last executing test programs: 39.505715997s ago: executing program 0 (id=2491): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r3, 0x84, 0x80, &(0x7f0000000240)="2df7976309000000", 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = gettid() sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0xff) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) geteuid() r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getresgid(0x0, 0x0, &(0x7f0000002dc0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x7, 0xe000000, 0x200, {{0xb, 0x4, 0x0, 0x27, 0x2c, 0x68, 0x0, 0xcf, 0x4, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x17, 0x21, [@local, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @remote, @private=0xa010101]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000300)={0x0, 0x0, 0x9, 0x7, @vifc_lcl_ifindex=r8, @multicast1=0xe0000300}, 0x10) 34.634740404s ago: executing program 0 (id=2502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm(0x0, 0x3, 0x2) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800700, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x2a0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) gettid() acct(&(0x7f0000000140)='./file0\x00') getsockname(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000180)=0xd3) socket$inet6_udp(0xa, 0x2, 0x0) 33.694561375s ago: executing program 0 (id=2506): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f00000000c0)) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r4, 0x0, 0x18001, 0x0, 0xc, 0x258bd5, 0x2e7883}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 33.426123021s ago: executing program 0 (id=2508): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = open(&(0x7f00000002c0)='.\x00', 0x4000, 0x1a1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40) 32.715892188s ago: executing program 0 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000170a0101000000fff0000000010000080900010073"], 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x40880) 31.902063037s ago: executing program 0 (id=2516): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, &(0x7f0000001100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000009000040700cbdf00000000000010902f9c1337acd3236baa628ce1762edb4240045bc9ff000090400000103000000092100"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0xe, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) 30.546276353s ago: executing program 32 (id=2516): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, &(0x7f0000001100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000009000040700cbdf00000000000010902f9c1337acd3236baa628ce1762edb4240045bc9ff000090400000103000000092100"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0xe, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000000)={0x1, 0x7}, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) 22.171154587s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.602124906s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.050863182s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.56712638s ago: executing program 1 (id=2583): syz_usb_connect$cdc_ncm(0x4, 0x73, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020101010200000905820940002606"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="08001400e0000001"], 0x2c}}, 0x0) r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r3}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff, 0x17}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000067c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0xfffffffc}, {{&(0x7f0000000240)=@l2tp, 0x80, 0x0}, 0xffffffbf}], 0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 8.931293522s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.468216646s ago: executing program 3 (id=2587): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), 0x4) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) lstat(0x0, &(0x7f0000007480)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x80800) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) 6.679798812s ago: executing program 2 (id=2589): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xa, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) socket(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f00000008c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.505724301s ago: executing program 1 (id=2590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x4240a2a0) vmsplice(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)="c5", 0x1}], 0x2, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff3d, 0x0, 0x980e4d6d5f9c5af0}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f0000000240)=@default_ibss_ssid, 0x6, 0x2) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x4000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 5.906776277s ago: executing program 2 (id=2591): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0xfffffe00) 5.347415537s ago: executing program 2 (id=2593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000170a01010000000000034000010000080900010073"], 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x40880) 5.319433098s ago: executing program 4 (id=2594): socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc1"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0xa, 0x4, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r4], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020}, 0x2020) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4}) 5.235727447s ago: executing program 3 (id=2595): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)={{0x12, 0x1, 0x250, 0x6, 0x9c, 0x4e, 0x8, 0x525, 0xa4a0, 0x3e5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x9, 0x40, 0xef, [{{0x9, 0x4, 0x8c, 0x0, 0x1, 0xe9, 0xd5, 0x1c, 0x3, [], [{{0x9, 0x5, 0x7, 0x17, 0x8, 0x1, 0x6, 0x59}}]}}]}}]}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 5.235269671s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.737135309s ago: executing program 1 (id=2596): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000030000008500000051000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008020000b703000000000000850000003900000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) 3.736773687s ago: executing program 2 (id=2597): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) fchmod(0xffffffffffffffff, 0x183) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xa, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f00000008c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x16}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x6, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.726122207s ago: executing program 4 (id=2598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000031000000000000000000000034000100ff7fffff95"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.627894895s ago: executing program 4 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, {0x3, 0x0, "b1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) 3.519978175s ago: executing program 1 (id=2600): syz_usb_connect$uac1(0x5, 0xad, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x7, 0x50, 0x35, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x9, 0x7, "38f78002"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x2, 0x17, 0xf7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0xa, 0x8}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xa, 0x1, 0xa, "6cd1"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x80, 0x9, {0x7, 0x25, 0x1, 0x183, 0x5, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x90, 0xe8, 0x4, {0x7, 0x25, 0x1, 0x80, 0x2}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0x9, 0x98, {0x98, 0xf, "af91399e1702146154a7e7af0f14d36ee66c52b084665a1bb4f4a2e8197e7ab17d84e85105237332dcbf42e07f2cb77464979889dd40161ede2f150c0680b9e1a8d59de50423d62c30b74b6e504b1584cd765139fb70467fd4bf7217e4a73427e79a5e028e8d6dc56a1bf7c78058f306d42502663b3c72d84e624596bb1d031ef5812b3b73f1ed63dcb5111e04c61c38e05b2d143189"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000180)={0x0, 0x22, 0x23, {[@global=@item_4={0x3, 0x1, 0xa, "691da8e6"}, @global=@item_4={0x3, 0x1, 0x1, "b44a301c"}, @global=@item_4={0x3, 0x1, 0x8, "a0db7f43"}, @main=@item_4={0x3, 0x0, 0xc, "6baf0869"}, @main=@item_4={0x3, 0x0, 0xc, "131179e7"}, @local=@item_4={0x3, 0x2, 0x9, "fa72a239"}, @local=@item_4={0x3, 0x2, 0x0, "ddcdda9c"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x9ea}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x40, 0xc, 0x1d, "6284067ff924829aed8c1283274a6d93469a237df19d0691bfb9fc14b5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0xcb, "df9e9bc71811ca96ec9c45c8a0e5e308f763781e7165c597d371201ae1934419de25bc5dc3c1005617e17d0bdb06db1b34c12638d9115607ae12619986885f521267cb62d4627b18d774a9d0b6bff000a79d0a7f7552d57db80cdfd6bbb71d46e94035d13e5d5de00b3feb32ae251c74e3f4e0a5388d3f5d5e8c9d8111c04ecc048bbb1ad27cad056e847ecdba278b95de791ea422a8e5a1ea68637582ff093460fd944b610016fb0b22cdba46a55c207575589a536e667b7538976ddf43f40820676ad40f4b265d90c82f"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x80}}) 3.508332208s ago: executing program 3 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x5fd6e80bbc60016, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}}, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000380)=0x803) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004400000080000000100000080000000", @ANYRES32, @ANYBLOB="8300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002347e8baae8b30f1de823001801000020207025000000070000000000000000df0c3f2e462b00000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.080506289s ago: executing program 5 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffede) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r5 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000fdffffffffffffff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.065640215s ago: executing program 1 (id=2602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xae, &(0x7f0000000100)=@string={0xae, 0x3, "f2b57953b8949d34cbc88725111e58a39f705a7b146d5d5239970d6d621831469fb7323080951da1483c409bc0a35004e102ab61d2d5df38065cf5d6354e4125960a1c9b1a1cb3e0c913e0066f73387f50e80380d612d03c150dbde3de0b6d554e3e3ed9d5a813ce7eef66641c11025f7ceda70822c88957bcaefc9c16e14a407ca8546d96d5b81e707267802816e112cd2c252a45c53509092ad99b0ce86531172befea19ad84435c7a34a6"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x101fb, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/245}, {&(0x7f0000000340)=""/142}, {&(0x7f0000000400)=""/155}, {&(0x7f0000000980)=""/4096}, {&(0x7f00000004c0)=""/249}, {&(0x7f0000000080)=""/39}], 0x0, &(0x7f0000000880)=""/195, 0xfffffffffffffdf3}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000140)=0xf, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.055874221s ago: executing program 2 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) 2.051550501s ago: executing program 3 (id=2604): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0xffffff9b, 0x1, 0xed4, 0x8}, 0x10) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x3, 0x280, 0x0, 0x0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000080)={r6, 0xbc}, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x110, r7, 0x10000) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000280)={0x89, 0x7, r11, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r12, 0x0, 0x10000, 0x0, 0x5, 0x1000, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r12, 0x0, 0x81, 0xefa, &(0x7f0000001600)="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"}) 2.051098161s ago: executing program 4 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r3}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4014, 0x0, 0x0) shutdown(r7, 0x1) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000158, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) 1.066394323s ago: executing program 3 (id=2606): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(0xffffffffffffffff) syz_clone3(&(0x7f0000000500)={0x90d0200, &(0x7f00000000c0), &(0x7f0000000240)=0x0, &(0x7f0000000340), {0x12}, &(0x7f00000003c0)=""/30, 0x1e, &(0x7f0000000400)=""/171, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x58) sched_setscheduler(r2, 0x3, &(0x7f0000000580)=0x7fffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64220000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/35, 0x23}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/234, 0xea}], 0x7, &(0x7f0000000980)=""/157, 0x9d}, 0x6}, {{&(0x7f0000000a40)=@isdn, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/253, 0xfd}], 0x1, &(0x7f0000001c80)=""/223, 0xdf}, 0x5}, {{&(0x7f0000001d80)=@un=@abs, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/236, 0xec}], 0x1, &(0x7f0000001f40)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002f40)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000005340)=[{&(0x7f0000002fc0)=""/60, 0x3c}, {&(0x7f0000003000)=""/116, 0x74}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/229, 0xe5}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/11, 0xb}, {&(0x7f00000051c0)=""/72, 0x48}, {&(0x7f0000005240)=""/249, 0xf9}], 0x8, &(0x7f00000053c0)=""/14, 0xe}, 0x5}, {{&(0x7f0000005400)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005480)=""/31, 0x1f}], 0x1, &(0x7f0000005500)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000006500)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006680)=[{&(0x7f0000006580)=""/242, 0xf2}], 0x1, &(0x7f00000066c0)=""/223, 0xdf}, 0x1}, {{&(0x7f00000067c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000006840)=""/94, 0x5e}, {&(0x7f00000068c0)=""/10, 0xa}, {&(0x7f0000006900)=""/5, 0x5}, {&(0x7f0000006940)=""/198, 0xc6}], 0x4, &(0x7f0000006a80)=""/236, 0xec}, 0xc5}], 0x7, 0x10000, &(0x7f0000006d40)={0x0, 0x3938700}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.007604028s ago: executing program 2 (id=2607): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001"], 0x54}, 0x1, 0x5000000, 0x0, 0x800}, 0x80) 1.007268456s ago: executing program 4 (id=2608): socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc1"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0xa, 0x4, 0x3) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r4], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020}, 0x2020) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4}) 743.814297ms ago: executing program 1 (id=2609): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201410180739820ca2e01c1df07010203010902240009050602000212040a09058202000200fe1058d7346cd9b322b75df20a3fe87fea92dc8e606ca15fb585ae110bd51ea46e88f0a5ccad604ff82b23069d8958ae35a7489cf7998a03da17c14d2e64e4d37cbfd5da5fbb0d3ddfd9526e"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000140), &(0x7f0000000340)=r2}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x20, 0x5, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 378.405954ms ago: executing program 3 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000020000100000000000000007c02000000fc0000000000000008000b"], 0x24}, 0x1, 0x20}, 0x0) 0s ago: executing program 4 (id=2611): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) openat$random(0xffffffffffffff9c, 0x0, 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000100000000000000070000000000", @ANYRES32=r5], 0x20}}, 0x0) kernel console output (not intermixed with test programs): g attributes in process `syz.2.1801'. [ 543.740075][T12180] bridge1: port 1(ip6gretap1) entered blocking state [ 543.754764][T12180] bridge1: port 1(ip6gretap1) entered disabled state [ 543.765171][T12180] ip6gretap1: entered allmulticast mode [ 543.774752][T12180] ip6gretap1: entered promiscuous mode [ 543.810247][ T5890] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 544.060321][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 544.163808][ T5890] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 544.203979][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.316063][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 544.439351][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.464151][ T5890] usb 5-1: Product: syz [ 544.468334][ T5890] usb 5-1: Manufacturer: syz [ 544.955743][ T5890] usb 5-1: SerialNumber: syz [ 545.038109][ T10] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 545.066988][ T5890] usb 5-1: can't set config #1, error -71 [ 545.094224][ T5890] usb 5-1: USB disconnect, device number 60 [ 545.380608][T10575] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 545.781214][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 545.870242][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 545.906492][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1808'. [ 545.915773][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1808'. [ 545.961613][T12203] netlink: 'syz.4.1808': attribute type 6 has an invalid length. [ 546.041065][ T10] usb 1-1: can't read configurations, error -71 [ 546.060447][T10575] usb 2-1: Using ep0 maxpacket: 8 [ 546.106592][T10575] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 546.117726][T10575] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 546.138893][T10575] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.177156][T10575] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.202510][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 546.203100][T10575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.225494][T10575] usb 2-1: Product: syz [ 546.229672][T10575] usb 2-1: Manufacturer: syz [ 546.234648][T10575] usb 2-1: SerialNumber: syz [ 546.254317][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 546.788258][T10575] usb 2-1: 0:2 : does not exist [ 546.843941][T12214] macsec1: entered promiscuous mode [ 546.849157][T12214] macsec1: entered allmulticast mode [ 546.881793][T10575] usb 2-1: USB disconnect, device number 60 [ 547.381768][ T30] audit: type=1400 audit(1747658148.604:563): avc: denied { setopt } for pid=12225 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.550717][T12229] No control pipe specified [ 548.051562][T12237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1819'. [ 548.606056][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1822'. [ 548.616099][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1822'. [ 548.630641][T12247] netlink: 'syz.4.1822': attribute type 6 has an invalid length. [ 549.649798][ T10] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 549.680277][T12270] input: syz1 as /devices/virtual/input/input50 [ 549.902197][ T10] usb 3-1: device descriptor read/64, error -71 [ 549.943025][T12277] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 550.700572][T12286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1834'. [ 550.784487][ T10] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 550.960511][ T10] usb 3-1: device descriptor read/64, error -71 [ 551.204762][ T10] usb usb3-port1: attempt power cycle [ 551.655395][T12294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1837'. [ 551.740199][ T10] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 551.763747][ T10] usb 3-1: device descriptor read/8, error -71 [ 552.660628][ T10] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 553.059599][ T10] usb 3-1: device descriptor read/8, error -71 [ 553.097287][T12310] ufs: You didn't specify the type of your ufs filesystem [ 553.097287][T12310] [ 553.097287][T12310] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 553.097287][T12310] [ 553.097287][T12310] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 553.128535][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.179207][T12315] netlink: 'syz.2.1843': attribute type 15 has an invalid length. [ 553.200360][ T10] usb usb3-port1: unable to enumerate USB device [ 553.203460][T12315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.265540][T12310] ufs: ufstype=old is supported read-only [ 553.493469][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 553.540644][T12310] ufs: ufs_fill_super(): bad magic number [ 553.609973][ T30] audit: type=1400 audit(1747658154.834:564): avc: denied { read } for pid=12324 comm="syz.0.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 553.913765][T10575] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 554.138456][ T30] audit: type=1400 audit(1747658155.134:565): avc: denied { setopt } for pid=12325 comm="syz.3.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 554.174338][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1849'. [ 554.256982][ T30] audit: type=1400 audit(1747658155.234:566): avc: denied { ioctl } for pid=12325 comm="syz.3.1847" path="socket:[31920]" dev="sockfs" ino=31920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 554.282221][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.868918][T10575] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.882730][T10575] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 554.893049][T10575] usb 2-1: can't read configurations, error -71 [ 554.928134][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1853'. [ 554.937429][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1853'. [ 554.958897][T12350] netlink: 'syz.3.1853': attribute type 6 has an invalid length. [ 555.180761][ T5863] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 555.511965][ T5863] usb 1-1: config 0 has no interfaces? [ 555.517484][ T5863] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 555.542544][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.571258][ T5863] usb 1-1: config 0 descriptor?? [ 555.892959][T12348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.920766][T12348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.285937][T10575] usb 1-1: USB disconnect, device number 66 [ 556.610204][ T950] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 556.739248][T12379] netlink: 'syz.1.1862': attribute type 10 has an invalid length. [ 556.756212][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.829491][ T950] usb 3-1: Using ep0 maxpacket: 16 [ 556.845101][ T950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.961614][ T950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.972160][ T950] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 556.981610][ T950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.035956][ T950] usb 3-1: config 0 descriptor?? [ 557.050852][T10575] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 557.079759][ T950] usbhid 3-1:0.0: can't add hid device: -22 [ 557.086425][ T950] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 557.108189][T12382] bridge3: entered promiscuous mode [ 557.114145][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 557.280601][T10575] usb 1-1: Using ep0 maxpacket: 16 [ 557.290934][T10575] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 557.304043][T10575] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.318286][T10575] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 557.892767][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 557.934739][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 557.951869][T10575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.967274][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.984035][T10575] usb 1-1: Product: syz [ 558.091679][T10575] usb 1-1: Manufacturer: syz [ 558.096750][T10575] usb 1-1: SerialNumber: syz [ 558.102463][ T10] usb 5-1: config 0 descriptor?? [ 558.114307][T10575] usb 1-1: can't set config #1, error -71 [ 558.130989][T10575] usb 1-1: USB disconnect, device number 67 [ 559.159896][T12413] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 559.368934][T12418] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 559.449300][ T5890] usb 3-1: USB disconnect, device number 44 [ 559.582294][T12426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1875'. [ 559.592445][T12426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1875'. [ 559.770472][ T5863] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 559.880770][T12428] overlayfs: failed to clone lowerpath [ 560.163585][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1876'. [ 560.172847][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1876'. [ 560.405306][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 560.420632][ T5863] usb 1-1: config 4 has an invalid interface number: 64 but max is 0 [ 560.430004][ T5863] usb 1-1: config 4 has no interface number 0 [ 560.460016][ T5863] usb 1-1: config 4 interface 64 has no altsetting 0 [ 560.484852][ T5863] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=22.37 [ 560.512226][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.537534][ T5863] usb 1-1: Product: syz [ 560.545963][ T5863] usb 1-1: Manufacturer: syz [ 560.548679][T12436] Driver unsupported XDP return value 0 on prog (id 461) dev N/A, expect packet loss! [ 560.553153][ T5863] usb 1-1: SerialNumber: syz [ 560.595485][ T30] audit: type=1400 audit(1747658161.824:567): avc: denied { map } for pid=12434 comm="syz.1.1877" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.707597][ T30] audit: type=1400 audit(1747658161.934:568): avc: denied { map } for pid=12439 comm="syz.2.1879" path="socket:[31253]" dev="sockfs" ino=31253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 560.731855][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.799121][ T5863] usb 1-1: bad CDC descriptors [ 560.808586][ T5863] usb 1-1: USB disconnect, device number 68 [ 560.813453][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1880'. [ 561.128044][T12448] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 561.142624][T12448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.158887][T12448] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 561.602095][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 561.622723][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 561.643494][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 561.799546][ T10] usb 5-1: USB disconnect, device number 61 [ 562.237777][T12461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.276421][T12462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1886'. [ 562.285747][T12462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1886'. [ 562.331375][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 562.438983][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.875739][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1890'. [ 565.431275][T12483] random: crng reseeded on system resumption [ 565.636603][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1892'. [ 566.754634][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1896'. [ 567.128100][T12500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.821020][T12508] loop8: detected capacity change from 0 to 7 [ 567.916678][T12508] Dev loop8: unable to read RDB block 7 [ 567.922341][T12508] loop8: AHDI p1 p3 p4 [ 567.926522][T12508] loop8: partition table partially beyond EOD, truncated [ 567.933673][T12508] loop8: p1 start 975770946 is beyond EOD, truncated [ 567.940962][T12508] loop8: p3 start 6514546 is beyond EOD, truncated [ 567.991665][T12501] netlink: 'syz.2.1899': attribute type 1 has an invalid length. [ 568.062811][T12510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1899'. [ 568.330836][T12501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.405794][T12500] @: renamed from vlan0 (while UP) [ 568.537987][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 568.732765][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1902'. [ 568.753844][T12516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.774054][ T30] audit: type=1400 audit(1747658170.004:569): avc: denied { getopt } for pid=12519 comm="syz.3.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 568.784245][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1902'. [ 568.857181][ T30] audit: type=1400 audit(1747658170.074:570): avc: denied { map } for pid=12522 comm="syz.1.1904" path="pipe:[32270]" dev="pipefs" ino=32270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 569.057252][T12529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1906'. [ 570.409460][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 570.598166][T12540] vlan3: entered allmulticast mode [ 570.638120][T12540] macsec0: entered allmulticast mode [ 570.690558][T12540] veth1_macvtap: entered allmulticast mode [ 572.230750][ T5890] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 572.493843][T12575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.502296][T12577] vlan2: entered promiscuous mode [ 572.507654][T12577] hsr_slave_1: entered promiscuous mode [ 572.516650][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.529065][T12577] vlan2: entered allmulticast mode [ 572.535093][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 572.551682][T12577] hsr_slave_1: entered allmulticast mode [ 572.557453][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.568364][ T5890] usb 2-1: config 0 descriptor?? [ 572.583719][ T5890] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 572.633919][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 572.787203][ T5890] usb 2-1: USB disconnect, device number 63 [ 573.641724][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 573.642834][T12595] loop2: detected capacity change from 0 to 7 [ 573.755023][T12595] Dev loop2: unable to read RDB block 7 [ 573.766169][T12595] loop2: unable to read partition table [ 573.780257][T12595] loop2: partition table beyond EOD, truncated [ 573.799035][T12595] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 573.890480][ T5862] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 573.898116][ T10] usb 3-1: device descriptor read/64, error -71 [ 574.024320][T12613] x_tables: duplicate underflow at hook 1 [ 574.356432][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 574.386712][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 574.396538][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.404600][ T5862] usb 1-1: Product: syz [ 574.408815][ T5862] usb 1-1: Manufacturer: syz [ 574.420114][ T5862] usb 1-1: SerialNumber: syz [ 574.426962][ T5862] usb 1-1: config 0 descriptor?? [ 574.623067][ T10] usb 3-1: device descriptor read/64, error -71 [ 574.645391][ T5862] usb 1-1: interface 1 not found [ 574.771207][ T10] usb usb3-port1: attempt power cycle [ 574.846558][ T5890] usb 1-1: USB disconnect, device number 69 [ 575.067586][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 575.160260][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 575.208087][ T10] usb 3-1: device descriptor read/8, error -71 [ 575.951149][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 575.992562][ T10] usb 3-1: device descriptor read/8, error -71 [ 576.053594][T12639] random: crng reseeded on system resumption [ 576.130505][ T10] usb usb3-port1: unable to enumerate USB device [ 576.161335][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1937'. [ 576.753102][ T30] audit: type=1400 audit(1747658177.984:571): avc: denied { accept } for pid=12649 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 577.068163][T12661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1943'. [ 577.328402][T12669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.944070][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 578.860771][ T950] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 579.271099][T12702] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1955'. [ 579.304033][ T950] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 579.335445][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.363312][ T950] usb 5-1: Product: syz [ 579.377708][ T950] usb 5-1: Manufacturer: syz [ 579.383620][ T950] usb 5-1: SerialNumber: syz [ 579.393701][ T950] usb 5-1: config 0 descriptor?? [ 579.402315][T12704] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 579.415497][ T950] usb 5-1: interface 1 not found [ 579.700925][ T5863] usb 5-1: USB disconnect, device number 62 [ 580.450312][ T5862] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 580.483554][T12717] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1960'. [ 580.495832][T12717] IPVS: length: 135 != 24 [ 580.496545][ T30] audit: type=1400 audit(1747658181.724:572): avc: denied { getopt } for pid=12716 comm="syz.3.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 580.523192][ T30] audit: type=1400 audit(1747658181.734:573): avc: denied { accept } for pid=12716 comm="syz.3.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 580.566383][T12721] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 580.689388][ T5862] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 580.704490][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.717244][ T5862] usb 2-1: config 0 descriptor?? [ 580.726658][T12723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.738029][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.749513][ T5862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 580.775905][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 580.796959][T12727] netlink: 'syz.2.1964': attribute type 11 has an invalid length. [ 580.835116][T12727] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 581.048654][ T30] audit: type=1400 audit(1747658182.274:574): avc: denied { read write } for pid=12729 comm="syz.4.1965" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 581.054776][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 581.073792][ T30] audit: type=1400 audit(1747658182.274:575): avc: denied { open } for pid=12729 comm="syz.4.1965" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 581.124723][ T5863] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 581.144621][ T5863] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 581.239798][T12736] QAT: Invalid ioctl 1075883590 [ 581.249454][T12736] QAT: Invalid ioctl 1075883590 [ 581.255617][T12736] QAT: Invalid ioctl 1075883590 [ 581.262907][T12736] QAT: Invalid ioctl 1075883590 [ 581.275089][T12736] QAT: Invalid ioctl 1075883590 [ 581.287780][T12736] QAT: Invalid ioctl 1075883590 [ 581.302894][T12738] QAT: Invalid ioctl 35123 [ 581.307574][T12736] QAT: Invalid ioctl 1075883590 [ 581.338179][T12736] QAT: Invalid ioctl 1075883590 [ 581.343783][ T5862] gp8psk: usb in 128 operation failed. [ 581.349597][ T5862] gp8psk: usb in 137 operation failed. [ 581.362526][ T5862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 581.435084][T12736] QAT: Invalid ioctl 1075883590 [ 581.447431][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 581.495717][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 581.509932][ T5862] usb 2-1: USB disconnect, device number 64 [ 581.536023][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1968'. [ 581.545319][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1968'. [ 582.321929][T12752] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1972'. [ 582.321948][T12753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1972'. [ 582.677478][T12756] loop2: detected capacity change from 0 to 7 [ 582.701103][T12756] Dev loop2: unable to read RDB block 7 [ 582.706694][T12756] loop2: unable to read partition table [ 582.724265][T12756] loop2: partition table beyond EOD, truncated [ 582.740286][T12756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.926875][T12762] openvswitch: netlink: IP tunnel TTL not specified. [ 582.947824][T12764] netlink: 'syz.4.1976': attribute type 11 has an invalid length. [ 582.988842][T12764] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 583.111000][ T5862] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 583.270861][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 583.282242][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.324901][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.369397][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.385942][T12775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.394798][ T950] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 583.428543][ T5862] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 583.461595][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.480029][T12777] fuse: Bad value for 'group_id' [ 583.502805][ T5862] usb 2-1: config 0 descriptor?? [ 583.508370][T12777] fuse: Bad value for 'group_id' [ 583.550749][ T950] usb 1-1: Using ep0 maxpacket: 16 [ 583.562911][ T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.581703][T12782] __nla_validate_parse: 3 callbacks suppressed [ 583.581714][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1980'. [ 583.628561][ T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.645916][ T950] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 583.670125][ T950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.679906][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1981'. [ 583.709327][ T950] usb 1-1: config 0 descriptor?? [ 583.768828][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 583.769529][ T30] audit: type=1400 audit(1747658184.994:576): avc: denied { write } for pid=12785 comm="syz.2.1982" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 583.925809][ T5862] ryos 0003:1E7D:3138.0019: item fetching failed at offset 0/3 [ 583.942467][ T5862] ryos 0003:1E7D:3138.0019: parse failed [ 583.958477][ T5862] ryos 0003:1E7D:3138.0019: probe with driver ryos failed with error -22 [ 583.978036][ T30] audit: type=1400 audit(1747658185.014:577): avc: denied { ioctl } for pid=12785 comm="syz.2.1982" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 584.521992][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.541321][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.578285][ T950] playstation 0003:054C:05C4.001A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 585.140805][ T950] playstation 0003:054C:05C4.001A: Failed to retrieve feature with reportID 163: -32 [ 585.167001][ T5864] usb 2-1: USB disconnect, device number 65 [ 585.189497][ T950] playstation 0003:054C:05C4.001A: Failed to retrieve DualShock4 firmware info: -32 [ 585.223402][ T950] playstation 0003:054C:05C4.001A: Failed to get firmware info from DualShock4 [ 585.232620][ T950] playstation 0003:054C:05C4.001A: HW/FW version data in sysfs will be invalid. [ 585.244269][ T950] input: HID 054c:05c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.001A/input/input52 [ 585.261290][ T950] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.001A/input/input53 [ 585.279126][ T950] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.001A/input/input54 [ 585.307180][ T950] playstation 0003:054C:05C4.001A: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 585.324340][T12802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1985'. [ 585.334179][T12802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1985'. [ 585.352135][T12805] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 585.486839][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 585.515866][T12811] netlink: 'syz.3.1988': attribute type 11 has an invalid length. [ 585.525424][T12811] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 585.842228][ T5864] usb 1-1: reset high-speed USB device number 70 using dummy_hcd [ 586.343881][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 587.326980][T12833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.391647][ T5890] usb 1-1: USB disconnect, device number 70 [ 587.544649][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 587.556484][T12840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1997'. [ 587.604981][T12840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1997'. [ 587.638119][T12851] netlink: 'syz.0.1999': attribute type 11 has an invalid length. [ 587.661363][T12851] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 587.920777][ T5864] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 588.090802][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 588.098172][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.115422][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.139263][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.168538][ T5864] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 588.191305][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.217271][ T5864] usb 5-1: config 0 descriptor?? [ 588.384542][ T30] audit: type=1400 audit(1747658189.604:578): avc: denied { mounton } for pid=12855 comm="syz.2.2003" path="/proc/1238/task" dev="proc" ino=33871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 588.641347][ T5864] ryos 0003:1E7D:3138.001B: item fetching failed at offset 0/3 [ 588.659665][ T5864] ryos 0003:1E7D:3138.001B: parse failed [ 588.765684][ T5864] ryos 0003:1E7D:3138.001B: probe with driver ryos failed with error -22 [ 588.985934][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 589.067406][ T5864] usb 5-1: USB disconnect, device number 63 [ 589.148722][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 589.165437][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.182417][ T10] usb 1-1: Product: syz [ 589.194582][ T10] usb 1-1: Manufacturer: syz [ 589.207730][ T10] usb 1-1: SerialNumber: syz [ 589.224744][ T10] usb 1-1: config 0 descriptor?? [ 589.267967][ T10] usb 1-1: interface 1 not found [ 589.596588][ T5862] usb 1-1: USB disconnect, device number 71 [ 589.728380][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 590.269421][T12881] siw: device registration error -23 [ 590.346410][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 590.358773][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.373441][ T10] usb 3-1: Product: syz [ 590.377622][ T10] usb 3-1: Manufacturer: syz [ 590.383661][ T10] usb 3-1: SerialNumber: syz [ 590.393471][ T10] usb 3-1: config 0 descriptor?? [ 590.402567][ T10] usb 3-1: interface 1 not found [ 590.480117][ T1202] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 590.507291][T12890] __nla_validate_parse: 1 callbacks suppressed [ 590.507319][T12890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2014'. [ 590.522688][T12890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2014'. [ 590.780001][ T10] usb 3-1: USB disconnect, device number 49 [ 590.849752][ T1202] usb 5-1: not running at top speed; connect to a high speed hub [ 591.160807][ T1202] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.169999][ T1202] usb 5-1: config 1 has no interface number 1 [ 591.177995][ T1202] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.188129][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.197070][ T1202] usb 5-1: Product: syz [ 591.201426][ T1202] usb 5-1: Manufacturer: syz [ 591.206021][ T1202] usb 5-1: SerialNumber: syz [ 591.844168][ T30] audit: type=1400 audit(1747658193.074:579): avc: denied { ioctl } for pid=12902 comm="syz.0.2019" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 591.950977][ T1202] usb 5-1: failed to enable PITCH for EP 0x82 [ 591.985556][ T1202] usb 5-1: USB disconnect, device number 64 [ 593.290917][ T5890] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 593.812921][T12932] netlink: 'syz.2.2028': attribute type 32 has an invalid length. [ 593.821983][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 593.834072][T12932] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 593.930940][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 593.952663][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.990259][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.033659][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.058818][ T5890] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 594.070323][ T1202] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 594.117097][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.245677][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2031'. [ 594.297077][T12945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.299404][ T5890] usb 1-1: config 0 descriptor?? [ 594.318054][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 594.375547][ T1202] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 594.385540][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.504304][ T1202] usb 5-1: Product: syz [ 594.511156][ T1202] usb 5-1: Manufacturer: syz [ 594.515841][ T1202] usb 5-1: SerialNumber: syz [ 594.540968][ T1202] usb 5-1: config 0 descriptor?? [ 594.733078][ T5890] hid (null): nested delimiters [ 594.738814][ T5890] hid (null): unknown global tag 0xd [ 595.070756][ T5890] hid (null): unknown global tag 0xc [ 595.077437][ T1202] usb 5-1: interface 1 not found [ 595.079986][ T5890] hid (null): invalid report_count 1999753515 [ 595.149708][ T5890] hid (null): unknown global tag 0xe [ 595.196459][ T5890] usb 1-1: USB disconnect, device number 72 [ 595.222303][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 595.282939][ T950] usb 5-1: USB disconnect, device number 65 [ 595.305090][T12953] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 595.315434][T12953] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 595.365625][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 595.448477][T12958] netlink: 'syz.3.2036': attribute type 11 has an invalid length. [ 595.551139][T12959] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 596.078825][T12969] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 596.217577][T12971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.551106][ T1202] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 596.709859][ T1202] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 597.234041][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 597.246888][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 597.263260][ T1202] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 597.287270][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.306287][ T1202] usb 2-1: Product: syz [ 597.322847][ T1202] usb 2-1: Manufacturer: syz [ 597.328278][ T1202] usb 2-1: SerialNumber: syz [ 597.364002][ T1202] usb 2-1: config 0 descriptor?? [ 597.466626][ T1202] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 597.526606][T12962] syz.0.2037 (12962): drop_caches: 2 [ 597.693164][ T1202] usb 2-1: USB disconnect, device number 66 [ 597.823170][ T5890] IPVS: starting estimator thread 0... [ 598.360280][T12999] IPVS: using max 38 ests per chain, 91200 per kthread [ 599.665983][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 599.721348][T13014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2053'. [ 599.750555][T13018] netlink: 'syz.4.2050': attribute type 11 has an invalid length. [ 599.772895][T13018] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 600.230486][ T1202] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 600.383099][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.458367][T13028] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 600.474132][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.856126][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.866191][ T1202] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 600.880788][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.894104][ T1202] usb 3-1: config 0 descriptor?? [ 601.357099][ T5890] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 601.403771][T13012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.413385][T13012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.003731][T13012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.014239][T13012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.056895][T13040] overlayfs: failed to clone upperpath [ 602.161923][ T5890] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 602.172156][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 602.180644][ T5890] usb 5-1: Product: syz [ 602.184858][ T5890] usb 5-1: Manufacturer: syz [ 602.189495][ T5890] usb 5-1: SerialNumber: syz [ 602.216392][ T5890] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 602.735646][ T5890] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 602.746985][ T5890] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 603.275362][ T5890] usb 5-1: USB disconnect, device number 66 [ 603.512476][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 603.596461][T13064] netlink: 'syz.0.2067': attribute type 11 has an invalid length. [ 603.606525][T13064] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 603.885108][ T1202] usbhid 3-1:0.0: can't add hid device: -71 [ 603.908223][ T1202] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 604.262989][ T1202] usb 3-1: USB disconnect, device number 50 [ 604.456323][T13076] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 605.578612][T13085] veth1_macvtap: left promiscuous mode [ 605.597929][T13086] veth0_vlan: entered allmulticast mode [ 605.609612][T13087] veth0_vlan: left promiscuous mode [ 605.619011][T13087] veth0_vlan: entered promiscuous mode [ 605.648992][T13089] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 605.823109][T13096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.975499][T13107] mkiss: ax0: crc mode is auto. [ 606.077000][ T5822] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 606.241204][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 606.316786][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.522098][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.568341][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.593234][ T5822] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 606.605246][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.614939][T13117] sp0: Synchronizing with TNC [ 606.627122][ T5822] usb 5-1: config 0 descriptor?? [ 606.867097][T13130] netlink: 'syz.1.2083': attribute type 11 has an invalid length. [ 606.887491][T13130] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 607.104784][ T5822] ryos 0003:1E7D:3138.001D: item fetching failed at offset 0/3 [ 607.114454][ T5822] ryos 0003:1E7D:3138.001D: parse failed [ 607.197081][ T5822] ryos 0003:1E7D:3138.001D: probe with driver ryos failed with error -22 [ 607.244488][T13138] bond0: (slave batadv0): Releasing backup interface [ 607.269991][T13138] ip6gretap1: left allmulticast mode [ 607.292844][T13138] ip6gretap1: left promiscuous mode [ 607.298624][T13138] bridge1: port 1(ip6gretap1) entered disabled state [ 607.411483][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 607.449601][T13142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.571877][ T10] usb 1-1: config 0 has no interfaces? [ 607.577488][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 607.597377][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.615042][ T10] usb 1-1: config 0 descriptor?? [ 607.840002][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.850880][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.864830][ T10] usb 1-1: USB disconnect, device number 73 [ 608.331162][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 608.667141][ T5822] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 608.874401][ T5890] usb 5-1: USB disconnect, device number 67 [ 608.900353][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 608.940121][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 608.947308][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 608.964780][ T5822] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 608.967971][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.974972][ T5822] usb 2-1: config 0 has no interface number 0 [ 609.002373][ T5822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 609.011952][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 609.011977][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.011996][ T10] usb 1-1: Product: syz [ 609.012011][ T10] usb 1-1: Manufacturer: syz [ 609.012024][ T10] usb 1-1: SerialNumber: syz [ 609.045068][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.055030][ T5822] usb 2-1: Product: syz [ 609.059491][ T5822] usb 2-1: Manufacturer: syz [ 609.065108][ T5822] usb 2-1: SerialNumber: syz [ 609.226238][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2096'. [ 609.326599][ T5822] usb 2-1: config 0 descriptor?? [ 609.334263][ T5822] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 609.501644][ T10] usb 1-1: 0:2 : does not exist [ 609.545644][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 609.631266][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 609.915225][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 609.962479][ T10] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 609.999879][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 610.029934][ T10] usb 1-1: USB disconnect, device number 74 [ 610.659723][T13181] netlink: 'syz.0.2099': attribute type 11 has an invalid length. [ 610.733812][T13181] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 610.850511][T13188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.051159][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 611.214226][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59576, setting to 64 [ 611.239004][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.251465][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.259589][ T10] usb 5-1: Product: syz [ 611.269061][ T10] usb 5-1: Manufacturer: syz [ 611.275173][ T10] usb 5-1: SerialNumber: syz [ 611.436100][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 611.436414][ T5863] usb 2-1: USB disconnect, device number 67 [ 611.470755][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 611.602038][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 611.756122][ T5863] quatech2 2-1:0.51: device disconnected [ 614.184544][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2113'. [ 614.230194][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2113'. [ 614.241936][T13237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 614.440427][T13241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.087909][T13248] random: crng reseeded on system resumption [ 615.151145][T13250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2118'. [ 615.266910][ T10] cdc_ncm 5-1:1.0: bind() failure [ 615.305388][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 615.336202][ T10] cdc_ncm 5-1:1.1: bind() failure [ 615.364270][ T10] usb 5-1: USB disconnect, device number 68 [ 615.691421][ T5863] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 616.352171][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 616.361714][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.373985][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.384415][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.397417][ T5863] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 616.407570][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.499016][ T5863] usb 1-1: config 0 descriptor?? [ 616.730136][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 617.192274][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 617.303906][ T5863] ryos 0003:1E7D:3138.001E: item fetching failed at offset 0/3 [ 617.325752][ T5863] ryos 0003:1E7D:3138.001E: parse failed [ 617.332311][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.351306][ T5863] ryos 0003:1E7D:3138.001E: probe with driver ryos failed with error -22 [ 617.362452][ T10] usb 5-1: Product: syz [ 617.366672][ T10] usb 5-1: Manufacturer: syz [ 617.868001][ T10] usb 5-1: SerialNumber: syz [ 617.877297][ T10] usb 5-1: config 0 descriptor?? [ 617.887125][ T10] usb 5-1: interface 1 not found [ 617.922797][ T5822] usb 1-1: USB disconnect, device number 75 [ 618.088910][ T10] usb 5-1: USB disconnect, device number 69 [ 618.361525][T13293] No control pipe specified [ 618.487825][T13298] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 618.527650][T13300] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2130'. [ 619.562984][T13316] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 619.632023][ T1202] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 619.756601][T13319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2136'. [ 619.833238][ T1202] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 619.980520][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 620.025181][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 620.092801][ T1202] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 620.106000][ T1202] usb 2-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 620.136951][T13321] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 620.161838][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.283630][ T1202] usb 2-1: config 0 descriptor?? [ 620.289319][T13313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 620.297483][T13313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 620.414916][T13329] loop8: detected capacity change from 0 to 7 [ 620.892357][T13329] Dev loop8: unable to read RDB block 7 [ 620.897953][T13329] loop8: AHDI p1 p3 p4 [ 620.902166][T13329] loop8: partition table partially beyond EOD, truncated [ 620.909233][T13329] loop8: p1 start 975770946 is beyond EOD, truncated [ 620.916178][T13329] loop8: p3 start 6514546 is beyond EOD, truncated [ 621.347802][ T1202] hid-generic 0003:227D:0709.001F: hidraw0: USB HID v1.01 Device [HID 227d:0709] on usb-dummy_hcd.1-1/input0 [ 621.752700][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.891990][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.976445][T13342] loop8: detected capacity change from 0 to 7 [ 621.997958][T13342] Dev loop8: unable to read RDB block 7 [ 622.004258][T13342] loop8: AHDI p1 p3 p4 [ 622.008531][T13342] loop8: partition table partially beyond EOD, truncated [ 622.016413][T13342] loop8: p1 start 975770946 is beyond EOD, truncated [ 622.023202][T13342] loop8: p3 start 6514546 is beyond EOD, truncated [ 622.170758][ T5890] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 622.309194][ T5822] usb 2-1: USB disconnect, device number 68 [ 622.391685][T13347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 622.414191][T13347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.423648][T13347] bond0: (slave bond2): Enslaving as an active interface with an up link [ 622.471165][T13350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2146'. [ 622.480874][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 622.489889][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.512194][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.522424][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.535353][ T5890] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 622.545518][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.569473][ T5890] usb 3-1: config 0 descriptor?? [ 623.342558][ T5890] ryos 0003:1E7D:3138.0020: item fetching failed at offset 0/3 [ 623.369098][ T5890] ryos 0003:1E7D:3138.0020: parse failed [ 623.383119][ T5890] ryos 0003:1E7D:3138.0020: probe with driver ryos failed with error -22 [ 623.743009][ T5863] usb 3-1: USB disconnect, device number 51 [ 623.760559][ T5822] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 623.814260][T13368] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 623.892829][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.921320][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 623.971097][ T5822] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 624.066419][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.377415][ T5822] usb 5-1: config 0 descriptor?? [ 624.870994][T13380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.863308][T13396] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 626.984046][T13400] netlink: 'syz.2.2159': attribute type 11 has an invalid length. [ 626.997451][T13400] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 627.050177][ T950] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 627.210286][ T950] usb 2-1: Using ep0 maxpacket: 32 [ 627.223047][ T950] usb 2-1: config 1 interface 0 altsetting 247 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 627.256736][ T950] usb 2-1: config 1 interface 0 has no altsetting 0 [ 627.272322][ T950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.295245][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.313581][ T950] usb 2-1: Product: ဇ [ 627.318332][ T950] usb 2-1: Manufacturer: С [ 627.323404][ T950] usb 2-1: SerialNumber: syz [ 627.465380][T13394] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 627.483883][ T5822] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 627.496972][ T5822] asix 5-1:0.0: probe with driver asix failed with error -71 [ 627.508820][ T5822] usb 5-1: USB disconnect, device number 70 [ 627.851451][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 628.483844][ T30] audit: type=1400 audit(1747658229.704:580): avc: denied { nlmsg_read } for pid=13412 comm="syz.3.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 628.515978][ T950] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 628.678027][ T950] usb 2-1: USB disconnect, device number 69 [ 630.301734][T13428] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 630.343958][T13430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2167'. [ 630.991003][ T5863] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 631.141070][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 631.154862][ T5863] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.165393][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.183161][ T5863] usb 5-1: Product: syz [ 631.191746][ T5863] usb 5-1: Manufacturer: syz [ 631.199677][ T5863] usb 5-1: SerialNumber: syz [ 631.212931][ T5863] usb 5-1: config 0 descriptor?? [ 631.304366][T13450] netlink: 'syz.3.2174': attribute type 11 has an invalid length. [ 631.329044][T13450] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 631.432705][ T5863] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 631.588055][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2175'. [ 631.599661][T13453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2175'. [ 632.278816][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2177'. [ 632.940872][ T30] audit: type=1400 audit(1747658234.154:581): avc: denied { watch_sb } for pid=13475 comm="syz.0.2183" path="/421" dev="tmpfs" ino=2222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 633.454594][ T5863] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 635.146781][ T10] usb 5-1: USB disconnect, device number 71 [ 635.398211][T13501] netlink: 'syz.1.2188': attribute type 11 has an invalid length. [ 635.517038][T13501] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 637.418331][T13521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 637.630162][ T5822] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 638.521353][ T5864] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 638.544143][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 638.561324][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.647360][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 638.665340][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 638.683392][ T5864] usb 3-1: config 0 has no interfaces? [ 638.689246][ T5864] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 638.700694][ T950] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 638.758674][ T5822] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 638.771455][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.783449][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.807015][ T5864] usb 3-1: config 0 descriptor?? [ 638.812530][ T5822] usb 1-1: Product: syz [ 638.819641][ T5822] usb 1-1: Manufacturer: syz [ 638.827296][ T5822] usb 1-1: SerialNumber: syz [ 638.870151][ T950] usb 5-1: Using ep0 maxpacket: 8 [ 638.878366][ T950] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 638.888308][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.926436][ T5822] usb 1-1: config 0 descriptor?? [ 638.931696][ T950] usb 5-1: Product: syz [ 638.935898][ T950] usb 5-1: Manufacturer: syz [ 638.943630][ T5822] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 638.953474][ T950] usb 5-1: SerialNumber: syz [ 638.958966][ T5822] cyphidcom ttyUSB0: required endpoint is missing [ 638.969750][ T950] usb 5-1: config 0 descriptor?? [ 639.039202][T13530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.050805][T13530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.063223][ T10] usb 3-1: USB disconnect, device number 52 [ 639.191924][ T950] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 639.225404][ T30] audit: type=1400 audit(1747658240.454:582): avc: denied { map } for pid=13516 comm="syz.0.2194" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 639.256362][ T30] audit: type=1400 audit(1747658240.454:583): avc: denied { execute } for pid=13516 comm="syz.0.2194" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 639.285870][ T30] audit: type=1400 audit(1747658240.484:584): avc: denied { read } for pid=13516 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 639.521230][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 639.670948][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 639.677554][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 639.688705][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.699534][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 639.709499][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.717514][ T10] usb 3-1: Product: syz [ 639.721753][ T10] usb 3-1: Manufacturer: syz [ 639.726347][ T10] usb 3-1: SerialNumber: syz [ 640.010423][T13550] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 640.243193][ T950] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 640.258578][ T10] usb 3-1: 0:2 : does not exist [ 640.443094][ T1202] usb 1-1: USB disconnect, device number 76 [ 640.482724][ T1202] cypress_m8 1-1:0.0: device disconnected [ 640.546226][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 640.659238][T13562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.669861][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'. [ 641.491091][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 641.647827][ T10] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 641.703128][T13571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2209'. [ 641.712419][T13571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2209'. [ 641.753572][ T5822] usb 5-1: USB disconnect, device number 72 [ 641.891492][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 642.045554][ T10] usb 3-1: USB disconnect, device number 53 [ 643.816555][T13578] loop8: detected capacity change from 0 to 7 [ 644.073087][T13578] Dev loop8: unable to read RDB block 7 [ 644.079012][T13578] loop8: AHDI p1 p3 p4 [ 644.083981][T13578] loop8: partition table partially beyond EOD, truncated [ 644.091729][T13578] loop8: p1 start 975770946 is beyond EOD, truncated [ 644.098444][T13578] loop8: p3 start 6514546 is beyond EOD, truncated [ 644.501027][T13596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 646.331797][T13615] Process accounting resumed [ 646.497107][T13624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2227'. [ 647.001626][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 647.164930][ T10] usb 3-1: config 0 has no interfaces? [ 647.170562][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.194066][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.209444][ T10] usb 3-1: config 0 descriptor?? [ 647.284156][T13645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.438654][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.451100][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.472149][ T5822] usb 3-1: USB disconnect, device number 54 [ 647.838530][T13649] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 647.952129][T13653] vlan2: entered allmulticast mode [ 647.957560][T13653] veth1: entered allmulticast mode [ 648.040393][ T5822] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 648.912844][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2238'. [ 649.060914][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 649.067770][ T5822] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 649.199922][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.214036][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 649.224107][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.232625][ T5822] usb 3-1: Product: syz [ 649.869847][ T5822] usb 3-1: Manufacturer: syz [ 649.875432][ T5822] usb 3-1: SerialNumber: syz [ 650.405826][ T5822] usb 3-1: can't set config #1, error -71 [ 650.426050][ T5822] usb 3-1: USB disconnect, device number 55 [ 651.792195][T13688] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 652.023411][T13698] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 652.184895][T13701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.190454][ T5864] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 652.202275][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2249'. [ 652.360719][ T5822] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 652.370715][ T5864] usb 5-1: device descriptor read/64, error -71 [ 653.069706][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.081981][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.120506][ T5864] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 653.290821][ T5864] usb 5-1: device descriptor read/64, error -71 [ 653.515714][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.529575][ T5822] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.597892][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.623279][ T5864] usb usb5-port1: attempt power cycle [ 653.671085][ T5822] usb 1-1: config 0 descriptor?? [ 654.060297][ T5864] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 654.082342][ T5864] usb 5-1: device descriptor read/8, error -71 [ 654.350453][ T5864] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 654.371049][ T5864] usb 5-1: device descriptor read/8, error -71 [ 654.482662][T13722] overlay: ./bus is not a directory [ 654.489692][ T5864] usb usb5-port1: unable to enumerate USB device [ 655.107377][T13728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2255'. [ 655.491631][T13730] random: crng reseeded on system resumption [ 655.538158][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 655.548346][T13731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2256'. [ 655.553001][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 655.597271][ T5822] usb 1-1: USB disconnect, device number 77 [ 655.819147][T13735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 656.060662][ T1202] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 656.610114][ T1202] usb 5-1: Using ep0 maxpacket: 8 [ 656.624094][ T1202] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 656.646277][ T1202] usb 5-1: config 0 has no interface number 0 [ 656.664203][ T1202] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 656.698651][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.794555][ T1202] usb 5-1: config 0 descriptor?? [ 656.940662][ T1202] viperboard 5-1:0.143: version 0.00 found at bus 005 address 077 [ 657.783544][ T1202] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 657.840105][ T30] audit: type=1400 audit(1747658259.064:585): avc: denied { read } for pid=13732 comm="syz.4.2257" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 657.895033][ T1202] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 658.535083][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 658.618079][T13763] bond3: entered promiscuous mode [ 658.624041][T13763] bond3: entered allmulticast mode [ 659.706366][T13790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 659.884076][T13796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'. [ 659.951100][ T7400] Bluetooth: hci0: command 0x0406 tx timeout [ 660.050684][T13755] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 660.750681][T13755] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 660.822252][T13755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.834077][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 660.857086][T13755] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 660.867978][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 660.903283][T13755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 660.919549][T13755] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 660.942702][T13755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 660.959993][T13755] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 661.320320][ T1202] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 661.746244][ T5864] usb 5-1: USB disconnect, device number 77 [ 662.110848][ T7400] Bluetooth: hci0: command 0x0406 tx timeout [ 662.172836][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 662.194464][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.253571][ T1202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.281932][ T1202] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.304254][T13830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.315000][ T1202] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 662.327093][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'. [ 662.340718][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.435880][ T5822] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 662.493149][ T1202] usb 3-1: config 0 descriptor?? [ 662.996839][ T7400] Bluetooth: hci1: command 0x0406 tx timeout [ 663.004078][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 663.010149][ T7400] Bluetooth: hci4: command 0x0406 tx timeout [ 663.028359][ T1202] usb 3-1: can't set config #0, error -71 [ 663.037677][ T1202] usb 3-1: USB disconnect, device number 56 [ 664.519328][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2293'. [ 664.531547][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2293'. [ 664.552242][ T5822] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 664.682808][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.691624][ T5822] usb 1-1: Product: syz [ 664.696565][ T5822] usb 1-1: Manufacturer: syz [ 664.701506][ T5822] usb 1-1: SerialNumber: syz [ 664.714459][ T5822] usb 1-1: config 0 descriptor?? [ 664.732685][ T5822] usb 1-1: interface 1 not found [ 665.118201][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 665.124621][T13174] Bluetooth: hci4: command 0x0406 tx timeout [ 665.691481][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 665.751913][ T5864] usb 1-1: USB disconnect, device number 78 [ 668.792699][T13863] Bluetooth: hci1: command 0x0406 tx timeout [ 671.770333][T13869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2296'. [ 673.060307][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 673.340545][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 673.355823][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 673.365337][ T10] usb 3-1: config 0 has no interface number 0 [ 673.383644][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 673.400434][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.408871][ T10] usb 3-1: Product: syz [ 673.414651][ T10] usb 3-1: Manufacturer: syz [ 673.424055][ T10] usb 3-1: SerialNumber: syz [ 673.432958][ T10] usb 3-1: config 0 descriptor?? [ 673.440873][ T10] smsc95xx v2.0.0 [ 673.671061][T10575] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 674.335584][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 674.346552][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 674.420119][T10575] usb 5-1: Using ep0 maxpacket: 16 [ 674.431676][T10575] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 674.448812][T10575] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.479232][T10575] usb 5-1: config 0 has no interface number 0 [ 674.493292][T10575] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 674.510066][T10575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.643237][T10575] usb 5-1: Product: syz [ 674.653311][T10575] usb 5-1: Manufacturer: syz [ 674.670078][T10575] usb 5-1: SerialNumber: syz [ 674.683966][T10575] usb 5-1: config 0 descriptor?? [ 674.693151][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2309'. [ 675.648302][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2309'. [ 675.668698][T10575] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 675.676038][T10575] usb 5-1: No valid video chain found. [ 676.001719][T13932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2310'. [ 676.010804][T13932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2310'. [ 676.204730][ T5822] usb 5-1: USB disconnect, device number 78 [ 676.473614][T13941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 676.796533][T13947] overlayfs: failed to clone lowerpath [ 677.317665][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 677.332055][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 677.352081][ T10] usb 3-1: USB disconnect, device number 57 [ 677.651700][ T30] audit: type=1400 audit(1747658278.874:586): avc: denied { getopt } for pid=13959 comm="syz.1.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 677.744149][T13968] random: crng reseeded on system resumption [ 677.805105][T13971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2320'. [ 677.931116][ T5822] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 678.099624][T13976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.280824][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 678.816049][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.827144][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.838083][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.872348][ T5822] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 678.922234][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.934887][ T5822] usb 1-1: config 0 descriptor?? [ 678.999672][T13985] loop8: detected capacity change from 0 to 7 [ 679.019871][T13985] Dev loop8: unable to read RDB block 7 [ 679.025612][T13985] loop8: AHDI p1 p3 p4 [ 679.029924][T13985] loop8: partition table partially beyond EOD, truncated [ 679.037782][T13985] loop8: p1 start 975770946 is beyond EOD, truncated [ 679.045163][T13985] loop8: p3 start 6514546 is beyond EOD, truncated [ 680.135499][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 680.163608][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 680.181413][ T5822] usb 1-1: USB disconnect, device number 79 [ 680.402991][T14001] overlayfs: failed to clone lowerpath [ 681.125690][T14006] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2328'. [ 681.554523][T14009] input: syz1 as /devices/virtual/input/input57 [ 682.795953][T14019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2333'. [ 682.893565][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2335'. [ 685.330763][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.957576][T14066] sch_tbf: burst 19860 is lower than device lo mtu (65550) ! [ 685.973477][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 686.016555][T10575] IPVS: starting estimator thread 0... [ 686.081734][T14070] netlink: 'syz.0.2346': attribute type 6 has an invalid length. [ 686.125942][T14068] IPVS: using max 46 ests per chain, 110400 per kthread [ 686.246428][T14076] netlink: 'syz.0.2348': attribute type 11 has an invalid length. [ 686.262821][T14076] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 686.270938][ T1202] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 686.600223][ T1202] usb 5-1: Using ep0 maxpacket: 16 [ 686.614519][ T1202] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 686.629133][T14084] openvswitch: netlink: Flow actions attr not present in new flow. [ 686.642159][ T1202] usb 5-1: config 0 has no interface number 0 [ 686.653945][T14084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2351'. [ 686.664255][T14084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2351'. [ 686.698829][ T1202] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 686.752941][T14088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 688.382652][T14098] overlayfs: failed to clone lowerpath [ 688.851913][ T1202] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 688.890835][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.899365][ T1202] usb 5-1: Product: syz [ 688.918577][ T1202] usb 5-1: Manufacturer: syz [ 688.932052][ T1202] usb 5-1: config 0 descriptor?? [ 688.951256][ T1202] usb 5-1: can't set config #0, error -71 [ 688.958468][ T1202] usb 5-1: USB disconnect, device number 79 [ 688.965828][T13863] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 688.967150][ T30] audit: type=1400 audit(1747658290.194:587): avc: denied { shutdown } for pid=14103 comm="syz.2.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 689.474242][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2363'. [ 689.483992][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2363'. [ 691.093639][T14129] openvswitch: netlink: Flow actions attr not present in new flow. [ 692.184179][T14138] openvswitch: netlink: Flow actions attr not present in new flow. [ 692.202832][T14138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 692.212565][T14138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 692.336501][T14141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2369'. [ 692.540135][ T5863] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 693.214165][T14152] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2373'. [ 693.275745][ T5863] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 693.293042][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.313921][ T5863] usb 2-1: Product: syz [ 693.318236][ T5863] usb 2-1: Manufacturer: syz [ 693.324402][ T5863] usb 2-1: SerialNumber: syz [ 693.331486][ T5863] usb 2-1: config 0 descriptor?? [ 693.457422][ T5863] usb 2-1: interface 1 not found [ 693.502032][T14157] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 694.188143][T14153] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 694.291263][ T950] usb 2-1: USB disconnect, device number 70 [ 694.925632][T14175] overlayfs: failed to clone lowerpath [ 695.411744][T14179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2380'. [ 695.421362][T14179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2380'. [ 696.232250][T14183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 697.806690][T14196] netlink: 'syz.1.2385': attribute type 32 has an invalid length. [ 697.874258][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 697.876440][T14198] input: syz1 as /devices/virtual/input/input59 [ 697.890282][T14196] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 698.281686][ T30] audit: type=1400 audit(1747658299.514:588): avc: denied { shutdown } for pid=14204 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 700.286747][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2394'. [ 700.296889][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2394'. [ 700.664522][ T30] audit: type=1326 audit(1747658301.894:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 700.718026][ T30] audit: type=1326 audit(1747658301.924:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 700.945297][ T30] audit: type=1326 audit(1747658301.924:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.078280][ T30] audit: type=1326 audit(1747658301.924:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.110052][ T30] audit: type=1326 audit(1747658301.924:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.226755][ T30] audit: type=1326 audit(1747658301.924:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.297860][ T30] audit: type=1326 audit(1747658301.924:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.523521][ T30] audit: type=1326 audit(1747658301.924:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 701.545489][T10575] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 701.567311][ T30] audit: type=1326 audit(1747658301.924:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.3.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7eda98e969 code=0x7ffc0000 [ 702.333240][T10575] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 702.592150][T10575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.636768][T10575] usb 1-1: Product: syz [ 702.643577][T14270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2403'. [ 702.654888][T10575] usb 1-1: Manufacturer: syz [ 702.668222][T10575] usb 1-1: SerialNumber: syz [ 702.704407][T10575] usb 1-1: config 0 descriptor?? [ 702.729519][T10575] usb 1-1: interface 1 not found [ 702.776627][T14273] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 703.113272][T10575] usb 1-1: USB disconnect, device number 80 [ 703.801075][T14281] random: crng reseeded on system resumption [ 704.983070][T14298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2413'. [ 705.690067][ T950] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 706.023375][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 706.023390][ T30] audit: type=1400 audit(1747658307.254:605): avc: denied { ioctl } for pid=14280 comm="syz.1.2408" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 706.227461][ T950] usb 5-1: Using ep0 maxpacket: 32 [ 706.234714][ T950] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 706.244487][ T950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.261467][ T950] usb 5-1: config 0 descriptor?? [ 706.269055][ T950] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 706.721616][ T5920] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 706.757957][ T950] gspca_vc032x: reg_r err -32 [ 706.759866][T14323] netlink: 'syz.0.2419': attribute type 11 has an invalid length. [ 706.768008][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.784335][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.795933][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.904218][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.926628][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.932662][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.982929][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 706.988424][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.021918][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 707.032375][T14323] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 707.073480][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.110678][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.121686][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.137883][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.154189][ T5920] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 707.330965][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.336366][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.394744][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.432334][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.440513][T14333] overlayfs: overlapping lowerdir path [ 707.456019][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 707.595990][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.097395][ T5920] usb 2-1: config 0 descriptor?? [ 708.107534][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.117810][ T5920] usb 2-1: can't set config #0, error -71 [ 708.124258][ T950] gspca_vc032x: I2c Bus Busy Wait 00 [ 708.131557][ T5920] usb 2-1: USB disconnect, device number 71 [ 708.138628][ T950] gspca_vc032x: Unknown sensor... [ 708.146098][ T950] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 708.509419][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 708.562040][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 709.458082][T14358] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 709.801502][T14361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2429'. [ 709.810910][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2429'. [ 710.782648][T14360] SELinux: failed to load policy [ 710.787889][ T30] audit: type=1400 audit(1747658312.014:606): avc: denied { load_policy } for pid=14359 comm="syz.2.2429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 711.007882][ T950] usb 5-1: USB disconnect, device number 80 [ 711.119180][T14377] netlink: 'syz.2.2433': attribute type 11 has an invalid length. [ 711.421219][T14377] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 712.161071][ T1202] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 712.711335][ T1202] usb 2-1: Using ep0 maxpacket: 16 [ 712.719788][ T1202] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 712.730875][ T1202] usb 2-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 712.747412][ T1202] usb 2-1: config 0 has no interface number 0 [ 712.774387][ T1202] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 712.784470][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.796859][ T1202] usb 2-1: Product: syz [ 712.815774][ T1202] usb 2-1: Manufacturer: syz [ 712.825518][ T1202] usb 2-1: SerialNumber: syz [ 712.837413][ T1202] usb 2-1: config 0 descriptor?? [ 712.894525][ T1202] usb 2-1: USB disconnect, device number 72 [ 713.102176][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2440'. [ 713.994767][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2441'. [ 714.269273][T14414] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2442'. [ 715.153227][ T30] audit: type=1400 audit(1747658316.014:607): avc: denied { mount } for pid=14416 comm="syz.0.2444" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 715.187964][ T30] audit: type=1400 audit(1747658316.024:608): avc: denied { search } for pid=14416 comm="syz.0.2444" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 715.211325][ T30] audit: type=1400 audit(1747658316.024:609): avc: denied { read } for pid=14416 comm="syz.0.2444" name="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 715.236467][ T30] audit: type=1400 audit(1747658316.024:610): avc: denied { open } for pid=14416 comm="syz.0.2444" path="/" dev="configfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 715.566327][T14424] Invalid ELF header magic: != ELF [ 716.211866][ T7400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 716.224284][ T7400] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 716.233451][ T7400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 716.247529][ T7400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 716.256177][ T7400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.292290][T14438] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 716.625836][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 717.752050][T14455] overlayfs: failed to clone lowerpath [ 718.007538][T14461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.021785][ T7314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.034851][ T7314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.079096][T14438] chnl_net:caif_netlink_parms(): no params data found [ 718.090786][T10575] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 718.172824][T14464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2458'. [ 718.173654][ T7314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.200995][ T7314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.270397][ T7400] Bluetooth: hci5: command tx timeout [ 718.280053][T10575] usb 3-1: Using ep0 maxpacket: 8 [ 718.294170][T10575] usb 3-1: no configurations [ 718.299613][T10575] usb 3-1: can't read configurations, error -22 [ 718.331516][ T7314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.342080][ T7314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.441645][T10575] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 718.526361][ T7314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.568357][ T7314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.610198][T14438] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.616278][T14469] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 718.627481][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.646120][T10575] usb 3-1: Using ep0 maxpacket: 8 [ 718.651738][T14438] bridge_slave_0: entered allmulticast mode [ 718.661237][T10575] usb 3-1: no configurations [ 718.666104][T10575] usb 3-1: can't read configurations, error -22 [ 718.690197][T14438] bridge_slave_0: entered promiscuous mode [ 718.690874][T10575] usb usb3-port1: attempt power cycle [ 718.708489][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.740812][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.748865][T14438] bridge_slave_1: entered allmulticast mode [ 718.761469][T14438] bridge_slave_1: entered promiscuous mode [ 718.896271][T14438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.942222][T14438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.053339][T10575] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 719.096728][T14438] team0: Port device team_slave_0 added [ 719.101655][T10575] usb 3-1: Using ep0 maxpacket: 8 [ 719.115540][T10575] usb 3-1: no configurations [ 719.125974][T10575] usb 3-1: can't read configurations, error -22 [ 719.159824][T14438] team0: Port device team_slave_1 added [ 719.175503][ T7314] ip6gretap1: left allmulticast mode [ 719.190095][ T7314] ip6gretap1: left promiscuous mode [ 719.196832][ T7314] bridge1: port 1(ip6gretap1) entered disabled state [ 719.280393][T10575] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 719.300704][T10575] usb 3-1: Using ep0 maxpacket: 8 [ 719.306435][T10575] usb 3-1: no configurations [ 719.311477][T10575] usb 3-1: can't read configurations, error -22 [ 719.318132][T10575] usb usb3-port1: unable to enumerate USB device [ 720.340746][T10575] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 720.573920][ T7400] Bluetooth: hci5: command tx timeout [ 721.230442][T10575] usb 1-1: Using ep0 maxpacket: 8 [ 721.253841][T10575] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 721.274012][T10575] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.286551][T10575] usb 1-1: config 0 has no interface number 0 [ 721.302259][T10575] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 721.340561][T14497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2467'. [ 721.382484][T10575] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 721.393499][T10575] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 722.345329][T10575] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 722.361193][T10575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.369518][T10575] usb 1-1: Product: syz [ 722.374269][T10575] usb 1-1: Manufacturer: syz [ 722.378858][T10575] usb 1-1: SerialNumber: syz [ 722.615470][T10575] usb 1-1: config 0 descriptor?? [ 722.625322][T14484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 722.671090][ T7400] Bluetooth: hci5: command tx timeout [ 722.860698][ T30] audit: type=1400 audit(1747658324.084:611): avc: denied { map } for pid=14483 comm="syz.0.2463" path="socket:[37794]" dev="sockfs" ino=37794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 722.885780][T14509] overlayfs: failed to clone lowerpath [ 723.174596][ T30] audit: type=1400 audit(1747658324.084:612): avc: denied { read } for pid=14483 comm="syz.0.2463" path="socket:[37794]" dev="sockfs" ino=37794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 723.310857][T10575] usb 1-1: NFC: intf ffff88802c9ec000 id ffffffff8f344120 [ 723.330951][T10575] usb 1-1: USB disconnect, device number 81 [ 723.597663][ T7314] bond0 (unregistering): (slave bond2): Releasing backup interface [ 723.607583][ T7314] bond0 (unregistering): Released all slaves [ 724.164950][ T7314] bond1 (unregistering): Released all slaves [ 724.381618][ T7314] bond2 (unregistering): Released all slaves [ 724.685282][T14438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.727523][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.755398][ T7400] Bluetooth: hci5: command tx timeout [ 724.771957][T14438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.798114][ T7314] tipc: Left network mode [ 724.799223][T14438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.814143][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.851455][T14438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.869433][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2473'. [ 725.335485][T14438] hsr_slave_0: entered promiscuous mode [ 725.349622][T14438] hsr_slave_1: entered promiscuous mode [ 725.359846][T14438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.461527][T14438] Cannot create hsr debugfs directory [ 726.277407][T14557] random: crng reseeded on system resumption [ 726.517036][T14564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2483'. [ 727.028534][T14576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 727.347973][T14577] overlayfs: failed to clone upperpath [ 727.717489][T14582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.827136][ T7314] veth0_macvtap: left promiscuous mode [ 727.956544][ T7314] veth1_vlan: left promiscuous mode [ 727.971311][ T7314] veth0_vlan: left promiscuous mode [ 731.640595][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2495'. [ 731.897441][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 732.853225][T14614] veth3: entered promiscuous mode [ 732.865876][T14614] bridge4: port 1(veth3) entered blocking state [ 733.178559][T14614] bridge4: port 1(veth3) entered disabled state [ 733.262384][T14633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.350355][T14614] veth3: entered allmulticast mode [ 733.433438][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2503'. [ 733.459460][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2503'. [ 733.602092][T14639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 733.646970][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 733.803635][T14644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.848025][T14646] all: renamed from lo (while UP) [ 734.084912][T14438] netdevsim netdevsim3 netdevsim0: renamed from eth1 [ 734.675149][T14438] netdevsim netdevsim3 netdevsim1: renamed from eth2 [ 734.833118][T14438] netdevsim netdevsim3 netdevsim2: renamed from eth3 [ 734.910412][T14438] netdevsim netdevsim3 netdevsim3: renamed from eth4 [ 735.055308][ T7314] IPVS: stop unused estimator thread 0... [ 735.435880][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.446247][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2514'. [ 735.455459][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2514'. [ 736.836627][ T30] audit: type=1400 audit(1747658338.064:613): avc: denied { create } for pid=14687 comm="syz.2.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 739.143010][ T7314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.590173][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.688251][ T7314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.702026][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.712123][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.719737][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.728784][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.738470][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.956404][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2524'. [ 739.983027][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2524'. [ 740.023891][T14720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2525'. [ 740.078056][ T7314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.108003][T14438] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.121404][T14713] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 740.158238][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.165372][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.235358][ T7314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.305593][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.312737][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.378781][T14731] veth3: left allmulticast mode [ 740.386912][T14731] bridge4: port 1(veth3) entered disabled state [ 740.459412][ T30] audit: type=1400 audit(1747658341.684:614): avc: denied { relabelfrom } for pid=14713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 740.519340][T14733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.640970][ T30] audit: type=1400 audit(1747658341.684:615): avc: denied { relabelto } for pid=14713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 740.991232][ T5864] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 741.048257][T14438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.150196][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 741.163512][ T5864] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 741.203774][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.231479][ T5864] usb 5-1: config 0 descriptor?? [ 741.248947][ T5864] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 741.304991][T14438] veth0_vlan: entered promiscuous mode [ 741.335074][T14438] veth1_vlan: entered promiscuous mode [ 741.454009][ T5864] gspca_vc032x: reg_r err -32 [ 741.615654][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.626350][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.634305][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.636107][T14438] veth0_macvtap: entered promiscuous mode [ 741.645414][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.653537][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.659513][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.660112][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.665101][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.677637][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.684439][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.705941][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.725616][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.730193][T14438] veth1_macvtap: entered promiscuous mode [ 741.738735][T14763] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 741.748251][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.788605][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.795699][T14438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.801950][T14768] overlayfs: overlapping lowerdir path [ 741.828610][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.852631][T14768] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 741.863110][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.868436][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.875413][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.883820][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.888960][T14438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.889637][T14768] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.906430][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.912147][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.917799][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.927279][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 741.942603][ T5864] gspca_vc032x: Unknown sensor... [ 741.948410][ T5864] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 741.949198][T14438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.037480][T14438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.074447][T14438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.130894][T14438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.320438][T14438] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 742.991791][T14438] wireguard: wg0: Could not create IPv6 socket [ 743.099446][T14438] wireguard: wg1: Could not create IPv6 socket [ 743.163395][T14438] wireguard: wg2: Could not create IPv6 socket [ 743.240387][T14490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.267291][T14490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.575607][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.646398][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.910807][ T30] audit: type=1400 audit(1747658345.134:616): avc: denied { mounton } for pid=14438 comm="syz-executor" path="/root/syzkaller.SeVyVr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 744.116646][ T30] audit: type=1400 audit(1747658345.184:617): avc: denied { mounton } for pid=14438 comm="syz-executor" path="/root/syzkaller.SeVyVr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 744.814418][ T30] audit: type=1400 audit(1747658345.284:618): avc: denied { mount } for pid=14438 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 744.882255][ T30] audit: type=1400 audit(1747658345.284:619): avc: denied { mounton } for pid=14438 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 744.911191][ T950] usb 5-1: USB disconnect, device number 81 [ 744.924004][T14787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2540'. [ 744.938122][ T30] audit: type=1400 audit(1747658345.934:620): avc: denied { write } for pid=14783 comm="syz.3.2443" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 744.969225][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.985965][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.994763][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 745.002518][ T30] audit: type=1400 audit(1747658345.934:621): avc: denied { ioctl } for pid=14783 comm="syz.3.2443" path="/0/file0" dev="tmpfs" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 745.032637][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 745.040386][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 745.075652][T14790] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 747.091573][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.504798][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2545'. [ 747.814638][T14827] netlink: 'syz.4.2550': attribute type 32 has an invalid length. [ 747.860055][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 747.894101][T14827] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 749.070644][T14839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2553'. [ 749.243235][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.254612][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.263697][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.272706][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.332519][T14854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.422250][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.493145][T14852] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 749.884908][ T30] audit: type=1400 audit(1747658351.114:622): avc: denied { write } for pid=14868 comm="syz.2.2558" path="socket:[40730]" dev="sockfs" ino=40730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 750.150508][ T950] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 750.310417][ T950] usb 3-1: Using ep0 maxpacket: 32 [ 750.324915][ T950] usb 3-1: unable to get BOS descriptor set [ 750.335362][ T950] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 750.358761][ T950] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 750.387343][ T950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 750.444437][ T950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.468265][ T950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.495590][ T950] usb 3-1: Product: syz [ 750.508192][ T950] usb 3-1: Manufacturer: syz [ 750.517572][ T950] usb 3-1: SerialNumber: syz [ 750.755882][T14873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.780590][T14873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.918727][ T950] usb 3-1: 0:2 : does not exist [ 750.969449][ T950] usb 3-1: USB disconnect, device number 62 [ 751.138372][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2563'. [ 751.730243][T14908] netlink: 'syz.4.2564': attribute type 12 has an invalid length. [ 751.733148][ T7314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.759402][T14908] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2564'. [ 751.767413][ T7314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.815758][ T7314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.866915][ T7314] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.932153][ T7314] ip6gretap1: left allmulticast mode [ 751.951143][ T7314] ip6gretap1: left promiscuous mode [ 751.959910][ T7314] bridge1: port 1(ip6gretap1) entered disabled state [ 752.166128][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.181921][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.191742][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.202995][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.356694][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.346419][T14922] input: syz1 as /devices/virtual/input/input61 [ 753.680406][ T950] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 753.755877][ T7314] bond0 (unregistering): (slave bond4): Releasing backup interface [ 753.764684][ T7314] bond0 (unregistering): Released all slaves [ 753.776269][ T7314] bond1 (unregistering): Released all slaves [ 753.788717][ T7314] bond2 (unregistering): Released all slaves [ 753.843328][ T950] usb 3-1: Using ep0 maxpacket: 32 [ 753.853980][ T950] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 753.863138][ T950] usb 3-1: config 0 has no interface number 0 [ 753.877400][ T950] usb 3-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 753.888889][ T950] usb 3-1: config 0 interface 5 has no altsetting 0 [ 753.909393][ T950] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 753.918718][ T7314] bond3 (unregistering): Released all slaves [ 753.926005][ T950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.941684][ T950] usb 3-1: Product: syz [ 753.945854][ T950] usb 3-1: Manufacturer: syz [ 753.954851][ T950] usb 3-1: SerialNumber: syz [ 753.974610][ T950] usb 3-1: config 0 descriptor?? [ 754.025111][ T7314] bond4 (unregistering): Released all slaves [ 754.037357][ T7314] bond5 (unregistering): Released all slaves [ 754.052182][T14925] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2568'. [ 754.091454][T14915] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 754.892966][ T7400] Bluetooth: hci1: command tx timeout [ 755.047083][T14951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2572'. [ 755.437950][T14954] tipc: Started in network mode [ 755.496760][T14954] tipc: Node identity 4, cluster identity 4711 [ 755.524835][T14954] tipc: Node number set to 4 [ 756.681517][ T950] radio-si470x 3-1:0.5: could not find interrupt in endpoint [ 756.729697][ T5862] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 756.731910][ T950] radio-si470x 3-1:0.5: probe with driver radio-si470x failed with error -5 [ 757.022137][ T950] radio-raremono 3-1:0.5: this is not Thanko's Raremono. [ 757.169246][ T5862] usb 5-1: config 0 has no interfaces? [ 757.184605][ T5862] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 757.209549][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.768676][ T5862] usb 5-1: config 0 descriptor?? [ 757.776342][ T950] usbhid 3-1:0.5: couldn't find an input interrupt endpoint [ 757.807812][ T950] usb 3-1: USB disconnect, device number 63 [ 757.845458][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 757.857052][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 757.866740][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 757.875783][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 757.885558][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 757.969653][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'. [ 758.318825][T14973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.339325][T14973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.348781][ T5920] usb 5-1: USB disconnect, device number 82 [ 758.354357][T14990] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 758.414771][T14999] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2584'. [ 759.290131][ T5862] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 759.491939][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 759.500932][ T5862] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 759.522911][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.544099][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 759.557253][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.570206][ T5862] usb 5-1: Product: syz [ 759.578222][ T5862] usb 5-1: Manufacturer: syz [ 759.587851][ T5862] usb 5-1: SerialNumber: syz [ 759.611569][ T5862] usb 5-1: can't set config #1, error -71 [ 759.623410][ T5862] usb 5-1: USB disconnect, device number 83 [ 760.004262][T15037] sctp: [Deprecated]: syz.3.2587 (pid 15037) Use of int in max_burst socket option deprecated. [ 760.004262][T15037] Use struct sctp_assoc_value instead [ 760.008898][T15033] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 760.027933][T15038] sctp: [Deprecated]: syz.3.2587 (pid 15038) Use of int in max_burst socket option deprecated. [ 760.027933][T15038] Use struct sctp_assoc_value instead [ 761.543571][ T950] IPVS: starting estimator thread 0... [ 761.549119][ T30] audit: type=1400 audit(1747658362.764:623): avc: denied { ioctl } for pid=15050 comm="syz.1.2590" path="socket:[40951]" dev="sockfs" ino=40951 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 761.606091][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 761.621115][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 761.622098][T15056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.643851][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 761.651789][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.659678][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 761.677706][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.680060][T15052] IPVS: using max 74 ests per chain, 177600 per kthread [ 761.751080][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.015858][T15053] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 762.118992][T15066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2593'. [ 763.110740][ T5862] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 763.262667][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 763.273304][ T5862] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 763.281724][ T5862] usb 4-1: can't read configurations, error -71 [ 763.997552][T15092] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2601'. [ 764.113069][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 764.124165][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 764.132925][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 764.142546][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 764.151292][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 764.224465][T15093] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 764.251863][ T30] audit: type=1400 audit(1747658365.474:624): avc: denied { read } for pid=15089 comm="syz.3.2601" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 764.279645][ T30] audit: type=1400 audit(1747658365.474:625): avc: denied { open } for pid=15089 comm="syz.3.2601" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 766.549174][T15119] random: crng reseeded on system resumption [ 766.572406][T15120] vlan2: entered allmulticast mode [ 766.606827][T15120] veth1: entered allmulticast mode [ 766.618224][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2607'. [ 767.398984][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 767.409287][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 767.446593][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 767.454453][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 767.463199][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.023074][T15125] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 769.636241][T15160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.646872][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2616'. [ 769.882922][ T5862] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 770.230452][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 770.398290][ T5862] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 770.417341][ T5862] usb 3-1: config 8 has no interface number 0 [ 770.480147][ T5862] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 770.500106][ T5862] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 770.516397][ T5862] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 770.540014][ T5862] usb 3-1: config 8 interface 39 has no altsetting 0 [ 770.550609][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 770.568070][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 770.576075][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 770.587803][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 770.603158][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 770.612431][T15170] openvswitch: netlink: Flow key attr not present in new flow. [ 770.630268][T15170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2618'. [ 770.639198][T15170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2618'. [ 770.750343][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 770.761132][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.769259][ T5862] usb 3-1: Product: syz [ 770.773468][ T5862] usb 3-1: Manufacturer: syz [ 770.778060][ T5862] usb 3-1: SerialNumber: syz [ 771.127164][T15167] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 771.183941][ T5862] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 771.191917][ T5862] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 771.244280][ T5862] usb 3-1: USB disconnect, device number 64 [ 772.616388][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.624584][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.633403][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.642136][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.649545][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.673666][T15184] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 774.061490][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 774.069344][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 774.077591][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 774.086189][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 774.095470][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 774.117613][T15187] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 775.641252][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 775.649604][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 775.658979][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 775.668519][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 775.676412][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 775.699687][T15190] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 777.283334][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 777.292854][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 777.301197][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 777.311546][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 777.319711][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.342608][T15193] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 779.046793][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.056304][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.064358][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.073788][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.082066][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.105090][T15196] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 780.882745][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 780.892303][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 780.900890][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 780.909484][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 780.918643][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 780.943496][T15199] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 782.852969][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.862855][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.871210][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.879539][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.888628][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.911182][T15202] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 784.923134][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 784.934259][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 784.942546][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 784.950561][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 784.958011][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 784.980651][T15205] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 787.077613][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.085354][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.093008][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.102811][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.112950][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.134243][T15208] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 789.316175][ T7400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 789.324788][ T7400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 789.332522][ T7400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 789.342106][ T7400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 789.351008][ T7400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 789.374420][T15211] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 791.656503][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.664633][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.675013][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.683199][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.691377][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.714850][T15214] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 808.198315][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.634554][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.630160][ T31] INFO: task kworker/u8:11:7314 blocked for more than 143 seconds. [ 901.638086][ T31] Not tainted 6.15.0-rc7-syzkaller #0 [ 901.644762][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.653472][ T31] task:kworker/u8:11 state:D stack:23512 pid:7314 tgid:7314 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 901.665661][ T31] Workqueue: netns cleanup_net [ 901.670764][ T31] Call Trace: [ 901.674066][ T31] [ 901.676991][ T31] __schedule+0x116f/0x5de0 [ 901.681734][ T31] ? __pfx___schedule+0x10/0x10 [ 901.686593][ T31] ? find_held_lock+0x2b/0x80 [ 901.691432][ T31] ? schedule+0x2d7/0x3a0 [ 901.695774][ T31] schedule+0xe7/0x3a0 [ 901.699830][ T31] afs_cell_purge+0x41f/0x4f0 [ 901.705127][ T31] ? __try_to_del_timer_sync+0x115/0x170 [ 901.710868][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 901.716090][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 901.722572][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 901.727882][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 901.733261][ T31] afs_net_exit+0x83/0x140 [ 901.737682][ T31] ops_exit_list+0xb3/0x180 [ 901.742375][ T31] cleanup_net+0x5c1/0xb30 [ 901.746774][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 901.751738][ T31] ? rcu_is_watching+0x12/0xc0 [ 901.756487][ T31] process_one_work+0x9cf/0x1b70 [ 901.762052][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 901.767006][ T31] ? __pfx_process_one_work+0x10/0x10 [ 901.772395][ T31] ? assign_work+0x1a0/0x250 [ 901.776964][ T31] worker_thread+0x6c8/0xf10 [ 901.781830][ T31] ? __kthread_parkme+0x19e/0x250 [ 901.786839][ T31] ? __pfx_worker_thread+0x10/0x10 [ 901.792152][ T31] kthread+0x3c2/0x780 [ 901.796202][ T31] ? __pfx_kthread+0x10/0x10 [ 901.801256][ T31] ? __pfx_kthread+0x10/0x10 [ 901.805854][ T31] ? __pfx_kthread+0x10/0x10 [ 901.810468][ T31] ? __pfx_kthread+0x10/0x10 [ 901.815060][ T31] ? rcu_is_watching+0x12/0xc0 [ 901.819805][ T31] ? __pfx_kthread+0x10/0x10 [ 901.825393][ T31] ret_from_fork+0x45/0x80 [ 901.829826][ T31] ? __pfx_kthread+0x10/0x10 [ 901.834437][ T31] ret_from_fork_asm+0x1a/0x30 [ 901.839206][ T31] [ 901.842597][ T31] [ 901.842597][ T31] Showing all locks held in the system: [ 901.850617][ T31] 1 lock held by khungtaskd/31: [ 901.855465][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 901.865490][ T31] 2 locks held by kworker/u8:5/1158: [ 901.870791][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 901.882318][ T31] #1: ffffc90003ca7d18 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 901.894427][ T31] 2 locks held by getty/5571: [ 901.899085][ T31] #0: ffff8880323ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 901.909185][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 901.919598][ T31] 3 locks held by kworker/u8:11/7314: [ 901.925152][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 901.936018][ T31] #1: ffffc90003ff7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 901.946346][ T31] #2: ffffffff90112b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 901.955693][ T31] [ 901.957998][ T31] ============================================= [ 901.957998][ T31] [ 901.966579][ T31] NMI backtrace for cpu 1 [ 901.966589][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 901.966602][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.966608][ T31] Call Trace: [ 901.966613][ T31] [ 901.966619][ T31] dump_stack_lvl+0x116/0x1f0 [ 901.966639][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 901.966652][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.966665][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 901.966679][ T31] watchdog+0xf70/0x12c0 [ 901.966693][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.966703][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.966720][ T31] ? __kthread_parkme+0x19e/0x250 [ 901.966737][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.966748][ T31] kthread+0x3c2/0x780 [ 901.966759][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966768][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966778][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966788][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966798][ T31] ? rcu_is_watching+0x12/0xc0 [ 901.966812][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966822][ T31] ret_from_fork+0x45/0x80 [ 901.966833][ T31] ? __pfx_kthread+0x10/0x10 [ 901.966844][ T31] ret_from_fork_asm+0x1a/0x30 [ 901.966867][ T31] [ 901.966871][ T31] Sending NMI from CPU 1 to CPUs 0: [ 902.099529][ C0] NMI backtrace for cpu 0 [ 902.099544][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 902.099567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.099575][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 902.099598][ C0] Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c0 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 902.099611][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 902.099624][ C0] RAX: 0000000003e0fb81 RBX: 0000000000000000 RCX: ffffffff8b6d3419 [ 902.099633][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe41e5 RDI: ffffffff8bf4a220 [ 902.099642][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 902.099651][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 902.099660][ C0] R13: ffffffff8e097740 R14: ffffffff90852e10 R15: 0000000000000000 [ 902.099668][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 902.099682][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.099692][ C0] CR2: 000055a5caea3660 CR3: 000000000e180000 CR4: 00000000003526f0 [ 902.099701][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.099709][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.099718][ C0] Call Trace: [ 902.099723][ C0] [ 902.099728][ C0] default_idle+0x13/0x20 [ 902.099741][ C0] default_idle_call+0x6d/0xb0 [ 902.099752][ C0] do_idle+0x391/0x510 [ 902.099771][ C0] ? __pfx_do_idle+0x10/0x10 [ 902.099786][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 902.099809][ C0] cpu_startup_entry+0x4f/0x60 [ 902.099825][ C0] rest_init+0x16b/0x2b0 [ 902.099837][ C0] ? acpi_subsystem_init+0x133/0x180 [ 902.099860][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 902.099878][ C0] start_kernel+0x3e9/0x4d0 [ 902.099893][ C0] x86_64_start_reservations+0x18/0x30 [ 902.099908][ C0] x86_64_start_kernel+0xb0/0xc0 [ 902.099923][ C0] common_startup_64+0x13e/0x148 [ 902.099949][ C0] [ 902.100572][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 902.100585][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 902.100604][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.100613][ T31] Call Trace: [ 902.100619][ T31] [ 902.100626][ T31] dump_stack_lvl+0x3d/0x1f0 [ 902.100651][ T31] panic+0x71c/0x800 [ 902.100676][ T31] ? __pfx_panic+0x10/0x10 [ 902.100698][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 902.100718][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 902.100735][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 902.100752][ T31] ? watchdog+0xdda/0x12c0 [ 902.100768][ T31] ? watchdog+0xdcd/0x12c0 [ 902.100786][ T31] watchdog+0xdeb/0x12c0 [ 902.100806][ T31] ? __pfx_watchdog+0x10/0x10 [ 902.100821][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 902.100844][ T31] ? __kthread_parkme+0x19e/0x250 [ 902.100868][ T31] ? __pfx_watchdog+0x10/0x10 [ 902.100883][ T31] kthread+0x3c2/0x780 [ 902.100900][ T31] ? __pfx_kthread+0x10/0x10 [ 902.100914][ T31] ? __pfx_kthread+0x10/0x10 [ 902.100929][ T31] ? __pfx_kthread+0x10/0x10 [ 902.100943][ T31] ? __pfx_kthread+0x10/0x10 [ 902.100957][ T31] ? rcu_is_watching+0x12/0xc0 [ 902.100977][ T31] ? __pfx_kthread+0x10/0x10 [ 902.100993][ T31] ret_from_fork+0x45/0x80 [ 902.101008][ T31] ? __pfx_kthread+0x10/0x10 [ 902.101024][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.101057][ T31] [ 902.448756][ T31] Kernel Offset: disabled [ 902.453058][ T31] Rebooting in 86400 seconds..