last executing test programs: 13.217816181s ago: executing program 3 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000008c0), 0xbcc, 0x2000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sg(0x0, 0xffff0000, 0x40) set_tid_address(0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) ppoll(&(0x7f0000000180)=[{r5, 0x2040}], 0x1, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, &(0x7f0000000380)}) close_range(r7, 0xffffffffffffffff, 0x0) 11.291777457s ago: executing program 3 (id=1222): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000200)={0x38, 0x0, 0x25, 0x2542, 0x6, 0x8, 0x7, 0x8000000000000001, 0x7f, 0x4}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) pread64(r4, &(0x7f0000019440)=""/101, 0x65, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r5, 0x5501) 9.197339875s ago: executing program 3 (id=1228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x56b36c6a68732daf) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4bc, 0xc, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x1, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x0, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0x102, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x9, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x8, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x4, 0x7ff, 0x1ff, 0xe25c, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0xff, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x7, 0x8, 0x4, 0x6, 0x2, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0xfffffff7, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0x1001, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375d, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x801, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x8, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x3000, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) 8.476305774s ago: executing program 0 (id=1234): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r2, 0x0, &(0x7f0000002200)="7f", 0x1, 0xfffffffffffffffb}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000000d40)="1b", 0x1, 0x6}) listen(r0, 0x100) r3 = gettid() recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x80a0}, 0x0) syz_open_dev$video(&(0x7f0000000480), 0xe98, 0x2) r4 = eventfd2(0x10, 0x800) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) io_setup(0x6, 0x0) io_submit(0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]) read$eventfd(r4, &(0x7f0000000100), 0x8) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) timer_gettime(r6, &(0x7f0000000080)) 7.08790694s ago: executing program 0 (id=1238): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x1, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x208001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x1, 0xfffffffffffffffd, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) remap_file_pages(&(0x7f000000c000/0xc00000)=nil, 0xc00000, 0x2000003, 0x4002, 0x2000) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 6.843771332s ago: executing program 4 (id=1240): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="041606aaaa0000aa12"], 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002102, 0x0) 6.753569489s ago: executing program 2 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000008c0), 0xbcc, 0x2000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sg(0x0, 0xffff0000, 0x40) set_tid_address(0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) ppoll(&(0x7f0000000180)=[{r5, 0x2040}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, &(0x7f0000000380)}) 6.455630254s ago: executing program 4 (id=1243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0), 0x3, r3, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r3], &(0x7f00000000c0)=[0x4, 0x1, 0xf, 0x5, 0x5, 0x8, 0x7fffffff], &(0x7f0000000440)=[r5, 0x0, r4, 0x0], &(0x7f0000000040), 0x0, 0x300}) 6.156949279s ago: executing program 4 (id=1244): socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r6 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000001381298fba053b5660909040004010300000009210700840122070009058103000200000500"/54], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "0b27e38d"}, @main=@item_012={0x2, 0x0, 0xa, "b608"}, @global=@item_4={0x3, 0x1, 0xb, "776c3dca"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="c22901000000000014000300697036746e6c30000000000000000000280012800b000100697036746e6c00001800028014000200fc"], 0x5c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 6.072435782s ago: executing program 3 (id=1245): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) r3 = syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000026c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) read$msr(r2, &(0x7f00000003c0)=""/189, 0xbd) fcntl$lock(r6, 0x6, &(0x7f00000006c0)={0x1, 0x0, 0x567, 0xfffffffffffffffc}) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401406"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="200b94"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX, @ANYRES16=r1, @ANYRES16=r3], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$char_usb(r9, &(0x7f00000008c0)='-0', 0x2) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r9, 0x4008af75, &(0x7f0000000000)={0x0, 0x9}) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) 5.601007411s ago: executing program 2 (id=1246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000004c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) acct(&(0x7f00000001c0)='./file0\x00') 5.43357668s ago: executing program 1 (id=1247): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040850) r0 = socket$tipc(0x1e, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) lseek(r1, 0x5, 0x1) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) madvise(&(0x7f000058e000/0x3000)=nil, 0x3000, 0x12) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRES8], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGCHAN(r7, 0x80047437, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0x40000000}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 4.548278225s ago: executing program 2 (id=1248): mount$tmpfs(0x0, 0x0, 0x0, 0x20028, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f0000000500)='\x01') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000a703000000030000850000001b000000370000000000000095e06976e18525f925afd4bc5229293efd089b5eb23c98da4c3870c40a51f6df23fd101ccd732b4c9c6a2a98e00d39a0694a4100000000000009b4267e73dbbc5e9656dd1d1ba185798f3291e6b1"], &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xad, 0x6c, 0x86, 0x20, 0x72f, 0x2200, 0x3fbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb4, 0xaf, 0xd7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 3.789986299s ago: executing program 1 (id=1249): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0xb600000, 0x8001, 0x0, 0x1, 0x1e, 0x8, "ad2d3adbc20592f010f3fe0f9178df7716d85864a854c6201cf1c517dfd714ef1481e3cac9a09729f888d5d52087a66c3e85a72bbd5edb18c0808eef6245be5a", "984935f7b8dc060be670766dc5b594f86e00cb2d93e0e7cda11a5412fd6e578a12b30525a24c35b608abb2083f102507a8a344ccfb4fd156944158fb82fdbfb6", "489db52b32335184a3ea1d1e20a490cfba20f441a3d846896beb68f6c50c6d84", [0x9, 0x2]}) 3.788865621s ago: executing program 0 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0xc0386723, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.533061038s ago: executing program 1 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 2.71978191s ago: executing program 0 (id=1252): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xe7, 0x55595659, 0x2, @discrete={0xc, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x40840, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f00004fb000/0x4000)=nil, 0x4000, 0x4}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f00000003c0)="80", 0x1, 0x7b}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r1, 0x0, 0x0, 0x0, 0x80000000}) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@remote, @rose, @default, @remote, @null, @default, @netrom, @rose]}, &(0x7f0000000380)=0x48) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000440)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000000)={0x8, r1}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$unix(r8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000001140)={0x1014, 0x2, 0xb, 0x101, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x7}, [@generic="87d3112b2f9a9912d6ec14b046b13667aebfe7ad4faf16bc5778827a06a61d933e00659550d016d0871796198f6b1354c6cf1623fd411cdb0a333a312486360c93c624fc3a50dc5dd1fa51c7c24d4bee531f20017d78c4454948349b4cfaba6cca658dc56ae815fe67c9a490571db71050d867ecf69ad4157af0fbb760fc4fad6fa70f65732a876dc142c012ccf286949a6b613d06e8585bfdf43266ddcc7e1781e42204131215d39f8de1d2da6c27a9318dd98b07a53a9caf47dab015918e78f64adbd8b6bbda133709adf62ff4d4ec67cc966d4089d9246cae6b82b1cad7d78724e02184ca900b0f79a7b7d803e0618687a8055f2dbc271ae10ca20269b79975f0365a2dcdb41785d08d4934f5283d29a57043eae9a6ec760139fdae773f6b098f97f5582071818d55beec7e5af4a6608b246c299bb0229c98569e8040f98555cfd9b697db961465d9ce8470baf8eeba1f07310073be0b63f50f47df9b9a18f5f1efbe0f5f9d3aa35c2919af24f31e286d748fd3d296b2b770908c4995db0cfa3afc6b1115d529f565d84147a3e9b62315e6e25e94863d8d772866d50de080a93077ef261fab19edccc654bf7303c80881f58f87ef705496a3c62db27c4696f454b46896789fb0044672fc5087d053f9c6c61e9b3d7c69da6dd0fb3f9a9890c25414e4636468cb2a8e5614f20aed96cb487d046e5ee8799edbdabaf6527b4e85f128473ca8ffba22f8974bb494dfbf5c9d94e7bd25c766e3c032bab0490d95c7fa2f3330fa818c1d2c6878d837bce42330f89845dfd26a495cd9ece400d59a51b48973011c0c48ede386787c43f41fc914869eea7999137c41025949d7fe7fc1cb4a37cb9a8694f877a555f8150348d8dd9e3f6e251bf4b325d730c0ccb7321e8d03c560e9a31eca4e8920f75ce9a2dc115dfaac2df0e05d2f96fcc77eaf7c7d481120333af25738df3feab320fb349fca31f467ea64f4622167124f79dfce2e95465f779ceed81d3b341d4b698d976f5c40ab036a8e1aa1fffed3f99f343ffa082b394822ab3dab9a809ceec62e32fb23911bcdbcbf66bf5cf533e170226f7bee4c91178331870680aeb5261dfbaddc5e7c30ec7744af01fca8addd420cd50a38754aa39738fe6f91b661ae843675625e676fbc091fed3b88ae1943b00f430803527d63d5ebe1e4f114b2f0c4625b21fab9e9a1bd43262af98589e233dc6910ff6fb36b9e911ee3098b364f71142824310f35207186fc95317454cc38810cd870d2f75fe0a7a94a7112558bb47318bd43fa2d60110c3fb720ec0a60f1e13e71b5c7f5d5434255ba2cb407b7c06c6a9c85791294f146554c47261e864e39f1258f884054052408518b3b17374298083ca3251a320e4fa548aec77eb2277688d16bc752c0d994837f7a404577e3565855e1eb8acece6039b4d40155aacf46d8627213b83a78d5ad3285b1b4a6e4392bf0707dd48187d7c72bccae60326db3f00290c712a98c2849f574f9f834ad96069cd05711881f01136c3f8cf5fc4715f8c97643cad425d4497b919da0243046da8c8608c0db4b4e89bdbfac0a056b13e84c4a42f691a178651ec1453a1dc1f33907a4e72cd9330475de16c33c805c06dc2253653f30a1fea329fea94d8c881ca43dd00817d6324bf005245ef656604fc5cc47b7fc496d59f9223d99694d5410ab53f753b26f6e56be97bc85fddeb63f2e35e7bc45ac1a863ecdf29c1f34899712cec3cef76670fad72d28bcfbe4ef75b7963f688603d52d19f4d2cfbeda9bc9529a2f667380b0baf1b3167708c32760d4a066011ec4c1269818f3bfb476a603e6a294677ba29e6d38ce9998012e86b368c137d0f4706f5ff50260eaf9cac005234c433bcb7d37a6c949f448f39869ed910fc8099f34345dadaeeddc7bbc2b79111c5b911086938b93a670c57e11469fc1c8d8181f440dd3550a6b74d3270018ef46c97a2e6ed6507a62c76f227c2a97fd727def8bc412327406957772c0b6d2683a89c322494f8f392cd717ecfd9bcc25a88f4e6becc2132fe119d64ebbb8bb70c0863058b98c9383f2a8c77b9d2abe21abc2abbf51018d3ac723f3d46ff3de6460451cddb732171c6f42466957b5956f82a0bb2ed70d194549407e47b0570832fb916cc9970f15e439e1dd2fafbcda3a0761243bb7c206741d681d2ec83091fc591a7896100a1672df3f124502b09729762bd4bc80c6a6bec30ab0cf44c68fef0ce6510303c015a8a4cade9c204048d78e1495fba411bb25448a39bfd6efc14272fb52d86e946d1281af42874b0303dc842f13cb895c40bd1957256c634b72903246ad99a61cd4fe22b8cca640dbf11a800edc23ba962046ef5bc0a3d0133133cdc98f77abc5259eb4938b74b9d6af9cdf7d5498471d980acbc9783b1c447558acb05029b73a4bd1ef8e24dbbacea008ba027dc2f932f2b24537e2e43d9063c6c692ef85f256766c508b5f743175cf00b8c5854c7fb5d6401a1990d2f2745ad3408bb7926023fe1f69a836d5a7ff1dd47ab28db636f1093822d34a2a84c0672d325a1494aa0d819d30a366fce4085ec7e4166025b09649e4657c5e46cf9ac266ec45233b2d7b9ed4e7800594bfb97d252f746c55d930d9097a7388b938ea92e206f58715ac5f036e3bbb92fde736c362a9741a1699942c86064164b92d4ee9a670ebaab56af6940f57b15953f316b433c8033a1d090611d75f0cb2976646fe3e5dbcd9595b605f693a374e580cbda440fbd768c3ab0873d48b910f479f32e7cbf7718eda2bd3b13e7b91488a82bc063e31c4d095378a90553c63614cdcd2bde7d13430eb994aac5479b45a5f0fd48ed543b51db39724ca7d01c8fd202a04de0a8a7ce7ce9c0eef031831058e6dbf9903628ff7a4547452e0383ff6f18d636fdd5baa0b4743ca75fbe1e94ee85443e212f0de196595384749c12478d5f0c36dbe0c01f41758c8b2b826ace6b6fc65094406a773fa4946c0e71466c7b6ecc7ec78b79c3e0465ee1513ea58a33875122499442b313fd8b2d321d759ea5b2e78331d7d210a2a21b0070cc518876769c57860d245a82b7c11b5581a08819d1a8205c01a1a063dde1eaeb6a13da8d3d7af1d8d52f3b87e6b1685a3f374f72547ce00163c4db0d658191af483ce185a4aa30f6bfa0b3c17376c90ca96a1fdabd5f44d3984de5e77b10c89b20e090aa127ceed3ef6ad58eb81b9909bb039582b7340075b9ed32cc979bdc37e108c3cb6f6d9a0be88de142fec3419bbcc906d22d2e31846b3b3b9aede9f45426e5d1bb1bf2e6b2adfd86c0579357cba33c3ce8b78b809a8a5df630cbb0ba498d42098aa4bbfc42583924e73cd2e09ccd2b77ed82a57384acfbe39d41e4865298f4b3b6eb5099c662b445274f56e2637e6358227f9dd3f57f458bfdb4c595004c43d56ce638c3f1733dd47bbc16b956c88245e56012b2b65a5f580d5a71ae59cd81f9c405797a835348670df6eb828292a2af6e0bd6a922382da0864dd6f85c15f8672de5b0a30a98b5664496b859f2035e78746a9344a7f57a5c1a70ecb7ce87cf0f5f1c18927163cbffc677dc3e3e8bfc1a071e8260c4bfacf07b34be123cad3ff9265e8178103330796d8d1ec914f101fd4dbe9dda5972f16b940029d73954c151af0dfd921490b8348f0396ff582a5cfa9f7847d163c5e10c30650258af66f8e23dd5f068d4d5ec392fb308588a560d141c2ae29c94ea26b60ea82bd3221fed745ec98c45a9bd9c7628d4971289e69863cc9d125e6f710378b953f6a6a0720351dd76bdcf030350ebe551394a211283d124692d14b4c1928f59f847424bb186eda5bbb0b70320c19f0ca1c6702fa02a0d6890843105fd1738bd5ce83cc1281cd636cf3e204d74fb419e017b0905c1a49e1a0578f28aecb968186fa72916539bd4ef10b21941cc4ffd03eb8c32496f0fd8d0f74c74a413043fddb862c7985266794782105b45e3eb24d73c9d185173eca24d933e92ebd51e4deeff2ece1141d28791e7ff8489fa36c2ef0ac93680a364ac0f0e42d12a62869fbf9fcc221048cb071d1c571bc0ceab7fb45c0e0c13b2fc7b9961e67622c208a8c0cb8f30499329c88379c4ee8512db69a4c1e9b78ffb16cfa17cfb00b0d4e9275412d8fb397fc8437fcf73d4fc6d07d3d04cbbc259ecbeec0968f7485950f981a7961b82c7632c0e75e0556f7cfde679bc3ce8d40f673974705b2f45540f146ee0e12829191453e0f8b92a4a93ba424e78044f5bab34804f55d493339f8300e8f653a67b455997018452d96a75c8c125242f18fde1a8998134f1c37863a1145d577589e60fdb68d3ee5a61cfc7fc8a0236b93ae56a3b01c4852e2b329373947172be24e92e49eb0a980e46492b914b52e4974910c17fca56e2253c9789f4465133cbc297be4fa2b3b817a0c434f6525d178bce0abe0c52d2159f8d2bdb6dcf26a4726e3ab943ac12ca2aea06a9634b7635df8494315b80678721542e61768e6f69cea9231c514cc5cd9f1f1fa16919783afb023115867a57bbb7a0e7aaed694838d2a56b2942defcb209d1dc1e359a1944affe95e8c4873839588cfa4993b3f511e8100ae3fcdb883e0ca0c8f2f0753d4387f3b21fb188207e0b1799cba732fb927ebaffddae866dc603939636f06ee63a3f9dc79dd92acb7aa1778e3c08481b1d6b6154bf78963f3cf5b8c6a93540210f1df5b98639d8c164628b77ccef25376f2ef5fc1d87114883b34e78a78eb52282edc73abad2d8051000f0c125e4f953c28bc05f746d44a977a43e8e63d9f15a3cbffe0c06be2883baf49c44e7393620057a53665d1485aa5425fac31fb692a653318abfbe95f5f9b608bdc5dbb7a13a6554ad95e603d3225f86b5de1898396d6a32f539c680fd4bc41060397227f8c917f72d2289e09d877412d361a6465d1d9446eec91e15ce685ea87004ae26ee5ae4c3e04839029d1aa20e47021d14fd58b70b9faff60abc7d05390d51adec27c9502c732d21d7f4f7efe1e003f6c38b13485e3104ec9c9a9fd6cd5bfcf72082067c45c2653ab9d7a0abd000e48c12720457f63f70cbe8ed069a5c3b1cc5bd94210227471ecdea1ac18a8ebd2f320f2dad4bbe7a91309dd6671d26e6edfba877bb8629690c8441e45c57e97b7699e70a2d72eb89b1f80dee79ab3b1ca22f883748dfc6960de76f8206de1cb46431714b7cd9305fbda16ee91ad88f688e46a4280554882ab8f999a09df80c41e967271a85d1ae756f05b06ac5578c1e3fd26ef96d292cdab3796944a56364e4a53fc4851054e5f1db3eecb2a326f13eaecf757cf1800271980cca38989348af2977f99d143a69681193c97a143bf62ca878ab746727602ebbf132c08a1c1458aebac76452c4526d88b39c2fb0bf80d98af1501bc3e5edb95a57bb894ca9a8a96a229149c6b67aebab29b1e210f928da5a78300793ec67f1236d97612b033b253e0d4afae7a905e956d0560a88dc921878c6650ac01bf6be584fb6fb9c7ab0cd2dde6a9eb1fb23e0f6e5bf1d5efdcf77a77ed2021788e440392a8e4d1b6f5401c5d76fa93666d5702c37b030f6695984814356b8ba9bcf3c6d34c2a77cde1708100cfbd6aae31bb2d58bd19eb09ef8cd67ce607aed11920de9dc5a69d269960a8219c3b9262d2738d16191ecff99ffa9dbde65f48a8aa84c5effc48716d911c44e55521bc0331ab2303e02b3fe91510e8ae129240278d80f4e2576ebc99ae1d44540a208eeaa2c99e53cee7e849a8c4dcad6b3807c49e184e7794123a3d382f28fd14"]}, 0x1014}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bind$packet(r7, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) 2.331156785s ago: executing program 1 (id=1253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0x0, 0x50, 0x7ffffffffffff, 0x5, 0x6, 0x9, 0x7ffffffffffffffc, 0xa90, 0x0, 0xbdb], 0x2000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x100a}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x30, &(0x7f0000000600)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{&(0x7f00000003c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000004c0)}, 0x6}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/23, 0x17}, {&(0x7f0000000c00)=""/160, 0xa0}, {0x0}], 0x3, &(0x7f0000000dc0)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000ec0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000480)=""/209, 0xd1}, {0x0}, {&(0x7f0000002040)=""/131, 0x83}, {0x0}, {&(0x7f0000002180)=""/64, 0x40}], 0x5, &(0x7f0000002240)=""/78, 0x4e}, 0x800}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000002580)}, 0x4}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$dri(&(0x7f0000003700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0), 0x3, r4, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r4], &(0x7f00000000c0)=[0x4, 0x1, 0xf, 0x5, 0x5, 0x8, 0x7fffffff], &(0x7f0000000440)=[r6, 0x0, r5, 0x0], &(0x7f0000000040), 0x0, 0x300}) 2.230051391s ago: executing program 3 (id=1254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0), 0x3, r3, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r3], &(0x7f00000000c0)=[0x4, 0x1, 0xf, 0x5, 0x5, 0x8, 0x7fffffff], &(0x7f0000000440)=[r5, 0x0, r4, 0x0], &(0x7f0000000040), 0x0, 0x300}) 2.22909764s ago: executing program 0 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.223842114s ago: executing program 4 (id=1256): syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}}, 0x1c}}, 0x0) 2.116630098s ago: executing program 4 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000008c0), 0xbcc, 0x2000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sg(0x0, 0xffff0000, 0x40) set_tid_address(0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="020000000000000002000002e000000200000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000006fecd3d45efeaf8f0a868117724ae4627cee2d2e2723620f2ea66bf190012c587c623953efc72b6198c1b1ea0266b5e81639c3b5d0e98d5613cc19cf9c73726778a068599200ee63266b0c4da90bc58e652acc766eb8af6629e3bb86f87bba3113c49a228e98ad922df153f1169d9dd209d9d65fba1575314dead0cec3502a455f5a73f809e7c140ee04abce8399b45ac31c14c26072d899b400b42812cbfc0e0ca4ed32a01b07d762"], 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) ppoll(&(0x7f0000000180)=[{r5, 0x2040}], 0x1, 0x0, 0x0, 0x0) 2.032539598s ago: executing program 0 (id=1258): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000004c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) acct(&(0x7f00000001c0)='./file0\x00') 1.961645971s ago: executing program 1 (id=1259): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x80, 0xd}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) openat$comedi(0xffffff9c, &(0x7f00000003c0)='/dev/comedi0\x00', 0x404902, 0x0) 1.960967403s ago: executing program 3 (id=1260): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x80, 0xd}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null, @default]}) openat$comedi(0xffffff9c, &(0x7f00000003c0)='/dev/comedi0\x00', 0x404902, 0x0) 1.41570631s ago: executing program 2 (id=1261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0xfff5, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1.313234637s ago: executing program 2 (id=1262): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = memfd_create(0x0, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$sndseq(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bc"], 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x4000000) dup(r2) 1.19391143s ago: executing program 4 (id=1263): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0xfffffffffffffde3, 0x15, 0xa, 0x200, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x46031, 0xffffffffffffffff, 0x180000000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) munmap(&(0x7f0000c90000/0x2000)=nil, 0x2000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) write$cgroup_int(r4, &(0x7f0000000240)=0x7, 0x12) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001840)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff"], 0x8) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)={0x1, 0x0, @auto=[0x2c, 0x1f, 0x38, 0x1b, 0x3d]}, 0xd, 0xfffffffffffffff8) 1.037730211s ago: executing program 1 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 0s ago: executing program 2 (id=1265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x8100, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): dit: type=1804 audit(1765482409.038:432): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.626" name="/newroot/138/file0" dev="tmpfs" ino=769 res=1 errno=0 [ 287.793245][ T8451] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 287.825429][ T8451] ref_ctr increment failed for inode: 0x301 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021b5d5c0 [ 287.938196][ T8449] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 287.951668][ T8449] ref_ctr decrement failed for inode: 0x301 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021b5d5c0 [ 287.962824][ T8449] uprobe: syz.2.626:8449 failed to unregister, leaking uprobe [ 289.490890][ T5898] usb 2-1: USB disconnect, device number 32 [ 292.069923][ T8511] __nla_validate_parse: 44 callbacks suppressed [ 292.069954][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.640'. [ 292.155978][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 292.175231][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.640'. [ 292.225870][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 292.246906][ T8511] netlink: 52 bytes leftover after parsing attributes in process `syz.2.640'. [ 292.590818][ T5898] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 292.746287][ T5898] usb 4-1: device descriptor read/64, error -71 [ 293.266386][ T30] audit: type=1400 audit(1765482414.518:433): avc: denied { create } for pid=8526 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.295887][ T5898] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 293.330168][ T30] audit: type=1400 audit(1765482414.538:434): avc: denied { ioctl } for pid=8526 comm="syz.1.645" path="socket:[20560]" dev="sockfs" ino=20560 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.375972][ T30] audit: type=1400 audit(1765482414.548:435): avc: denied { bind } for pid=8526 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.422697][ T30] audit: type=1400 audit(1765482414.548:436): avc: denied { getopt } for pid=8526 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 293.455905][ T5898] usb 4-1: device descriptor read/64, error -71 [ 293.472427][ T30] audit: type=1400 audit(1765482414.548:437): avc: denied { ioctl } for pid=8526 comm="syz.1.645" path="socket:[19748]" dev="sockfs" ino=19748 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 293.505866][ T6031] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 293.521540][ T30] audit: type=1400 audit(1765482414.638:438): avc: denied { read } for pid=8526 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.576372][ T5898] usb usb4-port1: attempt power cycle [ 293.656001][ T6031] usb 1-1: Using ep0 maxpacket: 8 [ 293.662760][ T6031] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.703354][ T6031] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.717914][ T6031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 293.735848][ T6031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 293.756027][ T6031] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 293.775565][ T6031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.938156][ T5898] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 294.069361][ T6031] hub 1-1:1.0: bad descriptor, ignoring hub [ 294.069458][ T5898] usb 4-1: device descriptor read/8, error -71 [ 294.075609][ T6031] hub 1-1:1.0: probe with driver hub failed with error -5 [ 294.097646][ T6031] cdc_wdm 1-1:1.0: skipping garbage [ 294.102972][ T6031] cdc_wdm 1-1:1.0: skipping garbage [ 294.127347][ T6031] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 294.133399][ T6031] cdc_wdm 1-1:1.0: Unknown control protocol [ 294.386118][ T89] usb 1-1: USB disconnect, device number 22 [ 294.857554][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 295.325907][ T6031] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 295.625860][ T6031] usb 3-1: Using ep0 maxpacket: 32 [ 295.633822][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.645038][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 295.656806][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 296.062511][ T6031] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 296.075856][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.085522][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.109734][ T6031] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 296.147751][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.169486][ T6031] usb 3-1: Product: syz [ 296.182980][ T6031] usb 3-1: Manufacturer: syz [ 296.188100][ T6031] usb 3-1: SerialNumber: syz [ 296.210725][ T6031] usb 3-1: config 0 descriptor?? [ 296.223117][ T8552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.233240][ T6031] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 296.516698][ T5898] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 296.848932][ T8576] input: syz0 as /devices/virtual/input/input32 [ 297.227542][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.285277][ T5898] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.321307][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.347695][ T5898] usb 1-1: config 0 descriptor?? [ 297.479919][ T30] audit: type=1804 audit(1765482418.728:439): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.662" name="file0" dev="tmpfs" ino=860 res=1 errno=0 [ 297.480458][ T8586] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 297.517940][ T8586] ref_ctr increment failed for inode: 0x35c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d55a4c0 [ 297.793554][ T8585] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 297.807729][ T8585] ref_ctr decrement failed for inode: 0x35c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807d55a4c0 [ 297.811845][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 297.903792][ T6031] usb 3-1: USB disconnect, device number 28 [ 297.964633][ T8585] uprobe: syz.4.662:8585 failed to unregister, leaking uprobe [ 298.044978][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.058985][ T5898] usb 1-1: USB disconnect, device number 23 [ 298.398195][ T5898] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 298.417666][ T8598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.663'. [ 298.586638][ T5898] usb 1-1: no configurations [ 298.591287][ T5898] usb 1-1: can't read configurations, error -22 [ 298.598637][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 298.607504][ T8598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.663'. [ 299.037115][ T6031] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 299.142532][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 299.216554][ T6031] usb 4-1: device descriptor read/64, error -71 [ 299.293381][ T8598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.663'. [ 299.315355][ T5898] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 299.520859][ T6031] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 300.518635][ T6031] usb 4-1: device descriptor read/64, error -71 [ 300.626232][ T6031] usb usb4-port1: attempt power cycle [ 301.080332][ T8398] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 301.265841][ T8398] usb 3-1: Using ep0 maxpacket: 8 [ 301.280326][ T8398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.546622][ T8398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.612202][ T8398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 301.701151][ T8398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 301.744212][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 301.755917][ T8398] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.812690][ T8398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.927685][ T8398] hub 3-1:1.0: bad descriptor, ignoring hub [ 301.933641][ T8398] hub 3-1:1.0: probe with driver hub failed with error -5 [ 301.941660][ T8398] cdc_wdm 3-1:1.0: skipping garbage [ 301.947530][ T8398] cdc_wdm 3-1:1.0: skipping garbage [ 302.790328][ T8398] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 302.800558][ T8398] cdc_wdm 3-1:1.0: Unknown control protocol [ 302.830277][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 303.320711][ T8647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8647 comm=syz.3.675 [ 303.515960][ T89] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 303.805834][ T89] usb 2-1: Using ep0 maxpacket: 32 [ 303.813246][ T89] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.852750][ T89] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 303.917978][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 304.062743][ T89] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 304.094877][ T89] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.133170][ T89] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.182149][ T30] audit: type=1804 audit(1765482425.428:440): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.676" name="/newroot/128/file0" dev="tmpfs" ino=710 res=1 errno=0 [ 304.182680][ T8650] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 304.312287][ T89] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 304.332722][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.371343][ T8650] ref_ctr increment failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ef50c40 [ 304.391416][ T89] usb 2-1: Product: syz [ 304.460876][ T8649] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 304.470401][ T8649] ref_ctr decrement failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ef50c40 [ 304.567988][ T89] usb 2-1: Manufacturer: syz [ 304.593046][ T89] usb 2-1: SerialNumber: syz [ 304.650849][ T89] usb 2-1: config 0 descriptor?? [ 304.657471][ T8641] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 304.669764][ T89] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 304.725888][ T8649] uprobe: syz.3.676:8649 failed to unregister, leaking uprobe [ 304.966640][ T9] usb 3-1: USB disconnect, device number 29 [ 305.054397][ T8663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.678'. [ 305.066424][ T8663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.678'. [ 305.285915][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 305.396502][ T8663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.678'. [ 305.425805][ T30] audit: type=1400 audit(1765482426.368:441): avc: denied { bind } for pid=8661 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.575822][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 305.598307][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.639144][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.664559][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 305.680830][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.769430][ T9] usb 3-1: config 0 descriptor?? [ 305.848516][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.682'. [ 305.857797][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 305.866871][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.682'. [ 305.890897][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 305.925633][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.682'. [ 306.080073][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 306.458275][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8685 comm=syz.4.685 [ 306.810768][ T9] kye 0003:0458:5016.0008: control desc unexpectedly large [ 306.820756][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0008/input/input33 [ 306.946409][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0008/input/input34 [ 307.074927][ T6031] usb 2-1: USB disconnect, device number 33 [ 307.106282][ T9] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 307.224190][ T8677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8677 comm=syz.3.684 [ 307.386390][ T8677] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 307.475837][ T8677] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 307.926139][ C0] kye 0003:0458:5016.0008: usb_submit_urb(ctrl) failed: -1 [ 308.065831][ T5898] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 309.085877][ T5898] usb 3-1: device descriptor read/64, error -32 [ 309.295657][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.686'. [ 309.460089][ T30] audit: type=1804 audit(1765482430.708:442): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.691" name="file0" dev="tmpfs" ino=905 res=1 errno=0 [ 309.460610][ T8707] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 309.535925][ T5898] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 309.545636][ T5898] usb 3-1: device reset changed ep0 maxpacket size! [ 309.552523][ T8707] ref_ctr increment failed for inode: 0x389 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ef955c0 [ 309.558506][ T89] usb 3-1: USB disconnect, device number 30 [ 309.659201][ T8706] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 309.671279][ T8706] ref_ctr decrement failed for inode: 0x389 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807ef955c0 [ 309.671925][ T8710] syzkaller0: entered promiscuous mode [ 309.684415][ T8706] uprobe: syz.4.691:8706 failed to unregister, leaking uprobe [ 309.706891][ T8710] syzkaller0: entered allmulticast mode [ 309.749506][ T30] audit: type=1400 audit(1765482430.988:443): avc: denied { ioctl } for pid=8708 comm="syz.0.690" path="socket:[20047]" dev="sockfs" ino=20047 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.851213][ T89] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.881256][ T30] audit: type=1400 audit(1765482430.988:444): avc: denied { getopt } for pid=8708 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.425045][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 310.672495][ T8725] netlink: 'syz.1.696': attribute type 9 has an invalid length. [ 310.697479][ T89] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.715843][ T89] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.725492][ T89] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 310.745837][ T89] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 310.757311][ T89] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.767411][ T8725] netlink: 'syz.1.696': attribute type 11 has an invalid length. [ 310.775155][ T8725] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 310.797566][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.818037][ T8725] __nla_validate_parse: 2 callbacks suppressed [ 310.818053][ T8725] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.696'. [ 310.845249][ T89] hub 3-1:1.0: bad descriptor, ignoring hub [ 310.853913][ T89] hub 3-1:1.0: probe with driver hub failed with error -5 [ 310.868304][ T89] cdc_wdm 3-1:1.0: skipping garbage [ 310.873536][ T89] cdc_wdm 3-1:1.0: skipping garbage [ 310.878817][ T30] audit: type=1400 audit(1765482432.118:445): avc: denied { listen } for pid=8729 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.903833][ T89] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 310.912850][ T89] cdc_wdm 3-1:1.0: Unknown control protocol [ 310.924180][ T30] audit: type=1400 audit(1765482432.128:446): avc: denied { accept } for pid=8729 comm="syz.3.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.055926][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 311.073908][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=8727 comm=syz.1.696 [ 311.272851][ T30] audit: type=1400 audit(1765482432.518:447): avc: denied { create } for pid=8731 comm="syz.4.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.316427][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 311.330215][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 311.348276][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.350454][ T30] audit: type=1400 audit(1765482432.598:448): avc: denied { ioctl } for pid=8731 comm="syz.4.697" path="socket:[20953]" dev="sockfs" ino=20953 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.360325][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 311.406974][ T10] usb 1-1: config 1 has no interface number 1 [ 311.413199][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 311.428256][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.435985][ T30] audit: type=1400 audit(1765482432.658:449): avc: denied { read } for pid=8731 comm="syz.4.697" name="file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.437872][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.495874][ T10] usb 1-1: Product: syz [ 311.500691][ T10] usb 1-1: Manufacturer: syz [ 311.508655][ T10] usb 1-1: SerialNumber: syz [ 311.704066][ T30] audit: type=1400 audit(1765482432.658:450): avc: denied { open } for pid=8731 comm="syz.4.697" path="/159/file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.729553][ T8728] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.698'. [ 311.739880][ T8728] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.698'. [ 311.756119][ T7874] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 311.784604][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 311.864010][ T10] usb 1-1: USB disconnect, device number 26 [ 311.916118][ T7874] usb 2-1: Using ep0 maxpacket: 16 [ 311.924305][ T7874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.937737][ T7874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.990388][ T7874] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 312.017547][ T7874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.359781][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.701'. [ 312.369056][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 312.378020][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.701'. [ 312.387130][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 312.404544][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.701'. [ 312.641658][ T30] audit: type=1400 audit(1765482433.838:451): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.734781][ T7874] usb 2-1: config 0 descriptor?? [ 312.943068][ T8751] netlink: 'syz.4.704': attribute type 5 has an invalid length. [ 312.969666][ T8750] netlink: 'syz.4.704': attribute type 5 has an invalid length. [ 313.027374][ T89] usb 3-1: USB disconnect, device number 31 [ 313.100395][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 313.162519][ T7874] kye 0003:0458:5016.0009: control desc unexpectedly large [ 313.214729][ T7874] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0009/input/input35 [ 313.316806][ T7874] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0009/input/input36 [ 313.377878][ T7874] kye 0003:0458:5016.0009: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 314.336797][ C0] kye 0003:0458:5016.0009: usb_submit_urb(ctrl) failed: -1 [ 314.476044][ T10] usb 2-1: reset high-speed USB device number 34 using dummy_hcd [ 314.807217][ T10] usb 2-1: device descriptor read/64, error -32 [ 316.393230][ T8778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8778 comm=syz.0.710 [ 316.931380][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.940253][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.943431][ T8779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.711'. [ 317.965929][ T8779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.711'. [ 317.980294][ T9] usb 2-1: USB disconnect, device number 34 [ 318.015310][ T8779] netlink: 52 bytes leftover after parsing attributes in process `syz.4.711'. [ 321.051831][ T8858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.735'. [ 321.075260][ T8858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.735'. [ 321.089609][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.0.734'. [ 321.098962][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 321.108046][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.0.734'. [ 321.125994][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 321.151156][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.0.734'. [ 322.876007][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 323.109869][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 323.119276][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 323.130733][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.187161][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.204545][ T9] usb 4-1: config 1 has no interface number 1 [ 323.213420][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.285528][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.295048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.358027][ T8889] __nla_validate_parse: 2 callbacks suppressed [ 323.358048][ T8889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.743'. [ 323.374079][ T8889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.743'. [ 323.384030][ T8889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.743'. [ 323.430161][ T9] usb 4-1: Product: syz [ 323.434364][ T9] usb 4-1: Manufacturer: syz [ 323.439231][ T9] usb 4-1: SerialNumber: syz [ 323.462738][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.742'. [ 323.778096][ T8878] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 323.786276][ T8878] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.741'. [ 323.786431][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 323.799484][ T8878] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 323.814743][ T8878] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.741'. [ 323.875026][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.742'. [ 323.974980][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 323.982552][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 323.992658][ T8883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.742'. [ 324.011527][ T9] usb 4-1: USB disconnect, device number 35 [ 324.041693][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.625707][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 324.625723][ T30] audit: type=1400 audit(1765482445.868:453): avc: denied { getopt } for pid=8901 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.757787][ T8908] ref_ctr_offset mismatch. inode: 0x3d5 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 325.328173][ T30] audit: type=1400 audit(1765482446.568:454): avc: denied { write } for pid=8921 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 325.470440][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.653068][ T30] audit: type=1400 audit(1765482446.898:455): avc: denied { append } for pid=8921 comm="syz.2.753" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 325.677128][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.745163][ T8957] overlayfs: missing 'lowerdir' [ 327.848200][ T8962] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 327.876756][ T30] audit: type=1400 audit(1765482449.118:456): avc: denied { nlmsg_read } for pid=8949 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.423843][ T8982] __nla_validate_parse: 13 callbacks suppressed [ 328.423858][ T8982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.762'. [ 328.492724][ T8982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.762'. [ 328.615975][ T8398] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 328.706075][ T8982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.762'. [ 328.847211][ T8398] usb 4-1: Using ep0 maxpacket: 16 [ 329.166355][ T8398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.179677][ T8398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.200202][ T8398] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 329.220104][ T8398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.252718][ T8398] usb 4-1: config 0 descriptor?? [ 330.115975][ T8398] kye 0003:0458:5016.000A: control desc unexpectedly large [ 330.126645][ T8398] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000A/input/input37 [ 330.205685][ T8398] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000A/input/input38 [ 330.691989][ T9004] input: syz0 as /devices/virtual/input/input39 [ 331.443162][ T8398] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 332.421758][ T30] audit: type=1400 audit(1765482453.668:457): avc: denied { ioctl } for pid=9015 comm="syz.3.772" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 332.518265][ T89] usb 4-1: USB disconnect, device number 36 [ 335.864159][ T9052] binder: 9049:9052 ioctl c0306201 0 returned -14 [ 336.016686][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.780'. [ 336.033443][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.780'. [ 336.046891][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.4.780'. [ 336.065930][ T6012] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 336.115912][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 336.235976][ T6012] usb 1-1: Using ep0 maxpacket: 16 [ 336.432641][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.444257][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.455246][ T6012] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 336.468826][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.491359][ T6012] usb 1-1: config 0 descriptor?? [ 336.532619][ T9061] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 336.540436][ T9061] netlink: 'syz.4.786': attribute type 4 has an invalid length. [ 336.548262][ T9061] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.786'. [ 336.595929][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 336.765835][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.782432][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.792415][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 336.801559][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.088003][ T30] audit: type=1400 audit(1765482458.078:458): avc: denied { mount } for pid=9060 comm="syz.4.786" name="/" dev="rpc_pipefs" ino=21801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 337.118241][ T6012] kye 0003:0458:5016.000B: control desc unexpectedly large [ 337.127590][ T9] usb 2-1: config 0 descriptor?? [ 337.137045][ T6012] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.000B/input/input40 [ 337.234447][ T6012] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.000B/input/input41 [ 337.327846][ T6012] kye 0003:0458:5016.000B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 337.453873][ T9072] FAULT_INJECTION: forcing a failure. [ 337.453873][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 337.467829][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.3.788 Not tainted syzkaller #0 PREEMPT(full) [ 337.467853][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.467863][ T9072] Call Trace: [ 337.467870][ T9072] [ 337.467877][ T9072] dump_stack_lvl+0x16c/0x1f0 [ 337.467900][ T9072] should_fail_ex+0x512/0x640 [ 337.467923][ T9072] _copy_from_user+0x2e/0xd0 [ 337.467945][ T9072] io_sqe_files_register+0x219/0x960 [ 337.467968][ T9072] ? __pfx_io_sqe_files_register+0x10/0x10 [ 337.467996][ T9072] __do_sys_io_uring_register+0x1365/0x2690 [ 337.468016][ T9072] ? irqentry_exit+0x1dd/0x8c0 [ 337.468034][ T9072] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 337.468050][ T9072] ? irqentry_exit+0x1dd/0x8c0 [ 337.468063][ T9072] ? rcu_is_watching+0x12/0xc0 [ 337.468093][ T9072] ? __do_sys_io_uring_register+0x10/0x2690 [ 337.468114][ T9072] do_syscall_64+0xcd/0xf80 [ 337.468133][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.468149][ T9072] RIP: 0033:0x7f491838f749 [ 337.468164][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.468180][ T9072] RSP: 002b:00007f49191c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 337.468196][ T9072] RAX: ffffffffffffffda RBX: 00007f49185e6180 RCX: 00007f491838f749 [ 337.468206][ T9072] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000006 [ 337.468216][ T9072] RBP: 00007f49191c0090 R08: 0000000000000000 R09: 0000000000000000 [ 337.468226][ T9072] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 337.468235][ T9072] R13: 00007f49185e6218 R14: 00007f49185e6180 R15: 00007ffe28c17d58 [ 337.468260][ T9072] [ 338.737970][ T9] kye 0003:0458:5016.000C: control desc unexpectedly large [ 338.907160][ C1] kye 0003:0458:5016.000B: usb_submit_urb(ctrl) failed: -1 [ 339.045854][ T10] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 339.175819][ T10] usb 1-1: device descriptor read/64, error -32 [ 339.815847][ T10] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 340.049292][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000C/input/input42 [ 340.180765][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000C/input/input43 [ 340.192909][ T10] usb 1-1: device descriptor read/64, error -32 [ 340.259222][ T9] kye 0003:0458:5016.000C: input,hiddev1,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 340.626980][ T30] audit: type=1400 audit(1765482461.658:459): avc: denied { setattr } for pid=9092 comm="syz.0.794" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 340.670393][ T9] usb 2-1: USB disconnect, device number 35 [ 340.752028][ T9097] fido_id[9097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 341.520545][ T9103] input: syz0 as /devices/virtual/input/input44 [ 341.850908][ T6012] usb 1-1: USB disconnect, device number 27 [ 341.928865][ T9117] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 342.064716][ T9117] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 342.093034][ T9122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.796'. [ 342.128342][ T9122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.796'. [ 342.137922][ T9122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.796'. [ 342.172963][ T9117] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 342.274895][ T9123] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 342.464068][ T9125] sit1: entered promiscuous mode [ 342.502604][ T9125] sit1: entered allmulticast mode [ 342.763089][ T6012] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 343.407978][ T30] audit: type=1400 audit(1765482464.658:460): avc: denied { write } for pid=9134 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.521802][ T6012] usb 2-1: device descriptor read/64, error -71 [ 344.145858][ T6012] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 344.214884][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 344.296694][ T6012] usb 2-1: device descriptor read/64, error -71 [ 344.416051][ T6012] usb usb2-port1: attempt power cycle [ 344.497330][ T30] audit: type=1804 audit(1765482465.748:461): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.805" name="/newroot/152/file0" dev="tmpfs" ino=836 res=1 errno=0 [ 344.497880][ T9153] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 344.566006][ T9153] ref_ctr increment failed for inode: 0x344 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813ff5ee40 [ 344.721084][ T89] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 344.758917][ T9152] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 344.768793][ T9152] ref_ctr decrement failed for inode: 0x344 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88813ff5ee40 [ 344.781061][ T9152] uprobe: syz.3.805:9152 failed to unregister, leaking uprobe [ 344.788702][ T6012] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 344.816343][ T6012] usb 2-1: device descriptor read/8, error -71 [ 344.885863][ T89] usb 3-1: Using ep0 maxpacket: 16 [ 344.892500][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.962135][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.988799][ T89] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 345.004786][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.005834][ T9083] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 345.023978][ T89] usb 3-1: config 0 descriptor?? [ 345.676391][ T9083] usb 1-1: Using ep0 maxpacket: 32 [ 345.687455][ T9083] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.704313][ T9169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.809'. [ 345.713430][ T9169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.809'. [ 345.722631][ T9083] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 345.734296][ T9169] netlink: 52 bytes leftover after parsing attributes in process `syz.1.809'. [ 345.744422][ T9083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 345.773818][ T9083] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 345.789292][ T9083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.799346][ T9083] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.818833][ T9083] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 345.829948][ T9083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.847862][ T9083] usb 1-1: Product: syz [ 345.854766][ T9083] usb 1-1: Manufacturer: syz [ 345.859814][ T9083] usb 1-1: SerialNumber: syz [ 345.872813][ T9083] usb 1-1: config 0 descriptor?? [ 345.885247][ T9157] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 345.894224][ T9083] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 345.896675][ T89] kye 0003:0458:5016.000D: control desc unexpectedly large [ 345.997250][ T30] audit: type=1400 audit(1765482467.248:462): avc: denied { setattr } for pid=9171 comm="syz.4.810" name="NETLINK" dev="sockfs" ino=22069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.029514][ T9172] overlay: Unknown parameter '/' [ 346.039354][ T89] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input45 [ 346.073162][ T9172] overlayfs: failed to clone lowerpath [ 346.110609][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 346.123662][ T89] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input46 [ 346.288803][ T89] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 348.026886][ C1] kye 0003:0458:5016.000D: usb_submit_urb(ctrl) failed: -1 [ 348.402984][ T7874] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 348.647635][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.668542][ T5822] usb 1-1: USB disconnect, device number 28 [ 348.721133][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.802675][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.840963][ T9194] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 349.406493][ T89] usb 3-1: USB disconnect, device number 32 [ 349.529901][ T5822] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 349.563745][ T30] audit: type=1400 audit(1765482470.808:463): avc: denied { setopt } for pid=9210 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.675868][ T5822] usb 2-1: device descriptor read/64, error -71 [ 349.684681][ T30] audit: type=1400 audit(1765482470.928:464): avc: denied { wake_alarm } for pid=9213 comm="syz.4.823" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.793434][ T7874] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 349.935857][ T5822] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 350.231147][ T7874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.239908][ T7874] usb 1-1: not running at top speed; connect to a high speed hub [ 350.250344][ T7874] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 350.260996][ T7874] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 350.270544][ T7874] usb 1-1: config 1 has no interface number 1 [ 350.276877][ T7874] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.292627][ T7874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.302197][ T7874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.310318][ T7874] usb 1-1: Product: syz [ 350.314738][ T7874] usb 1-1: Manufacturer: syz [ 350.319468][ T7874] usb 1-1: SerialNumber: syz [ 350.345963][ T5822] usb 2-1: device descriptor read/64, error -71 [ 350.459810][ T5822] usb usb2-port1: attempt power cycle [ 350.468110][ T9224] input: syz0 as /devices/virtual/input/input47 [ 350.512857][ T30] audit: type=1400 audit(1765482471.758:465): avc: denied { mounton } for pid=9225 comm="syz.2.827" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 350.541170][ T7874] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 350.648081][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.827'. [ 350.657211][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 350.949991][ T5822] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 351.045317][ T7874] usb 1-1: USB disconnect, device number 29 [ 351.066132][ T5822] usb 2-1: device descriptor read/8, error -71 [ 351.447518][ T5822] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 351.581022][ T5822] usb 2-1: device descriptor read/8, error -71 [ 351.587925][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.611837][ T9232] fuse: Unknown parameter '0x000000000000000b' [ 351.644624][ T9232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=9232 comm=syz.4.829 [ 351.736915][ T5822] usb usb2-port1: unable to enumerate USB device [ 352.310619][ T9247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.832'. [ 352.319748][ T9247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.832'. [ 352.328974][ T9247] netlink: 52 bytes leftover after parsing attributes in process `syz.0.832'. [ 353.671969][ T30] audit: type=1804 audit(1765482474.918:466): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.838" name="/newroot/150/file0" dev="tmpfs" ino=835 res=1 errno=0 [ 353.672647][ T9269] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 353.785955][ T9269] ref_ctr increment failed for inode: 0x343 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880756c24c0 [ 353.872132][ T9263] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 353.907883][ T9263] ref_ctr decrement failed for inode: 0x343 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880756c24c0 [ 353.946308][ T9263] uprobe: syz.1.838:9263 failed to unregister, leaking uprobe [ 354.453311][ T9280] overlayfs: missing 'lowerdir' [ 354.745920][ T5822] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 354.755829][ T89] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 354.782133][ T9290] overlayfs: missing 'lowerdir' [ 354.918498][ T5822] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.927950][ T89] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.935733][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.947008][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.955946][ T5884] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 354.956341][ T89] usb 1-1: not running at top speed; connect to a high speed hub [ 354.974692][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.987454][ T89] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 354.996370][ T89] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.005670][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.016079][ T89] usb 1-1: config 1 has no interface number 1 [ 355.024048][ T89] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 355.037620][ T5822] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.046824][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 355.055932][ T5822] usb 2-1: Product: syz [ 355.061419][ T5822] usb 2-1: Manufacturer: syz [ 355.067183][ T89] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.078077][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.086906][ T89] usb 1-1: Product: syz [ 355.091231][ T89] usb 1-1: Manufacturer: syz [ 355.097017][ T89] usb 1-1: SerialNumber: syz [ 355.104478][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 355.112228][ T5822] cdc_wdm 2-1:1.0: skipping garbage [ 355.153336][ T5822] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 355.155829][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 355.169501][ T5822] cdc_wdm 2-1:1.0: Unknown control protocol [ 355.171452][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.187431][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.269107][ T5884] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.04 [ 355.292831][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.310569][ T9280] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 355.343846][ T5822] usb 2-1: USB disconnect, device number 44 [ 355.355563][ T5884] usb 3-1: config 0 descriptor?? [ 355.377482][ T89] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 355.416151][ T89] usb 1-1: USB disconnect, device number 30 [ 355.452379][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.481613][ T9294] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 355.490648][ T9294] netlink: 'syz.4.847': attribute type 4 has an invalid length. [ 355.498685][ T9294] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.847'. [ 355.518902][ T9294] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 355.528435][ T9294] netlink: 'syz.4.847': attribute type 4 has an invalid length. [ 355.555863][ T9294] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.847'. [ 356.201378][ T30] audit: type=1400 audit(1765482477.098:467): avc: denied { override_creds } for pid=9295 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 356.414749][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 356.421196][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.432824][ T5884] usb 3-1: USB disconnect, device number 33 [ 356.699945][ T9313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9313 comm=syz.4.851 [ 356.787236][ T30] audit: type=1804 audit(1765482478.038:468): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.853" name="/newroot/152/file0" dev="tmpfs" ino=849 res=1 errno=0 [ 356.787816][ T9317] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 356.883714][ T9318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.226619][ T9317] ref_ctr increment failed for inode: 0x351 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd5a4c0 [ 357.249656][ T9316] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 357.260478][ T9316] ref_ctr decrement failed for inode: 0x351 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd5a4c0 [ 357.272231][ T9316] uprobe: syz.1.853:9316 failed to unregister, leaking uprobe [ 357.511494][ T5884] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 358.635872][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 358.657050][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.671255][ T5884] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.685178][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 358.692544][ T5884] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 358.702418][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.710849][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 358.720818][ T5884] usb 4-1: config 0 descriptor?? [ 358.751522][ T9326] netlink: 52 bytes leftover after parsing attributes in process `syz.4.856'. [ 358.761273][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 358.797710][ T9326] netlink: 52 bytes leftover after parsing attributes in process `syz.4.856'. [ 358.808293][ T9326] netlink: 52 bytes leftover after parsing attributes in process `syz.4.856'. [ 358.818528][ T9338] netlink: 'syz.1.858': attribute type 11 has an invalid length. [ 358.827888][ T9343] input: syz0 as /devices/virtual/input/input48 [ 358.848369][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.849516][ T9338] netlink: 'syz.1.858': attribute type 13 has an invalid length. [ 358.855701][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.950228][ T9344] bridge0: entered allmulticast mode [ 359.065975][ T9338] bridge_slave_1: left allmulticast mode [ 359.072048][ T9350] overlayfs: missing 'lowerdir' [ 359.099201][ T9338] bridge_slave_1: left promiscuous mode [ 359.105392][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.260041][ T9338] bridge_slave_0: left allmulticast mode [ 359.287975][ T9338] bridge_slave_0: left promiscuous mode [ 359.294960][ T9356] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 359.304419][ T30] audit: type=1804 audit(1765482480.538:469): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.865" name="/newroot/192/file0" dev="tmpfs" ino=1056 res=1 errno=0 [ 359.316974][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.327727][ T5932] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 359.370556][ T9356] ref_ctr increment failed for inode: 0x420 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021b5bd40 [ 359.861502][ T9355] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 359.870486][ T9355] ref_ctr decrement failed for inode: 0x420 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888021b5bd40 [ 359.881706][ T9355] uprobe: syz.2.865:9355 failed to unregister, leaking uprobe [ 359.960695][ T5932] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.982579][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 359.989548][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.006420][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 360.032017][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.056060][ T5884] usb 4-1: USB disconnect, device number 37 [ 360.252963][ T5932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.265205][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9366 comm=syz.2.866 [ 361.309062][ T5932] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.320491][ T5932] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.453470][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.496019][ T5932] usb 1-1: Product: syz [ 361.500215][ T5932] usb 1-1: Manufacturer: syz [ 361.538769][ T5932] cdc_wdm 1-1:1.0: skipping garbage [ 361.547829][ T5932] cdc_wdm 1-1:1.0: skipping garbage [ 361.983588][ T5932] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 361.995195][ T5932] cdc_wdm 1-1:1.0: Unknown control protocol [ 362.028458][ T5932] usb 1-1: USB disconnect, device number 31 [ 362.093482][ T30] audit: type=1400 audit(1765482483.338:470): avc: denied { ioctl } for pid=9386 comm="syz.3.873" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 363.237906][ T9420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9420 comm=syz.3.880 [ 363.693454][ T9439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.884'. [ 363.719057][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 363.728162][ T9439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.884'. [ 363.813620][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 363.825443][ T9439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.884'. [ 365.772915][ T9458] overlayfs: missing 'lowerdir' [ 365.839097][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 365.887738][ T30] audit: type=1400 audit(1765482487.128:471): avc: denied { connect } for pid=9459 comm="syz.0.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 366.046647][ T5932] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 366.177476][ T5884] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 366.207321][ T5932] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.217180][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.236345][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.245572][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.256704][ T7053] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 366.264840][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.278573][ T5932] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.298189][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.301816][ T9469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.896'. [ 366.316061][ T5932] usb 4-1: Product: syz [ 366.320265][ T5932] usb 4-1: Manufacturer: syz [ 366.325537][ T9469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.896'. [ 366.339762][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 366.345028][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 366.352164][ T5932] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 366.358598][ T5932] cdc_wdm 4-1:1.0: Unknown control protocol [ 366.367541][ T9469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.896'. [ 366.378196][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 366.388260][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 366.397272][ T5884] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.406383][ T5884] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.416105][ T5884] usb 3-1: config 1 has no interface number 1 [ 366.427443][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 366.443219][ T7053] usb 1-1: unable to get BOS descriptor or descriptor too short [ 366.456567][ T7053] usb 1-1: not running at top speed; connect to a high speed hub [ 366.478699][ T7053] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.490341][ T7053] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.505555][ T7053] usb 1-1: config 1 has no interface number 1 [ 366.512611][ T7053] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 366.532835][ T7053] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.554774][ T9458] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 366.582752][ T7053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.593300][ T7053] usb 1-1: Product: syz [ 366.598985][ T7053] usb 1-1: Manufacturer: syz [ 366.606278][ T7053] usb 1-1: SerialNumber: syz [ 366.626735][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.641233][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.650328][ T5884] usb 3-1: Product: syz [ 366.668966][ T10] usb 4-1: USB disconnect, device number 38 [ 366.702951][ T5884] usb 3-1: Manufacturer: syz [ 366.721419][ T5884] usb 3-1: SerialNumber: syz [ 366.865044][ T9464] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 367.060411][ T9464] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 367.062496][ T5884] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 367.100627][ T9464] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.895'. [ 367.122548][ T5884] usb 3-1: USB disconnect, device number 34 [ 367.174499][ T7053] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 367.184569][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.222100][ T7053] usb 1-1: USB disconnect, device number 32 [ 367.271856][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.026168][ T9481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.897'. [ 368.055426][ T30] audit: type=1804 audit(1765482489.298:472): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.902" name="/newroot/173/file0" dev="tmpfs" ino=951 res=1 errno=0 [ 368.078637][ T9484] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 368.089299][ T9484] ref_ctr increment failed for inode: 0x3b7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801f76b100 [ 368.161596][ T9482] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 368.181616][ T9482] ref_ctr decrement failed for inode: 0x3b7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801f76b100 [ 368.196687][ T9482] uprobe: syz.3.902:9482 failed to unregister, leaking uprobe [ 368.341486][ T9493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9493 comm=syz.4.900 [ 369.924655][ T9518] overlayfs: missing 'lowerdir' [ 370.060213][ T9521] libceph: resolve '400' (ret=-3): failed [ 370.205862][ T7053] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 370.467138][ T7053] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.478412][ T7053] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.500713][ T7053] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.534134][ T7053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.575175][ T7053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.604741][ T7053] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.626744][ T7053] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.659772][ T7053] usb 2-1: Product: syz [ 370.671640][ T7053] usb 2-1: Manufacturer: syz [ 370.704092][ T7053] cdc_wdm 2-1:1.0: skipping garbage [ 370.742646][ T7053] cdc_wdm 2-1:1.0: skipping garbage [ 370.756547][ T7053] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 370.771464][ T7053] cdc_wdm 2-1:1.0: Unknown control protocol [ 370.926762][ T9518] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 370.946602][ T7053] usb 2-1: USB disconnect, device number 45 [ 372.043012][ T9557] tmpfs: Bad value for 'mpol' [ 372.043022][ T30] audit: type=1400 audit(1765482493.288:473): avc: denied { mounton } for pid=9556 comm="syz.1.921" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 373.007685][ T9564] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 373.022863][ T9564] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 373.654966][ T30] audit: type=1400 audit(1765482494.898:474): avc: denied { audit_write } for pid=9577 comm="syz.0.925" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 375.054253][ T30] audit: type=1326 audit(1765482496.298:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9575 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2fb8f749 code=0x7fc00000 [ 375.343433][ T9602] overlayfs: missing 'lowerdir' [ 375.488358][ T9606] __nla_validate_parse: 2 callbacks suppressed [ 375.488430][ T9606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.932'. [ 375.503721][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 375.514408][ T9606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.932'. [ 375.523688][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 375.533059][ T9606] netlink: 52 bytes leftover after parsing attributes in process `syz.2.932'. [ 376.224711][ T30] audit: type=1400 audit(1765482497.468:476): avc: denied { execute } for pid=9612 comm="syz.4.936" path="/file1" dev="ramfs" ino=24267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 376.404558][ T9618] openvswitch: netlink: Actions may not be safe on all matching packets [ 376.447599][ T9618] vlan2: entered promiscuous mode [ 376.470495][ T9618] vlan2: entered allmulticast mode [ 376.488806][ T9618] hsr_slave_1: entered allmulticast mode [ 376.518587][ T30] audit: type=1400 audit(1765482497.768:477): avc: denied { write } for pid=9616 comm="syz.1.937" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 376.547419][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 376.793932][ T9630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9630 comm=syz.4.939 [ 378.452227][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.458713][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.153441][ T30] audit: type=1400 audit(1765482501.398:478): avc: denied { connect } for pid=9652 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 380.199390][ T9656] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 380.207907][ T9656] bond0: (slave wlan1): Opening slave failed [ 380.406085][ T9663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.945'. [ 380.431843][ T9663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.945'. [ 380.468535][ T9663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.945'. [ 380.477682][ T5932] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 380.695809][ T9678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9678 comm=syz.0.951 [ 380.710392][ T7874] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 380.789091][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.797956][ T5932] usb 3-1: not running at top speed; connect to a high speed hub [ 380.810262][ T5932] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 380.819537][ T5932] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.829812][ T5932] usb 3-1: config 1 has no interface number 1 [ 380.837175][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 380.858442][ T5932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.986275][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.994388][ T5932] usb 3-1: Product: syz [ 380.998592][ T5932] usb 3-1: Manufacturer: syz [ 381.004033][ T5932] usb 3-1: SerialNumber: syz [ 381.426434][ T9651] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 381.493262][ T7874] usb 2-1: device descriptor read/64, error -71 [ 381.525902][ T9651] netlink: 'syz.2.946': attribute type 4 has an invalid length. [ 381.533668][ T9651] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.946'. [ 381.696744][ T9686] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 381.704417][ T9686] netlink: 'syz.2.946': attribute type 4 has an invalid length. [ 382.291801][ T9686] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.946'. [ 382.746044][ T7874] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 382.830100][ T5932] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 382.889235][ T7874] usb 2-1: device descriptor read/64, error -71 [ 382.906026][ T5932] usb 3-1: USB disconnect, device number 35 [ 382.969336][ T9672] udevd[9672]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.031445][ T7874] usb usb2-port1: attempt power cycle [ 383.385838][ T7874] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 383.407038][ T7874] usb 2-1: device descriptor read/8, error -71 [ 383.810632][ T9717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9717 comm=syz.2.962 [ 384.397797][ T30] audit: type=1804 audit(1765482505.648:479): pid=9722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.959" name="/newroot/173/file0" dev="tmpfs" ino=961 res=1 errno=0 [ 384.438316][ T9722] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 384.480263][ T9722] ref_ctr increment failed for inode: 0x3c1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880289155c0 [ 384.570427][ T9707] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 384.595874][ T9083] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 384.615807][ T9707] ref_ctr decrement failed for inode: 0x3c1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880289155c0 [ 384.702557][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 384.769653][ T9083] usb 4-1: no configurations [ 384.831102][ T9707] uprobe: syz.0.959:9707 failed to unregister, leaking uprobe [ 384.842877][ T9083] usb 4-1: can't read configurations, error -22 [ 384.976419][ T9083] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 385.377184][ T9083] usb 4-1: no configurations [ 385.383472][ T9083] usb 4-1: can't read configurations, error -22 [ 385.406087][ T9083] usb usb4-port1: attempt power cycle [ 385.765891][ T9083] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 385.807059][ T9083] usb 4-1: no configurations [ 385.819553][ T9083] usb 4-1: can't read configurations, error -22 [ 385.914087][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.945315][ T9705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.015979][ T9083] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 386.058232][ T9083] usb 4-1: no configurations [ 386.066826][ T9083] usb 4-1: can't read configurations, error -22 [ 386.074459][ T9083] usb usb4-port1: unable to enumerate USB device [ 386.249613][ T3819] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.273002][ T3819] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.309529][ T3819] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.375889][ T3819] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.478449][ T9749] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 386.512971][ T9749] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 386.580673][ T9751] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 386.603540][ T9751] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 386.621875][ T9751] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 386.635435][ T9751] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 387.306060][ T9766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9766 comm=syz.4.974 [ 387.946287][ T9083] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 387.997246][ T5822] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 388.170067][ T5822] usb 3-1: device descriptor read/64, error -71 [ 388.234185][ T9083] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.274745][ T9083] usb 2-1: not running at top speed; connect to a high speed hub [ 388.283972][ T9083] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 388.335111][ T9083] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 388.446443][ T9083] usb 2-1: config 1 has no interface number 1 [ 388.452578][ T9083] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 388.905211][ T5822] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 388.913891][ T9777] netlink: 'syz.3.977': attribute type 2 has an invalid length. [ 388.921969][ T9777] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 388.967881][ T9778] input: syz0 as /devices/virtual/input/input49 [ 389.172627][ T9083] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.225824][ T5822] usb 3-1: device descriptor read/64, error -71 [ 389.249979][ T9083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.301624][ T9083] usb 2-1: Product: syz [ 389.327650][ T9083] usb 2-1: Manufacturer: syz [ 389.342993][ T9083] usb 2-1: SerialNumber: syz [ 389.388862][ T5822] usb usb3-port1: attempt power cycle [ 389.393862][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 389.795897][ T5822] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 389.854733][ T9083] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 389.901544][ T9083] usb 2-1: USB disconnect, device number 50 [ 390.026964][ T5822] usb 3-1: device not accepting address 38, error -71 [ 390.060000][ T9672] udevd[9672]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.755929][ T5822] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 390.794542][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 390.815687][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 390.828583][ T9783] infiniband syz1: set active [ 390.834222][ T9783] infiniband syz1: added syz_tun [ 390.845881][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 390.893553][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 390.935474][ T5822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 390.960946][ T9783] RDS/IB: syz1: added [ 390.975791][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.005638][ T9783] smc: adding ib device syz1 with port count 1 [ 391.005969][ T9083] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 391.015868][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.036095][ T9783] smc: ib device syz1 port 1 has no pnetid [ 391.073194][ T5822] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 391.115814][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.125801][ T5822] usb 3-1: Product: syz [ 391.129983][ T5822] usb 3-1: Manufacturer: syz [ 391.165821][ T5822] usb 3-1: SerialNumber: syz [ 391.176598][ T5822] usb 3-1: config 0 descriptor?? [ 391.182226][ T9788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 391.196155][ T9083] usb 1-1: Using ep0 maxpacket: 16 [ 391.207020][ T5822] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 391.229037][ T9083] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 391.252381][ T9083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.286594][ T9083] usb 1-1: config 0 descriptor?? [ 391.322597][ T9083] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 391.396091][ T5932] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 391.561994][ T5932] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 391.587622][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.621837][ T5932] usb 2-1: config 0 has no interface number 0 [ 391.643683][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 391.672684][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.692404][ T5932] usb 2-1: Product: syz [ 391.706914][ T5932] usb 2-1: Manufacturer: syz [ 391.711651][ T30] audit: type=1326 audit(1765482512.958:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 391.741902][ T5932] usb 2-1: SerialNumber: syz [ 391.777921][ T30] audit: type=1326 audit(1765482512.958:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 391.811337][ T5932] usb 2-1: config 0 descriptor?? [ 391.860337][ T30] audit: type=1326 audit(1765482512.958:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 391.937035][ T5932] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 391.938467][ T30] audit: type=1326 audit(1765482512.958:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 392.052545][ T30] audit: type=1326 audit(1765482512.958:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 392.104056][ T30] audit: type=1326 audit(1765482512.968:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 392.128011][ T30] audit: type=1326 audit(1765482512.968:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 392.156870][ T30] audit: type=1326 audit(1765482512.968:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3338f749 code=0x7ffc0000 [ 392.183528][ T30] audit: type=1326 audit(1765482512.968:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e3338f34b code=0x7ffc0000 [ 392.207056][ T30] audit: type=1326 audit(1765482512.968:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e3338f34b code=0x7ffc0000 [ 392.493701][ T5932] usb 2-1: USB disconnect, device number 51 [ 392.797937][ T9083] gspca_sonixj: reg_w1 err -71 [ 392.817350][ T9083] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 392.838770][ T9083] usb 1-1: USB disconnect, device number 33 [ 392.954245][ T5932] usb 3-1: USB disconnect, device number 39 [ 393.855440][ T9818] lo speed is unknown, defaulting to 1000 [ 393.861583][ T9818] lo speed is unknown, defaulting to 1000 [ 393.868239][ T9818] lo speed is unknown, defaulting to 1000 [ 393.875938][ T9818] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.887533][ T9818] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 393.961561][ T9818] lo speed is unknown, defaulting to 1000 [ 393.968533][ T9818] lo speed is unknown, defaulting to 1000 [ 393.975006][ T9818] lo speed is unknown, defaulting to 1000 [ 393.981584][ T9818] lo speed is unknown, defaulting to 1000 [ 393.988054][ T9818] lo speed is unknown, defaulting to 1000 [ 394.275937][ T7053] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 394.745300][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 394.754284][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 394.764099][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 394.773748][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 394.791167][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 394.802354][ T7053] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.823663][ T7053] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 394.863494][ T7053] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.889730][ T7053] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.924838][ T7053] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.944439][ T7053] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.962835][ T7053] usb 3-1: Product: syz [ 394.967261][ T7053] usb 3-1: Manufacturer: syz [ 394.993243][ T7053] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 395.161948][ T9836] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 395.189259][ T9836] CIFS mount error: No usable UNC path provided in device string! [ 395.189259][ T9836] [ 395.196920][ T7053] usb 3-1: USB disconnect, device number 40 [ 395.199516][ T9836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.440360][ T9835] Cannot find set identified by id 2 to match [ 397.051810][ T9858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.884726][ T9872] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1003'. [ 398.901565][ T9872] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1003'. [ 398.922849][ T9872] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1003'. [ 399.808018][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 399.808033][ T30] audit: type=1400 audit(1765482521.058:568): avc: denied { bind } for pid=9886 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.079772][ T30] audit: type=1400 audit(1765482521.158:569): avc: denied { accept } for pid=9886 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.568133][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1011'. [ 400.582313][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 400.605382][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1011'. [ 400.614916][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 400.749645][ T9913] comedi comedi3: pcl711: I/O port conflict (0x4f23,16) [ 400.807854][ T9908] lo speed is unknown, defaulting to 1000 [ 400.920699][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1011'. [ 401.935465][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1012'. [ 401.985364][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1012'. [ 402.032655][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1012'. [ 402.666365][ T9933] CIFS mount error: No usable UNC path provided in device string! [ 402.666365][ T9933] [ 402.676567][ T9933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.516234][ T5932] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 403.634736][ T9949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1024'. [ 403.644838][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 403.676018][ T9949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1024'. [ 403.676054][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 403.699550][ T5932] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 403.710699][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.737296][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.754015][ T5932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.766701][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.774933][ T5932] usb 3-1: Product: syz [ 403.779573][ T5932] usb 3-1: Manufacturer: syz [ 403.784186][ T5932] usb 3-1: SerialNumber: syz [ 403.816340][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 403.827512][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.886266][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.905791][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 403.915025][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.947210][ T5929] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 404.010424][ T5898] usb 4-1: config 0 descriptor?? [ 404.582047][ T5932] usb 3-1: 0:2 : does not exist [ 404.788202][ T5929] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.797172][ T5929] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 404.812058][ T5898] kye 0003:0458:5016.000E: control desc unexpectedly large [ 404.835197][ T5898] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input50 [ 404.867875][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.886722][ T5929] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.912452][ T5929] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.929771][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.941086][ T5929] usb 1-1: Product: syz [ 404.947671][ T5929] usb 1-1: Manufacturer: syz [ 404.959461][ T5898] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input51 [ 404.982471][ T5929] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 405.049696][ T5898] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 405.192824][ T9083] usb 1-1: USB disconnect, device number 34 [ 406.092897][ C0] kye 0003:0458:5016.000E: usb_submit_urb(ctrl) failed: -1 [ 406.504694][ T9935] 9p: Bad value for 'rfdno' [ 406.810420][ T30] audit: type=1400 audit(1765482528.058:570): avc: denied { read } for pid=9983 comm="syz.3.1036" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 406.828830][ T9989] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 406.834038][ T30] audit: type=1400 audit(1765482528.058:571): avc: denied { open } for pid=9983 comm="syz.3.1036" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 406.866391][ T30] audit: type=1400 audit(1765482528.078:572): avc: denied { load_policy } for pid=9983 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 406.897876][ T9987] binder: 9983:9987 ioctl 4c00 ffffffffffffffff returned -22 [ 406.905644][ T9989] SELinux: failed to load policy [ 406.914521][ T5929] usb 4-1: USB disconnect, device number 43 [ 407.027432][ T9083] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 407.188117][ T9083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.231126][ T9083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.327124][ T9083] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.393203][ T9083] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.406026][ T9083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.460078][ T9083] usb 1-1: config 0 descriptor?? [ 407.584264][T10005] __nla_validate_parse: 7 callbacks suppressed [ 407.584294][T10005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1037'. [ 407.767467][T10005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1037'. [ 407.841499][ T5932] usb 3-1: USB disconnect, device number 41 [ 408.215872][T10005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1037'. [ 408.245400][ T9666] udevd[9666]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.685932][ T5932] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 408.938928][T10002] uprobe: syz.3.1037:10002 failed to unregister, leaking uprobe [ 409.007464][ T5932] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.032499][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.066341][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.105877][T10014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27243 sclass=netlink_route_socket pid=10014 comm=syz.0.1034 [ 409.137442][ T9083] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 409.162323][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.197509][T10002] uprobe: syz.3.1037:10002 failed to unregister, leaking uprobe [ 409.212163][ T5932] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.239093][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.268119][ T5932] usb 3-1: Product: syz [ 409.272467][ T5932] usb 3-1: Manufacturer: syz [ 409.320771][ T5932] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 409.623977][ T5929] usb 3-1: USB disconnect, device number 42 [ 410.037364][ T30] audit: type=1400 audit(1765482531.288:573): avc: denied { ioctl } for pid=10039 comm="syz.4.1051" path="socket:[25568]" dev="sockfs" ino=25568 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 410.278065][ T30] audit: type=1400 audit(1765482531.338:574): avc: denied { read } for pid=10042 comm="syz.3.1052" dev="sockfs" ino=25572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.500089][ C1] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 410.645825][ T5898] usb 1-1: reset high-speed USB device number 35 using dummy_hcd [ 411.799542][T10056] overlayfs: missing 'lowerdir' [ 412.307367][ T5929] usb 1-1: USB disconnect, device number 35 [ 413.462964][ T30] audit: type=1804 audit(1765482534.708:575): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1059" name="file0" dev="tmpfs" ino=1406 res=1 errno=0 [ 415.966165][ T5932] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 416.103925][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1063'. [ 416.121460][ T5932] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.133863][T10084] bridge0: port 3(gretap0) entered disabled state [ 417.101719][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.117060][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.124396][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.216074][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.225425][ T5932] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.244810][ T5932] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.274648][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.284166][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.309125][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.327065][ T5932] usb 1-1: Product: syz [ 417.422316][ T5932] usb 1-1: Manufacturer: syz [ 417.465832][ T5932] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 417.467321][ T7874] syz1: Port: 1 Link DOWN [ 417.480708][ T4163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.505806][ T4163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.514853][ T4163] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.706317][ T30] audit: type=1400 audit(1765482538.958:576): avc: denied { read } for pid=10106 comm="syz.3.1070" name="file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 417.787021][ T7874] usb 1-1: USB disconnect, device number 36 [ 417.811791][ T30] audit: type=1400 audit(1765482538.978:577): avc: denied { open } for pid=10106 comm="syz.3.1070" path="/205/file0/file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 418.157134][ T4163] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.632822][T10130] netlink: 540 bytes leftover after parsing attributes in process `syz.3.1075'. [ 419.736755][ T30] audit: type=1400 audit(1765482540.988:578): avc: denied { setattr } for pid=10136 comm="syz.2.1077" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 419.866351][ T30] audit: type=1400 audit(1765482540.988:579): avc: denied { setopt } for pid=10136 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 419.877506][T10143] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1075'. [ 420.470876][ T9083] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 420.650772][T10151] rdma_rxe: rxe_newlink: failed to add syz_tun [ 420.746821][ T9083] usb 1-1: Using ep0 maxpacket: 32 [ 420.882538][ T9083] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.894942][ T9083] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 421.058006][ T9083] usb 1-1: config 1 has no interface number 1 [ 421.084512][ T9083] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 190, changing to 7 [ 421.139849][ T9083] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.166076][ T9083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.254340][ T9083] usb 1-1: Product: syz [ 421.276629][ T9083] usb 1-1: Manufacturer: syz [ 421.281299][ T9083] usb 1-1: SerialNumber: syz [ 421.945818][ T7874] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 422.097689][ T7874] usb 4-1: Using ep0 maxpacket: 32 [ 422.145482][ T7874] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.157568][ T7874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 422.170272][ T7874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 422.198692][ T7874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 422.214027][ T7874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.225026][ T7874] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 422.255805][ T7874] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 422.265282][ T7874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.274389][ T7874] usb 4-1: Product: syz [ 422.383712][ T7874] usb 4-1: Manufacturer: syz [ 422.414450][ T7874] usb 4-1: SerialNumber: syz [ 422.427892][ T7874] usb 4-1: config 0 descriptor?? [ 422.440753][T10158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 422.449560][ T7874] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 422.575327][T10178] xt_connbytes: Forcing CT accounting to be enabled [ 422.589259][T10178] Cannot find del_set index 1 as target [ 422.836517][ T30] audit: type=1400 audit(1765482544.088:580): avc: denied { lock } for pid=10189 comm="syz.4.1088" path="socket:[26809]" dev="sockfs" ino=26809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.922978][ T9083] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 423.006045][ T9083] usb 1-1: 2:1 : format type 6 is not supported yet [ 423.063419][ T9083] usb 1-1: USB disconnect, device number 37 [ 423.227836][ T9672] udevd[9672]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.844922][T10205] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 423.852900][T10205] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 423.861190][T10205] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1092'. [ 423.871347][T10205] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 423.879315][T10205] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 423.887311][T10205] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1092'. [ 424.039941][ T5898] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 424.062939][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 424.072186][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 424.128826][T10210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.137462][T10210] bond0: (slave bond1): Enslaving as an active interface with an up link [ 424.191598][ T5822] usb 4-1: USB disconnect, device number 44 [ 424.204438][T10214] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1094'. [ 424.229189][ T5898] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 424.245763][ T5898] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 424.313980][ T5898] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=fe.24 [ 424.325897][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.343945][ T5898] usb 1-1: Product: syz [ 424.353877][ T5898] usb 1-1: Manufacturer: syz [ 424.358525][ T5898] usb 1-1: SerialNumber: syz [ 424.570146][T10219] input: syz0 as /devices/virtual/input/input52 [ 425.490854][T10214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.506629][T10214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.533942][T10214] bond0 (unregistering): (slave bond1): Releasing backup interface [ 425.544646][T10214] bond0 (unregistering): Released all slaves [ 425.604974][T10203] bond2: (slave bond_slave_1): Device is not our slave [ 425.614319][T10203] bond2: option active_slave: invalid value (bond_slave_1) [ 425.659766][T10203] bond2 (unregistering): Released all slaves [ 425.808855][ T9083] usb 1-1: USB disconnect, device number 38 [ 426.033310][ T5822] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 426.229975][ T5822] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 426.245844][ T5822] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 426.466481][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 426.496208][ T5822] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.529104][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 426.570492][ T5822] usb 3-1: Product: syz [ 426.581517][ T5822] usb 3-1: Manufacturer: syz [ 426.592295][ T5822] usb 3-1: SerialNumber: syz [ 426.608300][ T5822] usb 3-1: config 0 descriptor?? [ 426.637733][ T5822] usb 3-1: selecting invalid altsetting 0 [ 426.869479][T10238] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 426.942812][ T30] audit: type=1400 audit(1765482548.188:581): avc: denied { setattr } for pid=10237 comm="syz.2.1099" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 427.929560][T10237] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 427.943270][ T5822] usb 3-1: USB disconnect, device number 43 [ 428.623559][ T30] audit: type=1400 audit(1765482549.868:582): avc: denied { getopt } for pid=10275 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.688234][ T30] audit: type=1400 audit(1765482549.908:583): avc: denied { write } for pid=10275 comm="syz.3.1111" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 429.351267][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 429.905982][ T5822] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 430.172303][ T5822] usb 1-1: too many configurations: 149, using maximum allowed: 8 [ 430.296380][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 430.335814][ T5822] usb 1-1: can't read configurations, error -61 [ 430.566707][ T5822] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 430.790140][T10299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1118'. [ 430.806296][ T5822] usb 1-1: too many configurations: 149, using maximum allowed: 8 [ 430.815679][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 430.823818][ T5822] usb 1-1: can't read configurations, error -61 [ 430.846433][ T5822] usb usb1-port1: attempt power cycle [ 430.865968][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 430.887023][T10299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1118'. [ 430.930268][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 430.944764][T10299] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1118'. [ 431.065435][ T30] audit: type=1400 audit(1765482552.308:584): avc: denied { bind } for pid=10307 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 431.157279][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1121'. [ 431.166669][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1121'. [ 431.295209][ T5822] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 431.311173][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1121'. [ 431.331786][ T5822] usb 1-1: too many configurations: 149, using maximum allowed: 8 [ 431.342534][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 431.350753][ T5822] usb 1-1: can't read configurations, error -61 [ 431.359877][T10316] hfs: can't find a HFS filesystem on dev nullb0 [ 431.765968][ T5822] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 431.797729][ T5822] usb 1-1: too many configurations: 149, using maximum allowed: 8 [ 431.808247][ T5822] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 431.816988][ T5822] usb 1-1: can't read configurations, error -61 [ 431.823772][ T5822] usb usb1-port1: unable to enumerate USB device [ 433.247050][ T30] audit: type=1400 audit(1765482554.498:585): avc: denied { ioctl } for pid=10332 comm="syz.0.1128" path="socket:[26989]" dev="sockfs" ino=26989 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 433.378320][T10343] netlink: 2276 bytes leftover after parsing attributes in process `syz.0.1128'. [ 433.461405][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.498212][T10340] bond0: (slave rose0): Enslaving as an active interface with an up link [ 433.525813][ T30] audit: type=1400 audit(1765482554.618:586): avc: denied { write } for pid=10332 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 433.742187][T10343] veth0_macvtap: left promiscuous mode [ 434.250230][ T30] audit: type=1400 audit(1765482555.488:587): avc: denied { read write } for pid=10354 comm="syz.2.1131" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 434.251309][ T10] hid_parser_main: 2628 callbacks suppressed [ 434.251324][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 434.273894][ C1] llc_conn_state_process: llc_conn_service failed [ 434.364474][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.392129][ T30] audit: type=1400 audit(1765482555.488:588): avc: denied { open } for pid=10354 comm="syz.2.1131" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 434.510855][ T30] audit: type=1400 audit(1765482555.758:589): avc: denied { connect } for pid=10373 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.554796][T10366] fido_id[10366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 434.763889][ T30] audit: type=1400 audit(1765482555.828:590): avc: denied { append } for pid=10373 comm="syz.2.1134" name="pfkey" dev="proc" ino=4026533457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 434.894452][T10378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1133'. [ 434.919681][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 434.944360][T10378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1133'. [ 434.955245][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 434.971971][T10378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1133'. [ 435.576250][T10389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1136'. [ 435.585361][T10389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1136'. [ 435.621133][T10389] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1136'. [ 439.747578][T10451] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 439.755390][T10451] netlink: 'syz.4.1150': attribute type 4 has an invalid length. [ 439.775438][T10451] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1150'. [ 439.790644][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797771][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.827795][T10457] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 440.429001][T10457] netlink: 'syz.4.1150': attribute type 4 has an invalid length. [ 440.444356][T10457] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1150'. [ 440.933959][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 441.002321][ T30] audit: type=1400 audit(1765482562.058:591): avc: denied { append } for pid=10465 comm="syz.3.1152" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 441.080062][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 441.125788][ T30] audit: type=1400 audit(1765482562.058:592): avc: denied { open } for pid=10465 comm="syz.3.1152" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 441.201917][ T30] audit: type=1400 audit(1765482562.448:593): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 443.460665][T10535] overlayfs: missing 'lowerdir' [ 443.504503][T10525] mmap: syz.3.1162 (10525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 444.415850][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 444.486029][ T30] audit: type=1326 audit(1765482565.728:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.4.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2fb8f749 code=0x0 [ 444.572574][ T30] audit: type=1400 audit(1765482565.818:595): avc: denied { connect } for pid=10555 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.625889][ T30] audit: type=1400 audit(1765482565.858:596): avc: denied { name_bind } for pid=10555 comm="syz.0.1170" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 444.673911][ T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 444.683614][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.696054][ T30] audit: type=1400 audit(1765482565.858:597): avc: denied { node_bind } for pid=10555 comm="syz.0.1170" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 444.725437][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.753441][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.772370][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.791441][ T10] usb 3-1: Product: syz [ 444.800376][ T10] usb 3-1: Manufacturer: syz [ 444.844369][ T10] usb 3-1: SerialNumber: syz [ 444.865349][ T10] usb 3-1: config 0 descriptor?? [ 445.643206][T10592] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 445.658020][T10592] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 445.676028][T10592] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1176'. [ 445.695791][ T7874] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 445.704418][T10593] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 445.724996][T10593] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 445.746639][T10593] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1176'. [ 446.088598][ T7874] usb 4-1: device descriptor read/64, error -71 [ 446.325796][ T7874] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 446.485831][ T7874] usb 4-1: device descriptor read/64, error -71 [ 446.615629][ T7874] usb usb4-port1: attempt power cycle [ 446.997298][ T7874] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 447.053318][ T7874] usb 4-1: device descriptor read/8, error -71 [ 447.263308][T10613] overlayfs: missing 'lowerdir' [ 447.325808][ T7874] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 447.357151][ T7874] usb 4-1: device descriptor read/8, error -71 [ 447.396143][T10615] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'. [ 447.406074][T10615] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'. [ 447.445546][T10615] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1178'. [ 447.476932][ T7874] usb usb4-port1: unable to enumerate USB device [ 447.496494][ T5932] usb 3-1: USB disconnect, device number 44 [ 447.535840][ T5822] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 447.707151][ T5822] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.716017][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.349805][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.376647][T10624] input: syz0 as /devices/virtual/input/input53 [ 448.393254][ T5822] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.460747][ T5822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.485786][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.502534][ T5822] usb 1-1: Product: syz [ 448.522378][ T5822] usb 1-1: Manufacturer: syz [ 448.779503][ T5822] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 449.320001][ T5822] usb 1-1: USB disconnect, device number 43 [ 449.897346][ T5822] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 450.070383][ T5822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 450.376303][ T5822] usb 4-1: not running at top speed; connect to a high speed hub [ 450.393906][ T5822] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.910536][T10655] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 450.919346][T10655] ref_ctr increment failed for inode: 0x616 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd055c0 [ 450.932285][T10654] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 450.941209][T10654] ref_ctr decrement failed for inode: 0x616 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807dd055c0 [ 450.953258][T10654] uprobe: syz.4.1192:10654 failed to unregister, leaking uprobe [ 450.961840][ T30] audit: type=1804 audit(1765482572.158:598): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1192" name="file0" dev="tmpfs" ino=1558 res=1 errno=0 [ 451.043381][ T5822] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 451.059462][T10656] kvm: apic: phys broadcast and lowest prio [ 451.066939][ T5822] usb 4-1: config 1 has no interface number 1 [ 451.073597][ T5822] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 451.125062][ T5822] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.134492][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.156254][ T5822] usb 4-1: Product: syz [ 451.168385][ T5822] usb 4-1: Manufacturer: syz [ 451.180472][ T5822] usb 4-1: SerialNumber: syz [ 451.375259][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 451.406519][T10641] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 451.414316][T10641] netlink: 'syz.3.1187': attribute type 4 has an invalid length. [ 451.422096][T10641] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1187'. [ 451.422510][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 451.440936][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 451.450350][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 451.460121][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1193'. [ 451.460423][T10668] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 451.491105][T10668] netlink: 'syz.3.1187': attribute type 4 has an invalid length. [ 451.499208][T10668] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1187'. [ 451.556057][ T5822] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 451.588776][T10664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1195'. [ 451.617713][ T5822] usb 4-1: USB disconnect, device number 49 [ 451.633722][T10664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1195'. [ 451.765233][T10476] udevd[10476]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.783376][T10664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1195'. [ 452.604130][T10689] overlayfs: missing 'lowerdir' [ 453.025852][ T5822] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 453.289769][T10678] xt_hashlimit: max too large, truncated to 1048576 [ 453.586866][ T5822] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.595520][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.621672][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.646461][ T5822] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.700678][ T5822] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.738853][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.757248][ T5822] usb 4-1: Product: syz [ 453.769265][ T5822] usb 4-1: Manufacturer: syz [ 454.023942][T10706] input: syz0 as /devices/virtual/input/input54 [ 454.255045][ T5822] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 455.084699][ T5932] usb 4-1: USB disconnect, device number 50 [ 457.516856][T10726] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 457.580497][T10731] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 457.639255][T10726] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 457.674292][T10726] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1212'. [ 457.725831][T10731] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 457.768932][T10731] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1212'. [ 458.045098][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 459.125955][ T30] audit: type=1400 audit(1765482580.298:599): avc: denied { read } for pid=10767 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.165839][ T30] audit: type=1400 audit(1765482580.408:600): avc: denied { connect } for pid=10767 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.550465][T10782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1221'. [ 460.633258][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 460.646228][T10782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1221'. [ 460.655421][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 460.675826][T10782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1221'. [ 461.429418][T10795] input: syz0 as /devices/virtual/input/input55 [ 461.531956][T10803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1224'. [ 461.610136][ T5932] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 461.858587][T10803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1224'. [ 461.895926][ T5932] usb 3-1: device descriptor read/64, error -71 [ 462.168195][ T5932] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 462.637642][T10809] overlayfs: failed to resolve './file1': -2 [ 462.739390][ T5932] usb 3-1: device descriptor read/64, error -71 [ 462.866227][ T5932] usb usb3-port1: attempt power cycle [ 463.217255][ T5932] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 463.246921][ T5932] usb 3-1: device descriptor read/8, error -71 [ 463.660389][ T5932] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 463.686331][ T5932] usb 3-1: device descriptor read/8, error -71 [ 463.800281][ T5932] usb usb3-port1: unable to enumerate USB device [ 463.942772][T10839] __nla_validate_parse: 1 callbacks suppressed [ 463.942785][T10839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1235'. [ 463.973105][T10839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1235'. [ 464.117052][T10839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1235'. [ 466.053826][ T5822] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 466.313420][ T5822] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 466.325050][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.377372][ T5822] usb 4-1: config 0 descriptor?? [ 466.523283][T10875] overlayfs: missing 'lowerdir' [ 466.993212][ T5822] kaweth 4-1:0.0: Firmware present in device. [ 467.000224][ T5822] kaweth 4-1:0.0: Statistics collection: 0 [ 467.015500][ T5822] kaweth 4-1:0.0: Multicast filter limit: 0 [ 467.021476][ T5822] kaweth 4-1:0.0: MTU: 0 [ 467.025914][ T5822] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 467.895845][ T5932] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 467.970665][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.988500][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.031397][ T5822] kaweth 4-1:0.0: Error setting receive filter [ 468.039328][ T5822] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 468.058220][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 468.066683][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 468.067892][ T5822] usb 4-1: USB disconnect, device number 51 [ 468.142125][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 468.177255][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 468.191834][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 468.378467][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.390074][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.514283][ T5932] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 468.523674][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.532368][ T5932] usb 3-1: Product: syz [ 468.537115][ T5932] usb 3-1: Manufacturer: syz [ 468.542201][ T5932] usb 3-1: SerialNumber: syz [ 468.644226][ T5932] usb 3-1: config 0 descriptor?? [ 468.664867][T10881] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 468.695603][ T5932] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 469.059402][ T30] audit: type=1400 audit(1765482590.308:601): avc: denied { read } for pid=10893 comm="syz.0.1252" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 469.557317][ T30] audit: type=1400 audit(1765482590.808:602): avc: denied { mount } for pid=10900 comm="syz.4.1256" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 469.582760][ T30] audit: type=1400 audit(1765482590.828:603): avc: denied { search } for pid=10900 comm="syz.4.1256" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.640601][T10903] openvswitch: netlink: Flow actions attr not present in new flow. [ 469.643763][ T30] audit: type=1400 audit(1765482590.828:604): avc: denied { search } for pid=10900 comm="syz.4.1256" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.708396][ T30] audit: type=1400 audit(1765482590.828:605): avc: denied { setattr } for pid=10900 comm="syz.4.1256" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.834930][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1259'. [ 469.931889][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1259'. [ 470.217608][T10909] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1259'. [ 470.260218][T10917] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'. [ 470.315163][ T5932] usb 3-1: USB disconnect, device number 49 [ 470.323688][T10917] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'. [ 470.333975][T10917] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'. [ 576.825674][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 576.832629][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5819/1:b..l [ 576.840948][ C0] rcu: (detected by 0, t=10502 jiffies, g=35249, q=310 ncpus=2) [ 576.848821][ C0] task:syz-executor state:R running task stack:23272 pid:5819 tgid:5819 ppid:5805 task_flags:0x400140 flags:0x00080000 [ 576.862918][ C0] Call Trace: [ 576.866183][ C0] [ 576.869094][ C0] ? __schedule+0x10b9/0x6150 [ 576.873748][ C0] __schedule+0x1139/0x6150 [ 576.878233][ C0] ? __pfx___schedule+0x10/0x10 [ 576.883060][ C0] ? mark_held_locks+0x49/0x80 [ 576.887813][ C0] preempt_schedule_irq+0x51/0x90 [ 576.892919][ C0] irqentry_exit+0x1d8/0x8c0 [ 576.897505][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.903469][ C0] RIP: 0010:unwind_next_frame+0x1632/0x20a0 [ 576.909369][ C0] Code: fc ff df 48 8b 14 24 48 c1 ea 03 80 3c 02 00 0f 85 37 05 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa <48> c1 ea 03 80 3c 02 00 0f 85 0a 05 00 00 49 8d 7d 10 49 8b 6d 08 [ 576.928961][ C0] RSP: 0018:ffffc9000428f868 EFLAGS: 00000246 [ 576.935019][ C0] RAX: dffffc0000000000 RBX: ffffc9000428fd00 RCX: ffffc90004290000 [ 576.942974][ C0] RDX: ffffc9000428f8e0 RSI: ffffc9000428fcd0 RDI: ffffc9000428f8e0 [ 576.950942][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000004f8bb13e [ 576.958897][ C0] R10: 0000000000000002 R11: 0000000000083c59 R12: ffffc9000428f928 [ 576.966844][ C0] R13: ffffc9000428f8d8 R14: ffffc9000428fd00 R15: ffffc9000428f90c [ 576.974813][ C0] ? unwind_next_frame+0x15d5/0x20a0 [ 576.980104][ C0] ? __sk_destruct+0x64c/0xbc0 [ 576.985043][ C0] ? unwind_get_return_address+0x59/0xa0 [ 576.990674][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 576.996857][ C0] arch_stack_walk+0x94/0x100 [ 577.001530][ C0] ? sk_destruct+0xc2/0xf0 [ 577.005924][ C0] stack_trace_save+0x8e/0xc0 [ 577.010676][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 577.016047][ C0] ? kasan_save_stack+0x42/0x60 [ 577.020893][ C0] ? kasan_save_stack+0x33/0x60 [ 577.025733][ C0] kasan_save_stack+0x33/0x60 [ 577.030418][ C0] ? kasan_save_stack+0x33/0x60 [ 577.035249][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 577.040789][ C0] ? kmem_cache_free+0x15e/0x770 [ 577.045716][ C0] ? __sk_destruct+0x64c/0xbc0 [ 577.050569][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 577.055796][ C0] kmem_cache_free+0x15e/0x770 [ 577.060536][ C0] ? __sk_destruct+0x64c/0xbc0 [ 577.065277][ C0] ? __sk_destruct+0x64c/0xbc0 [ 577.070100][ C0] __sk_destruct+0x64c/0xbc0 [ 577.074667][ C0] sk_destruct+0xc2/0xf0 [ 577.078883][ C0] __sk_free+0xf4/0x3e0 [ 577.083013][ C0] sk_free+0x6a/0x90 [ 577.086879][ C0] tcp_close+0xd3/0x120 [ 577.091007][ C0] inet_release+0xed/0x200 [ 577.095397][ C0] __sock_release+0xb3/0x270 [ 577.099961][ C0] ? __pfx_sock_close+0x10/0x10 [ 577.104800][ C0] sock_close+0x1c/0x30 [ 577.108958][ C0] __fput+0x402/0xb70 [ 577.112926][ C0] fput_close_sync+0x118/0x260 [ 577.117676][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 577.122932][ C0] ? dnotify_flush+0x79/0x4c0 [ 577.127583][ C0] __x64_sys_close+0x8b/0x120 [ 577.132243][ C0] do_syscall_64+0xcd/0xf80 [ 577.136728][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.142606][ C0] RIP: 0033:0x7f079a18e3aa [ 577.147012][ C0] RSP: 002b:00007ffdb099bf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 577.155480][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f079a18e3aa [ 577.163431][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.171417][ C0] RBP: 00007ffdb099bf7c R08: 00007ffdb099b86c R09: 0079746972756365 [ 577.179369][ C0] R10: 00007ffdb099b8d0 R11: 0000000000000293 R12: 0000000000000110 [ 577.187327][ C0] R13: 00000000000927c0 R14: 0000000000072dfa R15: 00007ffdb099bfd0 [ 577.195382][ C0] [ 577.198391][ C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g35249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 577.209553][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 577.219489][ C0] rcu: RCU grace-period kthread stack dump: [ 577.225358][ C0] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 577.238818][ C0] Call Trace: [ 577.242083][ C0] [ 577.245006][ C0] ? __schedule+0x10b9/0x6150 [ 577.249714][ C0] __schedule+0x1139/0x6150 [ 577.254220][ C0] ? __pfx___schedule+0x10/0x10 [ 577.259049][ C0] ? find_held_lock+0x2b/0x80 [ 577.263720][ C0] ? schedule+0x2d7/0x3a0 [ 577.268027][ C0] schedule+0xe7/0x3a0 [ 577.272079][ C0] schedule_timeout+0x123/0x290 [ 577.276906][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 577.282324][ C0] ? __pfx_process_timeout+0x10/0x10 [ 577.287582][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 577.293364][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 577.298812][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 577.303568][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 577.308838][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.314007][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 577.318916][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 577.323741][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 577.329522][ C0] rcu_gp_kthread+0x26d/0x380 [ 577.334175][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 577.339383][ C0] ? rcu_is_watching+0x12/0xc0 [ 577.344123][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.349297][ C0] ? __kthread_parkme+0x19e/0x250 [ 577.354291][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 577.359474][ C0] kthread+0x3c5/0x780 [ 577.363514][ C0] ? __pfx_kthread+0x10/0x10 [ 577.368074][ C0] ? rcu_is_watching+0x12/0xc0 [ 577.372807][ C0] ? __pfx_kthread+0x10/0x10 [ 577.377369][ C0] ret_from_fork+0x983/0xb10 [ 577.381937][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 577.387117][ C0] ? __switch_to+0x7af/0x10d0 [ 577.391858][ C0] ? __pfx_kthread+0x10/0x10 [ 577.396420][ C0] ret_from_fork_asm+0x1a/0x30 [ 577.401165][ C0] [ 577.404155][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 577.410442][ C0] Sending NMI from CPU 0 to CPUs 1: [ 577.415634][ C1] NMI backtrace for cpu 1 [ 577.415644][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 577.415659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.415675][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 577.415689][ C1] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 577.415701][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 577.415713][ C1] RAX: 0000000001696399 RBX: 0000000000000001 RCX: ffffffff8b7776d9 [ 577.415721][ C1] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 577.415728][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 577.415736][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 577.415744][ C1] R13: ffff88801dab24c0 R14: ffffffff90887cd0 R15: 0000000000000000 [ 577.415752][ C1] FS: 0000000000000000(0000) GS:ffff8881249fd000(0000) knlGS:0000000000000000 [ 577.415765][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.415773][ C1] CR2: 000020000002f000 CR3: 0000000061424000 CR4: 00000000003526f0 [ 577.415781][ C1] Call Trace: [ 577.415789][ C1] [ 577.415794][ C1] default_idle+0x13/0x20 [ 577.415807][ C1] default_idle_call+0x6c/0xb0 [ 577.415820][ C1] do_idle+0x38d/0x510 [ 577.415839][ C1] ? __pfx_do_idle+0x10/0x10 [ 577.415858][ C1] cpu_startup_entry+0x4f/0x60 [ 577.415876][ C1] start_secondary+0x21d/0x2d0 [ 577.415888][ C1] ? __pfx_start_secondary+0x10/0x10 [ 577.415902][ C1] common_startup_64+0x13e/0x148 [ 577.415921][ C1]