last executing test programs: 8m4.61237959s ago: executing program 3 (id=4065): syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7, 0x3, 0x7, 0x20, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1d) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8m3.950731579s ago: executing program 3 (id=4071): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="8faaaa95aaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e"], 0x0) 8m3.571081727s ago: executing program 3 (id=4072): r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="040000000000"]) 8m3.425062577s ago: executing program 3 (id=4073): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2b5f093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8m3.355248758s ago: executing program 3 (id=4075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) sendmmsg$inet(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="7da852a21e", 0x5}], 0x1}}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendto$unix(r1, &(0x7f00000008c0)='c', 0x1, 0x4008014, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 8m3.056226528s ago: executing program 3 (id=4078): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450d", 0x27}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb", 0x5c}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3ed", 0xa9}, {&(0x7f0000000d00)="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", 0x10b}], 0x2}}], 0x2, 0x2090) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m2.190778969s ago: executing program 32 (id=4078): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450d", 0x27}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb", 0x5c}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3ed", 0xa9}, {&(0x7f0000000d00)="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", 0x10b}], 0x2}}], 0x2, 0x2090) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m58.44404731s ago: executing program 2 (id=4110): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x10a}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c", 0x16}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b29", 0x51}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d", 0x2}], 0x1}}], 0x2, 0x2090) 7m57.912747744s ago: executing program 1 (id=4117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x1, 0x70bd2a, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xfe, 0x5, 0x500}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 7m57.843447595s ago: executing program 1 (id=4118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') 7m57.570243638s ago: executing program 2 (id=4120): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m56.6529937s ago: executing program 2 (id=4121): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x3, 0x0, 0x8000000]}}, {0x5, 0x0, 0x5, 0x83, @tick=0x6, {0xfd}, {}, @note={0x81, 0x0, 0x0, 0xee}}], 0x38) 7m56.525456078s ago: executing program 2 (id=4124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2b5f093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m56.49578523s ago: executing program 2 (id=4125): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_to_hsr\x00'}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x8}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e851761735dd0fe457e2d2cfb6431c44"}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 7m56.2876799s ago: executing program 2 (id=4126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000040) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) 7m56.194702654s ago: executing program 33 (id=4126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000040) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) 7m54.828288888s ago: executing program 1 (id=4133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000a0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m53.883579215s ago: executing program 1 (id=4135): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2b5f093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m53.832623019s ago: executing program 1 (id=4136): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x84, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_to_hsr\x00'}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x8}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e851761735dd0fe457e2d2cfb6431c44"}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 7m53.651984671s ago: executing program 1 (id=4138): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) 7m53.474075831s ago: executing program 34 (id=4138): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) 12.129401536s ago: executing program 4 (id=6270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 6.504148698s ago: executing program 0 (id=6287): socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0xa5) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x8d}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x4, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x7, 0x5631, 0x7, 0x5, 0xfffffffffffffff9, 0x5, 0x100000001, 0x8, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x3, 0x766, 0xa, 0xc0000003, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0xfff, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x7, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x1000000000007, 0x7, 0x2, 0x6, 0x81, 0xa, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x8000000000007f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0x831, 0x1, 0x9e, 0x5, 0x3, 0x0, 0x3, 0x5, 0xc, 0x200000000006, 0x6281, 0x10, 0x7f, 0x9, 0x3, 0x3, 0x7]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x1000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000800000000000000c3687c4e7aeabf67ce8487dc17cda5c9632a2a5decaf5a5b619a8f76399e7c0eea021ec04d646656686a528988f351c22ece67eba03544", @ANYRES16=r7, @ANYBLOB="9fe60000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c009b0000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) socket$inet(0x2, 0x1, 0x100) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.575288409s ago: executing program 4 (id=6290): syz_emit_ethernet(0xc0, 0x0, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40002) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x4}}) 4.855953818s ago: executing program 0 (id=6293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) r2 = socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000700)=ANY=[@ANYBLOB="7f6964dafa18cbaae34c6a28126e66f4d0fb6272a080371196fdebb9563d0a474279c7bb36c63fd7ca9e0c9fed86d1476b452c560006997858177d2f2e93c9e39c1373dff6d82b8ae15ea9bba5478828f4d33c8e2b6a54b474c44a5423", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000480)) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtaction={0x68, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018112000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x23, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x3e117c29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x4, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x8}}, 0x50) syz_open_dev$audion(&(0x7f0000000380), 0x80000000, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a31000000000800410073697700140033007866726d3000"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 4.552023193s ago: executing program 4 (id=6294): ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 4.533477776s ago: executing program 0 (id=6295): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x44, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a", 0x81}, {0x0}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.387859976s ago: executing program 4 (id=6296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.139055735s ago: executing program 0 (id=6299): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000001300080027bd7000f7dbdf2500000000", @ANYRES32, @ANYBLOB="1200000018880300050011001300000008000a00", @ANYRES32, @ANYBLOB="1e00240088836ee21aec6cba0fa61fc33fe14ab0dd609c6dc8952e7ccf6b0000080020000800000014000300626f6e64300000000000000000000000050027000400000005001100040000000a000100ffffffffffff0000080029006c7c0100"], 0x90}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x4, 0x3b, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xb211, 0x13580, 0x0, 0x1d7}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0x80) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) 4.016536354s ago: executing program 6 (id=6301): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x40045109, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) 3.415699017s ago: executing program 7 (id=6302): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x42) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB=',group_id=', @ANYBLOB=',rootmode=0000000000040000,user_id=', @ANYRESDEC=r1, @ANYRES16=r2]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x2ab8}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000200)={0xffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) socket(0xa, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000001900)={&(0x7f00000010c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700001183b61eab8de7977d0bcdf9ddb56f81000000000000000000"], 0x10}, 0x20000010) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) 2.996705248s ago: executing program 7 (id=6303): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x3, 0x3da}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x1c, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/82, 0x52}, {&(0x7f0000000400)=""/215, 0xd7}], 0x2, &(0x7f0000000240)=""/8, 0x8}, 0x0, 0x4, 0x0, {0x2, r6}}) io_uring_enter(r3, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 2.931001237s ago: executing program 5 (id=6304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.730519101s ago: executing program 5 (id=6305): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) 2.51365373s ago: executing program 6 (id=6306): open(0x0, 0x0, 0x2) r0 = open(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000004e00)="fb2c37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77b000000000000809ccdd784efb590c180c836a9d370006ff5cdb46ed130a35a1c7978fcd1ff77", 0x45) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x4040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 1.938938285s ago: executing program 6 (id=6307): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0xe000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x6, @remote, 0xfffffff8}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x20000000, @private1, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52eef6187f2304844c296000000000100"}, 0xd8) sendto$inet6(r6, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x8, &(0x7f0000000100)=[{0x6, 0x7, 0xff, 0x7fff0000}, {0x1ff, 0x81, 0xe2, 0xfff}, {0x0, 0x7, 0x73, 0x7fffffff}, {0x2, 0x0, 0x8, 0x40}, {0x3, 0x5, 0x9, 0x6}, {0xff, 0x8, 0x1, 0xe3}, {0x3, 0x2, 0x2, 0x2}, {0x8001, 0x1, 0x0, 0x3}]}) close_range(r7, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.917008821s ago: executing program 7 (id=6308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x40, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700e0090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.762050783s ago: executing program 5 (id=6309): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x25}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.290656066s ago: executing program 5 (id=6310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xffffffff, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x6, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 1.213489058s ago: executing program 7 (id=6311): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.141235188s ago: executing program 4 (id=6312): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 988.477266ms ago: executing program 5 (id=6313): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca3de393208cc5dfb2d6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a550"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 949.202217ms ago: executing program 6 (id=6314): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x42) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB=',group_id=', @ANYBLOB=',rootmode=0000000000040000,user_id=', @ANYRESDEC=r1, @ANYRES16=r2]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x2ab8}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000200)={0xffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) socket(0xa, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000001900)={&(0x7f00000010c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700001183b61eab8de7977d0bcdf9ddb56f81000000000000000000"], 0x10}, 0x20000010) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) 948.046685ms ago: executing program 0 (id=6315): syz_emit_ethernet(0xc0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40002) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 897.788825ms ago: executing program 5 (id=6316): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x40045109, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) 701.105945ms ago: executing program 7 (id=6317): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9f2", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) r2 = socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000700)=ANY=[@ANYBLOB="7f6964dafa18cbaae34c6a28126e66f4d0fb6272a080371196fdebb9563d0a474279c7bb36c63fd7ca9e0c9fed86d1476b452c560006997858177d2f2e93c9e39c1373dff6d82b8ae15ea9bba5478828f4d33c8e2b6a54b474c44a5423", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000480)) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtaction={0x68, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018112000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x23, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x3e117c29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x4, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x8}}, 0x50) syz_open_dev$audion(&(0x7f0000000380), 0x80000000, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a31000000000800410073697700140033007866726d3000"], 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 407.724066ms ago: executing program 6 (id=6318): open(0x0, 0x0, 0x2) r0 = open(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000004e00)="fb2c37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77b000000000000809ccdd784efb590c180c836a9d370006ff5cdb46ed130a35a1c7978fcd1ff77", 0x45) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x4040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 45.11747ms ago: executing program 7 (id=6319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cbf5a6d7563c5ac743a2ccb509f77b40dee5bad90c6573030da19ef59bae484332d88c609d30248a44a69cc56623a061439a1dc47a295d5a43429071b408dba7cc7061b052d1a2f3d10824d6fb361906efef7904a738902f10f4662b1849de", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1f0000000600000004", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000010000000000000000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 30.874671ms ago: executing program 4 (id=6320): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x24001) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@redirect_dir_off}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) 29.55729ms ago: executing program 6 (id=6321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800009d}}, {{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x400000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 0 (id=6322): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000400)="1113687780fefab361d94a0dd7a95379ac0c0fc249f56b53ef19017a44f186ed885373f8d443e66e17ac32c4f3b60d8625d9fd6479f5fab5700bcfe817c722624f3bdf32404846e404cd8fe797ba8bbf9edf29167c5450b2b0888b8d33a629239d0c4d325c76ceedc47f4718084ba57ead2e225957b3e1a773d78304551ac0b60f2f0003071204d5c52ddeca97cc637a60df6b7cc1038f67100f4ac283388c1c8ce3d147a7b2e794872a7c5fdc86", 0xae) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): link: 12 bytes leftover after parsing attributes in process `syz.7.5363'. [ 745.469160][T21664] 9pnet_virtio: no channels available for device syz [ 746.351137][ T5861] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 746.467316][T21698] block nbd7: not configured, cannot reconfigure [ 746.559539][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 746.615484][ T5861] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 746.686090][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 746.709661][ T5861] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 746.756641][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.780962][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.831663][ T5861] usb 6-1: config 0 descriptor?? [ 747.650473][ T5861] hid_parser_main: 49 callbacks suppressed [ 747.650485][ T5861] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 747.674064][ T5861] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 747.738646][ T5861] corsair-cpro 0003:1B1C:0C10.0024: unknown main item tag 0x0 [ 747.773397][T21717] overlayfs: failed to resolve './file0': -2 [ 747.789508][ T5861] corsair-cpro 0003:1B1C:0C10.0024: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 747.852180][ C0] usb 6-1: input irq status -75 received [ 748.029860][ T5861] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -71 [ 748.180904][T21734] sctp: [Deprecated]: syz.6.5388 (pid 21734) Use of int in max_burst socket option deprecated. [ 748.180904][T21734] Use struct sctp_assoc_value instead [ 748.401389][ T5861] usb 6-1: USB disconnect, device number 45 [ 748.469212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 748.477246][ C1] lec:lec_tx_timeout: lec0 [ 748.481846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 748.607011][T21746] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 748.674779][T21742] mkiss: ax0: crc mode is auto. [ 749.898011][T21776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21776 comm=syz.0.5406 [ 749.911760][T21776] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 749.917860][T21776] PKCS7: Only support pkcs7_signedData type [ 750.146388][T21778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 750.233889][T21780] tipc: Enabling of bearer rejected, failed to enable media [ 751.159851][T21759] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 751.159867][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 751.237476][T21785] sctp: [Deprecated]: syz.6.5409 (pid 21785) Use of int in max_burst socket option deprecated. [ 751.237476][T21785] Use struct sctp_assoc_value instead [ 752.028210][T21759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.038270][T21759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 752.253224][T21793] siw: device registration error -23 [ 753.366626][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.489257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 753.497291][ C1] lec:lec_tx_timeout: lec0 [ 753.503164][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.712094][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5418'. [ 753.722860][T21816] tipc: Enabling of bearer rejected, failed to enable media [ 753.999794][T21016] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 754.049374][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 754.172111][T21016] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 754.183131][T21016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.354717][T21016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.377177][T21016] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 754.401596][T21016] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 754.415725][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.433484][T21016] usb 7-1: config 0 descriptor?? [ 754.758059][T21829] netlink: 'syz.0.5422': attribute type 39 has an invalid length. [ 754.878906][T21016] holtek_kbd 0003:04D9:A055.0025: unknown main item tag 0x0 [ 754.890785][T21016] holtek_kbd 0003:04D9:A055.0025: unknown main item tag 0x0 [ 754.901989][T21016] holtek_kbd 0003:04D9:A055.0025: collection stack underflow [ 754.917345][T21016] holtek_kbd 0003:04D9:A055.0025: item 0 0 0 12 parsing failed [ 754.928404][T21016] holtek_kbd 0003:04D9:A055.0025: probe with driver holtek_kbd failed with error -22 [ 755.097673][T21016] usb 7-1: USB disconnect, device number 32 [ 755.199331][ T5861] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 755.334001][T21857] tipc: Enabling of bearer rejected, failed to enable media [ 755.369469][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 755.390640][ T5861] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 755.402560][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 755.414643][ T5861] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 755.434183][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.452531][ T5861] usb 5-1: config 0 descriptor?? [ 755.868519][ T5861] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 755.869826][T21016] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 756.084688][T21016] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.106843][T21016] usb 6-1: config 0 has no interface number 0 [ 756.152527][T21016] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 756.162142][T21016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.174542][T21016] usb 6-1: config 0 descriptor?? [ 756.194547][T21016] cp210x 6-1:0.1: cp210x converter detected [ 756.285361][ T5861] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -71 [ 756.302127][T21873] fuse: Bad value for 'fd' [ 756.317177][ T5861] usb 5-1: USB disconnect, device number 121 [ 756.414265][T21875] netlink: 'syz.0.5439': attribute type 39 has an invalid length. [ 756.590113][T21016] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 756.608149][T21016] cp210x 6-1:0.1: failed to get vendor val 0x3711 size 2: -121 [ 756.626631][T21016] cp210x 6-1:0.1: GPIO initialisation failed: -121 [ 756.643564][T21016] usb 6-1: cp210x converter now attached to ttyUSB0 [ 757.127572][T21889] 9p: Bad value for 'rfdno' [ 757.278595][T21892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21892 comm=syz.6.5444 [ 757.292772][T21892] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 757.298245][T21892] PKCS7: Only support pkcs7_signedData type [ 758.132256][T21899] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5447'. [ 758.146180][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 758.199313][ T5819] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 758.529189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 758.537215][ C1] lec:lec_tx_timeout: lec0 [ 758.541897][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 759.245489][ T5861] usb 6-1: USB disconnect, device number 46 [ 759.275145][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 759.303001][ T5861] cp210x 6-1:0.1: device disconnected [ 759.309907][T21907] batadv_slave_1: entered allmulticast mode [ 759.436698][T21910] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 759.508735][T21912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5453'. [ 759.529669][T21016] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 759.659259][ T5861] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 759.711842][T21016] usb 5-1: Using ep0 maxpacket: 32 [ 759.725405][T21016] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 759.735483][T21016] usb 5-1: config 0 has no interface number 0 [ 759.780955][T21016] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 759.790647][T21016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.809774][T21016] usb 5-1: Product: syz [ 759.810659][ T5861] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.818715][T21016] usb 5-1: Manufacturer: syz [ 759.842516][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.845155][T21016] usb 5-1: SerialNumber: syz [ 759.879116][T21016] usb 5-1: config 0 descriptor?? [ 759.885096][ T5861] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 759.894246][ T5861] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 759.906179][ T5861] usb 6-1: Manufacturer: syz [ 759.923643][ T5861] usb 6-1: config 0 descriptor?? [ 759.999989][ T5861] rc_core: IR keymap rc-hauppauge not found [ 760.036738][ T5861] Registered IR keymap rc-empty [ 760.076721][ T5861] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 760.107928][ T5861] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 760.140679][T21907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.151521][T21907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.170130][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5451'. [ 760.295081][T21016] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 760.349056][T21016] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 760.441342][ T24] usb 6-1: USB disconnect, device number 47 [ 760.449510][T21904] batadv_slave_1: left allmulticast mode [ 760.586740][T21924] syzkaller0: entered promiscuous mode [ 760.592612][T21924] syzkaller0: entered allmulticast mode [ 761.254616][T21940] mkiss: ax0: crc mode is auto. [ 761.391670][T21943] fuse: Bad value for 'fd' [ 761.677414][T21016] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 761.688595][T21016] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 762.925665][ T24] usb 5-1: USB disconnect, device number 122 [ 762.999340][ T5819] Bluetooth: hci1: command 0x0c1a tx timeout [ 763.009854][T21928] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 763.085922][T21956] siw: device registration error -23 [ 763.549263][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 763.557300][ C1] lec:lec_tx_timeout: lec0 [ 763.561941][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 763.740205][T21928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 763.746305][T21928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 763.881981][ T5819] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 765.079431][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 765.799299][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 765.994180][ T5819] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 766.093170][T22001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5483'. [ 766.099695][T22002] fuse: Unknown parameter 'user_id00000000000000000000' [ 766.103663][T22001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5483'. [ 766.283231][T22010] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 766.399272][T21016] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 766.561837][T21016] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 766.579019][T21016] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 766.603007][T21016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.617837][T21016] usb 5-1: config 0 descriptor?? [ 766.629674][T21016] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 766.837786][T21016] usb 5-1: USB disconnect, device number 123 [ 767.979274][T21016] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 768.146396][T21016] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.157206][T21016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 768.171924][T21016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.182147][T21016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.204328][T21016] usb 5-1: config 0 descriptor?? [ 768.241820][T21016] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 768.569337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 768.577348][ C1] lec:lec_tx_timeout: lec0 [ 768.581973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 768.602917][T22039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 769.079348][ T5861] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 769.232654][ T5861] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 769.244820][ T5861] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 769.257278][ T5861] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 769.269560][ T5861] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 769.285244][ T5861] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 769.294866][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 769.303146][ T5861] usb 7-1: Product: syz [ 769.307520][ T5861] usb 7-1: Manufacturer: syz [ 769.345682][ T5861] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 769.550204][ T5861] usb 7-1: USB disconnect, device number 33 [ 770.349725][ T5861] usb 5-1: USB disconnect, device number 124 [ 770.389311][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 770.491971][T22069] fuse: Bad value for 'fd' [ 770.588573][T22072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 770.617628][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 770.636740][ T10] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 770.787492][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 770.817302][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.863625][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 770.878993][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 770.898973][ T10] usb 7-1: Product: syz [ 770.919874][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5512'. [ 770.931976][ T10] usb 7-1: Manufacturer: syz [ 770.953677][ T10] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 770.984503][T22082] sctp: [Deprecated]: syz.5.5512 (pid 22082) Use of int in max_burst socket option deprecated. [ 770.984503][T22082] Use struct sctp_assoc_value instead [ 771.099272][T21016] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 771.260783][T21016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.279837][T21016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.329017][T21016] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 771.360593][T21016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.400233][T21016] usb 5-1: config 0 descriptor?? [ 771.811166][T22093] 9pnet_virtio: no channels available for device syz [ 771.849724][T21016] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 771.860982][T21016] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 771.868430][T21016] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 771.921589][T21016] cm6533_jd 0003:0D8C:0022.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 772.082501][T22099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5518'. [ 772.104414][T21016] usb 5-1: USB disconnect, device number 125 [ 772.525723][T21016] usb 7-1: USB disconnect, device number 34 [ 772.689274][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 772.911272][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 772.922674][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 772.950023][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.967791][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5521'. [ 772.968059][ T24] usb 6-1: config 0 descriptor?? [ 773.012114][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 773.082951][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5521'. [ 773.216989][ T24] usb 6-1: USB disconnect, device number 48 [ 773.300588][T22120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5525'. [ 773.724269][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 773.980759][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 774.001830][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 774.184291][T17239] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 774.339531][T17239] usb 5-1: Using ep0 maxpacket: 16 [ 774.349617][T17239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.360117][T17239] usb 5-1: config 0 has no interfaces? [ 774.369185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 774.377175][ C1] lec:lec_tx_timeout: lec0 [ 774.381959][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 774.413644][T17239] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 774.464225][T17239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.520036][T17239] usb 5-1: Product: syz [ 774.544673][T17239] usb 5-1: Manufacturer: syz [ 774.578314][T17239] usb 5-1: SerialNumber: syz [ 774.664171][T17239] usb 5-1: config 0 descriptor?? [ 774.815930][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.425518][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.432550][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5527'. [ 775.443615][ T24] usb 6-1: config 0 descriptor?? [ 775.451592][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 775.546769][ T24] usb 6-1: USB disconnect, device number 49 [ 775.619402][T22127] sctp: [Deprecated]: syz.6.5527 (pid 22127) Use of int in max_burst socket option deprecated. [ 775.619402][T22127] Use struct sctp_assoc_value instead [ 776.059263][T21016] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 776.243481][T21016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.267585][T21016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.287761][T21016] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 776.302566][T21016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.315835][T21016] usb 6-1: config 0 descriptor?? [ 776.753380][T22129] syz.7.5528 (22129): drop_caches: 2 [ 776.756631][T22143] netlink: 'syz.6.5534': attribute type 39 has an invalid length. [ 776.868011][T21016] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 776.876215][T21016] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 776.888329][T21016] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 776.904128][T21016] cm6533_jd 0003:0D8C:0022.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 777.120197][T21016] usb 6-1: USB disconnect, device number 50 [ 777.198942][T22154] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5537'. [ 777.234985][ T5844] usb 5-1: USB disconnect, device number 126 [ 778.486536][T22163] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5542'. [ 778.522574][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 778.532977][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 778.541799][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 778.552207][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 778.561932][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.108772][T22166] xfrm0 speed is unknown, defaulting to 1000 [ 779.399206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 779.399272][ C1] lec:lec_tx_timeout: lec0 [ 779.399565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 779.745183][T22187] netlink: 'syz.6.5549': attribute type 39 has an invalid length. [ 779.804161][ T152] bridge_slave_1: left allmulticast mode [ 779.813067][ T152] bridge_slave_1: left promiscuous mode [ 779.818886][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.842736][ T152] bridge_slave_0: left allmulticast mode [ 779.848473][ T152] bridge_slave_0: left promiscuous mode [ 779.880821][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.105928][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.126450][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.156309][ T152] bond0 (unregistering): Released all slaves [ 780.314903][ T152] tipc: Left network mode [ 780.488289][T22166] chnl_net:caif_netlink_parms(): no params data found [ 780.599366][ T51] Bluetooth: hci4: command tx timeout [ 780.732103][ T152] hsr_slave_0: left promiscuous mode [ 780.738122][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.800846][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.152261][ T152] team0 (unregistering): Port device team_slave_1 removed [ 781.183514][ T152] team0 (unregistering): Port device team_slave_0 removed [ 781.269266][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 781.332908][T22217] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 781.405518][T22166] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.413248][T22166] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.422801][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.429257][T22166] bridge_slave_0: entered allmulticast mode [ 781.437059][ T10] usb 6-1: config 0 has no interface number 0 [ 781.439898][T22166] bridge_slave_0: entered promiscuous mode [ 781.452709][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 781.462191][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.473642][T22166] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.476641][ T10] usb 6-1: config 0 descriptor?? [ 781.499254][ T10] cp210x 6-1:0.1: cp210x converter detected [ 781.503224][T22166] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.516680][T22166] bridge_slave_1: entered allmulticast mode [ 781.545673][T22166] bridge_slave_1: entered promiscuous mode [ 781.614455][T22166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.640965][T22166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.716311][T22166] team0: Port device team_slave_0 added [ 781.726297][T22166] team0: Port device team_slave_1 added [ 781.775461][T22166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.784326][T22166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.811049][T22166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.829288][T22166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.836240][T22166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.885428][T22166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.912930][ T10] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 781.988062][T22166] hsr_slave_0: entered promiscuous mode [ 781.997258][T22166] hsr_slave_1: entered promiscuous mode [ 782.146494][ T10] cp210x 6-1:0.1: failed to get vendor val 0x370c size 15: -71 [ 782.166256][ T10] cp210x 6-1:0.1: GPIO initialisation failed: -71 [ 782.190958][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 782.521749][ T10] usb 6-1: USB disconnect, device number 51 [ 782.540727][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 782.548916][ T10] cp210x 6-1:0.1: device disconnected [ 782.683055][ T51] Bluetooth: hci4: command tx timeout [ 782.758382][ T152] bridge_slave_1: left allmulticast mode [ 782.768328][ T152] bridge_slave_1: left promiscuous mode [ 782.777625][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.791916][ T152] bridge_slave_0: left allmulticast mode [ 782.799544][ T152] bridge_slave_0: left promiscuous mode [ 782.805332][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.825959][T22257] fuse: Unknown parameter '0x0000000000000004' [ 782.849712][T21016] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 782.972012][ T152] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 782.980176][ T152] bridge1 (unregistering): left promiscuous mode [ 783.012118][T21016] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.023077][T21016] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 783.032263][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.043588][T21016] usb 7-1: config 0 descriptor?? [ 783.061158][ T152] bond1 (unregistering): Released all slaves [ 783.072541][T21016] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 783.098420][ T152] bond2 (unregistering): (slave batadv1): Releasing active interface [ 783.111474][ T152] bond2 (unregistering): Released all slaves [ 783.130284][ T152] bond3 (unregistering): Released all slaves [ 783.151152][ T152] bond4 (unregistering): Released all slaves [ 783.272100][ T10] usb 7-1: USB disconnect, device number 35 [ 783.285728][T22263] fuse: Unknown parameter 'fd0x0000000000000004' [ 783.313366][ T152] tipc: Left network mode [ 783.594002][ T152] hsr_slave_0: left promiscuous mode [ 783.604781][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.696500][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.719323][T21016] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 783.881332][T21016] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.909076][T21016] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 783.991579][T21016] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.042617][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.065213][T21016] usb 7-1: config 0 descriptor?? [ 784.130460][ T29] audit: type=1800 audit(1773703139.141:1328): pid=22284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5567" name="file1" dev="tmpfs" ino=2242 res=0 errno=0 [ 784.153131][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 784.299845][ T10] usb 6-1: device descriptor read/64, error -71 [ 784.409185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 784.417206][ C1] lec:lec_tx_timeout: lec0 [ 784.427086][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 784.549309][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 784.582401][T21016] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 784.656922][T22288] siw: device registration error -23 [ 784.771193][ T10] usb 6-1: device descriptor read/64, error -71 [ 784.800275][ T51] Bluetooth: hci4: command tx timeout [ 784.914375][ T10] usb usb6-port1: attempt power cycle [ 784.973952][ T152] team0 (unregistering): Port device team_slave_1 removed [ 785.048404][ T152] team0 (unregistering): Port device team_slave_0 removed [ 785.299367][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 785.383393][ T10] usb 6-1: device descriptor read/8, error -71 [ 785.649516][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 785.672054][ T10] usb 6-1: device descriptor read/8, error -71 [ 785.801631][ T10] usb usb6-port1: unable to enumerate USB device [ 786.258749][T21016] usb 7-1: USB disconnect, device number 36 [ 786.319451][T22166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.364912][T22166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.462518][T22166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.523421][T22306] fuse: Unknown parameter '0x0000000000000004' [ 786.558504][T22166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.832542][ T152] IPVS: stop unused estimator thread 0... [ 787.809128][ T51] Bluetooth: hci4: command tx timeout [ 789.439201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 789.447214][ C1] lec:lec_tx_timeout: lec0 [ 789.459229][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 790.283077][T22166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.363576][T22166] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.424919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.432084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.469783][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 790.585342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.592508][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.689496][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 790.702307][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 790.737254][T22166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.758695][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.906269][T22166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.926604][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 790.982261][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.183720][ T10] usb 7-1: Product: syz [ 791.187879][ T10] usb 7-1: Manufacturer: syz [ 791.212118][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 791.217356][ T10] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 791.237343][T22350] overlayfs: failed to resolve './file1': -2 [ 791.412371][T22357] fuse: Unknown parameter '0x0000000000000004' [ 791.424075][ T10] usb 7-1: USB disconnect, device number 37 [ 791.714752][T22166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.123354][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 793.233183][ T10] usb 6-1: device descriptor read/64, error -71 [ 793.299285][T17239] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 794.469179][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 794.477214][ C1] lec:lec_tx_timeout: lec0 [ 794.481790][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 794.849238][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 795.101549][T22402] overlayfs: failed to resolve './file0': -2 [ 795.113684][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5591'. [ 795.233349][T22166] veth0_vlan: entered promiscuous mode [ 795.247907][T22166] veth1_vlan: entered promiscuous mode [ 795.378853][T22166] veth0_macvtap: entered promiscuous mode [ 795.701254][T22166] veth1_macvtap: entered promiscuous mode [ 795.741694][T22166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.805220][T22166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.827592][T22411] fuse: Unknown parameter 'fd0x0000000000000004' [ 795.872247][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.937575][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.968854][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.079460][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.121829][ T51] Bluetooth: hci1: unexpected event for opcode 0x001b [ 796.220593][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.477641][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.515152][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.544617][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.889485][ T5861] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 797.057618][ T5861] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.879930][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.015209][ T5861] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.647893][ T5861] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.669711][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 799.350682][ T5861] usb 6-1: Product: syz [ 799.367748][ T5861] usb 6-1: Manufacturer: syz [ 799.456772][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 799.469232][ T5861] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 799.489233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 799.497262][ C1] lec:lec_tx_timeout: lec0 [ 799.502017][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 799.589569][ T5844] usb 6-1: USB disconnect, device number 58 [ 799.711262][T22469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5608'. [ 802.549333][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 802.559855][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 803.469567][T22512] fuse: Bad value for 'fd' [ 803.759256][ T5844] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 803.910719][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 803.925249][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 803.958034][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.992666][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.003009][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.018358][ T5844] usb 5-1: Product: syz [ 804.029141][ T5844] usb 5-1: Manufacturer: syz [ 804.048060][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 804.065372][ T5844] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 804.188698][T22531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5623'. [ 804.397361][ T5920] usb 5-1: USB disconnect, device number 127 [ 804.509182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 804.517262][ C1] lec:lec_tx_timeout: lec0 [ 804.522113][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 805.159260][ T5844] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 805.519829][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 805.528462][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 805.569274][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 805.627612][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 805.669317][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 805.688782][ T5844] usb 5-1: Product: syz [ 806.647444][ T5844] usb 5-1: Manufacturer: syz [ 806.655877][ T5844] usb 5-1: can't set config #1, error -71 [ 806.679520][ T5844] usb 5-1: USB disconnect, device number 2 [ 807.770198][T22594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22594 comm=syz.0.5632 [ 807.793727][T22595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 807.810840][T22594] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 807.816386][T22594] PKCS7: Only support pkcs7_signedData type [ 808.203140][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.309858][T22605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5635'. [ 808.538174][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5638'. [ 808.558140][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5638'. [ 809.101957][T22627] block nbd4: not configured, cannot reconfigure [ 809.139345][ T5861] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 809.161443][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 809.324522][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 809.386174][ T5861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.400421][ T5861] usb 7-1: config 0 has no interfaces? [ 809.449007][ T5861] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 809.461164][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.470048][ T5861] usb 7-1: Product: syz [ 809.474219][ T5861] usb 7-1: Manufacturer: syz [ 809.481041][ T5861] usb 7-1: SerialNumber: syz [ 809.504427][T22645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22645 comm=syz.7.5643 [ 809.516699][ T5861] usb 7-1: config 0 descriptor?? [ 809.529217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 809.537255][ C1] lec:lec_tx_timeout: lec0 [ 809.541943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 809.560191][T22645] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 809.569512][T22645] PKCS7: Only support pkcs7_signedData type [ 809.649825][T22648] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 809.825263][T22651] overlay: Unknown parameter '/' [ 809.907070][ T29] audit: type=1400 audit(1773703164.831:1329): avc: denied { mount } for pid=22649 comm="syz.4.5646" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 809.994425][ T29] audit: type=1400 audit(1773703164.841:1330): avc: denied { mounton } for pid=22649 comm="syz.4.5646" path="/14/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 810.068445][ T29] audit: type=1400 audit(1773703165.081:1331): avc: denied { unmount } for pid=22166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 810.151237][T22655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 811.447656][ T5920] usb 7-1: USB disconnect, device number 39 [ 811.501742][T22665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5649'. [ 811.700948][ T29] audit: type=1800 audit(1773703166.721:1332): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5650" name="file1" dev="tmpfs" ino=105 res=0 errno=0 [ 812.066616][T22678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22678 comm=syz.6.5651 [ 812.169759][T22675] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5652'. [ 812.189549][T22678] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 812.209740][T22675] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5652'. [ 812.218963][T22678] PKCS7: Only support pkcs7_signedData type [ 812.558886][T22690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5658'. [ 812.674119][T22693] tipc: Enabled bearer , priority 10 [ 812.999332][T17239] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 813.331865][T17239] usb 6-1: Using ep0 maxpacket: 16 [ 813.352549][T17239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.372257][T17239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.387312][T17239] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 813.404448][T17239] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 813.414260][T17239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.448185][T17239] usb 6-1: config 0 descriptor?? [ 813.608043][T22704] overlay: Unknown parameter '/' [ 813.878000][T22707] netlink: 'syz.0.5662': attribute type 39 has an invalid length. [ 813.888411][T22708] fuse: Bad value for 'fd' [ 813.922047][ T29] audit: type=1800 audit(1773703168.911:1333): pid=22708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5663" name="file1" dev="tmpfs" ino=128 res=0 errno=0 [ 813.984346][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 813.998007][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.007727][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.015215][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.023619][T22711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5664'. [ 814.036002][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.045089][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.059282][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.071517][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x4 [ 814.079246][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.087293][T17239] waterforce 0003:1044:7A4D.0029: unknown main item tag 0x0 [ 814.104843][T22715] syzkaller0: entered promiscuous mode [ 814.110486][T22715] syzkaller0: entered allmulticast mode [ 814.210373][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 814.214697][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 814.221405][T17239] waterforce 0003:1044:7A4D.0029: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 814.255036][T22716] fuse: Bad value for 'fd' [ 814.479652][T17239] waterforce 0003:1044:7A4D.0029: fw version request failed with -38 [ 814.549198][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 814.557213][ C1] lec:lec_tx_timeout: lec0 [ 814.561931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 815.649534][ T5882] usb 6-1: reset high-speed USB device number 59 using dummy_hcd [ 815.957193][T22738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5672'. [ 817.448277][T22764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22764 comm=syz.4.5680 [ 817.482982][T22769] fuse: Bad value for 'fd' [ 817.488274][T22764] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 817.494664][T22764] PKCS7: Only support pkcs7_signedData type [ 817.534018][ T29] audit: type=1800 audit(1773703172.551:1334): pid=22769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.5682" name="file1" dev="tmpfs" ino=1667 res=0 errno=0 [ 817.541801][T22770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22770 comm=syz.6.5681 [ 817.616203][T17239] usb 6-1: USB disconnect, device number 59 [ 817.675885][T22770] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 817.693618][T22770] PKCS7: Only support pkcs7_signedData type [ 819.417127][T22810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22810 comm=syz.7.5695 [ 819.431718][T22810] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 819.447439][T22810] PKCS7: Only support pkcs7_signedData type [ 819.559219][ T5861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 819.569209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 819.577254][ C1] lec:lec_tx_timeout: lec0 [ 819.581883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 819.741138][ T5861] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.749300][ T5844] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 819.761293][ T5861] usb 5-1: config 0 has no interface number 0 [ 819.789290][ T5861] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.811862][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.836363][ T5861] usb 5-1: config 0 descriptor?? [ 819.854992][ T5861] cp210x 5-1:0.1: cp210x converter detected [ 819.960562][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.974891][ T5844] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 819.991804][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.018165][ T5844] usb 7-1: config 0 descriptor?? [ 820.250304][ T5844] usbhid 7-1:0.0: can't add hid device: -71 [ 820.256398][ T5861] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 820.256406][ T5844] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 820.313570][ T5844] usb 7-1: USB disconnect, device number 40 [ 820.457394][ T5861] cp210x 5-1:0.1: failed to get vendor val 0x370c size 15: -121 [ 820.465347][ T5861] cp210x 5-1:0.1: GPIO initialisation failed: -121 [ 820.500947][ T5861] usb 5-1: cp210x converter now attached to ttyUSB0 [ 820.662152][ T5861] usb 5-1: USB disconnect, device number 3 [ 820.675699][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 820.705423][ T5861] cp210x 5-1:0.1: device disconnected [ 820.829365][ T5844] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 821.005655][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.135871][ T5844] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 821.204742][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.429868][ T5844] usb 7-1: config 0 descriptor?? [ 823.049246][ T5844] usbhid 7-1:0.0: can't add hid device: -71 [ 823.099319][ T5844] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 823.147800][ T5844] usb 7-1: USB disconnect, device number 41 [ 825.346160][T22882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5715'. [ 825.409170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 825.417168][ C1] lec:lec_tx_timeout: lec0 [ 825.422063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 825.864517][T22893] block nbd4: not configured, cannot reconfigure [ 825.909231][ T5861] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 826.069267][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.148106][ T5861] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 826.234101][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.405585][ T5861] usb 6-1: config 0 descriptor?? [ 826.747633][ T5861] usbhid 6-1:0.0: can't add hid device: -71 [ 826.811206][ T5861] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 826.846927][ T5861] usb 6-1: USB disconnect, device number 60 [ 827.580597][T22911] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.5725'. [ 827.750678][ T5861] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 827.919793][T22919] netlink: 536 bytes leftover after parsing attributes in process `syz.6.5727'. [ 827.992693][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.058903][ T5861] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 828.070158][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.210440][ T5861] usb 6-1: config 0 descriptor?? [ 828.368636][T22931] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 828.407817][T22933] overlayfs: missing 'lowerdir' [ 828.598045][T22939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22939 comm=syz.6.5734 [ 828.626031][T22939] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 828.638146][ T5861] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 828.704178][ T5861] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002A/input/input49 [ 828.765657][T22939] PKCS7: Only support pkcs7_signedData type [ 828.924655][ T5861] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 829.092854][ T5861] usb 6-1: USB disconnect, device number 61 [ 829.140619][T22942] fido_id[22942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 829.291300][T22946] netlink: 'syz.7.5736': attribute type 72 has an invalid length. [ 829.899384][T22963] netlink: 'syz.7.5742': attribute type 39 has an invalid length. [ 829.920955][T22965] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 830.185514][T22972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5744'. [ 830.189434][T22973] overlayfs: missing 'lowerdir' [ 830.429171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 830.437214][ C1] lec:lec_tx_timeout: lec0 [ 830.442085][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 830.705853][ T29] audit: type=1400 audit(1773703185.711:1335): avc: denied { setopt } for pid=22976 comm="syz.7.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 831.219868][T22989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22989 comm=syz.7.5750 [ 831.239942][T22989] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 831.300311][T22989] PKCS7: Only support pkcs7_signedData type [ 831.449274][ T5844] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 831.600971][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.614875][ T5844] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 832.071934][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.115875][ T5844] usb 6-1: config 0 descriptor?? [ 832.425366][ T5844] usbhid 6-1:0.0: can't add hid device: -71 [ 832.440009][ T5844] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 832.450477][ T5844] usb 6-1: USB disconnect, device number 62 [ 833.291685][ T5844] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 833.361731][T23007] overlayfs: missing 'lowerdir' [ 833.466658][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.490136][ T5844] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 833.548757][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.599948][ T5844] usb 6-1: config 0 descriptor?? [ 833.878680][T23018] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 834.456477][ T5844] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 834.471993][ T5844] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002B/input/input50 [ 834.715974][ T5844] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 834.798085][ T5844] usb 6-1: USB disconnect, device number 63 [ 834.914990][T23027] fido_id[23027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 835.313282][ T29] audit: type=1400 audit(1773703190.331:1336): avc: denied { listen } for pid=23043 comm="syz.5.5768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 835.359804][T23042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23042 comm=syz.6.5764 [ 835.449204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 835.457238][ C1] lec:lec_tx_timeout: lec0 [ 835.462449][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 835.698373][T23051] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 835.732832][T23051] PKCS7: Only support pkcs7_signedData type [ 835.919922][T23062] siw: device registration error -23 [ 836.903077][T23069] fuse: Bad value for 'fd' [ 837.860207][T23087] 9p: Bad value for 'rfdno' [ 839.144279][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23106 comm=syz.5.5786 [ 839.193107][T23106] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 839.204003][T23106] PKCS7: Only support pkcs7_signedData type [ 839.796510][ T5861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 840.310766][ T5861] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 840.319912][ T5861] usb 5-1: config 0 has no interface number 0 [ 840.326049][ T5861] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 840.335530][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.396985][ T5861] usb 5-1: config 0 descriptor?? [ 840.434462][ T5861] cp210x 5-1:0.1: cp210x converter detected [ 840.469195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 840.477266][ C1] lec:lec_tx_timeout: lec0 [ 840.481980][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 840.541707][T23127] tipc: Enabled bearer , priority 0 [ 840.550219][T23127] syzkaller0: entered promiscuous mode [ 840.555801][T23127] syzkaller0: entered allmulticast mode [ 840.580107][T23127] tipc: Resetting bearer [ 840.589634][T23126] tipc: Resetting bearer [ 840.616671][T23126] tipc: Disabling bearer [ 840.729251][T21016] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 841.062801][ T5861] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 841.384629][ T5861] cp210x 5-1:0.1: failed to get vendor val 0x370c size 15: -121 [ 841.392656][ T5861] cp210x 5-1:0.1: GPIO initialisation failed: -121 [ 841.403796][ T5861] usb 5-1: cp210x converter now attached to ttyUSB0 [ 841.417829][T21016] usb 6-1: Using ep0 maxpacket: 16 [ 842.060893][T21016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.088569][T21016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.091625][T17239] usb 5-1: USB disconnect, device number 4 [ 842.128867][T17239] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 842.135574][T21016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 842.151325][T21016] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 842.159394][T17239] cp210x 5-1:0.1: device disconnected [ 842.163940][T21016] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.185171][T21016] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 842.335567][T21016] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 842.343798][T21016] usb 6-1: Manufacturer: syz [ 842.359080][T21016] usb 6-1: config 0 descriptor?? [ 842.855429][ T5861] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 843.034186][ T5861] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 843.489490][T21016] rc_core: IR keymap rc-hauppauge not found [ 843.495401][T21016] Registered IR keymap rc-empty [ 843.500353][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 843.519256][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 843.913403][T21016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 843.949002][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.949342][T21016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 843.972927][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.983273][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 844.056020][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.085497][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.109367][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.124301][ T29] audit: type=1400 audit(1773703199.121:1337): avc: denied { create } for pid=23164 comm="syz.7.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 844.144678][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.169259][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.178273][ T5861] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 844.197578][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.206243][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.239773][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.270698][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.281362][ T5861] usb 7-1: config 0 descriptor?? [ 844.330763][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.411036][T21016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 844.780320][ T5861] hid_parser_main: 24 callbacks suppressed [ 844.780370][ T5861] holtek_kbd 0003:04D9:A055.002C: unknown main item tag 0x0 [ 844.988775][T21016] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 844.997892][ T5861] holtek_kbd 0003:04D9:A055.002C: unknown main item tag 0x0 [ 845.005288][T21016] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 845.058304][T21016] usb 6-1: USB disconnect, device number 64 [ 845.122332][ T5861] holtek_kbd 0003:04D9:A055.002C: collection stack underflow [ 845.157984][ T5861] holtek_kbd 0003:04D9:A055.002C: item 0 0 0 12 parsing failed [ 845.171594][ T5861] holtek_kbd 0003:04D9:A055.002C: probe with driver holtek_kbd failed with error -22 [ 845.305648][ T5861] usb 7-1: USB disconnect, device number 42 [ 845.380333][ T29] audit: type=1400 audit(1773703200.401:1338): avc: denied { sys_module } for pid=23184 comm="syz.7.5810" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 845.438004][ T29] audit: type=1400 audit(1773703200.451:1339): avc: denied { name_bind } for pid=23179 comm="syz.5.5808" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 845.489181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 845.497223][ C1] lec:lec_tx_timeout: lec0 [ 845.502515][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 846.330520][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 846.545990][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.686583][ T10] usb 7-1: config 0 has no interface number 0 [ 846.699289][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 846.708340][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.783387][ T10] usb 7-1: config 0 descriptor?? [ 846.792667][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5817'. [ 846.809050][ T10] cp210x 7-1:0.1: cp210x converter detected [ 846.820208][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5817'. [ 847.221658][ T10] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 847.504048][ T10] cp210x 7-1:0.1: failed to get vendor val 0x370c size 15: -121 [ 847.543639][ T10] cp210x 7-1:0.1: GPIO initialisation failed: -121 [ 847.970812][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 848.042488][ T10] usb 7-1: USB disconnect, device number 43 [ 848.108915][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 848.166137][ T10] cp210x 7-1:0.1: device disconnected [ 848.389228][ T5844] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 848.555287][T23226] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 848.892104][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 849.051520][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 849.062774][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.093550][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.106226][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 849.124795][ T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 849.134601][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.151175][ T10] usb 7-1: config 0 descriptor?? [ 849.523859][T23234] fuse: Bad value for 'fd' [ 849.809616][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.817112][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.824842][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.832553][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.841099][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.848523][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.855877][ T10] holtek_kbd 0003:04D9:A055.002D: unknown main item tag 0x0 [ 849.865276][ T10] holtek_kbd 0003:04D9:A055.002D: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 850.013509][ T10] usb 7-1: USB disconnect, device number 44 [ 850.519162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 850.527185][ C1] lec:lec_tx_timeout: lec0 [ 850.531768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 850.666106][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 850.683471][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 850.698223][ T5844] usb 5-1: can't read configurations, error -71 [ 850.941883][T23252] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5828'. [ 853.356886][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 853.918532][T23272] fuse: Bad value for 'fd' [ 854.017291][ T5819] Bluetooth: hci5: sending frame failed (-49) [ 854.024894][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 855.539181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 855.547222][ C1] lec:lec_tx_timeout: lec0 [ 855.551802][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 857.053230][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5855'. [ 857.812341][T23343] syzkaller0: entered promiscuous mode [ 857.818199][T23343] syzkaller0: entered allmulticast mode [ 858.275210][T17239] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 858.428280][T23361] syzkaller0: entered promiscuous mode [ 858.444086][T23361] syzkaller0: entered allmulticast mode [ 858.732894][T17239] usb 6-1: Using ep0 maxpacket: 16 [ 858.873114][T17239] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.887678][T17239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.858467][T17239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 859.868373][T17239] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 859.879208][T17239] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.896702][T17239] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 860.210120][T17239] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 860.218879][T17239] usb 6-1: Manufacturer: syz [ 860.263723][T17239] usb 6-1: config 0 descriptor?? [ 860.539409][T17239] rc_core: IR keymap rc-hauppauge not found [ 860.545352][T17239] Registered IR keymap rc-empty [ 860.554936][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.571461][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 860.579296][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.579481][ C1] lec:lec_tx_timeout: lec0 [ 860.591159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 860.607893][T17239] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 860.644759][T17239] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 860.690790][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.719429][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.759494][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.781335][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.859266][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.899290][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 860.932487][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 861.100169][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 861.130623][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 861.151161][T17239] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 861.599685][T17239] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 861.608115][T17239] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 861.644992][T17239] usb 6-1: USB disconnect, device number 65 [ 862.310276][T23408] 9p: Bad value for 'rfdno' [ 866.156087][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 866.359158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 866.367205][ C1] lec:lec_tx_timeout: lec0 [ 866.372067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 866.448109][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.540440][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 866.668534][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.895931][ T10] usb 6-1: config 0 descriptor?? [ 867.222797][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 867.245710][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 867.279713][ T10] usb 6-1: USB disconnect, device number 66 [ 867.297438][T23462] syzkaller0: entered promiscuous mode [ 867.362655][T23464] 9p: Bad value for 'rfdno' [ 867.948290][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 868.465605][T23473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23473 comm=syz.0.5892 [ 868.501128][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.513117][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.841535][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.010420][T23480] syzkaller0: entered promiscuous mode [ 869.015912][T23480] syzkaller0: entered allmulticast mode [ 869.402544][ T10] usb 6-1: config 0 descriptor?? [ 869.415963][ T10] usb 6-1: can't set config #0, error -71 [ 869.443825][ T10] usb 6-1: USB disconnect, device number 67 [ 869.642177][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.658244][T23489] syzkaller0: entered promiscuous mode [ 869.668129][T23489] syzkaller0: entered allmulticast mode [ 870.092824][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5900'. [ 871.273448][T23512] overlayfs: missing 'lowerdir' [ 871.399219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 871.407249][ C1] lec:lec_tx_timeout: lec0 [ 871.412062][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 871.608308][T23523] 9p: Bad value for 'rfdno' [ 872.489036][T23504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5900'. [ 872.669923][T23530] fuse: Bad value for 'fd' [ 872.812444][ T5866] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 873.149273][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 873.156716][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.168731][ T5866] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 873.177897][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.195863][ T5866] usb 7-1: config 0 descriptor?? [ 873.652252][ T5866] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 874.030698][ T5866] usb 7-1: USB disconnect, device number 45 [ 874.169421][T23550] siw: device registration error -23 [ 874.413760][T23552] overlayfs: missing 'lowerdir' [ 874.769999][ T29] audit: type=1400 audit(1773703229.791:1340): avc: denied { read } for pid=23563 comm="syz.4.5919" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 874.799403][ T5844] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 874.803227][ T29] audit: type=1400 audit(1773703229.791:1341): avc: denied { read } for pid=23563 comm="syz.4.5919" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 874.852397][ T29] audit: type=1400 audit(1773703229.791:1342): avc: denied { open } for pid=23563 comm="syz.4.5919" path="/74/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 874.884991][ T29] audit: type=1400 audit(1773703229.791:1343): avc: denied { read } for pid=23563 comm="syz.4.5919" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 874.907274][ T29] audit: type=1400 audit(1773703229.791:1344): avc: denied { read } for pid=23563 comm="syz.4.5919" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 874.935867][ T29] audit: type=1400 audit(1773703229.791:1345): avc: denied { remount } for pid=23563 comm="syz.4.5919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 874.960223][T23572] 9p: Bad value for 'rfdno' [ 875.120054][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 875.139035][ T5844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 875.203126][T23575] fuse: Bad value for 'fd' [ 875.516681][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.542922][ T5844] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 875.564548][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 875.586296][ T5844] usb 6-1: Product: syz [ 875.598713][ T5844] usb 6-1: Manufacturer: syz [ 875.608028][ T5844] usb 6-1: SerialNumber: syz [ 875.629663][ T5844] usb 6-1: config 0 descriptor?? [ 875.671240][T23578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5923'. [ 876.419161][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 876.427163][ C1] lec:lec_tx_timeout: lec0 [ 876.439253][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 876.774392][T23557] syz.5.5915 (23557): drop_caches: 2 [ 877.026630][ T5844] usb 6-1: USB disconnect, device number 68 [ 877.091520][T23590] siw: device registration error -23 [ 877.645666][T23592] netlink: 'syz.0.5928': attribute type 39 has an invalid length. [ 877.843381][T23602] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5934'. [ 878.032660][ T5844] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 878.369223][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 878.375793][ T5844] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 878.384286][T23609] fuse: Bad value for 'fd' [ 878.386760][ T5844] usb 5-1: config 0 has no interface number 0 [ 878.412570][ T5844] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.443495][ T5844] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 878.474987][ T5844] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 878.499786][ T5844] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 878.512054][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.555435][T23619] siw: device registration error -23 [ 878.729039][ T5844] usb 5-1: config 0 descriptor?? [ 878.832612][ T5844] ldusb 5-1:0.55: Interrupt in endpoint not found [ 879.145858][T17239] usb 5-1: USB disconnect, device number 7 [ 879.218768][T23634] netlink: 'syz.6.5944': attribute type 39 has an invalid length. [ 879.401328][T23637] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5945'. [ 879.429782][ T5866] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 879.599280][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 879.606141][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 879.614919][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.627019][ T5866] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 879.637045][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 879.649174][ T5866] usb 6-1: Product: syz [ 879.653379][ T5866] usb 6-1: Manufacturer: syz [ 879.657986][ T5866] usb 6-1: SerialNumber: syz [ 879.667717][ T5866] usb 6-1: config 0 descriptor?? [ 879.689305][T21016] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 879.765663][T23641] overlayfs: overlapping lowerdir path [ 879.783186][T23641] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 879.793606][T23641] overlayfs: overlapping lowerdir path [ 879.819487][ T29] audit: type=1400 audit(1773703234.821:1346): avc: denied { remount } for pid=23640 comm="syz.4.5947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 879.840047][T21016] usb 7-1: Using ep0 maxpacket: 8 [ 879.841331][T21016] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 879.939973][T21016] usb 7-1: config 0 has no interface number 0 [ 880.462445][T23646] syz.5.5929 (23646): drop_caches: 2 [ 880.899409][ T5866] usb 6-1: USB disconnect, device number 69 [ 880.937784][T21016] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 880.961017][T21016] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 880.973791][T21016] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 880.985039][T21016] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 880.995236][T21016] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 881.009960][T21016] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 881.041736][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.069523][T21016] usb 7-1: config 0 descriptor?? [ 881.110912][T21016] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 881.241548][T23656] siw: device registration error -23 [ 881.449159][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 881.457172][ C1] lec:lec_tx_timeout: lec0 [ 881.469227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 881.679582][T23639] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 881.779789][T21016] usb 7-1: USB disconnect, device number 46 [ 881.793198][T21016] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 881.976314][T23667] netlink: 'syz.7.5956': attribute type 39 has an invalid length. [ 883.740198][T23684] lo: entered allmulticast mode [ 884.007490][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 884.159283][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 884.165869][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 884.177014][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 884.186114][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.195315][ T10] usb 6-1: config 0 descriptor?? [ 884.295515][T17239] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 884.403897][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 884.459240][T17239] usb 5-1: Using ep0 maxpacket: 8 [ 884.467268][T17239] usb 5-1: unable to get BOS descriptor or descriptor too short [ 884.479423][T17239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.493647][T17239] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 884.503371][T17239] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 884.511847][T17239] usb 5-1: Product: syz [ 884.516126][T17239] usb 5-1: Manufacturer: syz [ 884.521356][T17239] usb 5-1: SerialNumber: syz [ 884.528183][T17239] usb 5-1: config 0 descriptor?? [ 885.291953][T23708] syz.4.5964 (23708): drop_caches: 2 [ 885.733799][ T5920] usb 6-1: USB disconnect, device number 70 [ 885.752848][T17239] usb 5-1: USB disconnect, device number 8 [ 886.479315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 886.487335][ C1] lec:lec_tx_timeout: lec0 [ 886.494339][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 886.652118][T23725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23725 comm=syz.6.5973 [ 886.684555][T23722] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 886.720723][T23684] lo: left allmulticast mode [ 886.727270][T23722] PKCS7: Only support pkcs7_signedData type [ 886.790865][T23727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 886.822366][ T29] audit: type=1400 audit(1773703241.831:1347): avc: denied { getattr } for pid=23726 comm="syz.7.5977" name="saved_tgids" dev="tracefs" ino=3352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 887.141829][T23733] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5979'. [ 887.169236][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5979'. [ 889.109208][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 889.354574][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 889.384970][ T5866] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 889.404890][ T5866] usb 5-1: config 0 has no interface number 0 [ 889.415157][ T5866] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 889.463526][ T5866] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 889.509185][ T5866] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 889.557150][ T5866] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 889.597937][ T5866] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 889.616736][T23777] fuse: Unknown parameter 'group_i00000000000000000000' [ 889.638673][ T29] audit: type=1800 audit(1773703244.651:1348): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.5993" name="file1" dev="tmpfs" ino=1908 res=0 errno=0 [ 889.670381][ T5866] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 889.689198][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.711066][T23780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23780 comm=syz.7.5991 [ 889.721120][ T5866] usb 5-1: config 0 descriptor?? [ 889.732856][ T5866] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 889.751924][T23780] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 889.774903][T23780] PKCS7: Only support pkcs7_signedData type [ 889.990933][T23760] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 890.011543][ T5866] usb 5-1: USB disconnect, device number 9 [ 890.023616][ T5866] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 891.519164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 891.527169][ C1] lec:lec_tx_timeout: lec0 [ 891.539207][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 891.656634][ T5866] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 892.105678][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.122541][ T5866] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 892.153940][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.178679][ T5866] usb 6-1: config 0 descriptor?? [ 892.271207][T23824] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 892.370341][T23827] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 892.613713][ T5866] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 892.654423][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002E/input/input53 [ 892.782731][ T5866] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 892.847779][ C0] Mem-Info: [ 892.851581][ C0] active_anon:49976 inactive_anon:0 isolated_anon:0 [ 892.851581][ C0] active_file:20693 inactive_file:41509 isolated_file:0 [ 892.851581][ C0] unevictable:768 dirty:298 writeback:0 [ 892.851581][ C0] slab_reclaimable:11503 slab_unreclaimable:119903 [ 892.851581][ C0] mapped:34625 shmem:39086 pagetables:1900 [ 892.851581][ C0] sec_pagetables:0 bounce:0 [ 892.851581][ C0] kernel_misc_reclaimable:0 [ 892.851581][ C0] free:1223593 free_pcp:17445 free_cma:0 [ 892.897103][ C0] Node 0 active_anon:199904kB inactive_anon:0kB active_file:82772kB inactive_file:165828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138500kB dirty:1192kB writeback:0kB shmem:154808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14532kB pagetables:7436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 892.929138][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 892.958924][ C0] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 892.988715][ C0] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 892.994446][ C0] Node 0 DMA32 free:941420kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:199904kB inactive_anon:0kB active_file:82772kB inactive_file:165828kB unevictable:1536kB writepending:1192kB zspages:0kB present:3129332kB managed:2537156kB mlocked:0kB bounce:0kB free_pcp:69268kB local_pcp:48748kB free_cma:0kB [ 893.027818][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 893.032512][ C0] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.062035][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 893.066726][ C0] Node 1 Normal free:3937624kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 893.098240][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 893.102930][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 893.116954][ C0] Node 0 DMA32: 6215*4kB (UME) 4458*8kB (UME) 2446*16kB (UME) 282*32kB (UME) 583*64kB (UME) 303*128kB (UME) 146*256kB (UME) 115*512kB (UME) 69*1024kB (UM) 12*2048kB (UM) 138*4096kB (UM) = 941516kB [ 893.136262][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 893.147694][ C0] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 14*16kB (UM) 9*32kB (UM) 3*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 959*4096kB (M) = 3937624kB [ 893.164572][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.174096][ C0] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 893.183368][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 893.192886][ C0] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 893.202146][ C0] 101284 total pagecache pages [ 893.206896][ C0] 0 pages in swap cache [ 893.211024][ C0] Free swap = 124996kB [ 893.215152][ C0] Total swap = 124996kB [ 893.219283][ C0] 2097051 pages RAM [ 893.223071][ C0] 0 pages HighMem/MovableOnly [ 893.227719][ C0] 430885 pages reserved [ 893.231848][ C0] 0 pages cma reserved [ 893.339481][T23831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.348176][T23831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.566700][ T5854] usb 6-1: USB disconnect, device number 71 [ 894.107392][T23843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 895.092853][T23867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 896.400284][T23885] syzkaller0: entered promiscuous mode [ 896.408259][T23885] syzkaller0: entered allmulticast mode [ 896.559170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 896.567191][ C1] lec:lec_tx_timeout: lec0 [ 896.571770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 897.256516][T23886] 9pnet_virtio: no channels available for device syz [ 897.294609][T23899] netlink: 'syz.5.6031': attribute type 39 has an invalid length. [ 898.541242][T21016] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 898.712289][T23924] syzkaller0: entered promiscuous mode [ 898.717778][T23924] syzkaller0: entered allmulticast mode [ 898.763833][T21016] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 898.777294][T21016] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 898.799228][T21016] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 898.808345][T21016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 898.829304][T21016] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 898.954032][T21016] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.964047][T21016] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.974327][T21016] usb 7-1: Product: syz [ 898.985704][T21016] usb 7-1: Manufacturer: syz [ 899.039580][T21016] cdc_wdm 7-1:1.0: skipping garbage [ 899.044815][T21016] cdc_wdm 7-1:1.0: skipping garbage [ 899.165220][T23938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6044'. [ 899.186402][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6044'. [ 899.290423][T23939] sctp: [Deprecated]: syz.0.6044 (pid 23939) Use of int in max_burst socket option deprecated. [ 899.290423][T23939] Use struct sctp_assoc_value instead [ 899.304259][T21016] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 899.430163][T21016] cdc_wdm 7-1:1.0: Unknown control protocol [ 899.443675][T21016] usb 7-1: USB disconnect, device number 47 [ 900.369227][ T5920] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 900.540580][ T5920] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 900.556424][ T5920] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 900.570710][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 900.580022][ T5920] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 900.591014][ T5920] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 900.603236][ T5920] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.612401][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.620519][ T5920] usb 7-1: Product: syz [ 900.624726][ T5920] usb 7-1: Manufacturer: syz [ 900.649506][ T5920] cdc_wdm 7-1:1.0: skipping garbage [ 900.654728][ T5920] cdc_wdm 7-1:1.0: skipping garbage [ 900.667315][T23955] 9pnet_virtio: no channels available for device syz [ 900.678542][ T5920] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 900.685615][ T5920] cdc_wdm 7-1:1.0: Unknown control protocol [ 900.699254][T17239] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 900.850594][T17239] usb 6-1: config 0 has no interfaces? [ 900.857417][T17239] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.866708][T17239] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.874941][T17239] usb 6-1: Product: syz [ 900.879102][T17239] usb 6-1: Manufacturer: syz [ 900.885022][T17239] usb 6-1: config 0 descriptor?? [ 901.099211][T17239] usb 6-1: USB disconnect, device number 72 [ 901.579265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 901.587306][ C1] lec:lec_tx_timeout: lec0 [ 901.591821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 901.631347][ T29] audit: type=1400 audit(1773703256.651:1349): avc: denied { map } for pid=23960 comm="syz.5.6052" path="socket:[115452]" dev="sockfs" ino=115452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 901.824976][T23966] fuse: Bad value for 'user_id' [ 901.830083][T23966] fuse: Bad value for 'user_id' [ 901.883681][ T5920] usb 7-1: USB disconnect, device number 48 [ 902.194048][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6058'. [ 902.439235][T23278] Bluetooth: hci4: command 0x0406 tx timeout [ 902.441748][ T5920] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 902.611341][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.629365][ T5920] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 902.659252][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.708534][ T5920] usb 7-1: config 0 descriptor?? [ 902.715829][T23986] 9pnet_virtio: no channels available for device syz [ 902.946697][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 902.954567][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 902.966751][ T5920] usb 7-1: USB disconnect, device number 49 [ 903.689345][ T5920] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 903.933909][ T5920] usb 6-1: config 0 has no interfaces? [ 903.993183][ T5920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.108088][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.136653][ T5920] usb 6-1: Product: syz [ 904.156894][ T5920] usb 6-1: Manufacturer: syz [ 904.210935][ T5920] usb 6-1: config 0 descriptor?? [ 904.342843][ T5866] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 904.455928][ T5920] usb 6-1: USB disconnect, device number 73 [ 904.500496][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.511912][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.525920][ T5866] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.535030][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.695233][ T5866] usb 7-1: config 0 descriptor?? [ 905.878534][ T5866] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 906.161386][ C0] usb 7-1: input irq status -75 received [ 906.432702][T24030] 9pnet_virtio: no channels available for device syz [ 907.017371][T24036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24036 comm=syz.0.6078 [ 907.031546][T24036] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 907.037044][T24036] PKCS7: Only support pkcs7_signedData type [ 907.199991][ T5866] usb 7-1: USB disconnect, device number 50 [ 907.399142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 907.407195][ C1] lec:lec_tx_timeout: lec0 [ 907.412135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 907.959282][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 909.449445][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 909.488236][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6086'. [ 909.565413][T24061] sctp: [Deprecated]: syz.7.6086 (pid 24061) Use of int in max_burst socket option deprecated. [ 909.565413][T24061] Use struct sctp_assoc_value instead [ 909.800697][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.846643][ T5920] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 909.870421][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.904753][ T5920] usb 5-1: config 0 descriptor?? [ 909.933178][T24070] 9p: Bad value for 'rfdno' [ 910.126767][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 910.143886][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 910.189386][ T5920] usb 5-1: USB disconnect, device number 10 [ 910.288741][T24073] lo: entered allmulticast mode [ 910.679740][ T5920] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 910.854270][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.880515][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 910.897221][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.910102][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.922734][ T5920] usb 5-1: config 0 descriptor?? [ 911.004353][T24087] fuse: Bad value for 'fd' [ 911.189278][ T5866] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 911.508150][ T5920] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 911.531289][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.562627][ T5866] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 911.593072][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.616519][ T5866] usb 6-1: config 0 descriptor?? [ 911.674034][ T5861] usb 5-1: USB disconnect, device number 11 [ 911.920840][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6098'. [ 911.977889][ T5866] usbhid 6-1:0.0: can't add hid device: -71 [ 911.985732][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 911.997073][T24101] sctp: [Deprecated]: syz.6.6098 (pid 24101) Use of int in max_burst socket option deprecated. [ 911.997073][T24101] Use struct sctp_assoc_value instead [ 912.101427][ T5866] usb 6-1: USB disconnect, device number 74 [ 912.419265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 912.427331][ C1] lec:lec_tx_timeout: lec0 [ 912.431956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 912.849209][ T5866] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 913.002002][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.013922][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 913.028578][ T5866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 913.038680][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.039093][T24110] 9p: Bad value for 'rfdno' [ 913.054405][ T5866] usb 6-1: config 0 descriptor?? [ 913.585684][ T5866] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 913.625213][T24072] lo: left allmulticast mode [ 913.851460][ C1] usb 6-1: input irq status -75 received [ 915.074778][ T5861] usb 6-1: USB disconnect, device number 75 [ 915.256657][T24144] syz_tun: entered allmulticast mode [ 915.509286][ T5861] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 915.726373][ T5861] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 915.734982][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.580702][ T5861] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 916.590008][ T5861] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 916.598006][ T5861] usb 5-1: Manufacturer: syz [ 916.631163][ T5861] usb 5-1: config 0 descriptor?? [ 916.699187][ T5861] rc_core: IR keymap rc-hauppauge not found [ 916.714329][ T5861] Registered IR keymap rc-empty [ 916.730057][ T5861] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 916.782600][ T5861] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 916.879709][T24144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.900193][T24144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.913384][ T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 916.936603][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6112'. [ 917.039468][T24144] syz_tun (unregistering): left allmulticast mode [ 917.057672][T24164] syzkaller0: entered promiscuous mode [ 917.085956][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 917.096893][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 917.106430][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.125534][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 917.148502][T24166] 9p: Bad value for 'rfdno' [ 917.185218][ T5861] usb 5-1: USB disconnect, device number 12 [ 917.439146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 917.447176][ C1] lec:lec_tx_timeout: lec0 [ 917.451687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 918.204674][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 919.131332][ T10] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 919.202622][T24190] tipc: Started in network mode [ 919.211955][T24190] tipc: Node identity cab4b5da5379, cluster identity 4711 [ 919.229411][T24190] tipc: Enabled bearer , priority 0 [ 919.238072][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 919.256734][T24190] syzkaller0: entered promiscuous mode [ 919.259242][ T10] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 919.288803][T24190] syzkaller0: entered allmulticast mode [ 919.317171][T24190] tipc: Resetting bearer [ 919.339737][ T10] usb 6-1: USB disconnect, device number 76 [ 919.492993][T24189] tipc: Resetting bearer [ 919.679702][ T29] audit: type=1400 audit(1773703274.581:1350): avc: denied { connect } for pid=24193 comm="syz.0.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 919.701890][ T29] audit: type=1400 audit(1773703274.581:1351): avc: denied { bind } for pid=24193 comm="syz.0.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 919.986843][T24189] tipc: Disabling bearer [ 920.410571][T24206] fuse: Bad value for 'fd' [ 920.957719][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6136'. [ 921.083687][T24217] 9p: Bad value for 'rfdno' [ 922.040567][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6137'. [ 922.459153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 922.467165][ C1] lec:lec_tx_timeout: lec0 [ 922.479198][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 925.804610][T24261] tipc: Enabled bearer , priority 0 [ 925.859502][T24261] syzkaller0: entered promiscuous mode [ 925.865054][T24261] syzkaller0: entered allmulticast mode [ 926.066560][T24261] tipc: Resetting bearer [ 926.209240][ T5866] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 926.234377][T24260] tipc: Resetting bearer [ 926.373885][T24260] tipc: Disabling bearer [ 926.382431][T24273] netlink: 9664 bytes leftover after parsing attributes in process `syz.0.6154'. [ 926.393948][T24273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6154'. [ 926.420221][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.439308][ T5866] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.489238][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.526648][ T5866] usb 6-1: config 0 descriptor?? [ 926.757885][ T5866] usbhid 6-1:0.0: can't add hid device: -71 [ 926.767301][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 926.797163][ T5866] usb 6-1: USB disconnect, device number 77 [ 927.054632][T24288] 9p: Bad value for 'rfdno' [ 927.308199][ T5866] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 927.489138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 927.497188][ C1] lec:lec_tx_timeout: lec0 [ 927.502840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 927.701050][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.723768][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.799236][ T5866] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.909229][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.951084][ T5866] usb 6-1: config 0 descriptor?? [ 928.470582][ T5866] usbhid 6-1:0.0: can't add hid device: -71 [ 928.489717][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 928.534871][ T5866] usb 6-1: USB disconnect, device number 78 [ 930.001597][T24311] siw: device registration error -23 [ 930.351029][T23278] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 930.358092][T24315] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6166'. [ 930.682198][ T5866] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 930.689274][T21016] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 930.869139][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 930.876768][T21016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.877838][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.887787][T21016] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 930.931465][ T5866] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 930.946558][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.958572][T21016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.976410][ T5866] usb 5-1: config 0 descriptor?? [ 930.983460][T21016] usb 6-1: config 0 descriptor?? [ 931.082872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.200770][ T5866] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 931.416023][T21016] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 931.475207][T21016] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0032/input/input55 [ 931.708283][T21016] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 931.723955][ T10] usb 5-1: USB disconnect, device number 13 [ 932.408928][T24324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.488579][T24324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.509221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 932.517237][ C1] lec:lec_tx_timeout: lec0 [ 932.522739][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 932.745801][ T10] usb 6-1: USB disconnect, device number 79 [ 932.749418][T23278] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 932.822573][T24339] fido_id[24339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 933.069267][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 933.076920][T21016] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 933.233232][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.244504][T21016] usb 7-1: Using ep0 maxpacket: 8 [ 933.259180][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.290529][ T5920] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 933.304924][T21016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 933.316007][ T5920] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 933.326165][T21016] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 933.339389][ T5920] usb 5-1: Manufacturer: syz [ 933.349173][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.424941][ T5920] usb 5-1: config 0 descriptor?? [ 933.445915][T21016] usb 7-1: config 0 descriptor?? [ 934.000754][T21016] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 934.773395][ T10] usb 7-1: USB disconnect, device number 51 [ 934.902874][T24363] siw: device registration error -23 [ 935.071053][ T5920] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 935.085995][ T5920] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 935.213111][ T5920] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 935.227116][ T5920] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 935.240643][ T5920] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 935.285163][ T5920] usb 5-1: USB disconnect, device number 14 [ 935.300903][T24366] netlink: 'syz.0.6181': attribute type 8 has an invalid length. [ 935.308671][T24366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6181'. [ 936.446874][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6186'. [ 937.127743][T24400] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.6190'. [ 937.389371][T21016] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 937.539158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 937.547165][ C1] lec:lec_tx_timeout: lec0 [ 937.551824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 937.642043][T24408] program syz.4.6193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 937.716026][T21016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.755510][T21016] usb 6-1: config 0 has no interfaces? [ 937.775645][T21016] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 937.789370][T21016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.802749][T21016] usb 6-1: config 0 descriptor?? [ 937.869861][T24412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6195'. [ 938.126637][T24413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.304674][T24413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.403207][T24417] program syz.0.6196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.261507][T24422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.796131][T24428] program syz.4.6198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.320201][ T10] usb 6-1: USB disconnect, device number 80 [ 941.097004][T24443] program syz.7.6202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.490826][T24442] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 942.559156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 942.567178][ C1] lec:lec_tx_timeout: lec0 [ 942.579206][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 943.051305][T24454] fuse: Bad value for 'rootmode' [ 943.285494][ T29] audit: type=1800 audit(1773703298.301:1352): pid=24454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.6208" name="file1" dev="tmpfs" ino=684 res=0 errno=0 [ 943.505176][T24468] program syz.0.6213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 943.615256][T24470] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 943.768629][T24475] netlink: 6068 bytes leftover after parsing attributes in process `syz.6.6215'. [ 944.059347][T21016] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 944.288493][T21016] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.432410][T21016] usb 7-1: config 0 has no interfaces? [ 944.846548][T21016] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 944.906937][T21016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.022945][T21016] usb 7-1: config 0 descriptor?? [ 945.144023][T24500] siw: device registration error -23 [ 945.474351][T21016] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 945.515429][T24505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.592285][T24505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.679309][T21016] usb 6-1: Using ep0 maxpacket: 8 [ 945.695825][T21016] usb 6-1: unable to get BOS descriptor or descriptor too short [ 945.704973][T21016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.733373][T21016] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 945.733396][T21016] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 945.733408][T21016] usb 6-1: Product: syz [ 945.733417][T21016] usb 6-1: Manufacturer: syz [ 945.733426][T21016] usb 6-1: SerialNumber: syz [ 945.734765][T21016] usb 6-1: config 0 descriptor?? [ 946.922559][T24499] syz.5.6221 (24499): drop_caches: 2 [ 947.264046][T21016] usb 6-1: USB disconnect, device number 81 [ 947.490057][T24524] loop6: detected capacity change from 0 to 7 [ 947.494123][ C0] blk_print_req_error: 54 callbacks suppressed [ 947.494141][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.494167][ C0] buffer_io_error: 54 callbacks suppressed [ 947.494175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.494562][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.494589][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.494769][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.494794][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.494947][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.494973][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.495135][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.495159][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.495919][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.495946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.496092][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.496116][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.496170][T24524] ldm_validate_partition_table(): Disk read failed. [ 947.496286][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.496310][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.496466][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.496490][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.496643][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 947.496666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.496902][T24524] Dev loop6: unable to read RDB block 0 [ 947.497862][T24524] loop6: unable to read partition table [ 947.498628][T24524] loop6: partition table beyond EOD, truncated [ 947.498691][T24524] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 948.369283][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 948.369315][ C1] lec:lec_tx_timeout: lec0 [ 948.369736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 949.958533][T24537] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 950.742031][T21016] usb 7-1: USB disconnect, device number 52 [ 951.017610][T24569] loop6: detected capacity change from 0 to 7 [ 951.126962][T24569] ldm_validate_partition_table(): Disk read failed. [ 951.171839][T24569] Dev loop6: unable to read RDB block 0 [ 951.184965][T24569] loop6: unable to read partition table [ 951.192701][T24569] loop6: partition table beyond EOD, truncated [ 951.198982][T24569] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 952.247931][T24582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24582 comm=syz.0.6246 [ 952.261323][T24582] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 952.266780][T24582] PKCS7: Only support pkcs7_signedData type [ 952.929912][T24589] netlink: 'syz.4.6249': attribute type 39 has an invalid length. [ 953.020316][T24595] netlink: 6068 bytes leftover after parsing attributes in process `syz.6.6252'. [ 953.179489][T24598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24598 comm=syz.5.6251 [ 953.276060][T24601] program syz.4.6253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.409153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 953.417182][ C1] lec:lec_tx_timeout: lec0 [ 953.422763][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 953.595942][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 953.623054][T24602] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 953.630251][T24602] PKCS7: Only support pkcs7_signedData type [ 953.791379][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.805924][ T10] usb 7-1: config 0 has no interfaces? [ 953.819296][ T10] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 953.851308][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.883524][ T10] usb 7-1: config 0 descriptor?? [ 954.034020][T24607] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 954.962291][T24615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.013351][T24615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.891482][T24629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6261'. [ 956.253867][ T5861] usb 7-1: USB disconnect, device number 53 [ 957.607416][T23278] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 958.227399][ T5844] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 958.423543][ T5844] usb 7-1: Using ep0 maxpacket: 8 [ 958.439130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 958.447162][ C1] lec:lec_tx_timeout: lec0 [ 958.497722][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.596813][ T5844] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 958.699660][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.867874][ T5844] usb 7-1: config 0 descriptor?? [ 959.173395][ T5844] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 959.297074][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6270'. [ 959.657332][T24679] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 959.663036][T24679] PKCS7: Only support pkcs7_signedData type [ 961.008475][T21016] usb 7-1: USB disconnect, device number 54 [ 963.743541][T24716] loop6: detected capacity change from 0 to 7 [ 963.754263][ C0] blk_print_req_error: 22 callbacks suppressed [ 963.754280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.770183][ C0] buffer_io_error: 22 callbacks suppressed [ 963.770201][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.785840][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.795466][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.806911][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.816530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.850345][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.859959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.905586][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.915210][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.956753][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.966400][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.979783][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.989408][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 963.997305][T24716] ldm_validate_partition_table(): Disk read failed. [ 964.008650][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 964.018251][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.042738][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 964.052363][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.066304][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 964.075937][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 964.085247][T24716] Dev loop6: unable to read RDB block 0 [ 964.094709][T24716] loop6: unable to read partition table [ 964.101212][T24716] loop6: partition table beyond EOD, truncated [ 964.107512][T24716] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 964.681302][T23278] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 964.844768][T24725] 9pnet_virtio: no channels available for device syz [ 965.127697][T24729] syzkaller0: entered promiscuous mode [ 965.137228][T24729] syzkaller0: entered allmulticast mode [ 965.387976][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 965.395652][T24733] siw: device registration error -23 [ 965.560813][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 965.584495][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.615148][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 965.655555][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.678016][ T10] usb 6-1: config 0 descriptor?? [ 965.861564][ T5866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 965.897439][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 966.023996][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.068283][ T5866] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 966.087792][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.102955][ T5866] usb 5-1: config 0 descriptor?? [ 966.340037][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 966.356742][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 966.359887][ T5844] usb 6-1: USB disconnect, device number 82 [ 966.394637][ T5866] usb 5-1: USB disconnect, device number 15 [ 966.949242][ T5866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 967.154209][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.165257][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 967.194970][ T5866] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 967.213820][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.236141][ T5866] usb 5-1: config 0 descriptor?? [ 968.243135][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 968.249384][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 968.276200][ T5866] usb 5-1: USB disconnect, device number 16 [ 968.288027][T24783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6309'. [ 968.350487][T24783] bond0: entered promiscuous mode [ 968.355641][T24783] bond_slave_0: entered promiscuous mode [ 968.383003][T24783] bond_slave_1: entered promiscuous mode [ 968.402510][T24783] gretap0: entered promiscuous mode [ 968.422120][T24783] debugfs: 'hsr1' already exists in 'hsr' [ 968.442131][T24783] Cannot create hsr debugfs directory [ 968.460862][T24783] hsr1: entered promiscuous mode [ 968.589888][T24778] 9pnet_virtio: no channels available for device syz [ 969.623407][T24810] siw: device registration error -23 [ 970.116726][T24819] [ 970.119076][T24819] ====================================================== [ 970.126089][T24819] WARNING: possible circular locking dependency detected [ 970.133105][T24819] syzkaller #0 Tainted: G L [ 970.139166][T24819] ------------------------------------------------------ [ 970.146188][T24819] syz.0.6322/24819 is trying to acquire lock: [ 970.152249][T24819] ffffffff9088c678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x820 [ 970.161716][T24819] [ 970.161716][T24819] but task is already holding lock: [ 970.169071][T24819] ffffffff9088c618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 970.178658][T24819] [ 970.178658][T24819] which lock already depends on the new lock. [ 970.178658][T24819] [ 970.189050][T24819] [ 970.189050][T24819] the existing dependency chain (in reverse order) is: [ 970.198054][T24819] [ 970.198054][T24819] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 970.205963][T24819] _raw_spin_lock_bh+0x33/0x40 [ 970.211245][T24819] nr_rt_ioctl+0x6e2/0x29e0 [ 970.216259][T24819] nr_ioctl+0x16e/0x2d0 [ 970.220930][T24819] sock_do_ioctl+0x118/0x280 [ 970.226040][T24819] sock_ioctl+0x599/0x6b0 [ 970.230883][T24819] __x64_sys_ioctl+0x18e/0x210 [ 970.236165][T24819] do_syscall_64+0x106/0xf80 [ 970.241272][T24819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.247677][T24819] [ 970.247677][T24819] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 970.255651][T24819] _raw_spin_lock_bh+0x33/0x40 [ 970.260922][T24819] nr_rt_ioctl+0x29b/0x29e0 [ 970.265929][T24819] nr_ioctl+0x16e/0x2d0 [ 970.270586][T24819] sock_do_ioctl+0x118/0x280 [ 970.275682][T24819] sock_ioctl+0x599/0x6b0 [ 970.280509][T24819] __x64_sys_ioctl+0x18e/0x210 [ 970.285787][T24819] do_syscall_64+0x106/0xf80 [ 970.290883][T24819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.297277][T24819] [ 970.297277][T24819] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 970.305074][T24819] __lock_acquire+0x14b8/0x2630 [ 970.310427][T24819] lock_acquire+0x1cf/0x380 [ 970.315443][T24819] _raw_spin_lock_bh+0x33/0x40 [ 970.320711][T24819] nr_rt_device_down+0xd3/0x820 [ 970.326063][T24819] nr_device_event+0x126/0x170 [ 970.331354][T24819] notifier_call_chain+0x99/0x420 [ 970.336879][T24819] call_netdevice_notifiers_info+0xbe/0x110 [ 970.343296][T24819] __dev_notify_flags+0x1f7/0x2e0 [ 970.348834][T24819] netif_change_flags+0x108/0x160 [ 970.354359][T24819] dev_change_flags+0xba/0x250 [ 970.359628][T24819] dev_ifsioc+0x1682/0x1f20 [ 970.364647][T24819] dev_ioctl+0x342/0x10e0 [ 970.369476][T24819] sock_do_ioctl+0x1a0/0x280 [ 970.374573][T24819] sock_ioctl+0x599/0x6b0 [ 970.379399][T24819] __x64_sys_ioctl+0x18e/0x210 [ 970.384677][T24819] do_syscall_64+0x106/0xf80 [ 970.389771][T24819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.396177][T24819] [ 970.396177][T24819] other info that might help us debug this: [ 970.396177][T24819] [ 970.406386][T24819] Chain exists of: [ 970.406386][T24819] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 970.406386][T24819] [ 970.420178][T24819] Possible unsafe locking scenario: [ 970.420178][T24819] [ 970.427616][T24819] CPU0 CPU1 [ 970.432961][T24819] ---- ---- [ 970.438302][T24819] lock(nr_neigh_list_lock); [ 970.442963][T24819] lock(&nr_node->node_lock); [ 970.450221][T24819] lock(nr_neigh_list_lock); [ 970.457395][T24819] lock(nr_node_list_lock); [ 970.461962][T24819] [ 970.461962][T24819] *** DEADLOCK *** [ 970.461962][T24819] [ 970.470080][T24819] 2 locks held by syz.0.6322/24819: [ 970.475252][T24819] #0: ffffffff906114a8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 970.484194][T24819] #1: ffffffff9088c618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 970.494171][T24819] [ 970.494171][T24819] stack backtrace: [ 970.500040][T24819] CPU: 0 UID: 0 PID: 24819 Comm: syz.0.6322 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.500061][T24819] Tainted: [L]=SOFTLOCKUP [ 970.500067][T24819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 970.500076][T24819] Call Trace: [ 970.500081][T24819] [ 970.500087][T24819] dump_stack_lvl+0x100/0x190 [ 970.500109][T24819] print_circular_bug.cold+0x178/0x1c7 [ 970.500133][T24819] check_noncircular+0x146/0x160 [ 970.500153][T24819] ? rt6_disable_ip+0x24e/0x980 [ 970.500170][T24819] __lock_acquire+0x14b8/0x2630 [ 970.500186][T24819] lock_acquire+0x1cf/0x380 [ 970.500198][T24819] ? nr_rt_device_down+0xd3/0x820 [ 970.500212][T24819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 970.500229][T24819] _raw_spin_lock_bh+0x33/0x40 [ 970.500244][T24819] ? nr_rt_device_down+0xd3/0x820 [ 970.500257][T24819] nr_rt_device_down+0xd3/0x820 [ 970.500271][T24819] ? __local_bh_enable_ip+0x9e/0x120 [ 970.500290][T24819] nr_device_event+0x126/0x170 [ 970.500310][T24819] notifier_call_chain+0x99/0x420 [ 970.500325][T24819] call_netdevice_notifiers_info+0xbe/0x110 [ 970.500346][T24819] __dev_notify_flags+0x1f7/0x2e0 [ 970.500363][T24819] ? __pfx___dev_notify_flags+0x10/0x10 [ 970.500379][T24819] ? __pfx___dev_change_flags+0x10/0x10 [ 970.500397][T24819] netif_change_flags+0x108/0x160 [ 970.500414][T24819] dev_change_flags+0xba/0x250 [ 970.500434][T24819] dev_ifsioc+0x1682/0x1f20 [ 970.500450][T24819] ? __pfx_dev_ifsioc+0x10/0x10 [ 970.500464][T24819] ? __pfx___mutex_lock+0x10/0x10 [ 970.500484][T24819] ? dev_load+0x8e/0x240 [ 970.500498][T24819] ? dev_load+0x8e/0x240 [ 970.500513][T24819] dev_ioctl+0x342/0x10e0 [ 970.500528][T24819] sock_do_ioctl+0x1a0/0x280 [ 970.500554][T24819] ? __pfx_sock_do_ioctl+0x10/0x10 [ 970.500575][T24819] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 970.500595][T24819] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 970.500618][T24819] sock_ioctl+0x599/0x6b0 [ 970.500631][T24819] ? __pfx_sock_ioctl+0x10/0x10 [ 970.500642][T24819] ? hook_file_ioctl_common+0x146/0x410 [ 970.500666][T24819] ? selinux_file_ioctl+0x139/0x290 [ 970.500684][T24819] ? selinux_file_ioctl+0xb4/0x290 [ 970.500703][T24819] ? __pfx_sock_ioctl+0x10/0x10 [ 970.500715][T24819] __x64_sys_ioctl+0x18e/0x210 [ 970.500736][T24819] do_syscall_64+0x106/0xf80 [ 970.500752][T24819] ? clear_bhb_loop+0x40/0x90 [ 970.500768][T24819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.500782][T24819] RIP: 0033:0x7f4750d9c799 [ 970.500796][T24819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.500810][T24819] RSP: 002b:00007f4751d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.500823][T24819] RAX: ffffffffffffffda RBX: 00007f4751015fa0 RCX: 00007f4750d9c799 [ 970.500833][T24819] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 970.500841][T24819] RBP: 00007f4750e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 970.500850][T24819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.500858][T24819] R13: 00007f4751016038 R14: 00007f4751015fa0 R15: 00007fffd4e6e558 [ 970.500871][T24819] [ 972.105179][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6319'.