last executing test programs: 7.020850903s ago: executing program 1 (id=470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r0, 0x9) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) 5.773505104s ago: executing program 2 (id=478): socket$inet6(0xa, 0x3, 0x87) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x400c, 0x2, 0xffffdffe}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x40000000, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c1}, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220800009525e263031ddb6299e2e66bde9da8c2c7a406bbb3dbbda211f506b17b410f4e01cde16b5638a1a43511b120b3c57e05cc0ceb728e5c5f9da82700000000", @ANYRES8=0x0, @ANYBLOB="539513671da82cca0320"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x11f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x2, 0x1, 0x7, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c6"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7f, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@mdlm_detail={0x98, 0x24, 0x13, 0x8, "a65209b525d2119441c35ca4ddf987a21deea17731a75e43b14eb7f17db8b6263d148a846361824c9749a9b017fe1faf831b3bd28b306d04f0ccce42e1dce132d1598f4191c336650d5b85bbdd0c84d324d176929b17991e3cac0c4a637590b19e21bbf32acf2796c743167f035be87566612abd26b3d348cbc4db87d0442ccad22b044dc4b9c39ae7f1d589bef170fbf46c2a6b"}, @dmm={0x7, 0x24, 0x14, 0x101, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x805, 0x6, 0xae20}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x7, 0xb1}}, {{0x9, 0x5, 0x3, 0x2, 0x440, 0x3, 0x3, 0xd}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xc4, 0x2, 0x9, 0x20, 0x7}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d4685abc360af9416366fa382a9cc8dd"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x813}}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1e2c065c83d96ccb37cacf58fd3bd8db42144b137e88f9bbf9a79c73226b9b6a8a0fc944e843cac6be18418cba8bc026fa420ad193b8200e0292d94947bbc2b2fe740fbd55b2002124e96d8c66a9038b04cef38e6e6a127f007b5fb0b589aa39f7877d087b73d7fd71c9a0a5efb3ac7cfc7f20de75547dfd6e288cae62502235023aaf961ddba9c23f5de903c1e064109b5734fe8b1584376eae05b76d42e4d0ba6b6cf0ccd056da1503313aeacd39be639be711df4feceb3596b347dc8b84e4ce03", @ANYRES8=r3, @ANYBLOB="25a358b9e21e4726649b36e97b46578f123031dad802b705b245bb18512d8151cd22f5f7e68a40da5fb602784e822741cd338b7e79dd09ea52fadec6e0da88e6d7a4ed5288bb3d34c7436f57d8752fb2518ff177d1659fa9fb76a359d412c23f9426fc690c98af6fa76d909c7f50127aadf304258dd9713e4c272ee919443e902fab69aa67004c42c2d48fc07651d0c257d3af3fb86809fd2796c370733bf788d07080fd336b3036140c90a5fa1cc01bee9138fef0b4f166a949b27fcc7cb46750d6dfc93561", @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="f8ea773eb6c42ea1cb09bf4d21628c34c77ee70d8f237b9ae265cddb5e6c541240a76a79dea061a1eb6d3811a3efa05afa5ef6389784185d14d446d1c7793579e27f05e05bfa88ac102bbe7540fbc0d7fbdc30cd494b6f3a580ded4ce7b7f6f80527fba8b66aa79c04982ff27b8a0026e3c1c15d2930316ba3ec15a1ee9af69b260c3bf0c965b29633e7558c03fb6eef91c28465bda1f2ee31e9ccce6ba3829207f5149e8b70fb8ef2cfe81beb17a07d9bf89bc98384dde5bca2f1a8625e70fdedf103c8c36a6f", @ANYBLOB="9ae31d078c272bac7b91444b1272aa41f86df7", @ANYRES8=r2, @ANYRES64=r1], 0xc) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x20, 0x14, 0x4, "2f415ec0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) ioprio_get$pid(0x2, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) dup(r7) syz_usb_control_io$printer(r4, &(0x7f0000000800)={0x14, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00030400000000100000"]}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="20177000000067f2b3df67efa94d942917435efa166cdabb04201c45303fdfc8ef79f755c60f2cfab014fd7a49b87c942d58740e00539e5f80c6531a956d9a0a14ebc39da41185349abc72c647f467d9aaf7e6ebbf886636675e9c9d173542f277242a31e9533eacac1e"], &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000940)={0x20, 0x0, 0xf2, {0xf0, "4b3fa1398aee4657f6fbad4c851ebcfd3a9a3e2673cdc8bd3bab33a40ed8d04a90186ad1ea86ad670bad1f0028b896e1a679d45c7b11ee6f433ba4bc15870bd0e7656e60c55525f16803c4a2adcb3195e20614a5783c44074832de552444141f24af241222382e028845692adf7e193a47da1ff38cd84ccc0810f4e5627d2b4eeb694d5e5e61235441a5d44fbc4957fe2ee59ff4d9624d3af38f107f6c3c6221d1f7b71df64bd595d75848ed534cec614b70c828517e6fc15da70e1345bf74472f85c94c8eb3bdd1f1b948c8905b9aa44070d1d246e339a52e7b5b581e06b23ab41fb1b2f5a352e5c874eaac512c0a53"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x73}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 5.512762893s ago: executing program 4 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) close(0x3) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x300, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xf5, 0x8, "6feaf9f79982366ecc5130f028ca3a0247c8637c1188bffaea8140e4d54a5f8b94cbcb5d793a74daf677467a27ed06a9fe485927cfcac021c701e013e2900f168b194b611464f155961cf3255ff45402fc99a0b523f986b8e48d2afb0eda45788e4e187d3b242d11dd2442c4ef04520b14be79b5f1c0408e84ce6da303f31b1f2910b641d7f78fccd6328d0e0454cf360247f0f512ab391149cedfe7e2e14561b32c1dab5df39ec2214a289e2457237b8d6f910f89b582574919441afc20d0077cb8b796282484e96221679e2fa54312a9152b3f8f81eaf92ecea4c3864588c94ad94a03b6fb5bf2c4715865fbd575c27d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x56, 0x8, "125c0c2a344bc099c39260d5886f41f3c1392e3221e7f966c8b3b8b2134029af9a8e838f52344b87391fffefedc0a154035c0cd19420bf61f36b589f24afcb9dc5a2aa8a800be27e7a84b31ad324af406a26"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "0e4578c63d89e7b3173551f85f997e875f6b33208aff9edf867fcc96075a5e32021f77ea07d80ffeea87"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x298}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001240)="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", 0xf3d) fanotify_init(0x200, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='tegra_dma_complete_cb\x00', r4, 0x0, 0x8000}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000000000, 0x102}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1d, 0x1, 0x0, 0x1ff, 0x40, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e02}, 0x6e) 5.042343339s ago: executing program 3 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, r2, 0x301, 0x8, 0x25dfdbfc, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) 4.85933503s ago: executing program 3 (id=484): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000004000000e3ffffffffffffff181100004aae29c8820367b06bb9897d8800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000009bfbd3a7764f82a4f67b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x1, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) getsockname$l2tp(r4, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) io_setup(0x20f00a, &(0x7f00000000c0)=0x0) timer_gettime(0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.452460805s ago: executing program 4 (id=485): modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20000800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000780)=""/35, 0x23) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000040)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_stall_count', 0x121100, 0x84) read$msr(r3, &(0x7f00000001c0)=""/202, 0xca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f00000002c0)=""/28) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000080)=0x9b0, 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f0000000000)={0xffd9, 0x0, 0x0}) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) 3.73910999s ago: executing program 3 (id=486): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000001180)={0x80000000}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002000)={0x800, 0x7ff, {r0}, {0xffffffffffffffff}, 0x4, 0xffffffffffffffff}) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x8) (async) read$eventfd(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3.511722349s ago: executing program 4 (id=487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0xc0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x400, &(0x7f00000001c0)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x9, &(0x7f0000000140)) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x4}, 0x90) 3.479757861s ago: executing program 1 (id=488): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x46c, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0xa, 0x7e0c) ioctl$sock_inet_SIOCSARP(r6, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4, {0x2, 0x0, @multicast2}, 'lo\x00'}) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x700, 0x0) (async) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, 0x0) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x402180, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x20080) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) (async) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) 3.418874292s ago: executing program 3 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000fffb7030000000000008500000073000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.359857231s ago: executing program 4 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb1fa375e127e9618, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) bind(r5, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r1, @ANYRES64=r2, @ANYRESDEC=r5, @ANYRESOCT=r4, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0020f9000000f90b3385dfe04d8e5cb3a7a1f1f969065a7e0ed422a11d368609066c845b5bda7997b22aedbb12cca2a474185ba9c99290d714de5716cba07abe97d6fc2fffc594669029c147b8b910a5b6eeae0b154f092b7eda6cda349168fc4970d98970608c5ed6739ee18a62650ecd02e395288880429b34d4ce923320b5e5ee8b9fce0dd9859d2844321680d77142fb22a824ee03b774edf422cbd8bbac12058afc1cff07cf39d8cefb6ec6d098fcb2c54c8125649e3ffbc73a7a36cd1b515d9801aed705076df30f6ca29bfd8f7d77a3928a9d6a1c1c75c4b2cf93e113eaa23e2be89e69cc931505c41c870485be8cd9373dc296041c54425e7d5885"], &(0x7f00000002c0)=ANY=[@ANYBLOB="00039000000090032fbf36c6a26a1d9a1210d76f1b4036eb091b4e11e8851580f876b0d17c19d277fb4260837de33b5935db42b9b89c872653ef12fa658d132bd83266788e0f24e49872426ce03a0794ed6fd0a62c085d48d124948d1f1640016c8128f3b35e19dae43d939bcd53477804cebf657fb6cf20b98a69b2f29ec917b4855532b286701e0875a055cb92bca529cd79582bcb"], &(0x7f0000000780)=ANY=[@ANYBLOB="000f2d000000050f2d00040710020809ff0f0c100a0060010000000009000b04014bf20000080a1003020600050902004d9f0a9fc4e6ff44cb9887321e6ff92719700724a8fc35299fb44bdacbd8332d9b69ae5d1c5e61f20ae75e08b6ab3752e7169acfe1d9671f8aa71fe28f3283588ecc55be0d1e7e8f04df43e0caba8990c5b5ef04193c8ee5f5299dcf8f153f9fd8fcf3fcf5cac12828a47176ec25efdc83ec86a9b4ba8ca0f676b70402927691001e3fce950d361eab83fa0bed7e956bef24451f3e5793e9c428a94814591d19bff6658718690893117422c10cb12b2a607b25de32eb17f2c00ac46d4202f0f62d3aa0273022c1300cca1d3f68cd8c3ebc511b8cc3330f88bff78c8fd9f1133badeff19055e16446b3bb402b56889b6b894f4a2bdbde1ed42e1545870e5c857d3fe38871812f243f242bc281f8dd84ff0c7ce0a4858387e2901745f389567e74dfcd6d656acf0604de6f9a7234bd3bec52c575a8b5d5db4733884f78a5e73368e20551bd1e47f32a6d2de07ba78ff32acd856187b987ca85239a7a11f8b2b1e33735c62859deda406ce9a8bf2cc76bad7e9b766b10a8f164abb614547315edb13560e8c8f54aff1871760b6ef837ace7000000"], 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x8, 0x0) read$msr(r7, &(0x7f0000034000)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) mkdirat(r5, &(0x7f0000000380)='./file0\x00', 0x47) 3.295920055s ago: executing program 3 (id=492): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400f07000000a3"], 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.076715392s ago: executing program 2 (id=493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000004, 0xffffffffffffffff, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES32=0x0], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x13) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8ef13700f4f38a6d69e9b5e9c2f133d7", "6a3a05b9", "fffffffffffffff1"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$vhost_msg_v2(r6, &(0x7f0000000540)={0x2, 0x0, {&(0x7f0000000240)=""/4, 0x4, &(0x7f0000000380)=""/91, 0x3, 0x3}}, 0x48) r8 = socket$inet(0x2, 0x2, 0x1) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x20040001) sendmsg$inet(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x40}, 0x24040441) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000040)=@bcast) 2.948918938s ago: executing program 1 (id=494): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000040000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 1.960998407s ago: executing program 0 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000004c0)="e097", 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.694103911s ago: executing program 2 (id=497): getpid() (async) r0 = getpid() r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000480)={0x1, 0x4f565559, 0x5, @stepwise={0xe, 0x9, 0x2, 0x7fffffff, 0x7f, 0xa}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000480)={0x1, 0x4f565559, 0x5, @stepwise={0xe, 0x9, 0x2, 0x7fffffff, 0x7f, 0xa}}) mkdir(&(0x7f0000000000)='./file1\x00', 0x74) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) r4 = syz_pidfd_open(r0, 0x0) syz_clone3(&(0x7f0000000200)={0x4304000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x63) process_mrelease(r4, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x800, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x800, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x28}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdb \x9f\x8e\xa5\xb6\x04\xff\x0e\xc61\xef4_L\xe7U\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab', 0x0) (async) r10 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdb \x9f\x8e\xa5\xb6\x04\xff\x0e\xc61\xef4_L\xe7U\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab', 0x0) write(r10, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0xa1a9000) readlinkat(r5, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) (async) readlinkat(r5, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 1.660057105s ago: executing program 0 (id=498): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x18, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8884}, 0x40004c0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x7ff, 0x5, 0x9, 0x2}, {0x5, 0x1, 0xfa, 0x5}, {0x9, 0x54, 0x8, 0xffffffff}, {0xdd, 0x9, 0x1, 0x2}, {0x5, 0x3, 0x80, 0x1}, {0x0, 0x8b, 0xde, 0x9}, {0x749f, 0xff, 0xce, 0x26}]}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008f"]) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) 1.557586037s ago: executing program 0 (id=499): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0xe4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "d967623fd53c6ae5e6ebb8a26570988deb35be9bec181d73"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6541ce28576623aa9f62ee6b788581312312ae9d7f71ab5049c9cef1"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.556349688s ago: executing program 0 (id=500): openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 1.472773923s ago: executing program 1 (id=501): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0xfffffffd, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) mlockall(0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x3}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce6000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/151], 0x1dc}}, 0x0) (async) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) (async) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 1.471282878s ago: executing program 2 (id=502): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000025e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'bridge_slave_0\x00'}}, 0x1e) dup(0xffffffffffffffff) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) close(r5) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00003cb000/0x4000)=nil, 0x4000, 0x1000002, 0xfffffffffffffd28, 0x20000) chdir(&(0x7f00000001c0)='./bus\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x2, 0x1, 0xd, 0x200, &(0x7f0000000180)="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"}) 1.153569822s ago: executing program 2 (id=503): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, r4, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000040)={0x0, {0x7, 0x27a6}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x40000) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x5, {0x5, 0x0, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000901}, 0x8000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3024021, 0x0) 1.048768448s ago: executing program 1 (id=504): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x121102) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r2, 0x1) sendmmsg(r0, 0x0, 0x0, 0xfc) 952.845269ms ago: executing program 4 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0xac, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfb4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff272, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x4606}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ba, 0x8}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1955453d, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3b, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffc, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1d8ffd1a5e1f6d6ba7c01191000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 951.452666ms ago: executing program 4 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xa, 0x200b, {0xffffffffffffffff}, {0xee00}, 0xa5, 0xfffffffffffffffb}) getpriority(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x75dd, 0x100, 0x200001, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000006608faff00000000180100002020782500000000002020207b1af8ff00000000bf19354495010adfed010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x98, 0x30, 0xffff, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ife={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xb}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}}, 0x0) 433.694465ms ago: executing program 0 (id=507): socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4623, 0x4, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 427.535054ms ago: executing program 2 (id=508): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x13, 0x0, &(0x7f00000002c0)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000083c0)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0xe3e, &(0x7f0000000140)={0x0, 0x9146, 0x1000, 0x7, 0x4}, &(0x7f0000000240)=0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x56, 0x0, 0x8}, 0x28) mlockall(0x4) sysfs$2(0x2, 0x2000419, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r7, 0x1, 0x70bd27, 0x4, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffe85, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2c000804}, 0x20000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x260102, 0x0, 0xd}, 0x0, 0x18}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000600)=ANY=[], 0x32600) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3, 0x6, 0x5, 0xd, 0xa, 0x7, 0x0, 0x168}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 940.773µs ago: executing program 0 (id=509): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r4 = epoll_create1(0x0) epoll_wait(r4, 0x0, 0x0, 0xfffeffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x20008840) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110001}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="8001000003f1ffff6dd5bdedd4ab776621335e0b5f8a8d7d672a7ca247f2fcd4e18515dc41f239d1fc8ae4ee760a0a08c15e8fe05ddf3c837e7b96e3a30b0a3904cb45a51f7da86ee145098c6978b9602045913de937217aec195509738a8fff4a5bd0f9c701d47d20def48fbe356bff7a7914c28abf02385f049e3213d62ab21ae52bbc5d55f4032ab7a4ac8034ed3977771a3833d333fc4817", @ANYRES16=r8, @ANYBLOB="000427bd7000fddbdf251d00000078002f8008000100040000004c000380080004000300000008000400b1cb000038000380080002000200000008000200020000000c0004000201aaaaaaaaaaaa0600010001000000060001000000000008000200030000000c0002000201aaaaaaaaaaaa08000100020000000c0002000202aaaaaaaaaaaaa8002f80980003800c000500020000000000000008000400d50000000c000500060000000000000008000100000000005000038006000300ffff00000c0004000202aaaaaaaaaaaa0600010001000000080002000200000006000300a1aa000006000300bf730000080002000100000006000100ffff000006000300ffff0000080001000300000008000400690000000c00050009000000000000000c00020000000000000000000c000600010000000100000038002f800c0002000202aaaaaaaaaaaa1c0003800c00050003000000000000000c00050001000000000000000c000200000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x180}, 0x1, 0x0, 0x0, 0x4000001}, 0x840) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r10, 0x9dffffff}}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fdffffff010000000800010002000000340004800500030000000000050003000200000005000300060000000500030005000000050003000700000005000300060000000800020002000000", @ANYRESHEX=r0], 0x58}}, 0x0) 752.003µs ago: executing program 3 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) (async, rerun: 32) lsm_set_self_attr(0x68, 0x0, 0x0, 0x20) (async, rerun: 32) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586e3a79e04ed28dc100202fc86cc8711cd2d2dd813ac9615ebc5556b889fe242d52c7f97e0ce4436831168646bdfae6c0ca08d9e07ee8af919114bbeb5be367e2b4495725c64492b10de2f38f826674faf70"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xe8, &(0x7f0000000080)=@string={0xe8, 0x3, "03c49c037fa798e254fdc95f29886ad1d781f0f22b265471ab66c250d56a7f24281fd0952201b00608a30c9b03e16b8c5f884e541465f0938040816872b7a5f017b06de5daed6d08d0f5aae8cb196f878edc7ce33e02562522a063fc00e732e87b20c5ad91ff28b243bbde23c03d115393c652634f4d39bc476bf64bd12b0ae95705828661e7dae872e521466b27a6254da47c3d934ea5a5e88e64979841d16ceeded422a39a19bb6ce25d129861619d2d11ec01cb15a543a0879857c31c79b7e28bc00ea3ff498bc6ce74baa5925607b1d751b4fab643844b158c0b54fc783a425fa8658074"}}, {0x0, 0x0}]}) 0s ago: executing program 1 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x1e6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x60000001) kernel console output (not intermixed with test programs): r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.273319][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.294987][ T30] audit: type=1400 audit(1755782682.342:296): avc: denied { getattr } for pid=6476 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.320200][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.414809][ T6484] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 446.422800][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.447066][ T30] audit: type=1400 audit(1755782682.472:297): avc: denied { name_bind } for pid=6483 comm="syz.3.123" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 446.486048][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.123'. [ 446.523065][ T6484] dummy0: entered promiscuous mode [ 446.535061][ T6484] bridge0: port 3(dummy0) entered blocking state [ 446.541563][ T6484] bridge0: port 3(dummy0) entered disabled state [ 446.551425][ T6484] dummy0: entered allmulticast mode [ 446.558174][ T6484] bridge0: port 3(dummy0) entered blocking state [ 446.564556][ T6484] bridge0: port 3(dummy0) entered forwarding state [ 446.586443][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.662271][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.668327][ T5911] Bluetooth: hci2: command 0x0c1a tx timeout [ 446.742375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.750581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.758766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.766914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.775109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.783236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.791342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.902977][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 447.238858][ T6512] loop6: detected capacity change from 0 to 7 [ 447.371909][ T6512] Dev loop6: unable to read RDB block 7 [ 447.377948][ T6512] loop6: AHDI p1 p2 [ 447.384030][ T6512] loop6: partition table partially beyond EOD, truncated [ 447.410354][ T6512] loop6: p1 start 926365495 is beyond EOD, truncated [ 447.866065][ T5948] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 448.053101][ T5948] usb 2-1: not running at top speed; connect to a high speed hub [ 448.062358][ T5948] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 448.071230][ T5948] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 448.133487][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.171542][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.183979][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.204296][ T5948] usb 2-1: Product: syz [ 448.219714][ T5948] usb 2-1: Manufacturer: syz [ 448.228583][ T5948] usb 2-1: SerialNumber: syz [ 448.462930][ T1207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 448.466358][ T5948] usb 2-1: 0:2 : does not exist [ 448.505533][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.525581][ T5948] usb 2-1: USB disconnect, device number 9 [ 448.666756][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.693205][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.721673][ T1207] usb 5-1: device descriptor read/64, error -71 [ 448.743964][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 448.749995][ T5911] Bluetooth: hci2: command 0x0c1a tx timeout [ 448.972508][ T1207] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 448.993502][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 449.032296][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 449.065718][ T6551] tipc: Enabling of bearer rejected, failed to enable media [ 449.102806][ T1207] usb 5-1: device descriptor read/64, error -71 [ 449.147529][ T6556] netlink: 'syz.2.137': attribute type 12 has an invalid length. [ 449.192234][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 449.198562][ T5916] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 449.211627][ T5916] usb 4-1: config 0 has no interface number 0 [ 449.219535][ T5916] usb 4-1: config 0 interface 184 has no altsetting 0 [ 449.229953][ T5916] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 449.239191][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.247452][ T1207] usb usb5-port1: attempt power cycle [ 449.253172][ T5916] usb 4-1: Product: syz [ 449.257324][ T5916] usb 4-1: Manufacturer: syz [ 449.261888][ T5916] usb 4-1: SerialNumber: syz [ 449.267863][ T5916] usb 4-1: config 0 descriptor?? [ 449.274523][ T5916] smsc75xx v1.0.0 [ 449.602244][ T1207] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 449.623044][ T1207] usb 5-1: device descriptor read/8, error -71 [ 449.863128][ T1207] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 449.882724][ T1207] usb 5-1: device descriptor read/8, error -71 [ 449.997322][ T1207] usb usb5-port1: unable to enumerate USB device [ 450.328187][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 450.328234][ T30] audit: type=1400 audit(1755782686.312:319): avc: denied { create } for pid=6584 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 450.360649][ T30] audit: type=1400 audit(1755782686.312:320): avc: denied { connect } for pid=6584 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 450.487149][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 450.510902][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.561968][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 450.573424][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 450.595467][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 450.632588][ T5916] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 450.646651][ T5916] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 450.680513][ T5916] usb 4-1: USB disconnect, device number 5 [ 450.822340][ T5977] net_ratelimit: 90 callbacks suppressed [ 450.822354][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.902241][ T6011] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 451.019016][ T30] audit: type=1400 audit(1755782687.082:321): avc: denied { connect } for pid=6606 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 451.055672][ T6011] usb 3-1: not running at top speed; connect to a high speed hub [ 451.064330][ T6011] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.136173][ T6011] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.221669][ T6615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.316008][ T6011] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 451.350604][ T6011] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.379585][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.409484][ T6011] usb 3-1: Product: syz [ 451.419654][ T6011] usb 3-1: Manufacturer: syz [ 451.429771][ T6011] usb 3-1: SerialNumber: syz [ 451.446774][ T6602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.674426][ T6011] usb 3-1: 0:2 : does not exist [ 451.682277][ T5916] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 451.702526][ T6011] usb 3-1: USB disconnect, device number 17 [ 451.730190][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.798397][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 451.809001][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 451.843410][ T5916] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 451.861328][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.879318][ T5916] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.889558][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.898454][ T5916] usb 2-1: SerialNumber: syz [ 451.926046][ T30] audit: type=1400 audit(1755782687.982:322): avc: denied { cmd } for pid=6631 comm="syz.4.155" path="socket:[10874]" dev="sockfs" ino=10874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 452.265919][ T5916] usb 2-1: 0:2 : does not exist [ 452.695508][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.781196][ T5916] usb 2-1: USB disconnect, device number 10 [ 452.872342][ T30] audit: type=1400 audit(1755782688.922:323): avc: denied { ioctl } for pid=6636 comm="syz.4.157" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 452.940989][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 452.975613][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.063687][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.227435][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.272303][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 453.372267][ T5948] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 453.406888][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 453.416065][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 453.442295][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 453.450376][ T5916] usb 2-1: config 1 has an invalid interface number: 25 but max is 0 [ 453.458754][ T5916] usb 2-1: config 1 has an invalid interface number: 131 but max is 0 [ 453.476782][ T5916] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 453.487326][ T5916] usb 2-1: config 1 has no interface number 0 [ 453.498772][ T5916] usb 2-1: config 1 has no interface number 1 [ 453.508819][ T5916] usb 2-1: config 1 interface 25 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 453.542428][ T5916] usb 2-1: config 1 interface 25 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 453.557290][ T5916] usb 2-1: too many endpoints for config 1 interface 131 altsetting 147: 137, using maximum allowed: 30 [ 453.581208][ T5916] usb 2-1: config 1 interface 131 altsetting 147 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 453.584596][ T5948] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.601412][ T5916] usb 2-1: config 1 interface 131 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 453.626862][ T5948] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 453.642798][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.659662][ T5916] usb 2-1: config 1 interface 131 altsetting 147 endpoint 0x5 has an invalid bInterval 135, changing to 11 [ 453.663442][ T5948] usb 5-1: Product: syz [ 453.675494][ T5948] usb 5-1: Manufacturer: syz [ 453.695095][ T5948] usb 5-1: SerialNumber: syz [ 453.702413][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.726241][ T5916] usb 2-1: config 1 interface 131 altsetting 147 has a duplicate endpoint with address 0xB, skipping [ 453.727232][ T5948] usb 5-1: config 0 descriptor?? [ 453.764422][ T5916] usb 2-1: config 1 interface 131 altsetting 147 has 6 endpoint descriptors, different from the interface descriptor's value: 137 [ 453.800672][ T5916] usb 2-1: config 1 interface 25 has no altsetting 0 [ 453.817835][ T5916] usb 2-1: config 1 interface 131 has no altsetting 0 [ 453.828368][ T5916] usb 2-1: New USB device found, idVendor=0856, idProduct=ac34, bcdDevice=18.ba [ 453.838961][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.847211][ T5916] usb 2-1: Manufacturer: à¡Œ [ 453.854308][ T5916] usb 2-1: SerialNumber: ä› [ 453.898153][ T30] audit: type=1326 audit(1755782689.962:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 453.922806][ T30] audit: type=1326 audit(1755782689.962:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 453.946737][ T30] audit: type=1326 audit(1755782689.962:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3494f8e7eb code=0x7ffc0000 [ 453.970175][ T30] audit: type=1326 audit(1755782689.962:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3494f8e7eb code=0x7ffc0000 [ 454.008805][ T30] audit: type=1326 audit(1755782689.962:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6668 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3494f8e7eb code=0x7ffc0000 [ 454.158383][ T5968] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 454.194497][ T5916] ftdi_sio 2-1:1.25: FTDI USB Serial Device converter detected [ 454.239110][ T5916] ftdi_sio ttyUSB0: unknown device type: 0x18ba [ 454.260596][ T5916] ftdi_sio 2-1:1.131: FTDI USB Serial Device converter detected [ 454.270417][ T5948] usb 5-1: USB disconnect, device number 9 [ 454.285601][ T5916] ftdi_sio ttyUSB1: unknown device type: 0x18ba [ 454.298072][ T5916] usb 2-1: USB disconnect, device number 11 [ 454.305119][ T5916] ftdi_sio 2-1:1.25: device disconnected [ 454.311822][ T5916] ftdi_sio 2-1:1.131: device disconnected [ 454.382258][ T5968] usb 1-1: Using ep0 maxpacket: 8 [ 454.388841][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.415879][ T5968] usb 1-1: config 4 interface 0 has no altsetting 0 [ 454.425715][ T5968] usb 1-1: string descriptor 0 read error: -22 [ 454.431906][ T5968] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 454.449199][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.476103][ T5968] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 454.498712][ T5968] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 454.512588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.541654][ T5968] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 454.554775][ T5968] usb 1-1: media controller created [ 454.573577][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.675412][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.701281][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.715592][ T5968] zl10353_read_register: readreg error (reg=127, ret==0) [ 454.853122][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.897066][ T5968] usb 1-1: USB disconnect, device number 5 [ 455.352232][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 455.613442][ T5948] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 455.623700][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.786258][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 455.786272][ T30] audit: type=1400 audit(1755782691.852:385): avc: denied { mounton } for pid=6695 comm="syz.0.173" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 455.820751][ T6696] tmpfs: Bad value for 'mpol' [ 455.839756][ T5948] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 455.859913][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 455.869258][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.883408][ T5948] usb 5-1: SerialNumber: syz [ 455.896117][ T30] audit: type=1400 audit(1755782691.962:386): avc: denied { ioctl } for pid=6698 comm="syz.0.175" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 455.896423][ T6700] netlink: 60 bytes leftover after parsing attributes in process `syz.0.175'. [ 455.951173][ T6701] Invalid ELF header magic: != ELF [ 455.960396][ T30] audit: type=1400 audit(1755782692.012:387): avc: denied { module_load } for pid=6697 comm="syz.1.174" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 456.098161][ T5948] usb 5-1: 0:2 : does not exist [ 456.112068][ T5948] usb 5-1: USB disconnect, device number 10 [ 456.263207][ T6708] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 456.300355][ T6708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.312059][ T30] audit: type=1400 audit(1755782692.352:388): avc: denied { create } for pid=6697 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 456.333124][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.357327][ T6708] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 456.426096][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'. [ 456.444792][ T6708] ip6tnl1: entered allmulticast mode [ 456.521861][ T6708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.545574][ T6708] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 456.560228][ T6708] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 456.783981][ T5968] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 456.903892][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.942329][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 456.955371][ T5968] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 456.974631][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.991197][ T5968] usb 4-1: config 0 descriptor?? [ 457.007753][ T5968] gspca_main: sunplus-2.14.0 probing 041e:400b [ 457.076365][ T6723] netlink: 76 bytes leftover after parsing attributes in process `syz.0.181'. [ 457.085397][ T5948] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 457.130757][ T6726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.186516][ T6726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.227795][ T6726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.273565][ T5948] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 457.284770][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 457.296249][ T5948] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.305889][ T6726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.316298][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.326520][ T5948] usb 5-1: Product: syz [ 457.330750][ T5948] usb 5-1: Manufacturer: syz [ 457.337291][ T5948] usb 5-1: SerialNumber: syz [ 457.351781][ T5948] usb 5-1: config 0 descriptor?? [ 457.375545][ T5948] usb 5-1: selecting invalid altsetting 0 [ 457.384030][ T5947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.419064][ T6712] overlay: Unknown parameter 'pcr' [ 457.428613][ T5947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.440335][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.452067][ T5947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.462798][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.491898][ T6081] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.508284][ T5968] gspca_sunplus: reg_w_riv err -71 [ 457.520447][ T5968] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 457.538817][ T5968] usb 4-1: USB disconnect, device number 6 [ 457.585946][ T5948] usb 5-1: USB disconnect, device number 11 [ 457.719621][ T6736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.944384][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.178888][ T6739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.203439][ T30] audit: type=1400 audit(1755782694.272:389): avc: denied { create } for pid=6740 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 458.468513][ T30] audit: type=1400 audit(1755782694.532:390): avc: denied { connect } for pid=6753 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 458.683087][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 458.909340][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.951715][ T5948] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 459.003583][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.024370][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.036114][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 459.045602][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.054760][ T24] usb 1-1: config 0 descriptor?? [ 459.079978][ T6772] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 459.087680][ T6772] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.174350][ T5948] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.183765][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.186753][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 459.283304][ T5948] usb 2-1: Product: syz [ 459.291971][ T5948] usb 2-1: Manufacturer: syz [ 459.300562][ T5948] usb 2-1: SerialNumber: syz [ 459.416406][ T5948] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 459.477798][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.486006][ T30] audit: type=1400 audit(1755782695.542:391): avc: denied { firmware_load } for pid=5977 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 459.500623][ T5977] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.534604][ T24] hid_parser_main: 5 callbacks suppressed [ 459.534624][ T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 459.577125][ T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 459.585113][ T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 459.599765][ T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 459.609830][ T24] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 459.654199][ T24] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 459.760146][ T24] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 459.780169][ T24] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 459.797901][ T24] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 459.821088][ T24] usb 1-1: USB disconnect, device number 6 [ 459.862001][ T30] audit: type=1326 audit(1755782695.922:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 459.925390][ T30] audit: type=1326 audit(1755782695.922:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 460.009911][ T6011] usb 2-1: USB disconnect, device number 12 [ 460.045597][ T6798] capability: warning: `syz.4.202' uses 32-bit capabilities (legacy support in use) [ 460.052452][ T30] audit: type=1326 audit(1755782696.012:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6786 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 460.104914][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.322980][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.504887][ T6807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.586858][ T5977] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 460.601058][ T5977] ath9k_htc: Failed to initialize the device [ 460.619957][ T6011] usb 2-1: ath9k_htc: USB layer deinitialized [ 461.114275][ T6805] syz.4.203: attempt to access beyond end of device [ 461.114275][ T6805] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 461.127423][ T6805] syz.4.203: attempt to access beyond end of device [ 461.127423][ T6805] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 461.226518][ T6821] lo speed is unknown, defaulting to 1000 [ 461.232522][ T6821] lo speed is unknown, defaulting to 1000 [ 461.239943][ T6821] lo speed is unknown, defaulting to 1000 [ 461.252541][ T6821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 461.275903][ T6821] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 461.410965][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 461.438496][ T6821] lo speed is unknown, defaulting to 1000 [ 461.445053][ T6821] lo speed is unknown, defaulting to 1000 [ 461.451161][ T6821] lo speed is unknown, defaulting to 1000 [ 461.457301][ T6821] lo speed is unknown, defaulting to 1000 [ 461.463323][ T6821] lo speed is unknown, defaulting to 1000 [ 461.470583][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.492429][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 461.492442][ T30] audit: type=1400 audit(1755782697.502:433): avc: denied { bind } for pid=6818 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 461.528475][ T6805] syz.4.203: attempt to access beyond end of device [ 461.528475][ T6805] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 461.541490][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 461.551654][ T6805] syz.4.203: attempt to access beyond end of device [ 461.551654][ T6805] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 461.564633][ T6805] syz.4.203: attempt to access beyond end of device [ 461.564633][ T6805] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 461.577643][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 461.587538][ T6805] syz.4.203: attempt to access beyond end of device [ 461.587538][ T6805] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 461.600623][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 461.610986][ T6805] syz.4.203: attempt to access beyond end of device [ 461.610986][ T6805] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 461.624412][ T6805] syz.4.203: attempt to access beyond end of device [ 461.624412][ T6805] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 461.653903][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 461.663777][ T6805] syz.4.203: attempt to access beyond end of device [ 461.663777][ T6805] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 461.681291][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 461.691467][ T6805] syz.4.203: attempt to access beyond end of device [ 461.691467][ T6805] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 461.705350][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 461.715753][ T6805] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 461.725368][ T6805] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 461.745826][ T30] audit: type=1326 audit(1755782697.802:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 461.803324][ T6823] overlayfs: missing 'lowerdir' [ 461.808741][ T30] audit: type=1326 audit(1755782697.802:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 461.842255][ T30] audit: type=1326 audit(1755782697.812:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 461.952324][ T30] audit: type=1326 audit(1755782697.812:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.081422][ T30] audit: type=1326 audit(1755782697.812:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.120702][ T30] audit: type=1326 audit(1755782697.812:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.145147][ T30] audit: type=1326 audit(1755782697.812:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.171042][ T30] audit: type=1326 audit(1755782697.812:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.259756][ T30] audit: type=1326 audit(1755782697.812:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26e178ebe9 code=0x7ffc0000 [ 462.362316][ T6011] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 462.613581][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.753963][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.764193][ T6011] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 462.798588][ T6011] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 462.820571][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.829958][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.862984][ T6011] usb 4-1: config 0 descriptor?? [ 462.974962][ T5961] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 463.046010][ T6838] syz.2.212 (6838): drop_caches: 2 [ 463.165534][ T5961] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 463.173795][ T5961] usb 2-1: config 0 has no interface number 0 [ 463.179905][ T5961] usb 2-1: config 0 interface 252 altsetting 207 endpoint 0x5 has an invalid bInterval 181, changing to 11 [ 463.191597][ T5961] usb 2-1: config 0 interface 252 has no altsetting 0 [ 463.198967][ T5961] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ea.ea [ 463.208456][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.217801][ T5961] usb 2-1: config 0 descriptor?? [ 463.242859][ T6852] fuse: Unknown parameter '' [ 463.275306][ T6011] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.289092][ T6011] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.300728][ T6011] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.314819][ T6011] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.333213][ T6011] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 463.346349][ T6011] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 463.433633][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.434412][ T5961] usb 2-1: string descriptor 0 read error: -71 [ 463.464163][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.487813][ T5961] kvaser_usb 2-1:0.252: error -ENODEV: Cannot get usb endpoint(s) [ 463.522490][ T6011] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 463.530697][ T6011] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 463.538982][ T6011] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 463.550296][ T5961] usb 2-1: USB disconnect, device number 13 [ 463.575420][ T6011] usb 4-1: USB disconnect, device number 7 [ 463.632433][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.293231][ T6011] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 464.395360][ T6883] mmap: syz.0.227 (6883): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 464.448813][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 464.458398][ T6011] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.470283][ T6011] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 464.483246][ T6011] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.497462][ T6011] usb 4-1: config 1 interface 0 has no altsetting 0 [ 464.506170][ T6011] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 464.516110][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.524885][ T6011] usb 4-1: Product: syz [ 464.529805][ T6011] usb 4-1: Manufacturer: syz [ 464.534792][ T6011] usb 4-1: SerialNumber: syz [ 464.579139][ T6894] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 464.591120][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.599374][ T6894] bond0: (slave team0): Enslaving as an active interface with an up link [ 464.610718][ T6894] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 464.621700][ T6894] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 464.663908][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.702294][ T5948] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 464.752998][ T6011] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 464.851710][ T6900] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 464.863605][ T6900] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 464.869510][ T6900] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 464.869510][ T6900] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 464.890259][ T6900] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 464.890388][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 464.908388][ T6900] CUSE: DEVNAME unspecified [ 464.914091][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 464.923489][ T5948] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=41.ab [ 464.932735][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.940728][ T5948] usb 3-1: Product: syz [ 464.946079][ T5948] usb 3-1: Manufacturer: syz [ 464.950693][ T5948] usb 3-1: SerialNumber: syz [ 464.957368][ T5948] usb 3-1: config 0 descriptor?? [ 464.967143][ T5948] usb-storage 3-1:0.0: USB Mass Storage device detected [ 465.001030][ T5948] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 465.200038][ T6861] usblp0:failed reading printer status (-32) [ 465.706505][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.719299][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.728754][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.882240][ T1207] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 466.073948][ T1207] usb 2-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 466.084330][ T1207] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.095669][ T1207] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 466.104855][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.138460][ T1207] usb 2-1: Product: syz [ 466.145191][ T1207] usb 2-1: Manufacturer: syz [ 466.149917][ T1207] usb 2-1: SerialNumber: syz [ 466.156455][ T1207] usb 2-1: config 0 descriptor?? [ 466.365082][ T5961] usb 2-1: USB disconnect, device number 14 [ 466.402755][ T5948] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 466.502341][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.564329][ T5948] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 466.582399][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.594111][ T5948] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.603408][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.611504][ T5948] usb 5-1: SerialNumber: syz [ 466.744324][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.826961][ T5948] usb 5-1: 0:2 : does not exist [ 466.836856][ T5948] usb 5-1: USB disconnect, device number 12 [ 466.852780][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.868752][ T1207] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 467.024824][ T1207] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 467.037631][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 467.054965][ T1207] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 467.077608][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.102799][ T6912] delete_channel: no stack [ 467.107644][ T1207] usb 1-1: Product: syz [ 467.111848][ T1207] usb 1-1: Manufacturer: syz [ 467.117839][ T1207] usb 1-1: SerialNumber: syz [ 467.123239][ T5961] usb 4-1: USB disconnect, device number 8 [ 467.124802][ T1207] usb 1-1: config 0 descriptor?? [ 467.146915][ T1207] hub 1-1:0.0: bad descriptor, ignoring hub [ 467.155064][ T1207] hub 1-1:0.0: probe with driver hub failed with error -5 [ 467.166097][ T1207] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 467.178969][ T5961] usblp0: removed [ 467.179756][ T1207] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 467.204898][ T1207] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 467.238972][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 467.238988][ T30] audit: type=1400 audit(1755782703.304:484): avc: denied { mount } for pid=6941 comm="syz.3.242" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 467.516279][ T24] usb 3-1: USB disconnect, device number 18 [ 467.692343][ T1207] usb 1-1: USB disconnect, device number 7 [ 467.783854][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.792250][ T5961] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 467.829147][ T6960] netlink: 'syz.1.247': attribute type 3 has an invalid length. [ 467.960149][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.960759][ T30] audit: type=1400 audit(1755782704.004:485): avc: denied { create } for pid=6959 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 468.034908][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.116096][ T5961] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 468.126462][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.152948][ T5961] usb 4-1: config 0 descriptor?? [ 468.467509][ T6966] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 468.512265][ T6011] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 468.526626][ T6966] batman_adv: batadv0: Adding interface: team0 [ 468.841176][ T6966] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.872137][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.878451][ T6011] usb 1-1: not running at top speed; connect to a high speed hub [ 468.882381][ T5961] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 468.902570][ T1207] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 468.913114][ T6011] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 468.922696][ T6011] usb 1-1: config 1 has no interface number 1 [ 468.928857][ T6966] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 468.933308][ T6011] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 468.940886][ T5961] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 468.967266][ T5961] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 468.980639][ T5961] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 468.982530][ T6011] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.999772][ T5961] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 469.008312][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.026746][ T6011] usb 1-1: Product: syz [ 469.027333][ T5961] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 469.060682][ T6011] usb 1-1: Manufacturer: syz [ 469.116520][ T1207] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 469.127169][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.136968][ T6011] usb 1-1: SerialNumber: syz [ 469.149582][ T5961] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 469.160663][ T5961] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 469.161740][ T1207] usb 3-1: config 0 descriptor?? [ 469.184265][ T1207] cp210x 3-1:0.0: cp210x converter detected [ 469.193335][ T5961] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 469.256628][ T5961] usb 4-1: USB disconnect, device number 9 [ 469.374890][ T6011] usb 1-1: failed to enable PITCH for EP 0x82 [ 469.518367][ T6987] netlink: 96 bytes leftover after parsing attributes in process `syz.2.252'. [ 469.556856][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.594280][ T30] audit: type=1400 audit(1755782705.614:486): avc: denied { write } for pid=6973 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 469.598008][ T6011] usb 1-1: USB disconnect, device number 8 [ 469.835633][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.943721][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.983849][ T1207] usb 3-1: cp210x converter now attached to ttyUSB0 [ 470.168767][ T6992] tmpfs: Bad value for 'mpol' [ 470.545307][ T30] audit: type=1400 audit(1755782706.614:487): avc: denied { create } for pid=7004 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 470.633855][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 470.644923][ T7015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.263'. [ 470.782251][ T5961] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 470.822309][ T5977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 470.842886][ T30] audit: type=1400 audit(1755782706.904:488): avc: denied { read } for pid=7019 comm="syz.0.265" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.865671][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.893227][ T30] audit: type=1400 audit(1755782706.904:489): avc: denied { open } for pid=7019 comm="syz.0.265" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.916455][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.958334][ T7022] pim6reg: entered allmulticast mode [ 470.984304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.993918][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.006347][ T5977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 471.030477][ T5977] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 471.042528][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.106959][ T5961] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 471.117378][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.143623][ T5961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.153792][ T5977] usb 4-1: config 0 descriptor?? [ 471.160745][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 471.174786][ T5961] usb 5-1: SerialNumber: syz [ 471.637835][ T5961] usb 5-1: 0:2 : does not exist [ 471.654014][ T1207] usb 3-1: USB disconnect, device number 19 [ 471.660956][ T1207] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 471.693673][ T5961] usb 5-1: unit 5 not found! [ 471.735332][ T5961] usb 5-1: USB disconnect, device number 13 [ 471.736968][ T1207] cp210x 3-1:0.0: device disconnected [ 471.775816][ T7032] tmpfs: Bad value for 'mpol' [ 471.823188][ T5977] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 471.844599][ T5977] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 471.919373][ T7040] loop6: detected capacity change from 0 to 7 [ 471.928127][ T5977] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 471.928460][ T5908] Dev loop6: unable to read RDB block 7 [ 471.960818][ T5977] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 471.968844][ T5908] loop6: AHDI p1 p2 [ 471.974530][ T5908] loop6: partition table partially beyond EOD, truncated [ 471.982727][ T5977] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 471.986977][ T5908] loop6: p1 start 926365495 is beyond EOD, truncated [ 471.998881][ T5977] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 472.031319][ T7040] Dev loop6: unable to read RDB block 7 [ 472.032406][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.037083][ T7040] loop6: AHDI p1 p2 [ 472.084565][ T7040] loop6: partition table partially beyond EOD, truncated [ 472.099292][ T7040] loop6: p1 start 926365495 is beyond EOD, truncated [ 472.124702][ T5977] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 472.133918][ T5977] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 472.146136][ T5977] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 472.176482][ T5977] usb 4-1: USB disconnect, device number 10 [ 472.588794][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.963126][ T30] audit: type=1400 audit(1755782708.954:490): avc: denied { getopt } for pid=7068 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 473.127137][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.135287][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.166520][ T7076] 9pnet_fd: Insufficient options for proto=fd [ 473.179186][ T7079] loop6: detected capacity change from 0 to 7 [ 473.186755][ T7079] Dev loop6: unable to read RDB block 7 [ 473.195591][ T7079] loop6: AHDI p1 p2 [ 473.199660][ T7079] loop6: partition table partially beyond EOD, truncated [ 473.200300][ T7076] ======================================================= [ 473.200300][ T7076] WARNING: The mand mount option has been deprecated and [ 473.200300][ T7076] and is ignored by this kernel. Remove the mand [ 473.200300][ T7076] option from the mount to silence this warning. [ 473.200300][ T7076] ======================================================= [ 473.207610][ T7079] loop6: p1 start 926365495 is beyond EOD, [ 473.241660][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.263265][ T7079] truncated [ 473.388040][ T30] audit: type=1400 audit(1755782709.354:491): avc: denied { setopt } for pid=7067 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 473.407870][ T30] audit: type=1400 audit(1755782709.374:492): avc: denied { bind } for pid=7081 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 473.427874][ T30] audit: type=1400 audit(1755782709.384:493): avc: denied { getopt } for pid=7081 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 473.827232][ T7076] orangefs_mount: mount request failed with -4 [ 473.903925][ T30] audit: type=1400 audit(1755782709.974:494): avc: denied { write } for pid=7081 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 474.423462][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.690561][ T7105] bio_check_eod: 2 callbacks suppressed [ 474.690611][ T7105] syz.1.288: attempt to access beyond end of device [ 474.690611][ T7105] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 474.738300][ T7105] gfs2: error -5 reading superblock [ 474.772343][ T5968] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 474.779907][ T1207] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 475.004133][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 475.010036][ T5968] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.019483][ T5968] usb 1-1: config 0 has no interface number 0 [ 475.027858][ T1207] usb 3-1: config 9 has an invalid interface number: 249 but max is 0 [ 475.037458][ T5968] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 475.050939][ T1207] usb 3-1: config 9 has no interface number 0 [ 475.077613][ T1207] usb 3-1: config 9 interface 249 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 475.100687][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.123347][ T1207] usb 3-1: config 9 interface 249 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 475.277648][ T5968] usb 1-1: config 0 descriptor?? [ 475.294011][ T5968] usb 1-1: selecting invalid altsetting 1 [ 475.311351][ T1207] usb 3-1: Dual-Role OTG device on HNP port [ 475.329162][ T5968] dvb_ttusb_budget: ttusb_init_controller: error [ 475.361841][ T1207] usb 3-1: New USB device found, idVendor=1410, idProduct=a003, bcdDevice=32.83 [ 475.372949][ T5968] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 475.381570][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.395546][ T1207] usb 3-1: Product: ï“¿ [ 475.399821][ T1207] usb 3-1: Manufacturer: ÐŒ [ 475.413856][ T1207] usb 3-1: SerialNumber: syz [ 475.423759][ T7096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 475.464610][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.622967][ T5968] DVB: Unable to find symbol cx22700_attach() [ 475.629194][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.649846][ T30] audit: type=1400 audit(1755782711.704:495): avc: denied { getopt } for pid=7119 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 475.709880][ T1207] usb 3-1: USB disconnect, device number 20 [ 475.853553][ T5968] DVB: Unable to find symbol tda10046_attach() [ 475.859920][ T5968] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 476.040781][ T7130] loop8: detected capacity change from 0 to 8 [ 476.052088][ T7130] Dev loop8: unable to read RDB block 8 [ 476.058636][ T7130] loop8: unable to read partition table [ 476.073276][ T7130] loop8: partition table beyond EOD, truncated [ 476.079964][ T7130] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 476.122422][ T5977] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 476.183839][ T30] audit: type=1400 audit(1755782712.244:496): avc: denied { read } for pid=7131 comm="syz.3.296" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.248998][ T30] audit: type=1400 audit(1755782712.244:497): avc: denied { open } for pid=7131 comm="syz.3.296" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 476.312991][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 476.319912][ T5977] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 476.333179][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.351605][ T30] audit: type=1400 audit(1755782712.414:498): avc: denied { ioctl } for pid=7133 comm="syz.4.297" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13309 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 476.386405][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.473059][ T5977] usb 2-1: config 0 descriptor?? [ 476.480582][ T5977] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 476.516313][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.963867][ T5968] usb 1-1: USB disconnect, device number 9 [ 477.126800][ T5977] gspca_nw80x: reg_w err -71 [ 477.144698][ T5977] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 477.154860][ T5977] usb 2-1: USB disconnect, device number 15 [ 477.211140][ T30] audit: type=1400 audit(1755782713.277:499): avc: denied { ioctl } for pid=7148 comm="syz.2.301" path="socket:[14410]" dev="sockfs" ino=14410 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 477.211897][ T7149] vxfs: WRONG superblock magic 00000000 at 1 [ 477.235972][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.351086][ T7149] vxfs: WRONG superblock magic 00000000 at 8 [ 477.382247][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 477.433217][ T7149] vxfs: can't find superblock. [ 477.545008][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.553603][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 477.569716][ T24] usb 5-1: config 0 has no interfaces? [ 477.591845][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 477.601021][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.609025][ T24] usb 5-1: Product: syz [ 477.625710][ T24] usb 5-1: Manufacturer: syz [ 477.658067][ T24] usb 5-1: SerialNumber: syz [ 477.769101][ T7165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.304'. [ 477.776044][ T24] usb 5-1: config 0 descriptor?? [ 477.815209][ T7167] loop8: detected capacity change from 0 to 8 [ 477.827852][ T7167] Dev loop8: unable to read RDB block 8 [ 477.836866][ T7167] loop8: unable to read partition table [ 477.845141][ T7167] loop8: partition table beyond EOD, truncated [ 477.854769][ T7167] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 477.878606][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 477.998724][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 477.998735][ T30] audit: type=1400 audit(1755782714.067:561): avc: denied { ioctl } for pid=7178 comm="syz.3.310" path="socket:[13661]" dev="sockfs" ino=13661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.052307][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 478.067925][ T5866] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 478.078398][ T5948] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 478.089111][ T5866] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 478.103101][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.117937][ T5866] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 478.127152][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.135316][ T5866] usb 3-1: Product: syz [ 478.139512][ T5866] usb 3-1: Manufacturer: syz [ 478.144201][ T5866] usb 3-1: SerialNumber: syz [ 478.164852][ T5866] usb 3-1: config 0 descriptor?? [ 478.212851][ T5968] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 478.255971][ T5948] usb 2-1: not running at top speed; connect to a high speed hub [ 478.391891][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.413325][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.425589][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.449281][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.457933][ T5948] usb 2-1: Product: syz [ 478.457983][ T7184] tipc: Started in network mode [ 478.462106][ T5948] usb 2-1: Manufacturer: syz [ 478.462125][ T5948] usb 2-1: SerialNumber: syz [ 478.476630][ T7184] tipc: Node identity 7f000001, cluster identity 4711 [ 478.486229][ T7184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.494511][ T7184] tipc: Enabled bearer , priority 10 [ 478.512349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.533376][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.545287][ T5968] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 478.554398][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.563697][ T5968] usb 1-1: config 0 descriptor?? [ 478.577833][ T5866] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 478.587376][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.622395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.662798][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.698323][ T5948] usb 2-1: 0:2 : does not exist [ 478.708095][ T5948] usb 2-1: USB disconnect, device number 16 [ 478.720618][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.752387][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 478.762288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.770847][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 478.783357][ T30] audit: type=1400 audit(1755782714.857:562): avc: denied { create } for pid=7173 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 478.803352][ T5866] usb 3-1: USB disconnect, device number 21 [ 478.902301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.914360][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 478.923085][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 478.931585][ T24] usb 4-1: config 129 has an invalid interface number: 145 but max is 0 [ 478.940310][ T24] usb 4-1: config 129 has no interface number 0 [ 478.947134][ T24] usb 4-1: config 129 interface 145 has no altsetting 0 [ 478.956071][ T24] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 478.965541][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.973556][ T24] usb 4-1: Product: syz [ 478.977746][ T24] usb 4-1: Manufacturer: syz [ 478.982918][ T24] usb 4-1: SerialNumber: syz [ 479.004492][ T5968] smartjoyplus 0003:0925:8866.0009: item fetching failed at offset 3/7 [ 479.014501][ T5968] smartjoyplus 0003:0925:8866.0009: parse failed [ 479.020874][ T5968] smartjoyplus 0003:0925:8866.0009: probe with driver smartjoyplus failed with error -22 [ 479.042319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.152330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.197330][ T7184] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 479.205935][ T7184] tipc: Enabled bearer , priority 10 [ 479.547108][ T5968] usb 5-1: USB disconnect, device number 14 [ 479.890584][ T7207] syz.4.317 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 480.079806][ T7212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.319'. [ 480.383595][ T5968] tipc: Node number set to 2130706433 [ 480.413841][ T7220] netlink: 5 bytes leftover after parsing attributes in process `syz.1.321'. [ 480.423336][ T7220] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 481.377495][ T6011] usb 1-1: USB disconnect, device number 10 [ 481.406316][ T7220] 0ªX¹¦D: entered allmulticast mode [ 481.532564][ T7220] veth0_macvtap: entered allmulticast mode [ 481.542587][ T7221] bond0: Error: Cannot enslave bond to itself. [ 481.877881][ T3481] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.921435][ T24] usb 4-1: USB disconnect, device number 11 [ 482.179822][ T6011] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 482.446067][ T6011] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.492724][ T6011] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.505598][ T6011] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.516261][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.529831][ T30] audit: type=1400 audit(1755782718.537:563): avc: denied { ioctl } for pid=7230 comm="syz.4.325" path="socket:[13736]" dev="sockfs" ino=13736 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 482.534153][ T6011] usb 1-1: SerialNumber: syz [ 482.789909][ T6011] usb 1-1: 0:2 : does not exist [ 482.816290][ T6011] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 482.835470][ T6011] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 482.840633][ T6011] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 482.845455][ T6011] usb 1-1: USB disconnect, device number 11 [ 482.904166][ T5866] net_ratelimit: 30 callbacks suppressed [ 482.904185][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.952563][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 482.954599][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.102238][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 483.109560][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 483.118080][ T24] usb 2-1: config 0 has no interface number 0 [ 483.124600][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 483.132713][ T5968] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 483.143266][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 483.152647][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.160729][ T24] usb 2-1: Product: syz [ 483.165446][ T24] usb 2-1: Manufacturer: syz [ 483.170111][ T24] usb 2-1: SerialNumber: syz [ 483.184721][ T24] usb 2-1: config 0 descriptor?? [ 483.194385][ T24] smsc75xx v1.0.0 [ 483.224937][ T30] audit: type=1400 audit(1755782719.297:564): avc: denied { ioctl } for pid=7254 comm="syz.2.331" path="socket:[13752]" dev="sockfs" ino=13752 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 483.273452][ T30] audit: type=1326 audit(1755782719.347:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.296663][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.303591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.314222][ T30] audit: type=1326 audit(1755782719.347:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.338417][ T30] audit: type=1326 audit(1755782719.347:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.363469][ T30] audit: type=1326 audit(1755782719.347:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.382352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.387448][ T30] audit: type=1326 audit(1755782719.347:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.419750][ T30] audit: type=1326 audit(1755782719.347:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.443135][ T5968] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64 [ 483.443197][ T30] audit: type=1326 audit(1755782719.347:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.479775][ T5968] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.481200][ T30] audit: type=1326 audit(1755782719.347:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.516975][ T5968] usb 5-1: config 1 interface 0 has no altsetting 0 [ 483.523835][ T30] audit: type=1326 audit(1755782719.487:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3494f8ebe9 code=0x7ffc0000 [ 483.574182][ T5968] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 483.583884][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.593698][ T5968] usb 5-1: Product: syz [ 483.602713][ T5968] usb 5-1: Manufacturer: syz [ 483.607405][ T5968] usb 5-1: SerialNumber: syz [ 483.623709][ T7253] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 483.633638][ T6011] kernel write not supported for file /uinput (pid: 6011 comm: kworker/0:4) [ 483.688321][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 483.739416][ T7267] bridge1: entered promiscuous mode [ 483.760180][ T7271] tipc: Started in network mode [ 483.766294][ T7271] tipc: Node identity 7f000001, cluster identity 4711 [ 483.774192][ T7271] tipc: Enabled bearer , priority 10 [ 483.820662][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7273 comm=syz.2.338 [ 483.866294][ T5968] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 483.884151][ T5968] usb 5-1: USB disconnect, device number 15 [ 483.900640][ T5968] usblp0: removed [ 483.943771][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.975355][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.020584][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032601800: rx timeout, send abort [ 484.342254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.422384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.484000][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 484.528937][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032601800: abort rx timeout. Force session deactivation [ 484.562215][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.643873][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 484.714376][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 484.768226][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 484.798793][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 484.831809][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 485.001445][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.070910][ T5916] tipc: Node number set to 2130706433 [ 485.081264][ T7292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7292 comm=syz.2.342 [ 485.102748][ T24] usb 2-1: USB disconnect, device number 17 [ 485.176536][ T5948] IPVS: starting estimator thread 0... [ 485.342708][ T7301] IPVS: using max 78 ests per chain, 187200 per kthread [ 485.382247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.462353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.761261][ T7332] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 487.002535][ T5916] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 487.154774][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.172334][ T5968] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 487.183252][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 487.193341][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.206851][ T5916] usb 2-1: config 0 descriptor?? [ 487.442302][ T5968] usb 1-1: Using ep0 maxpacket: 16 [ 487.448589][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.461216][ T5968] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 487.564295][ T5916] ath6kl: Failed to submit usb control message: -71 [ 487.578728][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 487.589027][ T5968] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 487.601524][ T5916] ath6kl: Unable to send get target info: -71 [ 487.607836][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.617494][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 487.624531][ T5916] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 487.635859][ T5968] usb 1-1: config 0 descriptor?? [ 487.690754][ T5916] usb 2-1: USB disconnect, device number 18 [ 487.702393][ T49] Bluetooth: hci4: command 0x0405 tx timeout [ 488.045180][ T5968] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 488.075982][ T5968] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 488.084556][ T5968] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 488.265150][ T5866] net_ratelimit: 8 callbacks suppressed [ 488.265170][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.272197][ T6011] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 488.292398][ T5916] usb 1-1: USB disconnect, device number 12 [ 488.302791][ T6011] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 488.331125][ T6011] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 488.346545][ T6011] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 488.502317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.521081][ T7362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.529342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.582354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.816838][ T7371] pim6reg: entered allmulticast mode [ 488.912278][ T5866] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 488.922224][ T5916] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 489.032211][ T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 489.070682][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 489.077166][ T5866] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 489.085603][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 489.093990][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 489.103226][ T5866] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 489.111557][ T5866] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 489.122091][ T5866] usb 4-1: config 0 has no interface number 0 [ 489.131917][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 489.143191][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 489.153432][ T5866] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.163580][ T5866] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.176699][ T5866] usb 4-1: config 0 interface 125 has no altsetting 0 [ 489.193399][ T5866] usb 4-1: config 0 interface 125 has no altsetting 2 [ 489.200960][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 489.211276][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 489.221670][ T5866] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 489.232815][ T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 489.244734][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.253455][ T5911] Bluetooth: hci1: Malformed LE Event: 0x02 [ 489.254087][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.268623][ T5866] usb 4-1: Product: syz [ 489.282360][ T5866] usb 4-1: Manufacturer: syz [ 489.289902][ T5866] usb 4-1: SerialNumber: syz [ 489.305271][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.318983][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.328957][ T5866] usb 4-1: config 0 descriptor?? [ 489.334515][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.342789][ T24] usb 3-1: Product: syz [ 489.347001][ T24] usb 3-1: Manufacturer: syz [ 489.355536][ T5866] usb 4-1: selecting invalid altsetting 2 [ 489.363623][ T24] usb 3-1: SerialNumber: syz [ 489.542255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.543817][ T7386] tipc: Started in network mode [ 489.569373][ T7386] tipc: Node identity 7f000001, cluster identity 4711 [ 489.584787][ T7386] tipc: New replicast peer: 0.0.0.0 [ 489.591827][ T7386] tipc: Enabled bearer , priority 10 [ 489.622398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.640613][ T24] usb 3-1: 0:2 : does not exist [ 489.674232][ T24] usb 3-1: USB disconnect, device number 22 [ 489.715526][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.022358][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.344398][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.497874][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.523376][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.592637][ T5866] tipc: Node number set to 2130706433 [ 490.666680][ T5866] usb 4-1: USB disconnect, device number 12 [ 490.889883][ T7409] loop8: detected capacity change from 0 to 8 [ 490.897428][ T7409] Dev loop8: unable to read RDB block 8 [ 490.903580][ T7409] loop8: unable to read partition table [ 490.909955][ T7409] loop8: partition table beyond EOD, truncated [ 490.917609][ T7409] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 490.993015][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.436576][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.453879][ T5916] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 491.475942][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 491.514894][ T5916] usb 1-1: can't read configurations, error -71 [ 491.852483][ T5916] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 492.022391][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.022424][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.022453][ T5916] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 492.022473][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.024677][ T5916] usb 1-1: config 0 descriptor?? [ 492.335126][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 492.335142][ T30] audit: type=1400 audit(1755782728.403:586): avc: denied { connect } for pid=7435 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.345517][ T5916] samsung 0003:0419:0001.000B: item fetching failed at offset 3/5 [ 492.345820][ T5916] samsung 0003:0419:0001.000B: parse failed [ 492.345862][ T5916] samsung 0003:0419:0001.000B: probe with driver samsung failed with error -22 [ 492.405028][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 492.415782][ T5977] usb 1-1: USB disconnect, device number 14 [ 492.501085][ T5968] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 492.573478][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.573503][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.574323][ T5866] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.604860][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.604892][ T5866] usb 2-1: SerialNumber: syz [ 492.656452][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 492.669188][ T5968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.679618][ T5968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.689055][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 492.700599][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 492.713025][ T5968] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 492.722118][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.737273][ T5968] hub 4-1:1.0: bad descriptor, ignoring hub [ 492.749745][ T5968] hub 4-1:1.0: probe with driver hub failed with error -5 [ 492.758030][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 492.761168][ T30] audit: type=1400 audit(1755782728.823:587): avc: denied { ioctl } for pid=7460 comm="syz.2.385" path="socket:[14105]" dev="sockfs" ino=14105 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.764098][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 492.791928][ T30] audit: type=1400 audit(1755782728.863:588): avc: denied { bind } for pid=7460 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 492.795274][ T5968] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 492.819625][ T5968] cdc_wdm 4-1:1.0: Unknown control protocol [ 492.830914][ T7461] Bluetooth: Short BCSP packet [ 492.830988][ T5866] usb 2-1: 0:2 : does not exist [ 492.848657][ T5866] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 492.860731][ T5866] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 492.872473][ T5866] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 492.882240][ T6011] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 492.888004][ T5866] usb 2-1: USB disconnect, device number 19 [ 492.922293][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 493.032220][ T6011] usb 5-1: Using ep0 maxpacket: 16 [ 493.039746][ T6011] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 493.048379][ T6011] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 493.067532][ T5968] usb 4-1: USB disconnect, device number 13 [ 493.073539][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 493.081387][ T6011] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 493.089806][ T3481] Bluetooth: Error in BCSP hdr checksum [ 493.092388][ T6011] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 493.098073][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 493.103576][ T6011] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 493.103603][ T6011] usb 5-1: config 0 has no interface number 0 [ 493.114803][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.118442][ T6011] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 493.126882][ T24] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 493.133851][ T6011] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 493.133879][ T6011] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.133909][ T6011] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.133931][ T6011] usb 5-1: config 0 interface 125 has no altsetting 0 [ 493.133948][ T6011] usb 5-1: config 0 interface 125 has no altsetting 2 [ 493.135450][ T6011] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 493.175775][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.188297][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.201689][ T24] usb 1-1: Product: syz [ 493.214774][ T6011] usb 5-1: Product: syz [ 493.219793][ T24] usb 1-1: Manufacturer: syz [ 493.226999][ T6011] usb 5-1: Manufacturer: syz [ 493.239923][ T24] usb 1-1: SerialNumber: syz [ 493.245439][ T6011] usb 5-1: SerialNumber: syz [ 493.259067][ T24] usb 1-1: config 0 descriptor?? [ 493.259155][ T6011] usb 5-1: config 0 descriptor?? [ 493.271913][ T5916] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 493.281167][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.290647][ T5916] usb 3-1: config 0 descriptor?? [ 493.301210][ T5916] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 493.309171][ T6011] usb 5-1: selecting invalid altsetting 2 [ 493.342422][ T5947] Bluetooth: Error in BCSP hdr checksum [ 493.465950][ T6012] net_ratelimit: 55 callbacks suppressed [ 493.465972][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.612949][ T3481] Bluetooth: Error in BCSP hdr checksum [ 493.702271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.792333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.879811][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 493.888877][ T3481] Bluetooth: Error in BCSP hdr checksum [ 493.978844][ T5916] gspca_cpia1: usb_control_msg 01, error -71 [ 493.987191][ T5916] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 493.997432][ T5916] usb 3-1: USB disconnect, device number 23 [ 494.182805][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.248982][ T7481] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.390'. [ 494.258854][ T7481] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 494.267886][ T7481] openvswitch: netlink: Message has 252 unknown bytes. [ 494.325206][ T5916] usb 5-1: USB disconnect, device number 16 [ 494.514233][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.533015][ T6011] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 494.683615][ T6011] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 494.692873][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.701726][ T6011] usb 2-1: config 0 descriptor?? [ 494.742294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.822519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.902308][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 494.902579][ T5911] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 495.472128][ T7494] bridge0: port 3(syz_tun) entered blocking state [ 495.479171][ T7494] bridge0: port 3(syz_tun) entered disabled state [ 495.487328][ T7494] syz_tun: entered allmulticast mode [ 495.496795][ T7494] syz_tun: entered promiscuous mode [ 495.552834][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.582002][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 495.625297][ T7494] bridge0: port 3(syz_tun) entered blocking state [ 495.631833][ T7494] bridge0: port 3(syz_tun) entered forwarding state [ 495.699346][ T6052] usb 1-1: USB disconnect, device number 15 [ 495.919749][ T7511] siw: device registration error -23 [ 496.093869][ T30] audit: type=1400 audit(1755782732.133:589): avc: denied { getopt } for pid=7505 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 496.117950][ T7512] netlink: 'syz.0.398': attribute type 12 has an invalid length. [ 496.142633][ T5916] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 496.216552][ T30] audit: type=1400 audit(1755782732.203:590): avc: denied { write } for pid=7505 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 496.307751][ T30] audit: type=1400 audit(1755782732.373:591): avc: denied { shutdown } for pid=7517 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 496.333976][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.488653][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.498464][ T5968] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 496.512999][ T30] audit: type=1400 audit(1755782732.543:592): avc: denied { create } for pid=7517 comm="syz.3.401" name="tls" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 496.546615][ T5916] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 496.559383][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 496.617928][ T5916] usb 3-1: SerialNumber: syz [ 496.680303][ T30] audit: type=1400 audit(1755782732.743:593): avc: denied { mount } for pid=7521 comm="syz.3.402" name="/" dev="autofs" ino=14205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 496.705644][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 496.712219][ T5968] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 496.720754][ T5968] usb 5-1: config 0 has no interface number 0 [ 496.762480][ T30] audit: type=1400 audit(1755782732.773:594): avc: denied { ioctl } for pid=7521 comm="syz.3.402" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 496.797888][ T5968] usb 5-1: config 0 interface 184 has no altsetting 0 [ 496.819355][ T30] audit: type=1400 audit(1755782732.883:595): avc: denied { unmount } for pid=5907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 496.913236][ T5916] usb 3-1: 0:2 : does not exist [ 496.922948][ T5968] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 496.934018][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.945299][ T5916] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 496.954597][ T5968] usb 5-1: Product: syz [ 496.958885][ T5968] usb 5-1: Manufacturer: syz [ 496.969205][ T5916] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 496.980015][ T5968] usb 5-1: SerialNumber: syz [ 496.987254][ T5916] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 497.001446][ T5916] usb 3-1: USB disconnect, device number 24 [ 497.020867][ T6011] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 497.034454][ T5968] usb 5-1: config 0 descriptor?? [ 497.043726][ T5968] smsc75xx v1.0.0 [ 497.050904][ T6011] asix 2-1:0.0: probe with driver asix failed with error -71 [ 497.053642][ T7528] udevd[7528]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.060862][ T6011] usb 2-1: USB disconnect, device number 20 [ 497.122939][ T6052] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 497.160382][ T7530] fuse: Bad value for 'fd' [ 497.211514][ T7534] netlink: 76 bytes leftover after parsing attributes in process `syz.0.406'. [ 497.241948][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 497.293118][ T6052] usb 4-1: Using ep0 maxpacket: 16 [ 497.311923][ T6052] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 497.321755][ T6052] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.330363][ T6052] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.343762][ T6052] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.352095][ T6052] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 497.362512][ T6052] usb 4-1: config 0 has no interface number 0 [ 497.368653][ T6052] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 497.381132][ T6052] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.391710][ T6052] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 497.422111][ T6052] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.477600][ T7546] loop6: detected capacity change from 0 to 7 [ 497.484100][ T6052] usb 4-1: config 0 interface 125 has no altsetting 0 [ 497.491685][ T7546] Dev loop6: unable to read RDB block 7 [ 497.500558][ T6052] usb 4-1: config 0 interface 125 has no altsetting 2 [ 497.501088][ T7542] warning: `syz.0.408' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 497.508069][ T7546] loop6: AHDI p1 p2 [ 497.524553][ T7546] loop6: partition table partially beyond EOD, truncated [ 497.533298][ T6052] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 497.543826][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.551975][ T6052] usb 4-1: Product: syz [ 497.567799][ T7546] loop6: p1 start 926365495 is beyond EOD, truncated [ 497.575413][ T6052] usb 4-1: Manufacturer: syz [ 497.582310][ T6052] usb 4-1: SerialNumber: syz [ 497.603553][ T6052] usb 4-1: config 0 descriptor?? [ 497.617354][ T6052] usb 4-1: selecting invalid altsetting 2 [ 497.760882][ T7553] lo speed is unknown, defaulting to 1000 [ 497.915413][ T30] audit: type=1326 audit(1755782733.983:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 497.950945][ T30] audit: type=1326 audit(1755782733.983:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 497.975295][ T6011] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 497.984073][ T30] audit: type=1326 audit(1755782734.013:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.008262][ T30] audit: type=1326 audit(1755782734.013:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.035117][ T30] audit: type=1326 audit(1755782734.013:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.061490][ T30] audit: type=1326 audit(1755782734.013:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.084735][ T6012] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 498.092543][ T30] audit: type=1326 audit(1755782734.013:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.115965][ T30] audit: type=1326 audit(1755782734.013:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.139709][ T30] audit: type=1326 audit(1755782734.013:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.143134][ T6011] usb 3-1: not running at top speed; connect to a high speed hub [ 498.173498][ T30] audit: type=1326 audit(1755782734.013:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7558 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbf4978ebe9 code=0x7ffc0000 [ 498.175157][ T6011] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 498.205992][ T6011] usb 3-1: config 1 has no interface number 1 [ 498.212099][ T6011] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.226456][ T6011] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.235738][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.243938][ T6011] usb 3-1: Product: syz [ 498.248105][ T6011] usb 3-1: Manufacturer: syz [ 498.252718][ T6011] usb 3-1: SerialNumber: syz [ 498.262444][ T6012] usb 2-1: device descriptor read/64, error -71 [ 498.269476][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 498.282316][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 498.291775][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 498.302691][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 498.312745][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 498.323074][ T5968] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 498.332743][ T5968] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 498.343532][ T5968] usb 5-1: USB disconnect, device number 17 [ 498.466354][ T6011] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 498.483946][ T6011] usb 3-1: USB disconnect, device number 25 [ 498.500615][ T7528] udevd[7528]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.517650][ T6012] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 498.648089][ T5968] usb 4-1: USB disconnect, device number 14 [ 498.662643][ T6012] usb 2-1: device descriptor read/64, error -71 [ 498.707562][ T7562] fuse: Bad value for 'fd' [ 498.753796][ T24] net_ratelimit: 9 callbacks suppressed [ 498.753811][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.772350][ T6012] usb usb2-port1: attempt power cycle [ 498.827793][ T7570] netlink: 76 bytes leftover after parsing attributes in process `syz.0.418'. [ 498.902332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.982390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.242273][ T6012] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 499.337748][ T7597] fuse: Bad value for 'fd' [ 499.796006][ T6012] usb 2-1: device descriptor read/8, error -71 [ 499.845601][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.884703][ T7600] usb usb8: usbfs: process 7600 (syz.0.421) did not claim interface 0 before use [ 499.942267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.022377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.140750][ T6012] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 500.286599][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.323708][ T6012] usb 2-1: device descriptor read/8, error -71 [ 500.468634][ T6012] usb usb2-port1: unable to enumerate USB device [ 500.592470][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.613982][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.904990][ T5977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.992265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.223917][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.224777][ T5977] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 501.395350][ T5977] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 501.407744][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.451076][ T5977] usb 1-1: Product: syz [ 501.474879][ T5977] usb 1-1: Manufacturer: syz [ 501.485391][ T5977] usb 1-1: SerialNumber: syz [ 501.511167][ T5977] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 501.523064][ T6012] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 501.561933][ T5866] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.684461][ T6012] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.710430][ T6012] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 501.730153][ T6012] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.741233][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 501.757302][ T6012] usb 4-1: SerialNumber: syz [ 502.005488][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.044001][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.081360][ T6012] cdc_ether 4-1:1.0: skipping garbage [ 502.094940][ T6012] usb 4-1: bad CDC descriptors [ 502.101329][ T5968] usb 1-1: USB disconnect, device number 16 [ 502.128502][ T6012] usb 4-1: USB disconnect, device number 15 [ 502.172787][ T6011] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 502.412312][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 502.568033][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 502.577073][ T6011] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 502.592386][ T5866] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 502.595848][ T6011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.599402][ T5866] ath9k_htc: Failed to initialize the device [ 502.739447][ T6011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.808923][ T5968] usb 1-1: ath9k_htc: USB layer deinitialized [ 502.823123][ T6011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.835174][ T6011] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 502.875131][ T6011] usb 2-1: config 0 has no interface number 0 [ 502.887843][ T6011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 502.906886][ T7658] program syz.3.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.940451][ T6011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 502.950994][ T6011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.989177][ T6011] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.035467][ T7668] loop8: detected capacity change from 0 to 8 [ 503.043142][ T7668] Dev loop8: unable to read RDB block 8 [ 503.045555][ T6011] usb 2-1: config 0 interface 125 has no altsetting 0 [ 503.048980][ T7668] loop8: unable to read partition table [ 503.056920][ T6011] usb 2-1: config 0 interface 125 has no altsetting 2 [ 503.076037][ T6011] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 503.095553][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.115813][ T6011] usb 2-1: Product: syz [ 503.116041][ T7668] loop8: partition table beyond EOD, [ 503.123171][ T6011] usb 2-1: Manufacturer: syz [ 503.132377][ T7668] truncated [ 503.142352][ T7668] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 503.156653][ T6011] usb 2-1: SerialNumber: syz [ 503.173948][ T6011] usb 2-1: config 0 descriptor?? [ 503.204488][ T6011] usb 2-1: selecting invalid altsetting 2 [ 503.402791][ T7672] lo speed is unknown, defaulting to 1000 [ 503.504889][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 503.504908][ T30] audit: type=1326 audit(1755782739.573:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470b8ebe9 code=0x7ffc0000 [ 503.534283][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.554442][ T30] audit: type=1326 audit(1755782739.573:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470b8ebe9 code=0x7ffc0000 [ 503.577921][ T30] audit: type=1326 audit(1755782739.573:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6470b8ebe9 code=0x7ffc0000 [ 503.651988][ T30] audit: type=1326 audit(1755782739.673:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470b8ebe9 code=0x7ffc0000 [ 503.686057][ T30] audit: type=1326 audit(1755782739.673:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.4.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470b8ebe9 code=0x7ffc0000 [ 503.862245][ T5866] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 503.962306][ T6052] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 503.970069][ T5968] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 504.012299][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 504.017266][ C0] usb 2-1: async_complete: urb error -71 [ 504.021280][ T5866] usb 5-1: config 0 has an invalid interface number: 71 but max is 0 [ 504.026126][ T6011] get_1284_register: usb error -71 [ 504.034372][ T24] net_ratelimit: 10 callbacks suppressed [ 504.034386][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.039076][ T6011] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 504.045107][ T5866] usb 5-1: config 0 has no interface number 0 [ 504.069095][ T5866] usb 5-1: New USB device found, idVendor=04cb, idProduct=011b, bcdDevice=23.c5 [ 504.078518][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.081242][ T6011] usb 2-1: USB disconnect, device number 25 [ 504.086932][ T5866] usb 5-1: Product: syz [ 504.097794][ T5866] usb 5-1: Manufacturer: syz [ 504.102262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.122869][ T5866] usb 5-1: SerialNumber: syz [ 504.128721][ T5866] usb 5-1: config 0 descriptor?? [ 504.133554][ T6052] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.140623][ T6052] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 504.150939][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.180947][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.194003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.203846][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.213423][ T6052] usb 1-1: config 0 descriptor?? [ 504.232288][ T5968] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 504.241406][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.256519][ T5968] usb 3-1: config 0 descriptor?? [ 504.355455][ T5866] gspca_main: finepix-2.14.0 probing 04cb:011b [ 504.369145][ T5866] usb 5-1: USB disconnect, device number 18 [ 504.465930][ T6052] usbhid 1-1:0.0: can't add hid device: -71 [ 504.478324][ T6052] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 504.492477][ T6052] usb 1-1: USB disconnect, device number 17 [ 504.498496][ T30] audit: type=1400 audit(1755782740.563:627): avc: denied { ioctl } for pid=7694 comm="syz.0.448" path="socket:[15480]" dev="sockfs" ino=15480 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 504.681429][ T5968] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 504.747556][ T5968] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 504.756239][ T5968] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 504.770288][ T5968] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 504.777946][ T5968] kovaplus 0003:1E7D:2D50.000C: unknown main item tag 0x0 [ 505.100976][ T5968] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 505.112710][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.142263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.203952][ T5968] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 505.221016][ T5968] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 505.229218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.253552][ T5968] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -71 [ 505.270863][ T5968] usb 3-1: USB disconnect, device number 26 [ 505.272352][ T24] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 505.363663][ T7718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.370911][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 505.378233][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 505.385489][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 505.536288][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.595191][ T30] audit: type=1400 audit(1755782741.633:628): avc: denied { append } for pid=7717 comm="syz.3.455" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 505.627423][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2056, setting to 64 [ 505.644573][ T49] Bluetooth: hci5: sending frame failed (-49) [ 505.650740][ T5911] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 505.657491][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.675312][ T30] audit: type=1400 audit(1755782741.633:629): avc: denied { ioctl } for pid=7717 comm="syz.3.455" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 505.693214][ T7724] mkiss: ax0: crc mode is auto. [ 505.705701][ T30] audit: type=1400 audit(1755782741.633:630): avc: denied { read } for pid=7717 comm="syz.3.455" dev="sockfs" ino=16723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.729183][ T30] audit: type=1400 audit(1755782741.713:631): avc: denied { getopt } for pid=7727 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 505.739738][ T24] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 505.788673][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.798365][ T24] usb 2-1: Product: syz [ 505.802684][ T24] usb 2-1: Manufacturer: syz [ 505.807352][ T24] usb 2-1: SerialNumber: syz [ 505.827904][ T24] usb 2-1: config 0 descriptor?? [ 505.838981][ T24] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 505.840372][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7738 comm=syz.0.458 [ 506.082280][ T6012] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 506.162264][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 506.183856][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.192258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.232222][ T6012] usb 5-1: Using ep0 maxpacket: 8 [ 506.239014][ T6012] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 506.248470][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.257435][ T6012] usb 5-1: config 0 descriptor?? [ 506.262407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.334508][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 506.343788][ T6011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.344832][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.369367][ T24] usb 3-1: config 0 descriptor?? [ 506.666834][ T5982] Bluetooth: hci5: Frame reassembly failed (-84) [ 506.675221][ T5982] Bluetooth: hci5: Frame reassembly failed (-84) [ 506.800243][ T24] ath6kl: Unsupported hardware version: 0x0 [ 506.806481][ T24] ath6kl: Failed to init ath6kl core: -22 [ 506.813304][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 507.018560][ T24] usb 3-1: USB disconnect, device number 27 [ 507.075405][ T6012] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 507.087386][ T6012] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 507.112546][ T6012] asix 5-1:0.0: probe with driver asix failed with error -71 [ 507.122738][ T6012] usb 5-1: USB disconnect, device number 19 [ 507.561607][ T7758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.465'. [ 507.672086][ T7763] tmpfs: Bad value for 'mpol' [ 507.709600][ T6052] usb 2-1: USB disconnect, device number 26 [ 508.334106][ T7781] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 508.487778][ T7781] bridge1: entered allmulticast mode [ 508.505341][ T7781] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.471'. [ 508.568193][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 508.568208][ T30] audit: type=1400 audit(1755782744.573:640): avc: denied { ioctl } for pid=7776 comm="syz.4.471" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.732224][ T6012] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 508.748165][ T5911] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 508.841679][ T30] audit: type=1400 audit(1755782744.903:641): avc: denied { bind } for pid=7786 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 508.943456][ T6012] usb 4-1: config 66 has an invalid interface number: 195 but max is 0 [ 508.952018][ T6012] usb 4-1: config 66 has no interface number 0 [ 508.958504][ T6012] usb 4-1: config 66 interface 195 has no altsetting 0 [ 508.969935][ T6012] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 508.980192][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.989222][ T6012] usb 4-1: Product: syz [ 508.998595][ T6012] usb 4-1: Manufacturer: syz [ 509.013183][ T6012] usb 4-1: SerialNumber: syz [ 509.036688][ T6012] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 509.055721][ T6012] usb 4-1: Forcing UVC version to 1.0a [ 509.061235][ T6012] usb 4-1: No valid video chain found. [ 509.294208][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'. [ 509.302287][ C0] net_ratelimit: 6 callbacks suppressed [ 509.302305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.372332][ T5866] usb 4-1: USB disconnect, device number 16 [ 509.382343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.391104][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.399590][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.552222][ T6012] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 509.827993][ T6012] usb 3-1: Using ep0 maxpacket: 32 [ 509.843763][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.869364][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.997643][ T6012] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 510.032317][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.053720][ T6012] usb 3-1: config 0 descriptor?? [ 510.342307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.391126][ T7821] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 510.399239][ T30] audit: type=1400 audit(1755782746.443:642): avc: denied { bind } for pid=7820 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.422378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.430488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.453577][ T7822] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 510.454607][ T7821] bridge0: port 3(dummy0) entered disabled state [ 510.485285][ T30] audit: type=1400 audit(1755782746.453:643): avc: denied { setopt } for pid=7820 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.542348][ T7821] dummy0: left allmulticast mode [ 510.583740][ T7821] dummy0: left promiscuous mode [ 510.602235][ T7821] bridge0: port 3(dummy0) entered disabled state [ 510.718861][ T7821] team0: Port device dummy0 added [ 510.725249][ T7822] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 510.746748][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.763781][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.112041][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.144759][ T30] audit: type=1400 audit(1755782747.213:644): avc: denied { write } for pid=7796 comm="syz.2.478" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 511.169950][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.180570][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.197059][ T7822] team0: Port device dummy0 removed [ 511.205207][ T7822] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.298503][ T6012] usbhid 3-1:0.0: can't add hid device: -71 [ 511.305263][ T6012] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 511.318925][ T6012] usb 3-1: USB disconnect, device number 28 [ 511.382299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.462485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.670191][ T7838] syz.1.488 uses obsolete (PF_INET,SOCK_PACKET) [ 511.792815][ T7849] lo speed is unknown, defaulting to 1000 [ 511.822295][ T30] audit: type=1400 audit(1755782747.833:645): avc: denied { ioctl } for pid=7836 comm="syz.0.489" path="socket:[15870]" dev="sockfs" ino=15870 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 511.846811][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.012237][ T6012] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 512.132271][ T5968] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 512.223744][ T6012] usb 5-1: Using ep0 maxpacket: 16 [ 512.233736][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.249669][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.269252][ T6012] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 512.403833][ T30] audit: type=1400 audit(1755782748.403:646): avc: denied { read } for pid=7852 comm="syz.2.493" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 512.459603][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.506092][ T5968] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 512.518924][ T6012] usb 5-1: config 0 descriptor?? [ 512.524277][ T30] audit: type=1400 audit(1755782748.403:647): avc: denied { open } for pid=7852 comm="syz.2.493" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 512.548971][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.576109][ T5968] usb 4-1: config 0 descriptor?? [ 512.628716][ T30] audit: type=1400 audit(1755782748.403:648): avc: denied { ioctl } for pid=7852 comm="syz.2.493" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 512.868821][ T7865] loop6: detected capacity change from 0 to 7 [ 512.875521][ T7865] Dev loop6: unable to read RDB block 7 [ 512.888857][ T7865] loop6: AHDI p1 p2 [ 512.898884][ T7865] loop6: partition table partially beyond EOD, truncated [ 512.918976][ T7865] loop6: p1 start 926365495 is beyond EOD, truncated [ 512.969020][ T6012] mcp2221 0003:04D8:00DD.000D: item fetching failed at offset 0/5 [ 512.997792][ T6012] mcp2221 0003:04D8:00DD.000D: can't parse reports [ 513.019625][ T6012] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22 [ 513.089680][ T7862] netlink: 96 bytes leftover after parsing attributes in process `syz.1.494'. [ 513.139930][ T30] audit: type=1400 audit(1755782749.173:649): avc: denied { mount } for pid=7868 comm="syz.0.496" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 513.162291][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.263178][ T24] usb 5-1: USB disconnect, device number 20 [ 513.910462][ T7895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 513.939706][ T7895] CIFS: Unable to determine destination address [ 514.437640][ T5968] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 514.502251][ C0] net_ratelimit: 10 callbacks suppressed [ 514.502271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.582339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.719952][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.918976][ T5968] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffc3 [ 514.947641][ T5968] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 514.966313][ T5968] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 514.977301][ T5968] ------------[ cut here ]------------ [ 514.982989][ T5968] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 [ 514.991245][ T5968] shift exponent 240 is too large for 64-bit type 'long unsigned int' [ 515.001520][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 515.001549][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.001562][ T5968] Workqueue: usb_hub_wq hub_event [ 515.001590][ T5968] Call Trace: [ 515.001596][ T5968] [ 515.001603][ T5968] dump_stack_lvl+0x16c/0x1f0 [ 515.001626][ T5968] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 515.001656][ T5968] ax88772_bind.cold+0x19/0x1e [ 515.001683][ T5968] ? __pfx_ax88772_bind+0x10/0x10 [ 515.001701][ T5968] ? lockdep_init_map_type+0x5c/0x280 [ 515.001725][ T5968] ? __raw_spin_lock_init+0x3a/0x110 [ 515.001743][ T5968] ? lockdep_init_map_type+0x5c/0x280 [ 515.001762][ T5968] usbnet_probe+0xb86/0x2860 [ 515.001790][ T5968] ? __pfx_ax88772_bind+0x10/0x10 [ 515.001812][ T5968] ? __pfx_usbnet_probe+0x10/0x10 [ 515.001839][ T5968] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 515.001864][ T5968] ? usb_probe_interface+0x726/0xa40 [ 515.001889][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.001911][ T5968] ? usb_disable_lpm+0x49a/0x610 [ 515.001929][ T5968] usb_probe_interface+0x300/0xa40 [ 515.001952][ T5968] ? __pfx_usb_probe_interface+0x10/0x10 [ 515.001977][ T5968] really_probe+0x241/0xa90 [ 515.001998][ T5968] __driver_probe_device+0x1de/0x440 [ 515.002019][ T5968] driver_probe_device+0x4c/0x1b0 [ 515.002039][ T5968] __device_attach_driver+0x1df/0x310 [ 515.002059][ T5968] ? __pfx___device_attach_driver+0x10/0x10 [ 515.002079][ T5968] bus_for_each_drv+0x159/0x1e0 [ 515.002106][ T5968] ? __pfx_bus_for_each_drv+0x10/0x10 [ 515.002132][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.002154][ T5968] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 515.002173][ T5968] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 515.002201][ T5968] __device_attach+0x1e4/0x4b0 [ 515.002219][ T5968] ? __pfx___device_attach+0x10/0x10 [ 515.002238][ T5968] ? do_raw_spin_unlock+0x172/0x230 [ 515.002257][ T5968] bus_probe_device+0x17f/0x1c0 [ 515.002273][ T5968] device_add+0x1148/0x1aa0 [ 515.002294][ T5968] ? __pfx_device_add+0x10/0x10 [ 515.002315][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.002338][ T5968] usb_set_configuration+0x1187/0x1e20 [ 515.002366][ T5968] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 515.002385][ T5968] usb_generic_driver_probe+0xb1/0x110 [ 515.002403][ T5968] usb_probe_device+0xef/0x3e0 [ 515.002422][ T5968] ? __pfx_usb_probe_device+0x10/0x10 [ 515.002443][ T5968] really_probe+0x241/0xa90 [ 515.002461][ T5968] __driver_probe_device+0x1de/0x440 [ 515.002478][ T5968] ? usb_driver_applicable+0x1c7/0x220 [ 515.002503][ T5968] driver_probe_device+0x4c/0x1b0 [ 515.002522][ T5968] __device_attach_driver+0x1df/0x310 [ 515.002542][ T5968] ? __pfx___device_attach_driver+0x10/0x10 [ 515.002561][ T5968] bus_for_each_drv+0x159/0x1e0 [ 515.002587][ T5968] ? __pfx_bus_for_each_drv+0x10/0x10 [ 515.002612][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.002634][ T5968] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 515.002655][ T5968] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 515.002684][ T5968] __device_attach+0x1e4/0x4b0 [ 515.002703][ T5968] ? __pfx___device_attach+0x10/0x10 [ 515.002730][ T5968] ? do_raw_spin_unlock+0x172/0x230 [ 515.002753][ T5968] bus_probe_device+0x17f/0x1c0 [ 515.002772][ T5968] device_add+0x1148/0x1aa0 [ 515.002796][ T5968] ? __pfx_device_add+0x10/0x10 [ 515.002819][ T5968] ? usb_detect_static_quirks+0x335/0x3e0 [ 515.002840][ T5968] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 515.002869][ T5968] usb_new_device+0xd07/0x1a60 [ 515.002892][ T5968] ? do_raw_spin_lock+0x12c/0x2b0 [ 515.002911][ T5968] ? __pfx_usb_new_device+0x10/0x10 [ 515.002930][ T5968] ? hub_event+0x2f20/0x4fe0 [ 515.002952][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.002975][ T5968] hub_event+0x2f34/0x4fe0 [ 515.003005][ T5968] ? __pfx_hub_event+0x10/0x10 [ 515.003025][ T5968] ? __ioread64be_hi_lo+0x40/0xb0 [ 515.003046][ T5968] ? __pfx_debug_object_deactivate+0x10/0x10 [ 515.003070][ T5968] ? rcu_sync_enter+0x60/0x350 [ 515.003095][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.003115][ T5968] ? lock_acquire+0x2cd/0x350 [ 515.003140][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.003161][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.003184][ T5968] process_one_work+0x9cf/0x1b70 [ 515.003206][ T5968] ? __pfx_hcd_resume_work+0x10/0x10 [ 515.003228][ T5968] ? __pfx_process_one_work+0x10/0x10 [ 515.003250][ T5968] ? assign_work+0x1a0/0x250 [ 515.003268][ T5968] worker_thread+0x6c8/0xf10 [ 515.003292][ T5968] ? __pfx_worker_thread+0x10/0x10 [ 515.003311][ T5968] kthread+0x3c2/0x780 [ 515.003328][ T5968] ? __pfx_kthread+0x10/0x10 [ 515.003343][ T5968] ? ret_from_fork+0x25/0x6f0 [ 515.003360][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.003382][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.003403][ T5968] ? __pfx_kthread+0x10/0x10 [ 515.003420][ T5968] ret_from_fork+0x5d7/0x6f0 [ 515.003436][ T5968] ? __pfx_kthread+0x10/0x10 [ 515.003453][ T5968] ret_from_fork_asm+0x1a/0x30 [ 515.003477][ T5968] [ 515.473949][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.552255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.592236][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 515.622349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.648158][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 515.648173][ T30] audit: type=1400 audit(1755782751.713:653): avc: denied { ioctl } for pid=7909 comm="syz.0.509" path="socket:[17190]" dev="sockfs" ino=17190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 515.648323][ T5968] ---[ end trace ]--- [ 515.701476][ T5968] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 515.708720][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 515.718073][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.728119][ T5968] Workqueue: usb_hub_wq hub_event [ 515.733149][ T5968] Call Trace: [ 515.736413][ T5968] [ 515.739337][ T5968] dump_stack_lvl+0x3d/0x1f0 [ 515.743974][ T5968] vpanic+0x6e8/0x7a0 [ 515.747946][ T5968] ? __pfx_vpanic+0x10/0x10 [ 515.752438][ T5968] ? __pfx_vprintk_emit+0x10/0x10 [ 515.757447][ T5968] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 515.763413][ T5968] panic+0xca/0xd0 [ 515.767127][ T5968] ? __pfx_panic+0x10/0x10 [ 515.771540][ T5968] check_panic_on_warn+0xab/0xb0 [ 515.776462][ T5968] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 515.782875][ T5968] ax88772_bind.cold+0x19/0x1e [ 515.787657][ T5968] ? __pfx_ax88772_bind+0x10/0x10 [ 515.792666][ T5968] ? lockdep_init_map_type+0x5c/0x280 [ 515.798022][ T5968] ? __raw_spin_lock_init+0x3a/0x110 [ 515.803289][ T5968] ? lockdep_init_map_type+0x5c/0x280 [ 515.808639][ T5968] usbnet_probe+0xb86/0x2860 [ 515.813217][ T5968] ? __pfx_ax88772_bind+0x10/0x10 [ 515.818226][ T5968] ? __pfx_usbnet_probe+0x10/0x10 [ 515.823236][ T5968] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 515.828770][ T5968] ? usb_probe_interface+0x726/0xa40 [ 515.834040][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.838788][ T5968] ? usb_disable_lpm+0x49a/0x610 [ 515.843708][ T5968] usb_probe_interface+0x300/0xa40 [ 515.848809][ T5968] ? __pfx_usb_probe_interface+0x10/0x10 [ 515.854426][ T5968] really_probe+0x241/0xa90 [ 515.858934][ T5968] __driver_probe_device+0x1de/0x440 [ 515.864216][ T5968] driver_probe_device+0x4c/0x1b0 [ 515.869247][ T5968] __device_attach_driver+0x1df/0x310 [ 515.874600][ T5968] ? __pfx___device_attach_driver+0x10/0x10 [ 515.880476][ T5968] bus_for_each_drv+0x159/0x1e0 [ 515.885328][ T5968] ? __pfx_bus_for_each_drv+0x10/0x10 [ 515.890699][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.895534][ T5968] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 515.901497][ T5968] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 515.907291][ T5968] __device_attach+0x1e4/0x4b0 [ 515.912037][ T5968] ? __pfx___device_attach+0x10/0x10 [ 515.917319][ T5968] ? do_raw_spin_unlock+0x172/0x230 [ 515.922513][ T5968] bus_probe_device+0x17f/0x1c0 [ 515.927981][ T5968] device_add+0x1148/0x1aa0 [ 515.932505][ T5968] ? __pfx_device_add+0x10/0x10 [ 515.937340][ T5968] ? rcu_is_watching+0x12/0xc0 [ 515.942115][ T5968] usb_set_configuration+0x1187/0x1e20 [ 515.947570][ T5968] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 515.953656][ T5968] usb_generic_driver_probe+0xb1/0x110 [ 515.959096][ T5968] usb_probe_device+0xef/0x3e0 [ 515.963844][ T5968] ? __pfx_usb_probe_device+0x10/0x10 [ 515.969206][ T5968] really_probe+0x241/0xa90 [ 515.973700][ T5968] __driver_probe_device+0x1de/0x440 [ 515.978968][ T5968] ? usb_driver_applicable+0x1c7/0x220 [ 515.984417][ T5968] driver_probe_device+0x4c/0x1b0 [ 515.989435][ T5968] __device_attach_driver+0x1df/0x310 [ 515.994789][ T5968] ? __pfx___device_attach_driver+0x10/0x10 [ 516.000670][ T5968] bus_for_each_drv+0x159/0x1e0 [ 516.005510][ T5968] ? __pfx_bus_for_each_drv+0x10/0x10 [ 516.010896][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.015649][ T5968] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 516.021612][ T5968] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 516.027408][ T5968] __device_attach+0x1e4/0x4b0 [ 516.032168][ T5968] ? __pfx___device_attach+0x10/0x10 [ 516.037433][ T5968] ? do_raw_spin_unlock+0x172/0x230 [ 516.042615][ T5968] bus_probe_device+0x17f/0x1c0 [ 516.047456][ T5968] device_add+0x1148/0x1aa0 [ 516.051958][ T5968] ? __pfx_device_add+0x10/0x10 [ 516.056805][ T5968] ? usb_detect_static_quirks+0x335/0x3e0 [ 516.062609][ T5968] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 516.068494][ T5968] usb_new_device+0xd07/0x1a60 [ 516.073250][ T5968] ? do_raw_spin_lock+0x12c/0x2b0 [ 516.078257][ T5968] ? __pfx_usb_new_device+0x10/0x10 [ 516.083439][ T5968] ? hub_event+0x2f20/0x4fe0 [ 516.088024][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.092862][ T5968] hub_event+0x2f34/0x4fe0 [ 516.097268][ T5968] ? __pfx_hub_event+0x10/0x10 [ 516.102012][ T5968] ? __ioread64be_hi_lo+0x40/0xb0 [ 516.107020][ T5968] ? __pfx_debug_object_deactivate+0x10/0x10 [ 516.112987][ T5968] ? rcu_sync_enter+0x60/0x350 [ 516.117739][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.122482][ T5968] ? lock_acquire+0x2cd/0x350 [ 516.127145][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.131914][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.136669][ T5968] process_one_work+0x9cf/0x1b70 [ 516.141592][ T5968] ? __pfx_hcd_resume_work+0x10/0x10 [ 516.146863][ T5968] ? __pfx_process_one_work+0x10/0x10 [ 516.152216][ T5968] ? assign_work+0x1a0/0x250 [ 516.156785][ T5968] worker_thread+0x6c8/0xf10 [ 516.161359][ T5968] ? __pfx_worker_thread+0x10/0x10 [ 516.166450][ T5968] kthread+0x3c2/0x780 [ 516.170499][ T5968] ? __pfx_kthread+0x10/0x10 [ 516.175076][ T5968] ? ret_from_fork+0x25/0x6f0 [ 516.179730][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.184475][ T5968] ? rcu_is_watching+0x12/0xc0 [ 516.189219][ T5968] ? __pfx_kthread+0x10/0x10 [ 516.193787][ T5968] ret_from_fork+0x5d7/0x6f0 [ 516.198362][ T5968] ? __pfx_kthread+0x10/0x10 [ 516.202942][ T5968] ret_from_fork_asm+0x1a/0x30 [ 516.207693][ T5968] [ 516.210905][ T5968] Kernel Offset: disabled [ 516.215202][ T5968] Rebooting in 86400 seconds..