0x4, 0x2, 0x0, 0x5, 0x3, 0xff, 0x200002, 0x7, 0x1, 0xcc3c, 0x3c6, 0x6, 0x157, 0x8, 0x200, 0x7, 0x40, 0xf, 0xfffffff8, 0x5, 0x6, 0x22e6, 0x1, 0x4, 0x8, 0x2, 0xae, 0xd6, 0x9, 0x4, 0x9, 0x6, 0x34, 0x3, 0x8001, 0x80000000, 0xffffff80, 0xfff, 0x9, 0x4, 0x1, 0x10000, 0x8000, 0x7, 0x9, 0x4, 0xe, 0x8, 0x5c, 0x9, 0x1000, 0x8, 0x5, 0x88, 0x14be, 0x9, 0x6, 0xa, 0x6, 0xa, 0x103, 0x9, 0x1, 0xfffffffe, 0xc0d9, 0x56, 0x8, 0x69, 0x9a8, 0x9, 0xd360, 0x6, 0x1, 0x2, 0x80000001, 0x7, 0x7f, 0x5, 0x100, 0x6, 0xfb3, 0x9, 0x6, 0x7, 0x1, 0x8, 0x9, 0x8, 0x3, 0x0, 0x0, 0x2, 0xfffffffb, 0x1, 0x1ff, 0x7, 0x1, 0x1, 0x0, 0x10, 0x9, 0x2, 0x5, 0x5, 0x3, 0x53, 0x10001, 0x10008, 0xffffffff, 0x0, 0x40, 0xfd7, 0x0, 0x3, 0x6, 0xfffffffb, 0x0, 0x8, 0x1, 0x1, 0x7, 0x2, 0x3bfb668e, 0xd5, 0x400, 0x0, 0x3, 0x3, 0xf0a, 0x9, 0xd44c, 0x40, 0x81, 0x6000000, 0xffff41c3, 0x8, 0x2a71, 0xa7, 0x77f, 0x8, 0xf, 0x3ff, 0xef5, 0x80f6, 0xc8, 0x4, 0x400, 0x80000000, 0xfffffba2, 0x5, 0x6, 0x6, 0x6, 0x6, 0x8, 0x0, 0x4, 0x80000001, 0x7, 0x82c, 0x4a, 0xfffffff7, 0x1, 0x2, 0x40, 0x6, 0x8, 0x32, 0x7, 0x8, 0xa2a, 0x9, 0x9, 0x2, 0x6, 0x9, 0x8165, 0x80000000, 0x5, 0x4, 0x10001, 0x4994, 0x1, 0x10000, 0x7, 0x8000003, 0x4, 0x3, 0x5, 0xffff1592, 0x2, 0xd, 0x7d4f2736, 0xffff7bea, 0x0, 0x3, 0x6, 0xf6, 0xd, 0x4de5, 0x3, 0x80000000, 0x0, 0x1, 0x3ff, 0x6, 0x0, 0x1d, 0x80000000, 0x8, 0x80000000, 0x4, 0xd, 0x4, 0x4, 0x3, 0x4, 0x8, 0x1, 0x94c, 0x424, 0x141c, 0x491f, 0x8, 0x8, 0x6, 0x14, 0x400, 0x8, 0x8, 0x5, 0xb4, 0x3, 0xfffeffff, 0xa, 0x9, 0x3, 0x9, 0x9, 0x4, 0x56d, 0x5, 0x3, 0x100, 0xd, 0x8, 0x2, 0xfffffff1, 0x401, 0x6, 0x3, 0x4, 0x7, 0x6, 0xffffffff, 0x2, 0x3ff, 0x0, 0x9, 0x80000000, 0x3, 0x80000001, 0x0, 0x1ff, 0x9, 0x0, 0x4, 0x9, 0xc, 0x6590, 0x303f7299, 0x2, 0xf, 0x4, 0xfff, 0x7, 0x2, 0xff, 0x10000, 0xffff, 0x6, 0x9, 0x8, 0x2, 0xffff], 0x1, 0x400, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x4, &(0x7f0000000140)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000900)="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", &(0x7f00000001c0)="26521837deed5e9ca54916a020ec7c3d79a2e56850a194a2f74904c38aa3634e0574542f219300614f049b186bd9564f5b54ec738c76300ab06a10d0e3b25f387fa46d"}}, &(0x7f0000000240)) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) epoll_create1(0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700), &(0x7f00000002c0)) 3.037186749s ago: executing program 4 (id=1038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec", 0xc}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x20020, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.919971759s ago: executing program 0 (id=1039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f00000001c0)={0x0, 0x1632, 0x80, 0x20001, 0x3bd}) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000003c0)={[{0x3d, 0x4e00, "ee0e612479f24daaaaa74ab74404ea2a10760854a58ca1ad9ff31139f50538362e0ca934d79a237fa907b398e256b2b610ea0d06023d451ff16eba64e4"}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e80)={0x28, r5, 0x1, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40894}, 0x4008c40) 2.654497348s ago: executing program 4 (id=1040): openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) ioprio_set$uid(0x0, 0x0, 0x4004) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) 2.555694936s ago: executing program 1 (id=1041): setreuid(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETA(r3, 0x8925, 0x0) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000300)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 2.495828181s ago: executing program 4 (id=1042): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x8000, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050016000000000004001200292ac9eb6030213f"], 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) socket(0xa, 0x3, 0x3a) 2.494975437s ago: executing program 3 (id=1043): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25010000000c00018008000100", @ANYRES32, @ANYBLOB="c1874b1ce7e06663d157076837796482cc3db175afe6cbaff4ceb30ef29e07a24fff90eef071"], 0x20}}, 0x0) 1.682551397s ago: executing program 4 (id=1044): syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xfffffffffffffcd1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x202201) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\be'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000000000", 0xb6) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @local}, 0x2}}, 0x26) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r3) socket$nl_generic(0x10, 0x3, 0x10) 1.64378288s ago: executing program 3 (id=1045): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffd, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000540)={0x7, 0x9, 0x3094, 0xe046, 0xdd14}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000d70008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x300}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 843.207119ms ago: executing program 1 (id=1046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d1968730018294c9d254f15456bdb5c3b5ce782c3b52755e1c5058376b4c0e9f57bfb47160880b565619fb5774eeeebb326a96061c57194fd282866c3a5ea6f9f8b034e701cbe8f035b0ea0b36e259733167676e29d162d8a3198d3cd3d151a3c448648d99416dab321aa0a16058879ce3352e2f270ad1893dc0637964e0b128841aa923bbaf392bd7e6f227ef0f2cc38aa65e2b0c00509503170852f437da3ed233b2c4776785542ae2edcfa7c72d7fb2f08f65fd2bced30100747084c4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRES8=r0, @ANYRES64, @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) r3 = epoll_create(0x9) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}], 0x1}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x66) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) capset(&(0x7f0000002040)={0x20071026}, &(0x7f0000002080)={0x1, 0xffff, 0x0, 0x3, 0xb, 0x6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 82.476061ms ago: executing program 1 (id=1047): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r1, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004a80)=@newtaction={0x29c, 0x30, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{0x288, 0x1, [@m_nat={0x74, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x49, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3da"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1a8, 0x13, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x1, 0x8, 0x6}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x84, 0x0, 0x0, 0x5, 0x6}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x103, 0x6, 0x20000000, 0x0, 0x10}, 0x800001b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6e54, 0x20000000, 0xff, 0x9}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x1, 0x5, 0x200, 0x1}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ef, 0x40, 0x8, 0x94, 0x1000}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x5, 0x6}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf, 0x2, 0x7, 0x10}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x10001, 0x0, 0x3, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000004, 0xbace, 0x20000000, 0x5, 0x6}, 0x55}}]}, {0x61, 0x6, "e38eb63fbdb3bc45bb4051cfb76972cdb68bad203261c1b12b495021574e131e9a0619b357d9d746680c9aebbd5930e2b8a00611cb81725f9a5943f3ad933acaa7ddd5d893fbdfa5ac320e926d0ad0e960a292d9bf8cb161a02cfff28a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x68, 0x7, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x220, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xffffffff, 0x7, 0x2, 0x1ef1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x237c}}]}, {0x9, 0x6, "c12022d2b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x9e39045b2d85d482, 0x3}}}}]}]}, 0x29c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) finit_module(r1, 0x0, 0x100000000000007) 39.953862ms ago: executing program 0 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x7) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 0s ago: executing program 3 (id=1049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0xfffffffd, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x901, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x85, 0x46, 0x5, 0x16, 'syz0\x00', "c69efc92d6d9aae2652221d793aacf2bfac797e25dde6eec37a153fd5815847a", "d258c6115cb0180c78c6afde15498eafbd9d002cc28e8fc0c2a5fafce4745a56", [{0x200, 0xa06, {0x2, 0x80}}, {0x9, 0x8, {0x0, 0x7}}, {0x8, 0x1000, {0x2, 0x6}}, {0x8000, 0x80}, {0x6, 0x5, {0x3, 0x1}}, {0xfffe, 0x873}, {0x8, 0x2, {0x2, 0x3}}, {0x7f, 0x81, {0x2, 0x8000}}, {0x1e, 0x1, {0x0, 0x7}}, {0x9, 0x69, {0x0, 0x9}}, {0x7, 0x4, {0x2, 0xed}}, {0xa, 0xa, {0x2, 0x401}}, {0x1, 0x1, {0x2, 0x7}}, {0x1, 0x6, {0x2, 0x3}}, {0x1, 0x0, {0x1, 0x4}}, {0x40, 0x8, {0x3, 0x9}}, {0xd, 0x4, {0x1, 0x7}}, {0x0, 0xfff8, {0xcdae346c73b6977e, 0x5}}, {0xfffe, 0x3, {0x2, 0xc}}, {0x8793, 0x81, {0x2, 0x9}}, {0xff, 0x7, {0x0, 0x7f}}, {0xa, 0xc6a, {0x3, 0x8000}}, {0x4, 0x2, {0x3, 0x21f}}, {0x3426, 0xff, {0x3, 0x3}}, {0x7, 0x8, {0x3, 0x7}}, {0x3, 0x2, {0x1, 0x3}}, {0x0, 0x4000, {0x0, 0x6}}, {0x8, 0x1000, {0x0, 0x9}}, {0x3, 0x6, {0x2, 0x101}}, {0x5, 0xd3ad, {0x2, 0xffff8001}}, {0xb7, 0x9, {0x2, 0x5}}, {0x3, 0x344, {0x3, 0x1}}, {0x2, 0x3ff, {0x2, 0x6}}, {0x14, 0x7, {0x1, 0x4}}, {0x40, 0xd8ba, {0x1, 0x70}}, {0x3, 0x7, {0x0, 0xff}}, {0x1, 0x2, {0x0, 0x10001}}, {0x1, 0x4, {0x1, 0x10000}}, {0x6440, 0x2, {0x3, 0x6}}, {0x5, 0x0, {0x1, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000940)=ANY=[]) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x6000, 0x1, 0x0, 0x3, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x10, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0x42}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x3, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x81, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x1, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x16, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) kernel console output (not intermixed with test programs): rror: mce write submit urb error = -90 [ 219.079492][ T7928] IPVS: using max 35 ests per chain, 84000 per kthread [ 219.126804][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.152921][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.183231][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.219713][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.270592][ T5864] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 219.278936][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 219.485573][ T5866] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 219.495082][ T5866] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 219.504829][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 219.569563][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 219.578695][ T5864] usb 2-1: config index 0 descriptor too short (expected 36246, got 150) [ 219.635316][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.651765][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 219.666840][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.800282][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 219.832782][ T5864] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.882081][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.904487][ T5864] usb 2-1: Product: syz [ 219.908799][ T5864] usb 2-1: Manufacturer: syz [ 219.909977][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 219.927958][ T5864] usb 2-1: SerialNumber: syz [ 220.212525][ T7949] loop9: detected capacity change from 0 to 1 [ 220.221547][ T7949] ldm_validate_partition_table(): Disk read failed. [ 220.229017][ T7949] Dev loop9: unable to read RDB block 0 [ 220.239397][ T7949] loop9: unable to read partition table [ 220.248044][ T7949] loop9: partition table beyond EOD, truncated [ 220.254645][ T7949] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 220.254645][ T7949] U) failed (rc=-5) [ 220.287003][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.298277][ T10] usb 1-1: config 0 has no interface number 0 [ 220.323961][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 220.339729][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.369601][ T10] usb 1-1: Product: syz [ 220.374150][ T10] usb 1-1: Manufacturer: syz [ 220.379394][ T10] usb 1-1: SerialNumber: syz [ 220.461645][ T10] usb 1-1: config 0 descriptor?? [ 220.475840][ T5865] usb 3-1: USB disconnect, device number 12 [ 220.510714][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.519606][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.040733][ T5864] usb 2-1: USB disconnect, device number 13 [ 221.416926][ T5865] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 221.469761][ T5866] usb 1-1: USB disconnect, device number 11 [ 222.298693][ T7977] xt_connbytes: Forcing CT accounting to be enabled [ 222.305546][ T7977] Cannot find add_set index 0 as target [ 222.477929][ T5865] usb 4-1: config 255 has an invalid interface number: 20 but max is 0 [ 222.512037][ T5865] usb 4-1: config 255 has no interface number 0 [ 222.529707][ T5866] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.537362][ T5865] usb 4-1: config 255 interface 20 has no altsetting 0 [ 222.555361][ T5865] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 222.565561][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.574981][ T5865] usb 4-1: Product: syz [ 222.583742][ T5865] usb 4-1: Manufacturer: syz [ 222.588407][ T5865] usb 4-1: SerialNumber: syz [ 222.698593][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 222.729280][ T7981] veth3: entered promiscuous mode [ 222.811149][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.822007][ T5866] usb 2-1: config 84 has an invalid interface number: 111 but max is 0 [ 222.829997][ T7965] netlink: 173 bytes leftover after parsing attributes in process `syz.3.529'. [ 222.847103][ T5866] usb 2-1: config 84 has no interface number 0 [ 222.848103][ T7965] IPVS: stopping master sync thread 7985 ... [ 222.853384][ T7985] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 222.884811][ T5866] usb 2-1: config 84 interface 111 has no altsetting 0 [ 222.915470][ T5866] usb 2-1: string descriptor 0 read error: -22 [ 223.014532][ T5866] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 223.212466][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.379784][ T5866] usb 2-1: bad CDC descriptors [ 223.730755][ T30] audit: type=1400 audit(223.700:554): avc: denied { attach_queue } for pid=7991 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 223.777122][ T5865] usb 4-1: USB disconnect, device number 27 [ 223.969904][ T81] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 223.986272][ T5862] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 223.994996][ T5862] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 224.042579][ T5862] hid-generic 0000:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 224.139712][ T81] usb 5-1: Using ep0 maxpacket: 8 [ 224.197798][ T81] usb 5-1: config 64 has an invalid interface number: 143 but max is 0 [ 224.248018][ T81] usb 5-1: config 64 has no interface number 0 [ 224.286388][ T81] usb 5-1: New USB device found, idVendor=13d3, idProduct=3327, bcdDevice=5c.31 [ 224.312890][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.333721][ T81] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 224.959111][ T5866] usb 2-1: USB disconnect, device number 14 [ 225.019131][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.039727][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.614807][ T5866] usb 5-1: USB disconnect, device number 25 [ 227.845044][ T8037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.547'. [ 227.910936][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.948118][ T8041] netlink: 68 bytes leftover after parsing attributes in process `syz.3.548'. [ 227.966938][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 227.986870][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 228.086939][ T8045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.548'. [ 228.379589][ T8046] netlink: 68 bytes leftover after parsing attributes in process `syz.2.550'. [ 228.427036][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 228.478663][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.550'. [ 229.613370][ T8065] netlink: 'syz.4.554': attribute type 4 has an invalid length. [ 230.341297][ T30] audit: type=1400 audit(230.320:555): avc: denied { getopt } for pid=8071 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.541105][ T8075] ceph: No mds server is up or the cluster is laggy [ 230.566749][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 230.573064][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 230.842363][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 230.851381][ T8084] netlink: 68 bytes leftover after parsing attributes in process `syz.0.562'. [ 230.895438][ T8082] netlink: 'syz.4.560': attribute type 30 has an invalid length. [ 231.973221][ T30] audit: type=1400 audit(231.460:556): avc: denied { setopt } for pid=8094 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 232.933889][ T30] audit: type=1400 audit(232.900:557): avc: denied { relabelfrom } for pid=8104 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.329545][ T30] audit: type=1400 audit(232.900:558): avc: denied { relabelto } for pid=8104 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 233.524924][ T30] audit: type=1400 audit(233.500:559): avc: denied { getopt } for pid=8114 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.578517][ T8086] geneve2: entered promiscuous mode [ 233.587551][ T8086] geneve2: entered allmulticast mode [ 233.867307][ T8126] __nla_validate_parse: 4 callbacks suppressed [ 233.867327][ T8126] netlink: 830 bytes leftover after parsing attributes in process `syz.4.575'. [ 234.402513][ T5865] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.699440][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 235.010095][ T5865] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 235.035138][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.083033][ T5865] usb 2-1: config 0 descriptor?? [ 235.101066][ T5865] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 235.235777][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 235.732566][ T5865] gspca_sonixj: reg_w1 err -110 [ 235.749060][ T5865] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 235.761215][ T8148] loop9: detected capacity change from 0 to 1 [ 235.767674][ T8148] buffer_io_error: 14 callbacks suppressed [ 235.767685][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.781779][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.790291][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.798205][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.806728][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.814736][ T8148] ldm_validate_partition_table(): Disk read failed. [ 235.821503][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.829658][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.837620][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.845629][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.853525][ T8148] Dev loop9: unable to read RDB block 0 [ 235.859729][ T8148] Buffer I/O error on dev loop9, logical block 0, async page read [ 235.867682][ T8148] loop9: unable to read partition table [ 235.873746][ T8148] loop9: partition table beyond EOD, truncated [ 235.880052][ T8148] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 235.880052][ T8148] U) failed (rc=-5) [ 236.690676][ T30] audit: type=1400 audit(236.660:560): avc: denied { read } for pid=8158 comm="syz.0.586" path="socket:[18536]" dev="sockfs" ino=18536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.894255][ T5818] block nbd3: Receive control failed (result -32) [ 236.902566][ T5133] block nbd3: Receive control failed (result -32) [ 236.923145][ T8156] block nbd3: shutting down sockets [ 237.023744][ T30] audit: type=1400 audit(237.000:561): avc: denied { accept } for pid=8174 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.025581][ T8177] netlink: 'syz.3.591': attribute type 39 has an invalid length. [ 237.949982][ T5865] usb 2-1: USB disconnect, device number 15 [ 238.558137][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.587884][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.599504][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.606926][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.614728][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.622823][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.632048][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.647373][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.659137][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.671811][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.679215][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.691555][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.701112][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.708574][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.728139][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.747524][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.756568][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 238.774264][ T5866] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 240.490814][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 241.192271][ T81] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.572137][ T81] usb 3-1: config 255 has an invalid interface number: 20 but max is 0 [ 241.581537][ T81] usb 3-1: config 255 has no interface number 0 [ 241.587815][ T81] usb 3-1: config 255 interface 20 has no altsetting 0 [ 241.596895][ T81] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 241.606187][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.614525][ T81] usb 3-1: Product: syz [ 241.618702][ T81] usb 3-1: Manufacturer: syz [ 241.624144][ T81] usb 3-1: SerialNumber: syz [ 242.253023][ T8232] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 242.440473][ T8223] netlink: 173 bytes leftover after parsing attributes in process `syz.2.602'. [ 242.484863][ T8223] IPVS: stopping master sync thread 8237 ... [ 242.491014][ T8237] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 243.605556][ T81] usb 3-1: USB disconnect, device number 13 [ 244.917529][ T30] audit: type=1400 audit(244.890:562): avc: denied { ioctl } for pid=8285 comm="syz.1.614" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.942722][ T8298] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 245.951970][ T8298] veth1_vlan: entered allmulticast mode [ 245.985761][ T8298] team0: Device veth1_vlan failed to register rx_handler [ 246.199514][ T30] audit: type=1400 audit(246.160:563): avc: denied { listen } for pid=8287 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.479809][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 246.659617][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 246.693676][ T5133] Bluetooth: hci0: unexpected event 0x07 length: 3 < 255 [ 246.703582][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 246.716139][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.729632][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 246.739124][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.748785][ T5866] usb 2-1: Product: syz [ 246.753399][ T5866] usb 2-1: Manufacturer: syz [ 246.758090][ T5866] usb 2-1: SerialNumber: syz [ 246.774221][ T5866] usb 2-1: config 0 descriptor?? [ 246.788354][ T5866] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 246.886719][ T5866] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 247.104659][ T8319] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 248.330266][ T5866] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 248.348191][ T5866] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 248.609531][ T5911] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 248.772899][ T5911] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 248.788999][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.798902][ T5911] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 248.813699][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.825774][ T5911] usb 3-1: config 0 descriptor?? [ 248.847350][ T8331] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.015883][ T5866] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 249.410772][ T8315] syz.3.622 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 249.422319][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.3.622 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 249.422340][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.422349][ T8315] Call Trace: [ 249.422354][ T8315] [ 249.422360][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 249.422386][ T8315] dump_header+0x101/0x930 [ 249.422413][ T8315] oom_kill_process+0x270/0xa60 [ 249.422433][ T8315] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 249.422458][ T8315] out_of_memory+0x351/0x1700 [ 249.422484][ T8315] ? __pfx_out_of_memory+0x10/0x10 [ 249.422503][ T8315] ? rcu_read_unlock+0x17/0x60 [ 249.422520][ T8315] ? find_held_lock+0x2d/0x110 [ 249.422543][ T8315] mem_cgroup_out_of_memory+0x207/0x270 [ 249.422563][ T8315] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 249.422590][ T8315] ? do_raw_spin_unlock+0x172/0x230 [ 249.422610][ T8315] try_charge_memcg+0x54c/0xaf0 [ 249.422630][ T8315] ? __pfx_try_charge_memcg+0x10/0x10 [ 249.422649][ T8315] ? rcu_read_unlock+0x17/0x60 [ 249.422665][ T8315] ? __pfx_lock_release+0x10/0x10 [ 249.422685][ T8315] ? trace_lock_acquire+0x14e/0x1f0 [ 249.422702][ T8315] ? mem_cgroup_swapin_charge_folio+0x200/0x460 [ 249.422725][ T8315] charge_memcg+0x8a/0x310 [ 249.422741][ T8315] mem_cgroup_swapin_charge_folio+0xbb/0x460 [ 249.422762][ T8315] __read_swap_cache_async+0x436/0x660 [ 249.422790][ T8315] ? __pfx___read_swap_cache_async+0x10/0x10 [ 249.422814][ T8315] ? swp_swap_info+0xcf/0x130 [ 249.422832][ T8315] ? __pfx_swp_swap_info+0x10/0x10 [ 249.422851][ T8315] ? __pfx___lock_acquire+0x10/0x10 [ 249.422873][ T8315] swap_cluster_readahead+0x4e2/0x740 [ 249.422902][ T8315] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 249.422928][ T8315] ? __pfx_lock_release+0x10/0x10 [ 249.422958][ T8315] ? get_vma_policy+0x248/0x3c0 [ 249.422980][ T8315] swapin_readahead+0x12c/0xd60 [ 249.423004][ T8315] ? percpu_ref_tryget_live+0xe8/0x320 [ 249.423024][ T8315] ? __pfx_swapin_readahead+0x10/0x10 [ 249.423046][ T8315] ? __filemap_get_folio+0x333/0xbd0 [ 249.423074][ T8315] ? swap_cache_get_folio+0x1e0/0x460 [ 249.423098][ T8315] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 249.423119][ T8315] ? __pfx_get_swap_device+0x10/0x10 [ 249.423137][ T8315] ? __pfx___lock_acquire+0x10/0x10 [ 249.423161][ T8315] do_swap_page+0x680/0x5a70 [ 249.423191][ T8315] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 249.423212][ T8315] ? rcu_is_watching+0x12/0xc0 [ 249.423227][ T8315] ? trace_lock_acquire+0x14e/0x1f0 [ 249.423245][ T8315] ? __pfx_do_swap_page+0x10/0x10 [ 249.423273][ T8315] ? lock_acquire+0x2f/0xb0 [ 249.423292][ T8315] ? ___pte_offset_map+0x42/0x540 [ 249.423313][ T8315] ? __pfx_default_wake_function+0x10/0x10 [ 249.423335][ T8315] ? ___pte_offset_map+0x1b9/0x540 [ 249.423361][ T8315] __handle_mm_fault+0x117f/0x2c60 [ 249.423380][ T8315] ? lock_vma_under_rcu+0x6b9/0x980 [ 249.423404][ T8315] ? __pfx___handle_mm_fault+0x10/0x10 [ 249.423440][ T8315] handle_mm_fault+0x3fa/0xaa0 [ 249.423460][ T8315] do_user_addr_fault+0x60d/0x13f0 [ 249.423486][ T8315] exc_page_fault+0x5c/0xc0 [ 249.423505][ T8315] asm_exc_page_fault+0x26/0x30 [ 249.423524][ T8315] RIP: 0033:0x7f3997c63bcc [ 249.423538][ T8315] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 249.423553][ T8315] RSP: 002b:00007ffdc0cb13f0 EFLAGS: 00010287 [ 249.423566][ T8315] RAX: 0000000000000000 RBX: 00007f3997fa7040 RCX: 0000000000000000 [ 249.423575][ T8315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555570619808 [ 249.423584][ T8315] RBP: 00007f3997fa7ba0 R08: 0000000000000000 R09: 00007f3998bd1000 [ 249.423592][ T8315] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003d263 [ 249.423601][ T8315] R13: 00007f3997fa6080 R14: ffffffffffffffff R15: 00007ffdc0cb1500 [ 249.423624][ T8315] [ 249.423630][ T8315] memory: usage 307200kB, limit 307200kB, failcnt 11789 [ 249.806199][ T8315] memory+swap: usage 222308kB, limit 9007199254740988kB, failcnt 0 [ 249.814296][ T8315] kmem: usage 176616kB, limit 9007199254740988kB, failcnt 0 [ 249.823001][ T8315] Memory cgroup stats for /syz3: [ 249.823442][ T8315] cache 0 [ 249.831352][ T8315] rss 4096 [ 249.834386][ T8315] rss_huge 0 [ 249.837579][ T8315] shmem 0 [ 249.840564][ T8315] mapped_file 0 [ 249.844013][ T8315] dirty 0 [ 249.846948][ T8315] writeback 0 [ 249.850281][ T8315] workingset_refault_anon 33 [ 249.854904][ T8315] workingset_refault_file 32 [ 249.859534][ T8315] swap 42463232 [ 249.862985][ T8315] swapcached 4096 [ 249.866607][ T8315] pgpgin 99836 [ 249.870001][ T8315] pgpgout 99835 [ 249.873459][ T8315] pgfault 110934 [ 249.876991][ T8315] pgmajfault 38 [ 249.880493][ T8315] inactive_anon 0 [ 249.884118][ T8315] active_anon 0 [ 249.887565][ T8315] inactive_file 0 [ 249.891232][ T8315] active_file 0 [ 249.894688][ T8315] unevictable 0 [ 249.898136][ T8315] hierarchical_memory_limit 314572800 [ 249.903672][ T8315] hierarchical_memsw_limit 9223372036854771712 [ 249.909987][ T8315] total_cache 0 [ 249.913440][ T8315] total_rss 4096 [ 249.916984][ T8315] total_rss_huge 0 [ 249.922271][ T8315] total_shmem 0 [ 249.925737][ T8315] total_mapped_file 0 [ 249.929739][ T8315] total_dirty 0 [ 249.933207][ T8315] total_writeback 0 [ 249.937016][ T8315] total_workingset_refault_anon 33 [ 249.942210][ T8315] total_workingset_refault_file 32 [ 249.947324][ T8315] total_swap 42463232 [ 249.951452][ T8315] total_swapcached 4096 [ 249.955628][ T8315] total_pgpgin 99836 [ 249.959572][ T8315] total_pgpgout 99835 [ 249.963576][ T8315] total_pgfault 110934 [ 249.967640][ T8315] total_pgmajfault 38 [ 249.971689][ T8315] total_inactive_anon 0 [ 249.975853][ T8315] total_active_anon 0 [ 249.979884][ T8315] total_inactive_file 0 [ 249.984033][ T8315] total_active_file 0 [ 249.988007][ T8315] total_unevictable 0 [ 249.992140][ T8315] anon_cost 0 [ 249.995432][ T8315] file_cost 0 [ 249.998796][ T8315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.622,pid=8315,uid=0 [ 250.015302][ T8315] Memory cgroup out of memory: Killed process 8315 (syz.3.622) total-vm:110512kB, anon-rss:908kB, file-rss:31276kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 250.443280][ T5865] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 250.502774][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 250.529854][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 250.548525][ T5911] usb 3-1: USB disconnect, device number 14 [ 250.614317][ T5866] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 250.655582][ T5866] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 250.672954][ T5866] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 250.693220][ T5866] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 250.832781][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 250.860905][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.458793][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.575498][ T5866] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 251.699489][ T6183] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.739647][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.748401][ T5866] usb 2-1: USB disconnect, device number 16 [ 251.759403][ T5865] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.857696][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.863419][ T8355] veth1_macvtap: left promiscuous mode [ 251.871780][ T8355] macsec0: entered promiscuous mode [ 251.877079][ T8355] macsec0: entered allmulticast mode [ 251.945849][ T6183] usb 1-1: config 255 has an invalid interface number: 20 but max is 0 [ 251.998800][ T6183] usb 1-1: config 255 has no interface number 0 [ 251.999515][ T5865] usb 5-1: config 0 descriptor?? [ 252.007784][ T6183] usb 1-1: config 255 interface 20 has no altsetting 0 [ 252.196650][ T6183] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 252.486628][ T5865] usbhid 5-1:0.0: can't add hid device: -71 [ 252.492899][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.511694][ T5865] usb 5-1: USB disconnect, device number 26 [ 252.539062][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.664432][ T8365] loop9: detected capacity change from 0 to 1 [ 252.696166][ T8365] buffer_io_error: 2 callbacks suppressed [ 252.696195][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.257921][ T6183] usb 1-1: Product: syz [ 253.290820][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.299031][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.307425][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.315739][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.324009][ T8365] ldm_validate_partition_table(): Disk read failed. [ 253.331058][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.339196][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.348134][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.362597][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.371237][ T8365] Dev loop9: unable to read RDB block 0 [ 253.372467][ T6183] usb 1-1: Manufacturer: syz [ 253.433320][ T8365] Buffer I/O error on dev loop9, logical block 0, async page read [ 253.444797][ T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1) [ 253.769810][ T8365] loop9: unable to read partition table [ 253.786982][ T6183] usb 1-1: SerialNumber: syz [ 253.810641][ T8365] loop9: partition table beyond EOD, truncated [ 253.839188][ T6183] usb 1-1: can't set config #255, error -71 [ 253.850506][ T8365] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 253.850506][ T8365] U) failed (rc=-5) [ 254.179797][ T6183] usb 1-1: USB disconnect, device number 12 [ 254.471786][ T5865] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 254.618264][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 254.849607][ T8385] netlink: 'syz.1.640': attribute type 4 has an invalid length. [ 254.879526][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 254.884719][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 254.902848][ T5865] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.916613][ T5865] usb 5-1: config 0 has no interface number 0 [ 254.923536][ T10] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 254.933701][ T5865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.944877][ T10] usb 4-1: config 8 has no interface number 0 [ 254.953801][ T10] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 254.977904][ T5865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.988092][ T5865] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 254.997635][ T10] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.007941][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.016215][ T10] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 255.027872][ T5865] usb 5-1: config 0 descriptor?? [ 255.033908][ T10] usb 4-1: config 8 interface 39 has no altsetting 0 [ 255.043070][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 255.053116][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.063471][ T10] usb 4-1: Product: syz [ 255.067784][ T10] usb 4-1: Manufacturer: syz [ 255.072557][ T10] usb 4-1: SerialNumber: syz [ 255.189491][ T6183] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 255.290896][ T8378] 9pnet_virtio: no channels available for device ./cgroup [ 255.484670][ T6183] usb 1-1: config 255 has an invalid interface number: 20 but max is 0 [ 255.496850][ T6183] usb 1-1: config 255 has no interface number 0 [ 255.504354][ T6183] usb 1-1: config 255 interface 20 has no altsetting 0 [ 255.596982][ T8396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.638'. [ 255.971364][ T30] audit: type=1400 audit(255.570:564): avc: denied { setattr } for pid=8377 comm="syz.3.638" name="NETLINK" dev="sockfs" ino=18021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.012373][ T6183] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 256.131378][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.184955][ T6183] usb 1-1: Product: syz [ 256.190294][ T6183] usb 1-1: Manufacturer: syz [ 256.194996][ T6183] usb 1-1: SerialNumber: syz [ 256.499101][ T5865] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input24 [ 256.549779][ T8392] netlink: 277 bytes leftover after parsing attributes in process `syz.0.642'. [ 256.582148][ T5865] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input25 [ 256.598713][ T8392] IPVS: stopping master sync thread 8405 ... [ 256.605155][ T8405] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 256.622949][ T5865] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 256.667885][ T5865] usb 5-1: USB disconnect, device number 27 [ 256.685891][ T5866] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.826327][ T6183] usb 1-1: USB disconnect, device number 13 [ 256.852389][ T5866] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 256.862385][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.871699][ T5866] usb 2-1: Product: syz [ 256.876240][ T5866] usb 2-1: Manufacturer: syz [ 256.880905][ T5866] usb 2-1: SerialNumber: syz [ 256.888325][ T5866] usb 2-1: config 0 descriptor?? [ 256.894483][ T5866] hub 2-1:0.0: bad descriptor, ignoring hub [ 256.901075][ T5866] hub 2-1:0.0: probe with driver hub failed with error -5 [ 256.908664][ T5866] f81232 2-1:0.0: f81534a converter detected [ 257.010201][ T30] audit: type=1400 audit(256.980:565): avc: denied { mount } for pid=8408 comm="syz.4.646" name="/" dev="rpc_pipefs" ino=18088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 257.054370][ T30] audit: type=1400 audit(257.030:566): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 257.116578][ T5866] usb 2-1: f81534a converter now attached to ttyUSB0 [ 257.263562][ T10] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 257.333356][ T10] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 257.611121][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 257.684801][ T10] usb 4-1: USB disconnect, device number 28 [ 257.783329][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 257.816777][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.650'. [ 257.848507][ T8421] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 257.874491][ T8421] team0: Cannot enslave team device to itself [ 257.999645][ T10] usb 2-1: USB disconnect, device number 17 [ 258.217862][ T10] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 258.363884][ T10] f81232 2-1:0.0: device disconnected [ 258.405854][ T8428] loop9: detected capacity change from 0 to 1 [ 258.412256][ T8428] buffer_io_error: 2 callbacks suppressed [ 258.412267][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 258.462253][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 258.472823][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.404510][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.469756][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.478084][ T8428] ldm_validate_partition_table(): Disk read failed. [ 259.485125][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.494063][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.502576][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.511404][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.519425][ T8428] Dev loop9: unable to read RDB block 0 [ 259.525475][ T8428] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.534431][ T8428] loop9: unable to read partition table [ 259.541533][ T8428] loop9: partition table beyond EOD, truncated [ 259.548180][ T8428] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 259.548180][ T8428] U) failed (rc=-5) [ 259.809755][ T30] audit: type=1400 audit(259.780:567): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 259.979556][ T972] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 260.449613][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 260.468925][ T972] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 260.479399][ T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.489640][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 260.529441][ T972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.586595][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.612847][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.632964][ T972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.667820][ T972] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 260.677059][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.693638][ T972] usb 2-1: Product: syz [ 260.702665][ T972] usb 2-1: Manufacturer: syz [ 260.712743][ T972] usb 2-1: SerialNumber: syz [ 260.720137][ T10] usb 4-1: config 255 has an invalid interface number: 20 but max is 0 [ 260.729183][ T10] usb 4-1: config 255 has no interface number 0 [ 260.737864][ T972] usb 2-1: config 0 descriptor?? [ 260.749750][ T10] usb 4-1: config 255 interface 20 has no altsetting 0 [ 260.762097][ T972] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 260.776650][ T10] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 260.791801][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.809755][ T10] usb 4-1: Product: syz [ 260.819439][ T10] usb 4-1: Manufacturer: syz [ 260.829387][ T10] usb 4-1: SerialNumber: syz [ 261.027965][ T8461] loop9: detected capacity change from 0 to 1 [ 261.066417][ T8451] netlink: 277 bytes leftover after parsing attributes in process `syz.3.661'. [ 261.094183][ T8461] ldm_validate_partition_table(): Disk read failed. [ 261.110957][ T8451] IPVS: stopping master sync thread 8463 ... [ 261.131547][ T8461] Dev loop9: unable to read RDB block 0 [ 261.145797][ T8461] loop9: unable to read partition table [ 261.164623][ T972] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 261.179513][ T8461] loop9: partition table beyond EOD, truncated [ 261.187041][ T8461] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 261.187041][ T8461] U) failed (rc=-5) [ 261.387980][ T5862] usb 2-1: USB disconnect, device number 18 [ 261.710541][ T10] usb 4-1: USB disconnect, device number 29 [ 262.750945][ T8477] loop9: detected capacity change from 0 to 1 [ 263.663238][ T8477] buffer_io_error: 14 callbacks suppressed [ 263.663276][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.692136][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.700934][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.709432][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.718054][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.726526][ T8477] ldm_validate_partition_table(): Disk read failed. [ 263.785202][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 263.872965][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 264.223612][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 264.271865][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 264.337556][ T8477] Dev loop9: unable to read RDB block 0 [ 264.354510][ T8477] Buffer I/O error on dev loop9, logical block 0, async page read [ 264.379680][ T8477] loop9: unable to read partition table [ 264.385383][ T8477] loop9: partition table beyond EOD, truncated [ 264.400096][ T8477] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 264.400096][ T8477] U) failed (rc=-5) [ 264.549271][ T8495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.602468][ T8496] veth1_macvtap: left promiscuous mode [ 264.608117][ T8496] macsec0: entered promiscuous mode [ 264.613563][ T8496] macsec0: entered allmulticast mode [ 264.900107][ T30] audit: type=1400 audit(264.870:568): avc: denied { write } for pid=8491 comm="syz.0.670" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.648270][ T30] audit: type=1400 audit(265.620:569): avc: denied { read } for pid=5179 comm="acpid" name="event8" dev="devtmpfs" ino=3024 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 265.709785][ T30] audit: type=1400 audit(265.620:570): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3024 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 265.761101][ T30] audit: type=1400 audit(265.620:571): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3024 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 267.273426][ T8530] virtio-fs: tag <(null)> not found [ 268.139599][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 268.374254][ T5862] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.396819][ T5862] usb 1-1: config 0 has no interface number 0 [ 268.423801][ T5862] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 268.476157][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.484592][ T5862] usb 1-1: Product: syz [ 268.488977][ T5862] usb 1-1: Manufacturer: syz [ 268.496960][ T5862] usb 1-1: SerialNumber: syz [ 268.515980][ T5862] usb 1-1: config 0 descriptor?? [ 268.848753][ T5862] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 268.883257][ T5862] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 268.924617][ T5862] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 268.954235][ T5862] usb 1-1: media controller created [ 269.007240][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.132904][ T8540] netlink: 260 bytes leftover after parsing attributes in process `syz.2.686'. [ 270.124573][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 270.469758][ T5862] usb 1-1: USB disconnect, device number 14 [ 271.635251][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 271.653010][ T8568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.696'. [ 271.666616][ T8570] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 271.696961][ T8568] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 271.707781][ T8570] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 271.728709][ T8568] team0: Cannot enslave team device to itself [ 271.909490][ T30] audit: type=1400 audit(271.880:572): avc: denied { mount } for pid=8573 comm="syz.4.699" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 271.979524][ T30] audit: type=1400 audit(271.880:573): avc: denied { watch watch_reads } for pid=8573 comm="syz.4.699" path="/136/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 272.002295][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.097466][ T30] audit: type=1400 audit(271.880:574): avc: denied { unmount } for pid=8573 comm="syz.4.699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 273.009779][ T6183] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 273.309481][ T6183] usb 1-1: Using ep0 maxpacket: 8 [ 273.442221][ T6183] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 273.508995][ T6183] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.520378][ T6183] usb 1-1: config 0 has no interface number 0 [ 273.526570][ T6183] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 273.537925][ T6183] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 273.689879][ T6183] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.703376][ T6183] usb 1-1: config 0 interface 52 has no altsetting 0 [ 273.718173][ T6183] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 273.741278][ T6183] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 273.769610][ T6183] usb 1-1: Manufacturer: syz [ 273.788106][ T6183] usb 1-1: config 0 descriptor?? [ 273.948458][ T6183] usb 1-1: can't set config #0, error -71 [ 273.958455][ T6183] usb 1-1: USB disconnect, device number 15 [ 273.965099][ T5862] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 274.074238][ T8612] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 274.096264][ T8612] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 274.149567][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 274.166043][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.184796][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.219452][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.241893][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.262556][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.279155][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.299528][ T5862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.316818][ T5862] usb 4-1: Manufacturer: syz [ 274.332101][ T5862] usb 4-1: config 0 descriptor?? [ 274.771075][ T5862] rc_core: IR keymap rc-hauppauge not found [ 274.791154][ T5862] Registered IR keymap rc-empty [ 274.807739][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.849522][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 274.881165][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 274.928927][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 275.072857][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.106443][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.176161][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.490764][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.599784][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.643112][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.669756][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.709527][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.759443][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.884536][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 275.924125][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 276.052526][ T8653] loop6: detected capacity change from 0 to 524287999 [ 276.073324][ T5862] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.076783][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.091654][ C1] buffer_io_error: 2 callbacks suppressed [ 276.091664][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.178827][ T8654] can0: slcan on ttyS3. [ 276.318810][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.328068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.348934][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.358215][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.368840][ T8654] can0 (unregistered): slcan off ttyS3. [ 276.396284][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.405570][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.439085][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.448370][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.479039][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.488373][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.534916][ T5862] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 276.551517][ T8656] FAULT_INJECTION: forcing a failure. [ 276.551517][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 276.565098][ T5862] usb 4-1: USB disconnect, device number 30 [ 276.587349][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.2.720 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 276.587367][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.587373][ T8656] Call Trace: [ 276.587376][ T8656] [ 276.587380][ T8656] dump_stack_lvl+0x16c/0x1f0 [ 276.587400][ T8656] should_fail_ex+0x50a/0x650 [ 276.587416][ T8656] ? fs_reclaim_acquire+0xae/0x150 [ 276.587432][ T8656] ? tomoyo_encode2+0x100/0x3e0 [ 276.587447][ T8656] should_failslab+0xc2/0x120 [ 276.587459][ T8656] __kmalloc_noprof+0xcb/0x510 [ 276.587470][ T8656] ? d_absolute_path+0x137/0x1b0 [ 276.587483][ T8656] ? rcu_is_watching+0x12/0xc0 [ 276.587496][ T8656] tomoyo_encode2+0x100/0x3e0 [ 276.587512][ T8656] tomoyo_encode+0x29/0x50 [ 276.587526][ T8656] tomoyo_realpath_from_path+0x19d/0x720 [ 276.587544][ T8656] tomoyo_path_number_perm+0x248/0x590 [ 276.587556][ T8656] ? tomoyo_path_number_perm+0x235/0x590 [ 276.587570][ T8656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.587594][ T8656] ? __pfx_lock_release+0x10/0x10 [ 276.587608][ T8656] ? trace_lock_acquire+0x14e/0x1f0 [ 276.587622][ T8656] ? lock_acquire+0x2f/0xb0 [ 276.587634][ T8656] ? __fget_files+0x40/0x3a0 [ 276.587646][ T8656] ? __fget_files+0x206/0x3a0 [ 276.587657][ T8656] security_file_ioctl+0x9b/0x240 [ 276.587673][ T8656] __x64_sys_ioctl+0xb7/0x200 [ 276.587694][ T8656] do_syscall_64+0xcd/0x250 [ 276.587710][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.587725][ T8656] RIP: 0033:0x7f83e1b8d169 [ 276.587733][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.587743][ T8656] RSP: 002b:00007f83e19d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.587753][ T8656] RAX: ffffffffffffffda RBX: 00007f83e1da6080 RCX: 00007f83e1b8d169 [ 276.587759][ T8656] RDX: 0000000000000000 RSI: 0000000000004c09 RDI: 0000000000000006 [ 276.587765][ T8656] RBP: 00007f83e19d8090 R08: 0000000000000000 R09: 0000000000000000 [ 276.587770][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.587776][ T8656] R13: 0000000000000001 R14: 00007f83e1da6080 R15: 00007ffeb6f952a8 [ 276.587788][ T8656] [ 276.587796][ T8656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.620532][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.824237][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.929629][ T8653] ldm_validate_partition_table(): Disk read failed. [ 276.937225][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.946562][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.982083][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.991401][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.002618][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.011877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.020460][ T8653] Dev loop6: unable to read RDB block 0 [ 277.027713][ T8653] loop6: unable to read partition table [ 277.043942][ T8653] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 280.769267][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 280.906997][ T8699] sp0: Synchronizing with TNC [ 281.365513][ T8709] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 281.616741][ T8699] sp0: Synchronizing with TNC [ 281.796325][ T30] audit: type=1400 audit(281.770:575): avc: denied { execmem } for pid=8698 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 281.873797][ T30] audit: type=1400 audit(281.830:576): avc: denied { write } for pid=8713 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.935979][ T30] audit: type=1400 audit(281.830:577): avc: denied { nlmsg_write } for pid=8713 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.973914][ T30] audit: type=1400 audit(281.830:578): avc: denied { create } for pid=8713 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.993754][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 282.108310][ T8719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.738'. [ 282.159937][ T8719] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 282.211946][ T8719] team0: Cannot enslave team device to itself [ 283.146390][ T30] audit: type=1400 audit(283.120:579): avc: denied { append } for pid=8745 comm="syz.2.742" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.619472][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 283.750760][ T30] audit: type=1400 audit(283.730:580): avc: denied { ioctl } for pid=8759 comm="syz.4.746" path="socket:[20673]" dev="sockfs" ino=20673 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.852062][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 283.867336][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.867374][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.867468][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.867515][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.878741][ T10] usb 3-1: config 0 descriptor?? [ 283.956379][ T10] hub 3-1:0.0: USB hub found [ 284.249741][ T10] hub 3-1:0.0: 1 port detected [ 285.406169][ T8774] batman_adv: batadv0: adding TT local entry 00:00:00:00:00:00 to non-existent VLAN 2048 [ 285.459888][ T10] hub 3-1:0.0: activate --> -90 [ 285.699651][ T8787] xt_ipcomp: unknown flags 12 [ 285.712496][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 286.536420][ T8746] netlink: 'syz.2.742': attribute type 30 has an invalid length. [ 286.540750][ T5866] usb 2-1: config 255 has an invalid interface number: 20 but max is 0 [ 286.571902][ T5866] usb 2-1: config 255 has no interface number 0 [ 286.578612][ T5866] usb 2-1: config 255 interface 20 has no altsetting 0 [ 286.581157][ T8791] veth1_macvtap: left allmulticast mode [ 286.593797][ T8791] veth1_macvtap: left promiscuous mode [ 286.595047][ T5866] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 286.605473][ T8791] bridge0: port 1(vlan2) entered disabled state [ 286.608732][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.791712][ T8746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.742'. [ 286.811014][ T5866] usb 2-1: Product: syz [ 286.818533][ T5866] usb 2-1: Manufacturer: syz [ 286.832192][ T5866] usb 2-1: SerialNumber: syz [ 287.171101][ T8779] netlink: 277 bytes leftover after parsing attributes in process `syz.1.752'. [ 287.347798][ T972] usb 3-1: USB disconnect, device number 15 [ 287.391475][ T8799] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 287.514321][ T30] audit: type=1400 audit(287.490:581): avc: denied { bind } for pid=8805 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.466279][ T8809] FAULT_INJECTION: forcing a failure. [ 288.466279][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 288.479686][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.4.757 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 288.479731][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.479741][ T8809] Call Trace: [ 288.479745][ T8809] [ 288.479752][ T8809] dump_stack_lvl+0x16c/0x1f0 [ 288.479773][ T8809] should_fail_ex+0x50a/0x650 [ 288.479789][ T8809] ? irqentry_exit+0x3b/0x90 [ 288.479806][ T8809] should_failslab+0xc2/0x120 [ 288.479826][ T8809] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 288.479844][ T8809] ? xfrm_state_alloc+0x23/0x5f0 [ 288.479864][ T8809] xfrm_state_alloc+0x23/0x5f0 [ 288.479880][ T8809] xfrm_state_find+0x336e/0x85d0 [ 288.479905][ T8809] ? fib6_node_lookup+0x125/0x180 [ 288.479919][ T8809] ? __pfx_xfrm_state_find+0x10/0x10 [ 288.479935][ T8809] ? __pfx_mark_lock+0x10/0x10 [ 288.479948][ T8809] ? rcu_is_watching+0x12/0xc0 [ 288.479971][ T8809] ? hlock_class+0x4e/0x130 [ 288.479988][ T8809] ? mark_lock+0xb5/0xc60 [ 288.480012][ T8809] xfrm_resolve_and_create_bundle+0x4ce/0x3680 [ 288.480047][ T8809] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 288.480067][ T8809] ? xfrm_sk_policy_lookup+0x4dd/0x730 [ 288.480076][ T8809] ? __pfx_lock_release+0x10/0x10 [ 288.480089][ T8809] ? trace_lock_acquire+0x14e/0x1f0 [ 288.480119][ T8809] ? xfrm_expand_policies.constprop.0+0x250/0x6a0 [ 288.480139][ T8809] xfrm_lookup_with_ifid+0x2a1/0x1e40 [ 288.480158][ T8809] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 288.480174][ T8809] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 288.480193][ T8809] ? hlock_class+0x4e/0x130 [ 288.480203][ T8809] ? __lock_acquire+0xcc5/0x3c40 [ 288.480221][ T8809] xfrm_lookup_route+0x3b/0x200 [ 288.480232][ T8809] ip6_dst_lookup_flow+0x15c/0x1d0 [ 288.480245][ T8809] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 288.480266][ T8809] ? rawv6_sendmsg+0xc5b/0x4610 [ 288.480288][ T8809] rawv6_sendmsg+0xdae/0x4610 [ 288.480302][ T8809] ? avc_has_perm_noaudit+0x119/0x3a0 [ 288.480327][ T8809] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 288.480340][ T8809] ? avc_has_perm_noaudit+0x143/0x3a0 [ 288.480352][ T8809] ? avc_has_perm+0x11b/0x1c0 [ 288.480362][ T8809] ? __pfx_avc_has_perm+0x10/0x10 [ 288.480372][ T8809] ? __pfx___lock_acquire+0x10/0x10 [ 288.480402][ T8809] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 288.480421][ T8809] ? inet_sendmsg+0x119/0x140 [ 288.480443][ T8809] inet_sendmsg+0x119/0x140 [ 288.480466][ T8809] ____sys_sendmsg+0x98c/0xc90 [ 288.480482][ T8809] ? copy_msghdr_from_user+0x10b/0x160 [ 288.480496][ T8809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.480506][ T8809] ? __lock_acquire+0xcc5/0x3c40 [ 288.480525][ T8809] ___sys_sendmsg+0x135/0x1e0 [ 288.480542][ T8809] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.480572][ T8809] ? trace_lock_acquire+0x14e/0x1f0 [ 288.480605][ T8809] __sys_sendmmsg+0x201/0x420 [ 288.480628][ T8809] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.480646][ T8809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.480666][ T8809] ? fput+0x67/0x440 [ 288.480678][ T8809] ? ksys_write+0x1ba/0x250 [ 288.480688][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 288.480736][ T8809] __x64_sys_sendmmsg+0x9c/0x100 [ 288.480757][ T8809] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.480775][ T8809] do_syscall_64+0xcd/0x250 [ 288.480790][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.480804][ T8809] RIP: 0033:0x7f45d078d169 [ 288.480814][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.480824][ T8809] RSP: 002b:00007f45d15c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.480835][ T8809] RAX: ffffffffffffffda RBX: 00007f45d09a6080 RCX: 00007f45d078d169 [ 288.480844][ T8809] RDX: 0000000000000021 RSI: 0000400000000480 RDI: 0000000000000008 [ 288.480853][ T8809] RBP: 00007f45d15c5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.480862][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.480871][ T8809] R13: 0000000000000000 R14: 00007f45d09a6080 R15: 00007fff14043458 [ 288.480891][ T8809] [ 289.449296][ T5866] usb 2-1: USB disconnect, device number 19 [ 289.652622][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 289.662603][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.671683][ T8817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.517822][ T30] audit: type=1400 audit(290.450:582): avc: denied { getopt } for pid=8811 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.705806][ T8817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.717159][ T8817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.459967][ T5863] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 291.639923][ T8839] loop7: detected capacity change from 0 to 16384 [ 291.809427][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 291.846220][ T8840] loop7: detected capacity change from 16384 to 16383 [ 291.965560][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.534336][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.545261][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.563983][ T5863] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 292.579172][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.598407][ T5863] usb 4-1: config 0 descriptor?? [ 293.338573][ T5863] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000D/input/input28 [ 293.437291][ T5863] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000D/input/input29 [ 293.494483][ T5863] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 293.520125][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 293.712964][ T10] usb 2-1: config 255 has an invalid interface number: 20 but max is 0 [ 293.731827][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.759616][ T10] usb 2-1: config 255 has no interface number 0 [ 293.796530][ T10] usb 2-1: config 255 interface 20 has no altsetting 0 [ 293.805775][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.932715][ T10] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 293.989589][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.024641][ T10] usb 2-1: Product: syz [ 294.101390][ T10] usb 2-1: Manufacturer: syz [ 294.311154][ T10] usb 2-1: SerialNumber: syz [ 294.538944][ T8863] netlink: 277 bytes leftover after parsing attributes in process `syz.1.775'. [ 294.568262][ T8863] IPVS: stopping master sync thread 8799 ... [ 294.580311][ T5866] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 294.739522][ T5866] usb 4-1: device descriptor read/64, error -32 [ 294.924467][ T30] audit: type=1400 audit(294.900:583): avc: denied { create } for pid=8873 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 294.939001][ T10] usb 2-1: USB disconnect, device number 20 [ 295.009462][ T5866] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 295.159839][ T5866] usb 4-1: device descriptor read/64, error -32 [ 295.229799][ T5862] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 295.409841][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 295.619520][ T5862] usb 5-1: config 9 has an invalid interface number: 11 but max is 1 [ 295.735403][ T5862] usb 5-1: config 9 has an invalid interface number: 79 but max is 1 [ 295.744075][ T5862] usb 5-1: config 9 has no interface number 0 [ 295.761230][ T5862] usb 5-1: config 9 has no interface number 1 [ 295.767753][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 295.787347][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 295.805302][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 295.839502][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 296.044862][ T6183] usb 4-1: USB disconnect, device number 32 [ 296.129530][ T5911] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 296.330859][ T5911] usb 2-1: config index 0 descriptor too short (expected 59275, got 68) [ 296.354846][ T5911] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 296.389212][ T5911] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.445101][ T5911] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 296.605381][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 296.615389][ T5862] usb 5-1: config 9 interface 11 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 296.626423][ T5862] usb 5-1: config 9 interface 11 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 296.637574][ T5862] usb 5-1: config 9 interface 11 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 296.647569][ T5862] usb 5-1: config 9 interface 11 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 296.654648][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.658889][ T5862] usb 5-1: config 9 interface 79 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 296.678919][ T5862] usb 5-1: config 9 interface 79 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 296.689825][ T5862] usb 5-1: config 9 interface 79 altsetting 11 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 296.701986][ T5862] usb 5-1: config 9 interface 79 altsetting 11 has a duplicate endpoint with address 0x8A, skipping [ 296.712866][ T5862] usb 5-1: config 9 interface 79 altsetting 11 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.729677][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.731913][ T5862] usb 5-1: config 9 interface 11 has no altsetting 0 [ 296.744656][ T5862] usb 5-1: config 9 interface 79 has no altsetting 0 [ 296.753191][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.06 [ 296.762631][ T5911] usb 2-1: SerialNumber: syz [ 296.763334][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.776142][ T5862] usb 5-1: Product: syz [ 296.780684][ T5862] usb 5-1: Manufacturer: ࠧ [ 296.785302][ T5862] usb 5-1: SerialNumber: syz [ 296.792016][ T5862] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 296.809602][ T5862] usb 5-1: no configuration chosen from 1 choice [ 296.870946][ T8902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.011493][ T8897] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 297.029080][ T8897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.061887][ T8897] veth3: entered promiscuous mode [ 297.073458][ T8897] bond2: (slave veth3): Enslaving as an active interface with a down link [ 297.109257][ T5911] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 297.116391][ T5911] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 297.159703][ T5911] usb 2-1: USB disconnect, device number 21 [ 297.815393][ T5862] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 297.906817][ T972] usb 5-1: USB disconnect, device number 28 [ 298.008184][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.028244][ T5862] usb 4-1: config index 0 descriptor too short (expected 51227, got 27) [ 298.079902][ T5862] usb 4-1: config 13 has too many interfaces: 112, using maximum allowed: 32 [ 298.126911][ T5862] usb 4-1: config 13 has an invalid descriptor of length 152, skipping remainder of the config [ 298.159131][ T972] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 298.175532][ T5862] usb 4-1: config 13 has 0 interfaces, different from the descriptor's value: 112 [ 298.186109][ T972] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 298.198159][ T5862] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=cf.de [ 298.211668][ T972] hid-generic 0000:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 298.224841][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.247312][ T5862] usb 4-1: Product: syz [ 298.258665][ T5862] usb 4-1: Manufacturer: syz [ 298.263741][ T5862] usb 4-1: SerialNumber: syz [ 298.643975][ T8926] xt_hashlimit: size too large, truncated to 1048576 [ 298.795336][ T8929] : renamed from lo (while UP) [ 300.397749][ T8944] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 300.427562][ T5862] usb 4-1: USB disconnect, device number 33 [ 300.440176][ T8944] bond3: entered promiscuous mode [ 300.457560][ T8944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.531162][ T8946] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 300.626835][ T8948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.658652][ T8949] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 300.684749][ T8948] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 300.708780][ T8948] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 300.723150][ T8951] binfmt_misc: register: failed to install interpreter file ./file0 [ 300.742548][ T8948] bond3: (slave ip6gre1): making interface the new active one [ 300.753642][ T8952] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 300.762330][ T6183] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 300.771586][ T8948] ip6gre1: entered promiscuous mode [ 300.778827][ T8948] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 300.797964][ T8946] team0: Cannot enslave team device to itself [ 300.828515][ T8949] bond1: entered promiscuous mode [ 300.834183][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.912386][ T8952] team0: Cannot enslave team device to itself [ 300.940906][ T8953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.957729][ T8959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.800'. [ 300.969233][ T8953] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 300.982700][ T8953] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 300.983730][ T6183] usb 1-1: config 255 has an invalid interface number: 20 but max is 0 [ 300.999676][ T8953] bond1: (slave ip6gre1): making interface the new active one [ 301.010224][ T6183] usb 1-1: config 255 has no interface number 0 [ 301.010251][ T5862] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 301.019098][ T6183] usb 1-1: config 255 interface 20 has no altsetting 0 [ 301.064643][ T8953] ip6gre1: entered promiscuous mode [ 301.071289][ T6183] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 301.082614][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.085023][ T8953] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 301.097742][ T6183] usb 1-1: Product: syz [ 301.104026][ T6183] usb 1-1: Manufacturer: syz [ 301.108823][ T6183] usb 1-1: SerialNumber: syz [ 301.189751][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 301.230031][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 301.248491][ T5862] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 301.260582][ T5862] usb 3-1: config 0 has no interface number 0 [ 301.267411][ T5862] usb 3-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 301.471648][ T8937] netlink: 277 bytes leftover after parsing attributes in process `syz.0.794'. [ 301.619420][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.660000][ T5862] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 301.726589][ T8937] IPVS: stopping master sync thread 8966 ... [ 301.734401][ T8966] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 301.766353][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.779463][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.808284][ T5862] usb 3-1: Product: syz [ 301.815352][ T10] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 301.918009][ T5862] usb 3-1: Manufacturer: syz [ 301.936511][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 301.946670][ T5862] usb 3-1: SerialNumber: syz [ 301.961440][ T5862] usb 3-1: config 0 descriptor?? [ 301.982582][ T10] usb 5-1: Manufacturer: syz [ 302.018883][ T10] usb 5-1: config 0 descriptor?? [ 302.347057][ T8974] netlink: 188 bytes leftover after parsing attributes in process `syz.1.804'. [ 302.356757][ T8974] netlink: 'syz.1.804': attribute type 1 has an invalid length. [ 303.502188][ T10] cougar 0003:060B:700A.000F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 303.533207][ T6183] usb 1-1: USB disconnect, device number 16 [ 303.657144][ T10] usb 3-1: USB disconnect, device number 16 [ 303.873048][ T10] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 303.883349][ T10] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 303.892707][ T10] hid-generic 0000:0003:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz1 [ 304.404849][ T30] audit: type=1400 audit(304.380:584): avc: denied { map } for pid=8987 comm="syz.2.808" path="/173/bus" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 304.406598][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 304.440972][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 304.499684][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 304.851560][ T5862] usb 5-1: USB disconnect, device number 29 [ 305.047078][ T10] usb 1-1: config 255 has an invalid interface number: 20 but max is 0 [ 305.066024][ T10] usb 1-1: config 255 has no interface number 0 [ 305.089510][ T10] usb 1-1: config 255 interface 20 has no altsetting 0 [ 305.100771][ T10] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 305.120348][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.128396][ T10] usb 1-1: Product: syz [ 305.134807][ T30] audit: type=1400 audit(305.110:585): avc: denied { create } for pid=8993 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 305.154387][ T8996] netlink: 72 bytes leftover after parsing attributes in process `syz.1.810'. [ 305.168148][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 305.179458][ T10] usb 1-1: Manufacturer: syz [ 305.183797][ T30] audit: type=1400 audit(305.110:586): avc: denied { bind } for pid=8993 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 305.184163][ T10] usb 1-1: SerialNumber: syz [ 305.682148][ T8992] veth5: entered promiscuous mode [ 305.883406][ T8986] netlink: 277 bytes leftover after parsing attributes in process `syz.0.807'. [ 306.020404][ T9007] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 306.041716][ T8986] IPVS: stopping master sync thread 9007 ... [ 306.444367][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 306.454214][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.463162][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.051260][ T9013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.388895][ T10] usb 1-1: USB disconnect, device number 17 [ 307.629531][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.317123][ T5911] usb 3-1: config 255 has an invalid interface number: 20 but max is 0 [ 308.519893][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 308.641232][ T5911] usb 3-1: config 255 has no interface number 0 [ 308.658417][ T5911] usb 3-1: config 255 interface 20 has no altsetting 0 [ 308.667648][ T5911] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 308.684871][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.709580][ T5911] usb 3-1: Product: syz [ 308.714092][ T5911] usb 3-1: Manufacturer: syz [ 308.725569][ T5911] usb 3-1: SerialNumber: syz [ 308.743626][ T9034] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 308.770119][ T9034] bond4: entered promiscuous mode [ 308.775581][ T9034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.789511][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 308.799199][ T10] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 308.838397][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.889435][ T10] usb 1-1: config 0 has no interface number 0 [ 308.902218][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 308.930793][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 308.981220][ T9024] netlink: 277 bytes leftover after parsing attributes in process `syz.2.817'. [ 309.063228][ T10] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.087634][ T972] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 309.097657][ T9045] IPVS: stopping master sync thread 9046 ... [ 309.103959][ T9046] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 309.628463][ T972] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 309.637868][ T10] usb 1-1: config 0 interface 52 has no altsetting 0 [ 309.717516][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 309.954176][ T10] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 309.962322][ T972] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 310.034420][ T10] usb 1-1: Manufacturer: syz [ 310.178121][ T10] usb 1-1: config 0 descriptor?? [ 310.309436][ T5911] usb 3-1: USB disconnect, device number 17 [ 310.394361][ T10] usb 1-1: Can not set alternate setting to 1, error: -71 [ 310.425886][ T10] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 310.832481][ T10] usb 1-1: USB disconnect, device number 18 [ 311.233661][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 311.734944][ T9067] loop9: detected capacity change from 0 to 1 [ 311.855745][ T9067] buffer_io_error: 7 callbacks suppressed [ 311.855757][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.880723][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 311.907302][ T9068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9068 comm=syz.1.828 [ 311.922080][ T30] audit: type=1400 audit(311.900:587): avc: denied { read } for pid=9062 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 312.121127][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.123112][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.337882][ T9077] overlayfs: failed to resolve './file1': -2 [ 314.078617][ T30] audit: type=1400 audit(314.050:588): avc: denied { wake_alarm } for pid=9074 comm="syz.1.831" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.269622][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.277976][ T9067] ldm_validate_partition_table(): Disk read failed. [ 314.292270][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.306165][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.319194][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.340463][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.353918][ T9067] Dev loop9: unable to read RDB block 0 [ 314.366735][ T9067] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.379474][ T9067] loop9: unable to read partition table [ 314.392275][ T9067] loop9: partition table beyond EOD, truncated [ 314.401629][ T9067] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 314.401629][ T9067] U) failed (rc=-5) [ 314.801286][ T5862] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 314.803196][ T9085] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 315.299585][ T9085] bond2: entered promiscuous mode [ 315.305839][ T9085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.393113][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.621575][ T5862] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 315.663236][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.793690][ T9095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.794373][ T5862] usb 3-1: config 0 descriptor?? [ 315.801121][ T9095] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 315.837908][ T9095] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 315.906827][ T9095] bond2: (slave ip6gre1): making interface the new active one [ 316.175398][ T9095] ip6gre1: entered promiscuous mode [ 316.182922][ T9095] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 316.261339][ T9106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.965621][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 316.993677][ T972] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 317.094871][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.455065][ T5862] usb 3-1: USB disconnect, device number 18 [ 317.469585][ T972] usb 4-1: config 255 has an invalid interface number: 20 but max is 0 [ 317.479088][ T972] usb 4-1: config 255 has no interface number 0 [ 317.501297][ T972] usb 4-1: config 255 interface 20 has no altsetting 0 [ 317.623318][ T972] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 317.647061][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.178632][ T972] usb 4-1: Product: syz [ 318.183398][ T972] usb 4-1: Manufacturer: syz [ 318.189186][ T972] usb 4-1: SerialNumber: syz [ 318.201825][ T10] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 318.219520][ T10] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 318.244559][ T10] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.278032][ T5863] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 318.294985][ T5863] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 318.339067][ T5863] hid-generic 0000:0003:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz1 [ 318.398169][ T9104] netlink: 277 bytes leftover after parsing attributes in process `syz.3.838'. [ 318.482159][ T9133] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 318.483226][ T9104] IPVS: stopping master sync thread 9133 ... [ 318.594628][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 318.603552][ T30] audit: type=1400 audit(318.570:589): avc: denied { append } for pid=9132 comm="syz.2.845" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 319.962699][ T972] usb 4-1: USB disconnect, device number 34 [ 320.239640][ T5911] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.289919][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 320.320792][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 320.399447][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 320.406890][ T5911] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 320.416331][ T5911] usb 2-1: config 0 has no interface number 0 [ 320.422703][ T5911] usb 2-1: config 0 interface 184 has no altsetting 0 [ 320.432625][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.445332][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.455133][ T5911] usb 2-1: Product: syz [ 320.460176][ T5911] usb 2-1: Manufacturer: syz [ 320.462267][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 320.467175][ T5911] usb 2-1: SerialNumber: syz [ 320.484607][ T5911] usb 2-1: config 0 descriptor?? [ 320.491187][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.493924][ T5911] smsc75xx v1.0.0 [ 320.503858][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 320.523364][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.535646][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 320.552259][ T5863] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 320.561460][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 320.571956][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.582758][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.591313][ T5863] usb 1-1: config 0 has no interface number 0 [ 320.598320][ T5863] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 320.612839][ T10] usb 3-1: config 0 descriptor?? [ 320.623227][ T5863] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 320.638298][ T5863] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 320.650269][ T5863] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 320.664576][ T5863] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 320.681026][ T5863] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 320.703658][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.719738][ T5863] usb 1-1: config 0 descriptor?? [ 320.726374][ T9152] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 320.742253][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.844793][ T5133] block nbd3: Receive control failed (result -32) [ 320.845424][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.853733][ T5818] block nbd3: Receive control failed (result -32) [ 320.878066][ T9155] block nbd3: shutting down sockets [ 321.455436][ T5863] usb 1-1: USB disconnect, device number 19 [ 321.571791][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 321.585468][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.602083][ T9159] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 321.611685][ T10] usb 3-1: USB disconnect, device number 19 [ 321.640033][ T9159] bond2: entered promiscuous mode [ 321.645798][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.699791][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 322.719054][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 322.731013][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 322.745942][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 322.756125][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 322.766929][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 322.777060][ T5911] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 322.833539][ T5911] usb 2-1: USB disconnect, device number 22 [ 322.852104][ T9169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'. [ 323.358813][ T6183] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 323.393077][ T6183] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 323.430001][ T6183] hid-generic 0000:0003:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 323.636631][ T30] audit: type=1400 audit(323.560:590): avc: denied { map } for pid=9176 comm="syz.3.857" path="socket:[21916]" dev="sockfs" ino=21916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.848953][ T30] audit: type=1400 audit(323.560:591): avc: denied { read accept } for pid=9176 comm="syz.3.857" path="socket:[21916]" dev="sockfs" ino=21916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.797738][ T6183] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 325.629550][ T30] audit: type=1400 audit(325.580:592): avc: denied { write } for pid=9194 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.654955][ T6183] usb 2-1: config 255 has an invalid interface number: 20 but max is 0 [ 325.672824][ T6183] usb 2-1: config 255 has no interface number 0 [ 325.687556][ T6183] usb 2-1: config 255 interface 20 has no altsetting 0 [ 325.718084][ T6183] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 325.756717][ T6183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.820518][ T9204] netlink: 152 bytes leftover after parsing attributes in process `syz.2.864'. [ 325.831798][ T9204] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 325.838000][ T6183] usb 2-1: Product: syz [ 325.852354][ T6183] usb 2-1: Manufacturer: syz [ 325.892665][ T6183] usb 2-1: SerialNumber: syz [ 326.137202][ T30] audit: type=1400 audit(326.070:593): avc: denied { getopt } for pid=9203 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.233080][ T9191] netlink: 277 bytes leftover after parsing attributes in process `syz.1.861'. [ 326.390715][ T9207] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 326.427062][ T9191] IPVS: stopping master sync thread 9207 ... [ 329.114681][ T6183] usb 2-1: USB disconnect, device number 23 [ 329.339639][ T118] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 329.341452][ T10] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 329.616095][ T10] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 329.631395][ T9232] loop9: detected capacity change from 0 to 1 [ 329.637878][ T10] hid-generic 0000:0003:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 329.703054][ T9232] buffer_io_error: 2 callbacks suppressed [ 329.704142][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.720664][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.737394][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.762198][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.774907][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.873'. [ 329.806067][ T118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.834044][ T118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 329.854706][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.855818][ T9231] veth3: entered promiscuous mode [ 329.862760][ T118] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 329.878920][ T9232] ldm_validate_partition_table(): Disk read failed. [ 329.886841][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.897722][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.908290][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.919796][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.930319][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.940324][ T9232] Dev loop9: unable to read RDB block 0 [ 329.949552][ T9232] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.977432][ T9232] loop9: unable to read partition table [ 329.984990][ T118] usb 5-1: config 0 descriptor?? [ 330.002069][ T9222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 330.013721][ T9232] loop9: partition table beyond EOD, truncated [ 330.020578][ T9232] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 330.020578][ T9232] U) failed (rc=-5) [ 330.198909][ T118] usbhid 5-1:0.0: can't add hid device: -71 [ 330.206407][ T118] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.497956][ T118] usb 5-1: USB disconnect, device number 30 [ 333.560689][ T30] audit: type=1400 audit(333.070:594): avc: denied { execute_no_trans } for pid=9271 comm="syz.3.884" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=22884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 333.599510][ T30] audit: type=1400 audit(333.100:595): avc: denied { mounton } for pid=9271 comm="syz.3.884" path="/164/file0" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.635505][ T10] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 333.643548][ T10] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 333.656362][ T10] hid-generic 0000:0003:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 334.174576][ T9290] loop9: detected capacity change from 0 to 1 [ 334.191330][ T9290] ldm_validate_partition_table(): Disk read failed. [ 334.209584][ T9290] Dev loop9: unable to read RDB block 0 [ 334.215789][ T9290] loop9: unable to read partition table [ 334.807221][ T9290] loop9: partition table beyond EOD, truncated [ 334.814567][ T9290] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 334.814567][ T9290] U) failed (rc=-5) [ 335.386660][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 335.755187][ T30] audit: type=1400 audit(335.720:596): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 336.006167][ T9297] veth5: entered promiscuous mode [ 336.162166][ T9315] SELinux: syz.4.893 (9315) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 336.979562][ T30] audit: type=1400 audit(336.050:597): avc: denied { bind } for pid=9303 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 337.631090][ T30] audit: type=1400 audit(336.940:598): avc: denied { name_bind } for pid=9306 comm="syz.3.895" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 337.695587][ T9315] bridge1: entered promiscuous mode [ 337.771718][ T30] audit: type=1400 audit(337.750:599): avc: denied { map } for pid=9323 comm="syz.3.898" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 337.794173][ T9324] mkiss: ax0: crc mode is auto. [ 337.888171][ T30] audit: type=1400 audit(337.750:600): avc: denied { execute } for pid=9323 comm="syz.3.898" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 338.053808][ T30] audit: type=1400 audit(337.860:601): avc: denied { ioctl } for pid=9322 comm="syz.2.897" path="socket:[22315]" dev="sockfs" ino=22315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 338.064175][ T9331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9331 comm=syz.2.897 [ 338.094826][ T5863] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 338.104798][ T30] audit: type=1400 audit(337.890:602): avc: denied { getopt } for pid=9322 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 338.369904][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 338.378992][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.405884][ T10] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 338.419820][ T10] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 338.427977][ T5863] usb 4-1: config 0 descriptor?? [ 338.436636][ T10] hid-generic 0000:0003:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 339.264334][ T5863] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 339.607218][ T9344] netlink: 152 bytes leftover after parsing attributes in process `syz.1.904'. [ 339.617158][ T9344] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 340.299145][ T9354] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 341.159579][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 341.215018][ T9357] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 341.889396][ T10] usb 5-1: config 255 has an invalid interface number: 20 but max is 0 [ 341.901336][ T10] usb 5-1: config 255 has no interface number 0 [ 342.123912][ T5863] gspca_stv06xx: I2C: Read error writing address: -71 [ 342.160621][ T5863] usb 4-1: USB disconnect, device number 35 [ 342.190944][ T10] usb 5-1: config 255 interface 20 has no altsetting 0 [ 342.230442][ T10] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 342.244916][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.279559][ T10] usb 5-1: Product: syz [ 342.285800][ T10] usb 5-1: Manufacturer: syz [ 342.294344][ T10] usb 5-1: SerialNumber: syz [ 343.289480][ T9363] batadv_slave_0: entered promiscuous mode [ 343.487642][ T10] usb 5-1: USB disconnect, device number 31 [ 345.095347][ T9363] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 348.077410][ T5863] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 348.092620][ T5863] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 348.116131][ T5863] hid-generic 0000:0003:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 348.531124][ T9405] netlink: 152 bytes leftover after parsing attributes in process `syz.4.918'. [ 348.540634][ T9405] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 350.689538][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 351.950290][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 351.971127][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 351.989438][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.076431][ T10] usb 4-1: config 0 descriptor?? [ 352.344584][ T9437] netlink: 116 bytes leftover after parsing attributes in process `syz.1.930'. [ 352.355271][ T30] audit: type=1400 audit(352.320:603): avc: denied { nlmsg_read } for pid=9435 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.843724][ T5911] hid-generic 0000:0003:0000.0019: unknown main item tag 0x0 [ 353.852475][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 353.859006][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 353.880506][ T5911] hid-generic 0000:0003:0000.0019: unknown main item tag 0x0 [ 353.914219][ T10] usb 4-1: USB disconnect, device number 36 [ 353.939048][ T5911] hid-generic 0000:0003:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 354.095232][ T30] audit: type=1400 audit(354.040:604): avc: denied { write } for pid=9451 comm="syz.1.934" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 354.117576][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.609199][ T30] audit: type=1400 audit(354.040:605): avc: denied { listen } for pid=9451 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 354.632958][ T30] audit: type=1400 audit(354.040:606): avc: denied { accept } for pid=9451 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 356.006405][ T9476] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 356.539382][ T9489] netlink: 152 bytes leftover after parsing attributes in process `syz.1.944'. [ 356.548684][ T9489] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 357.215480][ T9492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.945'. [ 357.224746][ T9492] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 358.731837][ T10] hid-generic 0000:0003:0000.001A: unknown main item tag 0x0 [ 358.743427][ T10] hid-generic 0000:0003:0000.001A: unknown main item tag 0x0 [ 358.751885][ T10] hid-generic 0000:0003:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 358.775828][ T30] audit: type=1400 audit(358.750:607): avc: denied { connect } for pid=9508 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 358.863205][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 358.890149][ T9517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.721312][ T81] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 359.737141][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.882546][ T81] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 359.942624][ T81] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.971603][ T81] usb 4-1: Product: syz [ 360.148652][ T81] usb 4-1: Manufacturer: syz [ 360.159187][ T81] usb 4-1: SerialNumber: syz [ 360.178093][ T81] usb 4-1: config 0 descriptor?? [ 360.636217][ T9521] set match dimension is over the limit! [ 360.653194][ T81] airspy 4-1:0.0: Board ID: 00 [ 360.663271][ T81] airspy 4-1:0.0: Firmware version: [ 360.819414][ T972] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 360.973746][ T972] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 360.989385][ T972] usb 1-1: config 0 has no interface number 0 [ 361.011998][ T972] usb 1-1: too many endpoints for config 0 interface 107 altsetting 64: 231, using maximum allowed: 30 [ 361.047854][ T972] usb 1-1: config 0 interface 107 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 361.089577][ T972] usb 1-1: config 0 interface 107 has no altsetting 0 [ 361.106714][ T972] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 361.136681][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.165470][ T972] usb 1-1: config 0 descriptor?? [ 361.909851][ T81] airspy 4-1:0.0: usb_control_msg() failed -110 request 0e [ 361.941252][ T972] usb 1-1: string descriptor 0 read error: -71 [ 361.972529][ T972] usb 1-1: USB disconnect, device number 20 [ 362.287358][ T81] airspy 4-1:0.0: Registered as swradio24 [ 362.295106][ T81] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 363.209577][ T81] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 363.239646][ T9573] cgroup: Invalid name [ 363.323639][ T9573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9573 comm=syz.2.962 [ 363.401852][ T972] usb 4-1: USB disconnect, device number 37 [ 363.446975][ T30] audit: type=1107 audit(363.416:608): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 363.563153][ T81] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.603659][ T30] audit: type=1400 audit(363.576:609): avc: denied { create } for pid=9581 comm="syz.4.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 363.612638][ T81] usb 1-1: config 84 has an invalid interface number: 111 but max is 0 [ 363.687331][ T81] usb 1-1: config 84 has no interface number 0 [ 363.699410][ T81] usb 1-1: config 84 interface 111 has no altsetting 0 [ 363.721466][ T81] usb 1-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 363.759119][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.816157][ T81] usb 1-1: Product: syz [ 363.864015][ T81] usb 1-1: Manufacturer: syz [ 363.944869][ T81] usb 1-1: SerialNumber: syz [ 364.740765][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 364.930009][ T972] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 364.983879][ T5863] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 365.030671][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.050620][ T5863] usb 2-1: config 0 descriptor?? [ 365.257796][ T972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.292802][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.319242][ T972] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 365.799814][ T81] usb 1-1: bad CDC descriptors [ 365.928704][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.973245][ T81] usb 1-1: USB disconnect, device number 21 [ 366.033309][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 366.053332][ T972] usb 4-1: config 0 descriptor?? [ 366.082205][ T972] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 366.112350][ T972] dvb-usb: bulk message failed: -22 (3/0) [ 366.119109][ T5863] ath6kl: Failed to submit usb control message: -71 [ 366.129277][ T972] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 366.139428][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 366.146551][ T5863] ath6kl: Unable to send get target info: -71 [ 366.170371][ T972] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 366.177534][ T972] usb 4-1: media controller created [ 366.197755][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 366.208350][ T5863] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 366.226220][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.255484][ T5863] usb 2-1: USB disconnect, device number 24 [ 366.262566][ T972] dvb-usb: bulk message failed: -22 (6/0) [ 366.274005][ T972] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 366.303308][ T972] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 366.331121][ T972] dvb-usb: schedule remote query interval to 150 msecs. [ 366.338758][ T972] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 366.372197][ T30] audit: type=1400 audit(366.326:610): avc: denied { sqpoll } for pid=9596 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 366.482655][ T30] audit: type=1400 audit(366.326:611): avc: denied { create } for pid=9596 comm="syz.3.970" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.507967][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 366.515387][ T5863] dvb-usb: error while querying for an remote control event. [ 366.526402][ T30] audit: type=1400 audit(366.326:612): avc: denied { map } for pid=9596 comm="syz.3.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.603215][ T30] audit: type=1400 audit(366.326:613): avc: denied { read write } for pid=9596 comm="syz.3.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 366.679604][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 366.685444][ T5863] dvb-usb: error while querying for an remote control event. [ 366.859690][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 366.869474][ T5863] dvb-usb: error while querying for an remote control event. [ 367.089393][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 367.095328][ T5863] dvb-usb: error while querying for an remote control event. [ 367.300491][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 367.306323][ T5863] dvb-usb: error while querying for an remote control event. [ 367.394062][ T5863] usb 4-1: USB disconnect, device number 38 [ 367.447293][ T6137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.478869][ T5863] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 368.853501][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.871249][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.879914][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.993490][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.023922][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.035452][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.237824][ T30] audit: type=1400 audit(369.156:614): avc: denied { mounton } for pid=9641 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 369.314056][ T6137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.282404][ T9651] syz.0.987: attempt to access beyond end of device [ 370.282404][ T9651] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 370.333678][ T9651] VFS: could not find a valid V7 on nbd0. [ 370.443958][ T9656] loop9: detected capacity change from 0 to 8 [ 370.572496][ T9656] Dev loop9: unable to read RDB block 8 [ 370.578154][ T9656] loop9: unable to read partition table [ 370.586801][ T6137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.606835][ T9656] loop9: partition table beyond EOD, truncated [ 370.732614][ T9656] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 371.152713][ T6137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.190577][ T5133] Bluetooth: hci0: command tx timeout [ 372.133036][ T5866] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 372.145817][ T5866] hid-generic 0000:0003:0000.001B: unknown main item tag 0x0 [ 372.178291][ T5866] hid-generic 0000:0003:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 372.314507][ T9641] chnl_net:caif_netlink_parms(): no params data found [ 372.464129][ T6137] bridge_slave_1: left allmulticast mode [ 372.475816][ T9694] netlink: 68 bytes leftover after parsing attributes in process `syz.4.997'. [ 372.481393][ T6137] bridge_slave_1: left promiscuous mode [ 372.540541][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'. [ 372.611140][ T9694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.997'. [ 372.674799][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.693309][ T6137] bridge_slave_0: left allmulticast mode [ 372.698997][ T6137] bridge_slave_0: left promiscuous mode [ 373.269396][ T5133] Bluetooth: hci0: command tx timeout [ 373.385648][ T9697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.997'. [ 373.405831][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.445090][ T9703] Bluetooth: MGMT ver 1.23 [ 374.459673][ T6137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.627615][ T6137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.649805][ T6137] bond0 (unregistering): Released all slaves [ 375.846375][ T5133] Bluetooth: hci0: command tx timeout [ 376.242141][ T9723] kAFS: unparsable volume name [ 376.548585][ T6137] bond1 (unregistering): Released all slaves [ 376.666667][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 376.700857][ T9732] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 376.867898][ T30] audit: type=1400 audit(376.766:615): avc: denied { ioctl } for pid=9731 comm="syz.3.1007" path="socket:[24390]" dev="sockfs" ino=24390 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 377.095856][ T6137] bond2 (unregistering): Released all slaves [ 377.115969][ T6137] bond3 (unregistering): Released all slaves [ 377.340968][ T6137] tipc: Left network mode [ 377.661252][ T9751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1010'. [ 377.704321][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 377.723314][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 377.800923][ T9751] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1010'. [ 377.934543][ T5818] Bluetooth: hci0: command tx timeout [ 378.118748][ T9641] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.154669][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.191133][ T9641] bridge_slave_0: entered allmulticast mode [ 378.229690][ T9641] bridge_slave_0: entered promiscuous mode [ 378.617378][ T9641] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.643690][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.682638][ T9641] bridge_slave_1: entered allmulticast mode [ 378.689840][ T9641] bridge_slave_1: entered promiscuous mode [ 378.838586][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 378.856575][ T5866] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 378.868162][ T5866] hid-generic 0000:0003:0000.001C: unknown main item tag 0x0 [ 378.950423][ T5866] hid-generic 0000:0003:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 379.024678][ T9641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.182286][ T9641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.461706][ T30] audit: type=1400 audit(379.436:616): avc: denied { create } for pid=9785 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.792959][ T30] audit: type=1400 audit(379.466:617): avc: denied { write } for pid=9785 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 379.855259][ T30] audit: type=1400 audit(379.546:618): avc: denied { write } for pid=9785 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 379.976071][ T6137] hsr_slave_0: left promiscuous mode [ 380.015803][ T6137] hsr_slave_1: left promiscuous mode [ 380.364183][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.406348][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.449673][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.485045][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.495197][ T30] audit: type=1400 audit(380.456:619): avc: denied { ioctl } for pid=9794 comm="syz.4.1018" path="socket:[24980]" dev="sockfs" ino=24980 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 380.553354][ T6137] veth0_macvtap: left promiscuous mode [ 380.563282][ T6137] veth0_vlan: left promiscuous mode [ 382.394671][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 382.589051][ T30] audit: type=1400 audit(382.546:620): avc: denied { map } for pid=9830 comm="syz.4.1025" path="socket:[25064]" dev="sockfs" ino=25064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 383.119296][ T30] audit: type=1400 audit(382.546:621): avc: denied { accept } for pid=9830 comm="syz.4.1025" path="socket:[25064]" dev="sockfs" ino=25064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 383.341672][ T30] audit: type=1400 audit(383.296:622): avc: denied { bind } for pid=9840 comm="syz.0.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 383.635226][ T6137] team0 (unregistering): Port device team_slave_1 removed [ 383.692931][ T6137] team0 (unregistering): Port device team_slave_0 removed [ 384.169089][ T9641] team0: Port device team_slave_0 added [ 384.258205][ T9641] team0: Port device team_slave_1 added [ 384.365556][ T30] audit: type=1400 audit(384.336:623): avc: denied { create } for pid=9856 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.406317][ T30] audit: type=1400 audit(384.366:624): avc: denied { setopt } for pid=9856 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.429251][ T30] audit: type=1400 audit(384.366:625): avc: denied { getopt } for pid=9856 comm="syz.0.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.500254][ T30] audit: type=1400 audit(384.376:626): avc: denied { read } for pid=9856 comm="syz.0.1034" path="socket:[25622]" dev="sockfs" ino=25622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.544721][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.551870][ T5863] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 384.559504][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.559534][ T9641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.606303][ T9641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.624526][ T9641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.749021][ T9641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.885420][ T5863] usb 2-1: config 255 has an invalid interface number: 20 but max is 0 [ 384.981156][ T5863] usb 2-1: config 255 has no interface number 0 [ 385.021263][ T5863] usb 2-1: config 255 interface 20 has no altsetting 0 [ 385.141297][ T5863] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 385.178890][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.192859][ T5863] usb 2-1: Product: syz [ 385.197161][ T5863] usb 2-1: Manufacturer: syz [ 385.202142][ T5863] usb 2-1: SerialNumber: syz [ 385.373740][ T9641] hsr_slave_0: entered promiscuous mode [ 385.384325][ T9641] hsr_slave_1: entered promiscuous mode [ 385.645147][ T9853] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1032'. [ 385.889134][ T9885] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 385.897251][ T5863] usb 2-1: USB disconnect, device number 25 [ 386.102384][ T9889] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 386.184295][ T9889] bond3: entered promiscuous mode [ 386.189850][ T9889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.345932][ T9641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.387619][ T9641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.445727][ T9641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.503323][ T9641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.903923][ T5863] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 387.014162][ T9641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.127207][ T5863] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 387.136178][ T5863] usb 1-1: config 0 has no interface number 0 [ 387.285159][ T9641] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.323029][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.330148][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.349582][ T5863] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 387.369423][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.399132][ T5863] usb 1-1: Product: syz [ 387.705691][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.717191][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.727180][ T5863] usb 1-1: Manufacturer: syz [ 387.731909][ T5863] usb 1-1: SerialNumber: syz [ 387.742413][ T5863] usb 1-1: config 0 descriptor?? [ 387.805102][ T30] audit: type=1400 audit(387.776:627): avc: denied { bind } for pid=9924 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 387.806336][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 387.823859][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.884189][ T30] audit: type=1400 audit(387.776:628): avc: denied { name_bind } for pid=9924 comm="syz.3.1045" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 387.924892][ T9641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.946457][ T9641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.961747][ T30] audit: type=1400 audit(387.836:629): avc: denied { connect } for pid=9924 comm="syz.3.1045" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.015178][ T30] audit: type=1400 audit(387.836:630): avc: denied { name_connect } for pid=9924 comm="syz.3.1045" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 388.049460][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 388.136985][ T30] audit: type=1400 audit(388.016:631): avc: denied { setopt } for pid=9924 comm="syz.3.1045" laddr=::ffff:172.20.20.20 lport=20001 faddr=::ffff:172.20.20.20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 388.162430][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.241125][ T30] audit: type=1400 audit(388.206:632): avc: denied { sys_chroot } for pid=9937 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 388.274060][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 388.290668][ T30] audit: type=1400 audit(388.206:633): avc: denied { setgid } for pid=9937 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 388.318976][ T30] audit: type=1400 audit(388.216:634): avc: denied { setrlimit } for pid=9937 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 388.390931][ T5863] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 388.399976][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.648035][ T10] usb 5-1: Product: syz [ 388.676016][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 388.690680][ T10] usb 5-1: Manufacturer: syz [ 388.698901][ T10] usb 5-1: SerialNumber: syz [ 388.706706][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 388.810237][ T10] usb 5-1: config 0 descriptor?? [ 388.817650][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 388.826015][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 388.839679][ T5863] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 388.874961][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.905058][ T5863] usb 1-1: USB disconnect, device number 22 [ 388.940453][ T5863] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 389.004950][ T5863] keyspan 1-1:0.133: device disconnected [ 389.110391][ T9955] sp0: Synchronizing with TNC [ 389.143776][ T12] [ 389.146112][ T12] ===================================================== [ 389.153012][ T12] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 389.160441][ T12] 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 Not tainted [ 389.167512][ T12] ----------------------------------------------------- [ 389.174425][ T12] kworker/u8:0/12 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 389.182039][ T12] ffffffff8f353438 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 389.190230][ T12] [ 389.190230][ T12] and this task is already holding: [ 389.197763][ T12] ffffffff9ab842d8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 389.206673][ T12] which would create a new lock dependency: [ 389.212659][ T12] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 389.220480][ T12] [ 389.220480][ T12] but this new dependency connects a HARDIRQ-irq-safe lock: [ 389.230026][ T12] (&port_lock_key){-.-.}-{3:3} [ 389.230047][ T12] [ 389.230047][ T12] ... which became HARDIRQ-irq-safe at: [ 389.242804][ T12] lock_acquire.part.0+0x11b/0x380 [ 389.248012][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.253381][ T12] serial8250_handle_irq+0x95/0xc80 [ 389.258768][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 389.264746][ T12] serial8250_interrupt+0x103/0x210 [ 389.270447][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 389.276241][ T12] handle_irq_event+0xab/0x1e0 [ 389.281073][ T12] handle_edge_irq+0x263/0xd10 [ 389.285912][ T12] __common_interrupt+0xdf/0x250 [ 389.290941][ T12] common_interrupt+0xba/0xe0 [ 389.295712][ T12] asm_common_interrupt+0x26/0x40 [ 389.300858][ T12] smp_call_function_many_cond+0x4c6/0x12c0 [ 389.306822][ T12] on_each_cpu_cond_mask+0x40/0x90 [ 389.312006][ T12] text_poke_bp_batch+0x22b/0x760 [ 389.317109][ T12] text_poke_finish+0x30/0x40 [ 389.321871][ T12] arch_jump_label_transform_apply+0x1c/0x30 [ 389.327931][ T12] jump_label_update+0x1d7/0x400 [ 389.332937][ T12] static_key_enable_cpuslocked+0x1b7/0x270 [ 389.338904][ T12] static_key_enable+0x1a/0x20 [ 389.343736][ T12] toggle_allocation_gate+0xfc/0x260 [ 389.349083][ T12] process_one_work+0x9c5/0x1ba0 [ 389.354084][ T12] worker_thread+0x6c8/0xf00 [ 389.358741][ T12] kthread+0x3af/0x750 [ 389.362870][ T12] ret_from_fork+0x45/0x80 [ 389.367356][ T12] ret_from_fork_asm+0x1a/0x30 [ 389.372176][ T12] [ 389.372176][ T12] to a HARDIRQ-irq-unsafe lock: [ 389.379169][ T12] (disc_data_lock){.+.+}-{3:3} [ 389.379185][ T12] [ 389.379185][ T12] ... which became HARDIRQ-irq-unsafe at: [ 389.391847][ T12] ... [ 389.391851][ T12] lock_acquire.part.0+0x11b/0x380 [ 389.399580][ T12] _raw_read_lock+0x5f/0x70 [ 389.404232][ T12] sp_get+0x18/0xf0 [ 389.408110][ T12] sixpack_receive_buf+0x59/0x1c80 [ 389.413368][ T12] tty_ioctl+0x575/0x15d0 [ 389.417756][ T12] __x64_sys_ioctl+0x190/0x200 [ 389.422597][ T12] do_syscall_64+0xcd/0x250 [ 389.427158][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.433118][ T12] [ 389.433118][ T12] other info that might help us debug this: [ 389.433118][ T12] [ 389.443337][ T12] Possible interrupt unsafe locking scenario: [ 389.443337][ T12] [ 389.451655][ T12] CPU0 CPU1 [ 389.457064][ T12] ---- ---- [ 389.462764][ T12] lock(disc_data_lock); [ 389.467090][ T12] local_irq_disable(); [ 389.473919][ T12] lock(&port_lock_key); [ 389.480762][ T12] lock(disc_data_lock); [ 389.487603][ T12] [ 389.491039][ T12] lock(&port_lock_key); [ 389.495691][ T12] [ 389.495691][ T12] *** DEADLOCK *** [ 389.495691][ T12] [ 389.503929][ T12] 6 locks held by kworker/u8:0/12: [ 389.509039][ T12] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 389.520174][ T12] #1: ffffc90000117d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 389.531205][ T12] #2: ffff888025038ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 389.540275][ T12] #3: ffff88802866f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 389.549567][ T12] #4: ffffffff9ab842d8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 389.558689][ T12] #5: ffff88802866f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 389.567976][ T12] [ 389.567976][ T12] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 389.578359][ T12] -> (&port_lock_key){-.-.}-{3:3} { [ 389.583583][ T12] IN-HARDIRQ-W at: [ 389.587642][ T12] lock_acquire.part.0+0x11b/0x380 [ 389.594403][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.601342][ T12] serial8250_handle_irq+0x95/0xc80 [ 389.608217][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 389.615779][ T12] serial8250_interrupt+0x103/0x210 [ 389.622671][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 389.629980][ T12] handle_irq_event+0xab/0x1e0 [ 389.636387][ T12] handle_edge_irq+0x263/0xd10 [ 389.642775][ T12] __common_interrupt+0xdf/0x250 [ 389.649372][ T12] common_interrupt+0xba/0xe0 [ 389.655780][ T12] asm_common_interrupt+0x26/0x40 [ 389.662434][ T12] smp_call_function_many_cond+0x4c6/0x12c0 [ 389.669963][ T12] on_each_cpu_cond_mask+0x40/0x90 [ 389.676729][ T12] text_poke_bp_batch+0x22b/0x760 [ 389.683381][ T12] text_poke_finish+0x30/0x40 [ 389.689700][ T12] arch_jump_label_transform_apply+0x1c/0x30 [ 389.697308][ T12] jump_label_update+0x1d7/0x400 [ 389.703879][ T12] static_key_enable_cpuslocked+0x1b7/0x270 [ 389.711447][ T12] static_key_enable+0x1a/0x20 [ 389.717853][ T12] toggle_allocation_gate+0xfc/0x260 [ 389.724820][ T12] process_one_work+0x9c5/0x1ba0 [ 389.731400][ T12] worker_thread+0x6c8/0xf00 [ 389.737630][ T12] kthread+0x3af/0x750 [ 389.743320][ T12] ret_from_fork+0x45/0x80 [ 389.749359][ T12] ret_from_fork_asm+0x1a/0x30 [ 389.755748][ T12] IN-SOFTIRQ-W at: [ 389.759699][ T12] lock_acquire.part.0+0x11b/0x380 [ 389.766434][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.773254][ T12] serial8250_handle_irq+0x95/0xc80 [ 389.780077][ T12] serial8250_default_handle_irq+0x9a/0x210 [ 389.787593][ T12] serial8250_interrupt+0x103/0x210 [ 389.794421][ T12] __handle_irq_event_percpu+0x229/0x7d0 [ 389.801680][ T12] handle_irq_event+0xab/0x1e0 [ 389.808062][ T12] handle_edge_irq+0x263/0xd10 [ 389.814447][ T12] __common_interrupt+0xdf/0x250 [ 389.821006][ T12] common_interrupt+0x61/0xe0 [ 389.827307][ T12] asm_common_interrupt+0x26/0x40 [ 389.833970][ T12] ktime_get+0xad/0x310 [ 389.839766][ T12] __blk_mq_end_request+0x3bc/0x5b0 [ 389.846605][ T12] scsi_end_request+0x43b/0x9a0 [ 389.853211][ T12] scsi_io_completion+0x17c/0x14c0 [ 389.859979][ T12] scsi_complete+0x124/0x250 [ 389.866220][ T12] blk_complete_reqs+0xae/0xf0 [ 389.872719][ T12] handle_softirqs+0x213/0x8f0 [ 389.879133][ T12] __irq_exit_rcu+0x109/0x170 [ 389.885442][ T12] irq_exit_rcu+0x9/0x30 [ 389.891321][ T12] common_interrupt+0xbf/0xe0 [ 389.897648][ T12] asm_common_interrupt+0x26/0x40 [ 389.904321][ T12] acpi_safe_halt+0x1a/0x20 [ 389.910451][ T12] acpi_idle_enter+0xc5/0x160 [ 389.916770][ T12] cpuidle_enter_state+0xaa/0x4f0 [ 389.923612][ T12] cpuidle_enter+0x4e/0xa0 [ 389.929659][ T12] do_idle+0x310/0x3f0 [ 389.935360][ T12] cpu_startup_entry+0x4f/0x60 [ 389.941746][ T12] start_secondary+0x222/0x2b0 [ 389.948133][ T12] common_startup_64+0x13e/0x148 [ 389.955061][ T12] INITIAL USE at: [ 389.958949][ T12] lock_acquire.part.0+0x11b/0x380 [ 389.965610][ T12] _raw_spin_lock_irqsave+0x3a/0x60 [ 389.972409][ T12] serial8250_do_set_termios+0x307/0x16f0 [ 389.979687][ T12] serial8250_set_termios+0x6e/0x80 [ 389.986432][ T12] uart_set_options+0x31b/0x5f0 [ 389.992828][ T12] serial8250_console_setup+0x18a/0x460 [ 389.999936][ T12] univ8250_console_setup+0x1d4/0x2c0 [ 390.006940][ T12] try_enable_preferred_console+0x2fd/0x530 [ 390.014393][ T12] register_console+0x3ac/0x1170 [ 390.020870][ T12] univ8250_console_init+0x5f/0x90 [ 390.027527][ T12] console_init+0x154/0x690 [ 390.033568][ T12] start_kernel+0x29f/0x4d0 [ 390.039615][ T12] x86_64_start_reservations+0x18/0x30 [ 390.046628][ T12] x86_64_start_kernel+0xb2/0xc0 [ 390.053103][ T12] common_startup_64+0x13e/0x148 [ 390.059580][ T12] } [ 390.062073][ T12] ... key at: [] port_lock_key+0x0/0x40 [ 390.069680][ T12] [ 390.069680][ T12] the dependencies between the lock to be acquired [ 390.069686][ T12] and HARDIRQ-irq-unsafe lock: [ 390.083156][ T12] -> (disc_data_lock){.+.+}-{3:3} { [ 390.088342][ T12] HARDIRQ-ON-R at: [ 390.092292][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.099028][ T12] _raw_read_lock+0x5f/0x70 [ 390.105167][ T12] sp_get+0x18/0xf0 [ 390.110610][ T12] sixpack_receive_buf+0x59/0x1c80 [ 390.117356][ T12] tty_ioctl+0x575/0x15d0 [ 390.123309][ T12] __x64_sys_ioctl+0x190/0x200 [ 390.129743][ T12] do_syscall_64+0xcd/0x250 [ 390.135883][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.143415][ T12] SOFTIRQ-ON-R at: [ 390.147374][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.154133][ T12] _raw_read_lock+0x5f/0x70 [ 390.160276][ T12] sp_get+0x18/0xf0 [ 390.165728][ T12] sixpack_receive_buf+0x59/0x1c80 [ 390.172492][ T12] tty_ioctl+0x575/0x15d0 [ 390.178550][ T12] __x64_sys_ioctl+0x190/0x200 [ 390.184968][ T12] do_syscall_64+0xcd/0x250 [ 390.191131][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.198834][ T12] INITIAL USE at: [ 390.202735][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.209419][ T12] _raw_write_lock_irq+0x36/0x50 [ 390.215921][ T12] sixpack_close+0x1e/0x2f0 [ 390.222009][ T12] tty_ldisc_close+0x111/0x1a0 [ 390.228517][ T12] tty_ldisc_kill+0x8e/0x150 [ 390.234769][ T12] tty_ldisc_hangup+0x311/0x6a0 [ 390.241183][ T12] __tty_hangup.part.0+0x3f8/0x890 [ 390.247839][ T12] tty_ioctl+0xf42/0x15d0 [ 390.253787][ T12] __x64_sys_ioctl+0x190/0x200 [ 390.260104][ T12] do_syscall_64+0xcd/0x250 [ 390.266179][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.273638][ T12] INITIAL READ USE at: [ 390.277942][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.285149][ T12] _raw_read_lock+0x5f/0x70 [ 390.291630][ T12] sp_get+0x18/0xf0 [ 390.297432][ T12] sixpack_receive_buf+0x59/0x1c80 [ 390.304538][ T12] tty_ioctl+0x575/0x15d0 [ 390.310887][ T12] __x64_sys_ioctl+0x190/0x200 [ 390.317641][ T12] do_syscall_64+0xcd/0x250 [ 390.324130][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.332045][ T12] } [ 390.334522][ T12] ... key at: [] disc_data_lock+0x18/0xfe0 [ 390.342483][ T12] ... acquired at: [ 390.346257][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.351520][ T12] _raw_read_lock+0x5f/0x70 [ 390.356176][ T12] sp_get+0x18/0xf0 [ 390.360153][ T12] sixpack_write_wakeup+0x20/0x390 [ 390.365433][ T12] tty_wakeup+0xe5/0x120 [ 390.369827][ T12] tty_port_default_wakeup+0x2a/0x40 [ 390.375273][ T12] serial8250_tx_chars+0x68e/0x860 [ 390.380533][ T12] __start_tx+0x3e9/0x4a0 [ 390.385029][ T12] serial8250_start_tx+0x368/0x530 [ 390.390378][ T12] __uart_start+0x292/0x4c0 [ 390.395026][ T12] uart_write+0x218/0xb30 [ 390.399502][ T12] sixpack_receive_buf+0x3d7/0x1c80 [ 390.404852][ T12] tty_ldisc_receive_buf+0x153/0x190 [ 390.410291][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 390.416169][ T12] flush_to_ldisc+0x264/0x780 [ 390.421016][ T12] process_one_work+0x9c5/0x1ba0 [ 390.426218][ T12] worker_thread+0x6c8/0xf00 [ 390.431233][ T12] kthread+0x3af/0x750 [ 390.435466][ T12] ret_from_fork+0x45/0x80 [ 390.440147][ T12] ret_from_fork_asm+0x1a/0x30 [ 390.445082][ T12] [ 390.447404][ T12] [ 390.447404][ T12] stack backtrace: [ 390.453280][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-rc6-syzkaller-00016-g0fed89a961ea #0 [ 390.453294][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.453301][ T12] Workqueue: events_unbound flush_to_ldisc [ 390.453317][ T12] Call Trace: [ 390.453322][ T12] [ 390.453327][ T12] dump_stack_lvl+0x116/0x1f0 [ 390.453343][ T12] check_irq_usage+0xf22/0x1290 [ 390.453359][ T12] ? __pfx_check_irq_usage+0x10/0x10 [ 390.453372][ T12] ? hlock_conflict+0x58/0x200 [ 390.453384][ T12] ? __bfs+0x2fa/0x670 [ 390.453395][ T12] ? __pfx_hlock_conflict+0x10/0x10 [ 390.453410][ T12] ? lockdep_lock+0xc6/0x200 [ 390.453420][ T12] ? __pfx_lockdep_lock+0x10/0x10 [ 390.453431][ T12] ? __lock_acquire+0x24b4/0x3c40 [ 390.453444][ T12] __lock_acquire+0x24b4/0x3c40 [ 390.453459][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 390.453473][ T12] ? lock_acquire.part.0+0x11b/0x380 [ 390.453488][ T12] lock_acquire.part.0+0x11b/0x380 [ 390.453502][ T12] ? sp_get+0x18/0xf0 [ 390.453517][ T12] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 390.453531][ T12] ? rcu_is_watching+0x12/0xc0 [ 390.453543][ T12] ? trace_lock_acquire+0x14e/0x1f0 [ 390.453553][ T12] ? sp_get+0x18/0xf0 [ 390.453566][ T12] ? lock_acquire+0x2f/0xb0 [ 390.453579][ T12] ? sp_get+0x18/0xf0 [ 390.453592][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 390.453607][ T12] _raw_read_lock+0x5f/0x70 [ 390.453617][ T12] ? sp_get+0x18/0xf0 [ 390.453630][ T12] sp_get+0x18/0xf0 [ 390.453644][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 390.453658][ T12] sixpack_write_wakeup+0x20/0x390 [ 390.453673][ T12] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 390.453688][ T12] tty_wakeup+0xe5/0x120 [ 390.453697][ T12] tty_port_default_wakeup+0x2a/0x40 [ 390.453711][ T12] serial8250_tx_chars+0x68e/0x860 [ 390.453726][ T12] __start_tx+0x3e9/0x4a0 [ 390.453739][ T12] serial8250_start_tx+0x368/0x530 [ 390.453753][ T12] __uart_start+0x292/0x4c0 [ 390.453762][ T12] uart_write+0x218/0xb30 [ 390.453775][ T12] sixpack_receive_buf+0x3d7/0x1c80 [ 390.453794][ T12] ? ldsem_down_read_trylock+0x121/0x180 [ 390.453808][ T12] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 390.453823][ T12] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 390.453838][ T12] tty_ldisc_receive_buf+0x153/0x190 [ 390.453850][ T12] tty_port_default_receive_buf+0x70/0xb0 [ 390.453863][ T12] flush_to_ldisc+0x264/0x780 [ 390.453875][ T12] ? lock_acquire+0x2f/0xb0 [ 390.453888][ T12] ? process_one_work+0x921/0x1ba0 [ 390.453902][ T12] process_one_work+0x9c5/0x1ba0 [ 390.453917][ T12] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 390.453930][ T12] ? __pfx_process_one_work+0x10/0x10 [ 390.453945][ T12] ? assign_work+0x1a0/0x250 [ 390.453957][ T12] worker_thread+0x6c8/0xf00 [ 390.453971][ T12] ? __pfx_worker_thread+0x10/0x10 [ 390.453984][ T12] kthread+0x3af/0x750 [ 390.453996][ T12] ? __pfx_kthread+0x10/0x10 [ 390.454007][ T12] ? lock_acquire+0x2f/0xb0 [ 390.454021][ T12] ? __pfx_kthread+0x10/0x10 [ 390.454032][ T12] ret_from_fork+0x45/0x80 [ 390.454046][ T12] ? __pfx_kthread+0x10/0x10 [ 390.454057][ T12] ret_from_fork_asm+0x1a/0x30 [ 390.454071][ T12] [ 390.455911][ T10] usb 5-1: failed to send control message: -110 [ 390.464846][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.753610][ T5911] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 390.773952][ T10] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 390.799519][ T10] usb 5-1: USB disconnect, device number 32 [ 390.806089][ T10] ch341 5-1:0.0: device disconnected [ 390.884512][ T9641] veth0_vlan: entered promiscuous mode [ 390.894144][ T9641] veth1_vlan: entered promiscuous mode [ 390.942944][ T9641] veth0_macvtap: entered promiscuous mode [ 390.961421][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 390.968937][ T9641] veth1_macvtap: entered promiscuous mode [ 390.980916][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.002827][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.016712][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.038375][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.048904][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.059286][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 391.079292][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.095225][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.114735][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.124232][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.133638][ T9641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.145891][ T5911] usb 4-1: Manufacturer: syz [ 391.150874][ T9641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.161631][ T5911] usb 4-1: config 0 descriptor?? [ 391.168685][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.177571][ T9641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.186414][ T9641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.195422][ T9641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.204374][ T9641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.233935][ T9641] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 391.251517][ T9641] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 391.251700][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.270402][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.290965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.309860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.320720][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.362352][ T30] audit: type=1400 audit(391.326:635): avc: denied { mounton } for pid=9641 comm="syz-executor" path="/root/syzkaller.g3MYSz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 391.396229][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.397226][ T30] audit: type=1400 audit(391.326:636): avc: denied { mounton } for pid=9641 comm="syz-executor" path="/root/syzkaller.g3MYSz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 391.455161][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.459868][ T5911] rc_core: IR keymap rc-hauppauge not found [ 391.481406][ T5911] Registered IR keymap rc-empty [ 391.486339][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.514023][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.519433][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.559698][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 391.575471][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 391.592697][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.621146][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.634384][ T13] bridge_slave_1: left promiscuous mode [ 391.641588][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.649621][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.650360][ T13] bridge_slave_0: left allmulticast mode [ 391.663382][ T13] bridge_slave_0: left promiscuous mode [ 391.669103][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.673073][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.709405][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.724344][ T13] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 391.733569][ T13] ip6gre1 (unregistering): left promiscuous mode [ 391.739563][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.770847][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.791231][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.820803][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.839555][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.853719][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.863005][ T5911] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 391.871963][ T5911] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 391.882364][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.891957][ T13] bond0 (unregistering): Released all slaves [ 391.902106][ T13] bond1 (unregistering): Released all slaves [ 391.910223][ T5911] usb 4-1: USB disconnect, device number 39 [ 392.082927][ T13] bond2 (unregistering): (slave veth3): Releasing active interface [ 392.091780][ T13] bond2 (unregistering): Released all slaves [ 392.225957][ T13] bond3 (unregistering): Released all slaves [ 392.359047][ T13] bond4 (unregistering): Released all slaves [ 392.490322][ T13] IPVS: stopping master sync thread 9885 ... [ 392.595930][ T13] hsr_slave_0: left promiscuous mode [ 392.608376][ T13] hsr_slave_1: left promiscuous mode [ 392.620943][ T13] veth1_macvtap: left promiscuous mode [ 392.626462][ T13] veth0_macvtap: left promiscuous mode [ 392.649591][ T13] veth1_vlan: left promiscuous mode [ 392.654884][ T13] veth0_vlan: left promiscuous mode [ 392.888520][ T13] team0 (unregistering): Port device team_slave_1 removed [ 392.912802][ T13] team0 (unregistering): Port device team_slave_0 removed