last executing test programs: 4m4.989390878s ago: executing program 1 (id=1704): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x0, 0x1000000}) 4m4.763658045s ago: executing program 1 (id=1707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x189440, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4m3.421191344s ago: executing program 1 (id=1710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x1, 0x1, [0xf]}, 0xa) 4m3.377196743s ago: executing program 1 (id=1711): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 4m3.290512378s ago: executing program 1 (id=1712): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 4m2.949323667s ago: executing program 1 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 4m2.736577958s ago: executing program 32 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 9.254352385s ago: executing program 5 (id=2611): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x4000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9}, 0x94) 8.918249078s ago: executing program 4 (id=2612): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) close(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 8.764352789s ago: executing program 2 (id=2613): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@local, 0x10001}, @hyper, 0xe, 0x7, 0x3, 0x0, 0x2, 0x7fffffff, 0x3fa}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 8.187895446s ago: executing program 3 (id=2614): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e24, 0x78a2, @mcast2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 7.660785221s ago: executing program 3 (id=2616): io_uring_setup(0x2c4b, &(0x7f0000000200)={0x0, 0x0, 0x1000}) r0 = socket$netlink(0x10, 0x3, 0x0) getrandom(&(0x7f0000000180)=""/263, 0x107, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000540)={0x0, 'veth0_to_batadv\x00', 0x1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.513281864s ago: executing program 3 (id=2617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 7.425560134s ago: executing program 4 (id=2618): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x1ff, 0x6, 0xc, 0x6, 0x8, 0x8, 0x80000002]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0xea5bc50b6199d77e) open(&(0x7f0000000100)='./file0\x00', 0x12040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x200, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000400), 0x0, 0x400c0d5, 0x0, 0x0) writev(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYRESDEC], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 7.233707468s ago: executing program 3 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000780)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0xffffffff, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001100000000000cfacd7ae000000000000000000"], 0x0}) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x0, 0x4, 0xc3, {0xc3, 0xa, "9a6b952caff2921d065b69e4df849f9062728e6c2deb2bd97f4576587d52a7b61a3b81ba7eba906933d22feea3df7af288e4756802917e63d4906d38fef902df6df66a91db44f598570bdb78894c24a994a9ea7ea48d1b904c2ca6559f25965293826c8b4eab26eaa0d73c6e49882f74a2730e41090dc1a1f8ca1c84a5415fe39c5efd5671d561223d7cd1a71646cb5cab9c1b15343816c4d16c6a134faf2e1cacaf40de799f898681f286be2509a283686a59176c6e30e5d8e8ef3a7e3f81c2b0"}}, &(0x7f00000004c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "e81347e8addc9fe602f89fbbb66813b938dec0105f36523a5ea1b7cf24aebdcf40c3d52a303702d99bf4af117f3ed4f3e05abe352d76be646bdd36d379a9ad759601295921145051a284e40f1a5f9f7fdf536aa550fbd79052"}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x15, 0xa6, "8a62606c4abddca281216aee4b481b7d0562515169d18bb8d8c8e131f47cc4467729b35a20c8a9a06b0685391ee4d4f1ba7e633d134c2acf118048ad3f808be68765886e610ef004a8e367c077796a12caa8e345648b5ccc6224dab83367eaff151a2508d3341d8b1fad3691c6ee2e23df6ad4d9d27bdf481c204cdfbbd9eba68097bc9250922c03e4fa258d64af46bd50db805cbce4dcdd26678a6cb3f4e4d6443283f42922"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xa0}, 0x0, &(0x7f00000006c0)={0xc0, 0x5, 0x4, "e168d8f9"}, 0x0}) creat(0x0, 0x0) 7.14660237s ago: executing program 2 (id=2620): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000240)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2d}}, {@remote, 0xfffffffd}, {@private}, {@dev}, {@rand_addr=0x64010101}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x12}}]}]}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x70bd2c, 0x65dfdbfc, {}, [{@nsim={{0xe}, {0x13, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x44}) io_uring_enter(r1, 0x23a4, 0xe5bc, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/185) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x200, 0x103182) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000001c0)=""/45) 6.730861388s ago: executing program 5 (id=2621): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x38}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001255"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x3, 0x6, "a6d2fd5d95bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b58b"}, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x0, 0x11, 0x2, {0x2, 0x6}}, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000140)={0x0, 0xd, 0x39, "a0e6c22cde67441e2752a3d550c21fa5459597f3306aa8835fad3a7d38f16e0aebf47cd57afb895f979757d4909e9786b0a140f52dc5a5f0e4"}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "ec49"}, 0x0}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000500)=""/90, 0x5a}], 0x5, &(0x7f00000008c0)=""/193, 0xc1}, 0x20000042) 5.427714318s ago: executing program 4 (id=2623): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r4, @ANYBLOB="df4800000000fddbdf250c0000000c0003800800038004000180180001801400020064756d6d79300000000000000000000098020380c6000400de2c3645fb5604118f9f23e4a35aecffd463b3451bd614aca14e01fe7abaf793196e21ac423b44230782d24e36691a0441a0273e942679e9a4690a31d9366bfd281eab6641ec951c085bc96df66b2ef54ca7e327e0bd9bed4d95c75847dce58391b019d688ee54465d5010193016e9a4156198faea0760bcd9cf66e3d4df5c5985c2ac4dd50e06b71be959451744c077679db78ca0961b15ca276d4055292970802c36563ce1597776c7201c54b59ae1817355dd9f03fcc5a0e93a8d05af7518230e00000800020001800000b60004006437a181719e09509d18a6fa0629d518e916218c219781006283d0d28901fca799fe8fa155decbad70ca4f49487e77eb249b8c137cd215bad947d48fed5630f0aebf62c86924df30cd0a7e15707ec9308d6c9b5d4273035f3fdf760fe02d93ef7630d80fe2483c02089ccf77f215f75db8dce1dffba1c084bd4ad94198b32e9204b96fef2164b985547f35f78a192402d20f4719045859663de05895e70d5593b718214e519009fa8f02c70e199c9c4ca4660000080002000300000008000200be0e000088000500580b33040da263c614a56bf3476907f7489ea23c9ec9bd15a60767991f667c80c2332120291271790fcdf0b17487a76b42de82c6548d64b6fe305bd816e17e71bf0efab5794b3d8a2e9d58b8e3ef45f401db1b6bcc6d00ca00e38fb985e29003c95ab82c0e71b37c26d6a2e07b53dbd0a00eda25a6822dffe449ebf9fd1f31061f2b0de16c000380040001802400018008000100aa0d00000800010004000000040003000b00020064756d6d79300000400001800b00020064756d6d793000000800010027000000060002005e0000000c000200657468746f6f6c0008000100f3ffffff0b00020064756d6d7930000008000200ff07000064000380080002000200000057000400877cb4a0d4e2a5b9f7322c86cbb34d57dae83482206101f301baa0b0e4ddcb2f52567452ab6aec64b7a939969369674982b824fc78d9cca6c017585b86c79b634472a16272bdb64b45325cf8c2313676976c05000001038021000400715b48a123aae123785957d9a137469eabdc2b81eb11b678ec778c1b0900000008000200060000000600020000000000680003801c000180040003000c000200657468746f6f6c000800010002000000340001800b00020064756d6d7930000004000300080001000200000008000100ff01000004000300080001000900000004000300140001800c000200657468746f6f6c00040003005e0004001b7717"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 5.017273046s ago: executing program 2 (id=2624): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x2, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) 4.261901858s ago: executing program 4 (id=2625): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_uring_setup(0x3ef, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 3.515990212s ago: executing program 3 (id=2627): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.514097355s ago: executing program 4 (id=2628): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e", 0x75}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.473779874s ago: executing program 0 (id=2629): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x206}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.472349084s ago: executing program 2 (id=2630): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) close(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 3.199948318s ago: executing program 5 (id=2631): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x1e, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 3.158548684s ago: executing program 0 (id=2632): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, 0x0, 0x4003) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.326892579s ago: executing program 4 (id=2633): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r0, &(0x7f0000000080)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2.174154851s ago: executing program 5 (id=2634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2038060, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESDEC], 0xe4}}, 0x2404c800) 2.089640417s ago: executing program 0 (id=2635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000200), 0x0}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x106, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0xd0, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xbd4, 0x0, 0x1, 0xc, 0x7, 0x2, 0x4e21, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x1}, [{0x8, 0x55, 0x1, 0x2, 0x2303, 0x4, 0x5, 0x10001}, {0x6, 0x4, 0xc000000, 0x4, 0x5a, 0xa, 0xa, 0x8}, {0xfffffffd, 0x8001, 0xfffffffd, 0xf, 0x2, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x1e6, 0x4, 0x8001, 0xb9b, 0x6, 0xff}, {0x1000, 0x0, 0x1, 0x8, 0x9, 0xf, 0x9, 0x6}, {0x5, 0x6f470e20, 0x9, 0x2, 0x6, 0xa0, 0xa, 0x81}]}}}}}}, 0x0) 1.554544031s ago: executing program 0 (id=2636): socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, &(0x7f0000000280)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.51582187s ago: executing program 3 (id=2637): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0x80, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0xab}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000680)=[@cpuid={0x14, 0x18}], 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.125622199s ago: executing program 5 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000200), 0x0}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x106, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0xd0, 0x6, 0xff, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xbd4, 0x0, 0x1, 0xc, 0x7, 0x2, 0x4e21, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x1}, [{0x8, 0x55, 0x1, 0x2, 0x2303, 0x4, 0x5, 0x10001}, {0x6, 0x4, 0xc000000, 0x4, 0x5a, 0xa, 0xa, 0x8}, {0xfffffffd, 0x8001, 0xfffffffd, 0xf, 0x2, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x1e6, 0x4, 0x8001, 0xb9b, 0x6, 0xff}, {0x1000, 0x0, 0x1, 0x8, 0x9, 0xf, 0x9, 0x6}, {0x5, 0x6f470e20, 0x9, 0x2, 0x6, 0xa0, 0xa, 0x81}]}}}}}}, 0x0) 475.673422ms ago: executing program 0 (id=2639): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1", 0x27}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {0x0}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 440.214836ms ago: executing program 2 (id=2640): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 161.887065ms ago: executing program 0 (id=2641): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 132.992879ms ago: executing program 5 (id=2642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 2 (id=2643): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) creat(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) mknod$loop(0x0, 0x800, 0x1) creat(0x0, 0x175) creat(0x0, 0x0) creat(0x0, 0x185) kernel console output (not intermixed with test programs): Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 514.139133][ T5888] imon:send_packet: packet tx failed (-71) [ 514.173614][ T5888] imon 1-1:0.0: panel buttons/knobs setup failed [ 514.387671][ T5888] rc_core: IR keymap rc-imon-pad not found [ 514.393496][ T5888] Registered IR keymap rc-empty [ 514.399213][ T5888] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 514.416748][ T5888] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 514.426456][ T5888] imon:send_packet: packet tx failed (-71) [ 514.451661][ T5888] imon 1-1:0.0: remote input dev register failed [ 514.468052][ T5888] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 514.521526][ T5888] imon 1-1:0.0: unable to initialize intf0, err 0 [ 514.528507][ T5888] imon:imon_probe: failed to initialize context! [ 514.535133][ T5888] imon 1-1:0.0: unable to register, err -19 [ 514.616553][ T5888] usb 1-1: USB disconnect, device number 38 [ 514.626985][T13097] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2051'. [ 514.648371][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 514.648400][ T30] audit: type=1400 audit(1772130954.207:3068): avc: denied { write } for pid=13093 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 514.702798][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 514.713444][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2049'. [ 514.807124][T13097] syzkaller1: entered promiscuous mode [ 514.813252][T13097] syzkaller1: entered allmulticast mode [ 514.909696][ T30] audit: type=1326 audit(1772130954.432:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 514.961750][ T30] audit: type=1326 audit(1772130954.432:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 515.197653][ T30] audit: type=1326 audit(1772130954.432:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 515.251624][ T30] audit: type=1326 audit(1772130954.432:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 515.332671][ T30] audit: type=1326 audit(1772130954.432:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13101 comm="syz.0.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 515.747124][ T30] audit: type=1326 audit(1772130955.171:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 515.840794][ T30] audit: type=1326 audit(1772130955.171:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 515.914231][ T30] audit: type=1326 audit(1772130955.180:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 515.968810][ T5886] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 516.083851][T13123] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 516.091976][T13123] netlink: 'syz.5.2055': attribute type 2 has an invalid length. [ 516.134299][ T30] audit: type=1326 audit(1772130955.180:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13109 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 516.493863][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 516.506356][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.525655][ T5886] usb 5-1: can't read configurations, error -71 [ 518.232087][T13152] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.278852][T13154] binder: BINDER_SET_CONTEXT_MGR already set [ 518.285178][T13154] binder: 13153:13154 ioctl 4018620d 200000000040 returned -16 [ 518.389777][T13152] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.473345][T13152] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.613045][T13152] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.680967][T13156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.760927][ T1132] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.782557][ T66] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.804912][ T66] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.037375][ T66] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.524522][T13202] binder: 13201:13202 ioctl c0306201 2000000003c0 returned -14 [ 519.548402][T13200] loop3: detected capacity change from 0 to 7 [ 519.577282][T13200] Dev loop3: unable to read RDB block 7 [ 519.583002][ T5866] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 519.595487][T13200] loop3: unable to read partition table [ 519.603414][T13200] loop3: partition table beyond EOD, truncated [ 519.609665][T13200] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.700621][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.706956][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.753328][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 519.770595][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.788463][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.802189][ T5866] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.822057][T13204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.838992][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.846337][ T66] Bluetooth: hci6: Frame reassembly failed (-84) [ 519.862934][ T5866] usb 5-1: Product: syz [ 519.867124][ T5866] usb 5-1: Manufacturer: syz [ 519.872141][ T5866] usb 5-1: SerialNumber: syz [ 520.091443][ T5886] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 520.176374][ T5866] usb 5-1: 0:2 : does not exist [ 520.189307][ T5866] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 520.239930][ T5866] usb 5-1: USB disconnect, device number 34 [ 520.256207][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.275343][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.295546][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.316452][T10979] udevd[10979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.322991][ T5886] usb 4-1: config 0 descriptor?? [ 520.354639][ T5886] pwc: Askey VC010 type 2 USB webcam detected. [ 520.471100][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'. [ 520.482969][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2085'. [ 520.777051][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 520.795762][ T5886] pwc: recv_control_msg error -32 req 02 val 2700 [ 520.814712][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00 [ 520.824318][T13226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 520.825259][ T5886] pwc: recv_control_msg error -32 req 04 val 1000 [ 520.843727][ T5886] pwc: recv_control_msg error -32 req 04 val 1300 [ 520.851511][ T5886] pwc: recv_control_msg error -32 req 04 val 1400 [ 520.864087][ T5886] pwc: recv_control_msg error -32 req 02 val 2000 [ 521.054559][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 521.054575][ T30] audit: type=1326 audit(1772130960.196:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.109457][ T30] audit: type=1326 audit(1772130960.234:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.112192][ T5886] pwc: recv_control_msg error -71 req 04 val 1500 [ 521.143618][ T30] audit: type=1326 audit(1772130960.234:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.219098][ T5886] pwc: recv_control_msg error -71 req 02 val 2500 [ 521.226458][ T5886] pwc: recv_control_msg error -71 req 02 val 2400 [ 521.236744][ T5886] pwc: recv_control_msg error -71 req 02 val 2600 [ 521.247391][ T5886] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.316668][ T5886] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.340686][ T5886] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.390245][ T5886] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.429449][ T5886] pwc: Registered as video103. [ 521.471681][ T30] audit: type=1326 audit(1772130960.234:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.479672][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 521.514942][ T30] audit: type=1326 audit(1772130960.234:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.538658][ T30] audit: type=1326 audit(1772130960.234:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13228 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 521.924062][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 521.924107][T13210] Bluetooth: hci5: command 0x1003 tx timeout [ 521.945727][ T5886] usb 4-1: USB disconnect, device number 34 [ 522.007607][ T5807] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 522.466379][ T30] audit: type=1326 audit(1772130961.497:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 522.616709][ T30] audit: type=1326 audit(1772130961.497:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 522.717643][T13261] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 522.751437][ T30] audit: type=1326 audit(1772130961.497:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 522.842636][ T30] audit: type=1326 audit(1772130961.497:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 523.817779][T13281] netlink: 'syz.5.2099': attribute type 1 has an invalid length. [ 523.825708][T13281] netlink: 'syz.5.2099': attribute type 2 has an invalid length. [ 525.692780][T13336] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 527.351058][T13368] binder: BINDER_SET_CONTEXT_MGR already set [ 527.357068][T13368] binder: 13366:13368 ioctl 4018620d 200000000040 returned -16 [ 527.430843][T13368] binder: 13366:13368 ioctl c0306201 2000000003c0 returned -14 [ 527.940813][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2129'. [ 527.974373][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2129'. [ 528.844470][T13364] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 528.852716][T13364] netlink: 'syz.3.2121': attribute type 2 has an invalid length. [ 528.865578][T13371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.961625][ T5866] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 530.131323][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 530.141783][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.156024][ T5866] usb 3-1: Product: syz [ 530.162295][ T5866] usb 3-1: Manufacturer: syz [ 530.175799][ T5866] usb 3-1: SerialNumber: syz [ 530.198940][ T5866] usb 3-1: config 0 descriptor?? [ 530.257193][ T5886] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 530.392314][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 530.392329][ T30] audit: type=1400 audit(1772130968.937:3109): avc: denied { read } for pid=13410 comm="syz.5.2139" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 530.435842][ T5866] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 530.446019][T13411] l [ 530.452081][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 530.465072][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.482684][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.485328][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 530.505082][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.508251][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2140'. [ 530.533929][ T5886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 530.564209][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.964609][ T5886] usb 4-1: config 0 descriptor?? [ 531.432892][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.441223][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.463534][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.485595][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.502296][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.516942][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.524439][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.532126][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.568537][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.593569][ T5886] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 531.704487][ T5886] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001D/input/input34 [ 531.765882][ T5886] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 531.812179][ T5886] usb 4-1: USB disconnect, device number 35 [ 531.887597][T13427] fido_id[13427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 532.127350][T13435] binder: 13434:13435 ioctl c0306201 200000000180 returned -11 [ 532.452653][ T5866] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 532.466496][ T5866] usb 3-1: USB disconnect, device number 26 [ 532.541384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7efc00: rx timeout, send abort [ 532.553846][ T30] audit: type=1400 audit(1772130970.967:3110): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 532.576297][ T30] audit: type=1400 audit(1772130970.967:3111): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.616489][ T30] audit: type=1400 audit(1772130970.967:3112): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.639833][ T30] audit: type=1400 audit(1772130970.967:3113): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.661072][ T30] audit: type=1400 audit(1772130970.967:3114): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.683453][ T30] audit: type=1400 audit(1772130970.967:3115): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.707681][ T30] audit: type=1400 audit(1772130970.967:3116): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.075746][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7ecc00: rx timeout, send abort [ 533.085000][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7efc00: abort rx timeout. Force session deactivation [ 533.300668][T13458] 9p: Bad value for 'rfdno' [ 533.338592][T13456] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5501, magic 55 != 6b] [ 533.618306][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7ecc00: abort rx timeout. Force session deactivation [ 534.177793][ T5804] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 534.209943][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 534.280740][T13481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 534.382764][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 534.389603][ T5804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 534.411662][ T5804] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 534.421445][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 534.431007][ T5804] usb 1-1: Product: syz [ 534.463353][ T5804] usb 1-1: Manufacturer: syz [ 534.493126][ T5804] usb 1-1: SerialNumber: syz [ 534.544710][ T5804] usb 1-1: config 0 descriptor?? [ 534.563973][T13473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.357812][ T5888] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 536.453339][T13503] kvm: pic: non byte write [ 536.530380][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.540981][ T5888] usb 4-1: config 0 has no interfaces? [ 536.548078][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.557881][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.566666][ T5888] usb 4-1: Product: syz [ 536.571034][ T5888] usb 4-1: Manufacturer: syz [ 536.581463][ T5888] usb 4-1: config 0 descriptor?? [ 536.826717][ T5888] usb 4-1: USB disconnect, device number 36 [ 537.123426][ T793] usb 1-1: USB disconnect, device number 39 [ 537.640388][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 537.649311][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 537.658308][T13517] netlink: 'syz.4.2171': attribute type 13 has an invalid length. [ 537.666173][T13517] netlink: 'syz.4.2171': attribute type 12 has an invalid length. [ 538.189337][T13488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.215806][T13520] netlink: 'syz.0.2173': attribute type 3 has an invalid length. [ 538.423779][ T30] audit: type=1400 audit(1772130976.451:3117): avc: denied { mounton } for pid=13524 comm="syz.4.2177" path="/415/file0" dev="tmpfs" ino=2231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 538.532453][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 538.568931][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 538.673472][T13542] syz_tun: entered allmulticast mode [ 538.994381][ T30] audit: type=1326 audit(1772130976.938:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 539.019516][ T30] audit: type=1326 audit(1772130976.938:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 539.335327][ T30] audit: type=1326 audit(1772130976.938:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 539.424677][ T30] audit: type=1326 audit(1772130976.938:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13546 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 539.488991][ T30] audit: type=1326 audit(1772130977.293:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 539.578406][ T30] audit: type=1326 audit(1772130977.293:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 539.617170][ T30] audit: type=1326 audit(1772130977.293:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 539.645708][ T30] audit: type=1326 audit(1772130977.293:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 540.087861][ T30] audit: type=1400 audit(1772130977.303:3126): avc: denied { append } for pid=13558 comm="syz.4.2184" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 541.871811][ T5866] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 542.160286][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 542.208960][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 542.219948][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.231121][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.251106][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 542.260751][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 542.296467][ T5866] usb 3-1: SerialNumber: syz [ 542.436128][ T5866] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 542.452179][ T5866] usb-storage 3-1:1.0: USB Mass Storage device detected [ 542.466868][ T5866] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 542.478023][ T5866] scsi host1: usb-storage 3-1:1.0 [ 542.684816][ T5866] usb 3-1: USB disconnect, device number 27 [ 543.410170][T13623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2199'. [ 543.456562][T13623] ip6gre1: entered promiscuous mode [ 543.461769][T13623] ip6gre1: entered allmulticast mode [ 543.501587][T13623] netlink: 'syz.2.2199': attribute type 6 has an invalid length. [ 543.536863][T13623] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2199'. [ 543.987716][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 544.650405][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.660540][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 544.680450][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.756211][ T24] usb 4-1: config 0 descriptor?? [ 544.783444][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 544.878025][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 544.878043][ T30] audit: type=1326 audit(1772130982.440:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.354636][ T30] audit: type=1326 audit(1772130982.440:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.477813][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 545.489185][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 545.504347][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 545.512058][ T30] audit: type=1326 audit(1772130982.440:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.536572][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 545.577449][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 545.594302][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 545.601407][ T30] audit: type=1326 audit(1772130982.440:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.665346][ T30] audit: type=1326 audit(1772130982.861:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.698596][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 545.705963][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 545.708502][ T30] audit: type=1326 audit(1772130982.880:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.779066][ T30] audit: type=1326 audit(1772130982.889:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.835275][ T30] audit: type=1326 audit(1772130982.889:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.879138][ T30] audit: type=1326 audit(1772130982.889:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.921740][ T30] audit: type=1326 audit(1772130982.889:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.4.2205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 545.930395][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 545.987378][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 545.994091][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 546.001066][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 546.008269][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 546.028983][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 546.041776][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 546.067372][ T24] pwc: Registered as video103. [ 546.095239][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 546.147627][ T24] usb 4-1: USB disconnect, device number 37 [ 546.189101][ T5888] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 546.382191][ T5888] usb 6-1: config 1 interface 0 has no altsetting 0 [ 546.397877][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.419250][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.429560][ T5888] usb 6-1: Product: syz [ 546.434239][ T5888] usb 6-1: Manufacturer: syz [ 546.439624][ T5888] usb 6-1: SerialNumber: syz [ 546.519047][T13662] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 546.530845][T13662] netlink: 'syz.0.2207': attribute type 2 has an invalid length. [ 546.959094][ T5888] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 547.087299][ T5866] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 547.269651][ T5866] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 547.277770][ T5866] usb 4-1: config 0 has no interface number 0 [ 547.293193][ T5866] usb 4-1: config 0 interface 41 has no altsetting 0 [ 547.325326][ T5866] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 547.347449][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.375998][ T5866] usb 4-1: Product: syz [ 547.381975][ T5866] usb 4-1: Manufacturer: syz [ 547.395739][ T5866] usb 4-1: SerialNumber: syz [ 547.415155][ T5866] usb 4-1: config 0 descriptor?? [ 547.891564][T13682] netlink: 'syz.0.2215': attribute type 3 has an invalid length. [ 547.899510][T13682] netlink: 'syz.0.2215': attribute type 3 has an invalid length. [ 547.913540][T13682] netlink: 'syz.0.2215': attribute type 10 has an invalid length. [ 547.926673][T13682] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.960786][T13682] bond0: (slave team0): Enslaving as an active interface with an up link [ 548.272711][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 548.443644][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 548.452650][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.464070][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 548.473282][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.519945][ T24] usb 3-1: config 0 descriptor?? [ 548.520935][ T5866] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 548.736646][T13695] evm: overlay not supported [ 548.749380][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 549.963386][ C1] usblp0: nonzero write bulk status received: -71 [ 549.978656][ T5888] usb 6-1: USB disconnect, device number 3 [ 550.423426][T13654] usblp0: removed [ 550.615234][T13713] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 550.623583][T13713] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2223'. [ 550.767126][T13713] .`: renamed from bond0 [ 551.151407][ T5866] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 551.163133][ T5866] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 551.174041][ T5866] usb 4-1: USB disconnect, device number 38 [ 551.419715][T13721] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 551.428396][T13721] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 551.436858][T13721] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 551.447680][T13725] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 551.455424][T13725] netlink: 'syz.0.2225': attribute type 2 has an invalid length. [ 551.486297][T13721] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 551.512861][T13721] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 551.520999][T13721] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 551.530521][T13721] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 551.536308][ T24] usb 3-1: USB disconnect, device number 28 [ 552.548562][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 552.552569][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 552.552583][ T30] audit: type=1326 audit(1772130989.187:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13731 comm="syz.4.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 552.646158][ T30] audit: type=1326 audit(1772130989.187:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13731 comm="syz.4.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 552.684992][ T30] audit: type=1326 audit(1772130989.187:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13731 comm="syz.4.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 552.769014][ T30] audit: type=1326 audit(1772130989.187:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13731 comm="syz.4.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 552.771430][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 553.165827][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 553.176434][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 553.207808][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.250549][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 553.295357][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 553.304708][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.317731][ T24] usb 6-1: Product: syz [ 553.329830][ T24] usb 6-1: Manufacturer: syz [ 553.344065][ T24] usb 6-1: SerialNumber: syz [ 553.369154][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 553.395760][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input36 [ 553.594307][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 553.606841][ T24] (id 0x00) [ 553.632266][T13755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.711860][ T24] rc_core: IR keymap rc-imon-pad not found [ 553.724141][ T24] Registered IR keymap rc-empty [ 553.738022][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 553.765732][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 553.793580][T13760] binder: 13759:13760 ioctl c0306201 2000000003c0 returned -14 [ 553.815492][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 553.852214][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input37 [ 553.883707][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:4> initialized [ 553.899467][ T30] audit: type=1400 audit(1772130990.937:3150): avc: denied { bind } for pid=13763 comm="syz.3.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 553.931886][T13764] loop3: detected capacity change from 0 to 7 [ 553.938945][T13764] Dev loop3: unable to read RDB block 7 [ 553.944631][T13764] loop3: unable to read partition table [ 553.950950][T13764] loop3: partition table beyond EOD, truncated [ 553.957210][T13764] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.609103][ T30] audit: type=1326 audit(1772130991.546:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 554.701424][ T30] audit: type=1326 audit(1772130991.564:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 554.739590][ T3087] usb 6-1: USB disconnect, device number 4 [ 554.747776][T13771] imon:send_packet: packet tx failed (-71) [ 554.867903][ T30] audit: type=1326 audit(1772130991.564:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 554.969356][ T30] audit: type=1326 audit(1772130991.564:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13766 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 554.973557][T13771] imon:vfd_write: send packet #0 failed [ 555.272017][ T5866] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 555.432466][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 555.440756][ T5866] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 555.449134][ T5866] usb 5-1: config 0 has no interface number 0 [ 555.455350][ T5866] usb 5-1: config 0 interface 184 has no altsetting 0 [ 555.466527][ T5866] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 555.477390][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.485398][ T5866] usb 5-1: Product: syz [ 555.487773][T13791] ref_ctr increment failed for inode: 0x9d8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803680e200 [ 555.492040][ T5866] usb 5-1: Manufacturer: syz [ 555.507346][ T5866] usb 5-1: SerialNumber: syz [ 555.513555][ T5866] usb 5-1: config 0 descriptor?? [ 556.321735][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 556.390400][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 557.407608][T13804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.734143][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 559.347208][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 559.365091][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 559.386018][ T5866] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 559.399875][ T5866] usb 5-1: USB disconnect, device number 35 [ 560.766166][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 560.775099][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 560.784072][T13840] netlink: 'syz.4.2255': attribute type 13 has an invalid length. [ 560.791926][T13840] netlink: 'syz.4.2255': attribute type 12 has an invalid length. [ 561.805868][T13845] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 561.825268][T13845] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 561.916155][T13845] ovl_remap_lower_ino: 8 callbacks suppressed [ 561.916185][T13845] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 561.930919][T13845] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 561.941176][T13845] overlayfs: d_ino too big (109, ino=9223372036854776399, xinobits=3) [ 561.951976][T13845] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 561.963125][T13845] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 561.974212][T13845] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 561.984606][T13845] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 561.995269][T13845] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 562.005877][T13845] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 562.016473][T13845] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 562.891820][T13853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.942120][ T5866] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 564.109377][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 564.116222][ T5866] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 564.125803][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.170201][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.207099][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.393689][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.403299][ T5866] usb 1-1: Product: syz [ 564.407544][ T5866] usb 1-1: Manufacturer: syz [ 564.418231][ T5866] usb 1-1: SerialNumber: syz [ 564.877331][ T5866] usb 1-1: 0:2 : does not exist [ 565.094582][ T5866] usb 1-1: USB disconnect, device number 40 [ 565.714648][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 565.723616][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 565.732569][T13898] netlink: 'syz.5.2269': attribute type 13 has an invalid length. [ 565.740443][T13898] netlink: 'syz.5.2269': attribute type 12 has an invalid length. [ 566.061791][ T30] audit: type=1326 audit(1772131002.317:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.100931][ T30] audit: type=1326 audit(1772131002.317:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.160579][ T30] audit: type=1326 audit(1772131002.317:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.234223][ T30] audit: type=1326 audit(1772131002.317:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.314891][ T30] audit: type=1326 audit(1772131002.317:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.450830][ T30] audit: type=1326 audit(1772131002.317:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.476657][ T30] audit: type=1326 audit(1772131002.317:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 566.524986][T13907] __vm_enough_memory: pid: 13907, comm: syz.3.2273, bytes: 11727889616896 not enough memory for the allocation [ 566.999533][ T30] audit: type=1326 audit(1772131002.317:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 567.023246][ T30] audit: type=1326 audit(1772131002.317:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 567.115175][T13910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.127857][T13910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.170577][ T30] audit: type=1326 audit(1772131002.317:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz.0.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 567.764250][ T3087] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 567.766052][T13910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.784559][T13910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.969013][ T3087] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 568.154655][ T3087] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.162090][T13923] binder_alloc: 13922: binder_alloc_buf, no vma [ 568.193716][ T3087] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.203435][ T3087] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.212506][ T3087] usb 3-1: Product: syz [ 568.235189][ T3087] usb 3-1: Manufacturer: syz [ 568.247942][ T3087] usb 3-1: SerialNumber: syz [ 568.275210][T13910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.277547][ T3087] usb 3-1: config 0 descriptor?? [ 568.290717][T13910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.348051][ T3087] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 568.806985][T10979] udevd[10979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.821930][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 568.825844][T13910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.993786][T13910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.022834][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 569.032360][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.046638][ T24] usb 4-1: Product: syz [ 569.050815][ T24] usb 4-1: Manufacturer: syz [ 569.055404][ T24] usb 4-1: SerialNumber: syz [ 569.114315][ T3087] usb 3-1: USB disconnect, device number 29 [ 569.567337][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 569.698798][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.709802][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 569.719590][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.791220][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.801729][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.823667][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.839420][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.874096][ T1160] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.895533][ T1160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.963312][T13954] tipc: Enabled bearer , priority 0 [ 570.003462][T13954] syzkaller0: entered promiscuous mode [ 570.009471][T13954] syzkaller0: entered allmulticast mode [ 570.015693][T13954] tipc: Resetting bearer [ 570.048341][T13952] tipc: Resetting bearer [ 570.140445][ T3087] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 570.412107][ T3087] usb 6-1: Using ep0 maxpacket: 32 [ 570.419510][ T3087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.430603][ T3087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.506640][ T3087] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 570.895232][ T3087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.906093][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 571.065054][ T3087] usb 6-1: config 0 descriptor?? [ 571.084095][ T3087] hub 6-1:0.0: USB hub found [ 571.252881][T13973] netlink: 'syz.2.2290': attribute type 1 has an invalid length. [ 571.298918][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 571.325870][ T3087] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 571.569429][ T3087] hid-generic 0003:046D:C31C.001E: item fetching failed at offset 0/1 [ 571.578048][ T3087] hid-generic 0003:046D:C31C.001E: probe with driver hid-generic failed with error -22 [ 571.756310][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 571.770173][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 571.792747][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.802946][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.819698][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 571.835544][ T24] usb 4-1: USB disconnect, device number 39 [ 571.912521][ T3087] usb 6-1: USB disconnect, device number 5 [ 572.299754][T13952] tipc: Disabling bearer [ 572.319113][T13973] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 572.530462][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 572.530481][ T30] audit: type=1400 audit(1772131008.371:3234): avc: denied { transfer } for pid=13982 comm="syz.5.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 572.531251][T13983] binder_alloc: 13982: binder_alloc_buf, no vma [ 573.053790][ T3087] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 573.214102][ T3087] usb 4-1: Using ep0 maxpacket: 8 [ 573.282460][ T30] audit: type=1326 audit(1772131009.017:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 573.306678][ T3087] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 573.316555][ T3087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.324795][ T30] audit: type=1326 audit(1772131009.017:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 573.352821][ T3087] usb 4-1: Product: syz [ 573.356995][ T3087] usb 4-1: Manufacturer: syz [ 573.396719][ T3087] usb 4-1: SerialNumber: syz [ 573.411288][ T30] audit: type=1326 audit(1772131009.017:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 573.597522][ T3087] usb 4-1: config 0 descriptor?? [ 573.602612][ T30] audit: type=1326 audit(1772131009.017:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 573.990239][ T30] audit: type=1326 audit(1772131009.017:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 574.101818][ T3087] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 574.169289][ T30] audit: type=1326 audit(1772131009.017:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 574.227373][ T30] audit: type=1326 audit(1772131009.812:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 574.433886][ T30] audit: type=1326 audit(1772131009.812:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13987 comm="syz.5.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 574.539110][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 574.648076][ T12] syzkaller0: tun_net_xmit 76 [ 574.653593][ T12] syzkaller0: tun_net_xmit 48 [ 574.666196][T14013] syzkaller0: tun_net_xmit 28 [ 574.678111][ T5804] syzkaller0: tun_net_xmit 76 [ 574.731318][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 574.753580][ T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 574.780063][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.814995][ T24] usb 3-1: Product: syz [ 574.819421][ T24] usb 3-1: Manufacturer: syz [ 574.827901][ T24] usb 3-1: SerialNumber: syz [ 574.851580][ T24] usb 3-1: config 0 descriptor?? [ 574.869818][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 574.888229][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 574.900791][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.925870][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 574.933576][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 574.991563][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.025439][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 575.046560][ T24] usb 3-1: media controller created [ 575.118570][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.159987][ T24] usb 3-1: selecting invalid altsetting 3 [ 575.172616][ T24] ttusb2: set interface to alts=3 failed [ 575.210219][ T24] DVB: Unable to find symbol tda10086_attach() [ 575.216902][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 575.239864][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 575.247873][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 575.268912][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 575.274664][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 575.286289][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 575.317868][ T24] usb 3-1: USB disconnect, device number 30 [ 575.373437][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 575.812156][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 575.993903][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.024371][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.034157][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 576.056403][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.058230][ T3087] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 576.075137][ T24] usb 1-1: config 0 descriptor?? [ 576.080612][ T3087] usb 4-1: USB disconnect, device number 40 [ 576.163197][ T30] audit: type=1326 audit(1772131011.768:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14027 comm="syz.5.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 576.747887][ T24] hid_parser_main: 5 callbacks suppressed [ 576.747906][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 576.772011][ T24] cm6533_jd 0003:0D8C:0022.001F: item fetching failed at offset 4/5 [ 576.794331][ T24] cm6533_jd 0003:0D8C:0022.001F: parse failed [ 576.803038][ T24] cm6533_jd 0003:0D8C:0022.001F: probe with driver cm6533_jd failed with error -22 [ 576.950946][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.970276][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.987487][ T3087] usb 1-1: USB disconnect, device number 41 [ 578.081152][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 578.090159][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'. [ 578.099119][T14049] netlink: 'syz.2.2308': attribute type 13 has an invalid length. [ 578.106943][T14049] netlink: 'syz.2.2308': attribute type 12 has an invalid length. [ 578.919238][T14041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.407098][T14053] kvm: pic: non byte write [ 579.415025][T14053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 579.529330][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 579.529347][ T30] audit: type=1326 audit(1772131014.912:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 579.569536][ T30] audit: type=1326 audit(1772131014.912:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 579.592991][ T30] audit: type=1326 audit(1772131014.912:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 579.654919][ T30] audit: type=1326 audit(1772131014.912:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 579.723420][ T30] audit: type=1326 audit(1772131014.912:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 579.775058][ T30] audit: type=1326 audit(1772131014.912:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.3.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6a819c799 code=0x7ffc0000 [ 581.192728][T14083] netlink: 'syz.2.2316': attribute type 13 has an invalid length. [ 582.361603][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 582.440057][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2320'. [ 582.449150][T14101] netlink: 'syz.4.2320': attribute type 13 has an invalid length. [ 582.456962][T14101] netlink: 'syz.4.2320': attribute type 12 has an invalid length. [ 582.909737][ T30] audit: type=1400 audit(1772131018.085:3256): avc: denied { map } for pid=14106 comm="syz.4.2323" path="socket:[53011]" dev="sockfs" ino=53011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.001509][ T30] audit: type=1400 audit(1772131018.085:3257): avc: denied { read } for pid=14106 comm="syz.4.2323" path="socket:[53011]" dev="sockfs" ino=53011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 583.916655][T14127] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 583.950640][T14127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.998685][T14127] macvlan2: entered promiscuous mode [ 584.004011][T14127] macvlan2: entered allmulticast mode [ 584.010721][T14127] bond1: entered promiscuous mode [ 584.016282][T14127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.025453][T14127] bond1: left promiscuous mode [ 584.094431][T14133] bond1: (slave ip6gretap1): making interface the new active one [ 584.103207][T14133] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 584.113661][ T793] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 584.185340][T14130] syzkaller0: entered promiscuous mode [ 584.191959][T14130] syzkaller0: entered allmulticast mode [ 584.418828][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.431672][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.443831][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.958063][ T793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.276431][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.313842][ T793] usb 3-1: config 0 descriptor?? [ 585.361417][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.376267][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.007989][ T793] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 586.660598][T14121] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2327'. [ 586.742278][T14158] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 586.924187][T14158] CIFS mount error: No usable UNC path provided in device string! [ 586.924187][T14158] [ 586.934391][T14158] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 587.355689][ C1] plantronics 0003:047F:FFFF.0020: usb_submit_urb(ctrl) failed: -1 [ 587.370226][ T793] usb 3-1: USB disconnect, device number 31 [ 587.395301][ T5813] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 587.589747][ T5807] Bluetooth: hci1: command 0x0405 tx timeout [ 587.597019][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.616956][ T5813] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 587.633203][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.662212][ T5813] usb 5-1: config 0 descriptor?? [ 587.680559][ T5813] pwc: Askey VC010 type 2 USB webcam detected. [ 588.099964][ T793] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 588.147186][ T5813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 588.160644][ T5813] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.174795][ T5813] pwc: recv_control_msg error -32 req 02 val 2c00 [ 588.193046][ T5813] pwc: recv_control_msg error -32 req 04 val 1000 [ 588.200650][ T5813] pwc: recv_control_msg error -32 req 04 val 1300 [ 588.217593][ T5813] pwc: recv_control_msg error -32 req 04 val 1400 [ 588.225236][ T5813] pwc: recv_control_msg error -32 req 02 val 2000 [ 588.238237][ T5813] pwc: recv_control_msg error -32 req 02 val 2100 [ 588.250046][ T5813] pwc: recv_control_msg error -32 req 04 val 1500 [ 588.276495][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 588.295396][ T793] usb 6-1: config 0 has no interfaces? [ 588.301088][ T793] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 588.317044][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.337812][ T793] usb 6-1: config 0 descriptor?? [ 588.472444][ T5813] pwc: recv_control_msg error -71 req 02 val 2400 [ 588.481970][ T5813] pwc: recv_control_msg error -71 req 02 val 2600 [ 588.502131][ T5813] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.514567][ T5813] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.530849][ T5813] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.542519][ T5813] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.562694][ T5813] pwc: Registered as video103. [ 588.581281][ T5813] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 588.582569][ T793] usb 6-1: USB disconnect, device number 6 [ 588.636981][ T5813] usb 5-1: USB disconnect, device number 36 [ 588.682274][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 588.694613][T14176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 589.312604][ T30] audit: type=1400 audit(1772131024.074:3258): avc: denied { watch } for pid=14183 comm="syz.0.2344" path="/495/bus" dev="overlay" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 589.342792][ T30] audit: type=1400 audit(1772131024.102:3259): avc: denied { watch_sb } for pid=14183 comm="syz.0.2344" path="/495/bus" dev="overlay" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 589.372769][ T30] audit: type=1804 audit(1772131024.102:3260): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2344" name="/newroot/495/bus/bus" dev="overlay" ino=2628 res=1 errno=0 [ 589.482643][T14179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.736144][T14191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.407984][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 590.568556][ T30] audit: type=1400 audit(1772131025.234:3261): avc: denied { watch } for pid=14203 comm="syz.0.2350" path="/498/blkio.throttle.io_serviced" dev="tmpfs" ino=2646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 591.016813][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 591.038381][ T30] audit: type=1400 audit(1772131025.234:3262): avc: denied { watch_sb watch_reads } for pid=14203 comm="syz.0.2350" path="/498/blkio.throttle.io_serviced" dev="tmpfs" ino=2646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 591.102754][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 591.129882][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 591.169841][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.208454][ T24] usb 4-1: Product: syz [ 591.320678][ T24] usb 4-1: Manufacturer: syz [ 591.325306][ T24] usb 4-1: SerialNumber: syz [ 591.347162][T14216] binder_alloc: 14215: pid 14215 spamming oneway? 1 buffers allocated for a total size of 4096 [ 591.359683][ T24] usb 4-1: config 0 descriptor?? [ 591.448268][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 591.463754][T14216] binder_alloc: 14215: pid 14215 spamming oneway? 2 buffers allocated for a total size of 5120 [ 592.148283][ T30] audit: type=1400 audit(1772131026.610:3263): avc: denied { read } for pid=14197 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 592.341428][ T30] audit: type=1400 audit(1772131026.900:3264): avc: denied { ioctl } for pid=14228 comm="syz.2.2355" path="socket:[54326]" dev="sockfs" ino=54326 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 592.367864][T14230] syzkaller0: entered promiscuous mode [ 592.413113][T14230] syzkaller0: entered allmulticast mode [ 592.547097][ T1147] usb 4-1: Failed to submit usb control message: -110 [ 592.554319][ T1147] usb 4-1: unable to send the bmi data to the device: -110 [ 592.566750][ T1147] usb 4-1: unable to get target info from device [ 592.573097][ T1147] usb 4-1: could not get target info (-110) [ 592.597014][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2356'. [ 592.628522][ T1147] usb 4-1: could not probe fw (-110) [ 593.776534][ T24] usb 4-1: USB disconnect, device number 41 [ 595.029706][T14255] nvme_fabrics: missing parameter 'transport=%s' [ 595.036404][T14255] nvme_fabrics: missing parameter 'nqn=%s' [ 595.721277][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 595.730247][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'. [ 595.739177][T14269] netlink: 'syz.3.2365': attribute type 13 has an invalid length. [ 595.747047][T14269] netlink: 'syz.3.2365': attribute type 12 has an invalid length. [ 596.196701][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 596.648881][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'. [ 597.268865][ T30] audit: type=1326 audit(1772131031.476:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 597.312770][ T30] audit: type=1326 audit(1772131031.476:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 597.338779][ T30] audit: type=1326 audit(1772131031.476:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 597.428178][ T30] audit: type=1326 audit(1772131031.476:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 597.463890][T14289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.793606][ T793] libceph: connect (1)[c::]:6789 error -101 [ 597.799629][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 597.814874][T14304] syzkaller0: entered promiscuous mode [ 597.820331][T14304] syzkaller0: entered allmulticast mode [ 597.863487][T14300] ceph: No mds server is up or the cluster is laggy [ 597.880614][ T793] libceph: connect (1)[c::]:6789 error -101 [ 597.926220][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 597.975323][ T30] audit: type=1326 audit(1772131031.476:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 598.173667][ T30] audit: type=1326 audit(1772131031.476:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14290 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 598.850681][T14318] syzkaller0: entered promiscuous mode [ 598.856154][T14318] syzkaller0: entered allmulticast mode [ 599.489636][ T30] audit: type=1800 audit(1772131033.591:3271): pid=14330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2375" name="file1" dev="tmpfs" ino=2505 res=0 errno=0 [ 601.129881][ T30] audit: type=1400 audit(1772131035.126:3272): avc: denied { mount } for pid=14338 comm="syz.3.2382" name="/" dev="autofs" ino=54541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 601.230042][ T30] audit: type=1400 audit(1772131035.201:3273): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 603.178440][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 603.383501][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'. [ 603.673493][T14367] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.2388'. [ 603.743900][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2388'. [ 603.984122][T14370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.182561][ T30] audit: type=1326 audit(1772131037.989:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14372 comm="syz.4.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 604.610522][ T30] audit: type=1326 audit(1772131038.017:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14372 comm="syz.4.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 604.677197][ T30] audit: type=1326 audit(1772131038.017:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14372 comm="syz.4.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 604.711933][ T30] audit: type=1326 audit(1772131038.064:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14372 comm="syz.4.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 604.753784][ T30] audit: type=1400 audit(1772131038.523:3278): avc: denied { write } for pid=14384 comm="syz.5.2392" lport=35851 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 604.927500][T14387] macvlan0: left promiscuous mode [ 604.936024][ T30] audit: type=1400 audit(1772131038.551:3279): avc: denied { setopt } for pid=14384 comm="syz.5.2392" lport=35851 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 605.185823][T14396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.281515][T14396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.358318][ T5866] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 605.377849][T14402] syzkaller0: entered promiscuous mode [ 605.384867][T14402] syzkaller0: entered allmulticast mode [ 605.475608][T14396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.488086][ T5813] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 605.597625][T14396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.614830][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 605.629755][ T30] audit: type=1326 audit(1772131039.346:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.0.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 605.656796][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.739620][ T5866] usb 6-1: Product: syz [ 605.750099][ T5813] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 605.987965][ T5866] usb 6-1: Manufacturer: syz [ 606.009941][ T30] audit: type=1326 audit(1772131039.346:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.0.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 606.050762][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.071463][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 606.078724][ T5866] usb 6-1: SerialNumber: syz [ 606.086902][ T5866] usb 6-1: config 0 descriptor?? [ 606.101631][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 606.113586][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 606.135069][ T5813] usb 4-1: Product: syz [ 606.146059][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.163025][ T30] audit: type=1326 audit(1772131039.346:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.0.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 606.215649][T14349] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.244191][T14349] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.252615][ T5813] usb 4-1: Manufacturer: syz [ 606.260074][ T5813] usb 4-1: SerialNumber: syz [ 606.267672][ T5813] usb 4-1: config 0 descriptor?? [ 606.326961][ T5866] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 606.366329][ T5813] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 606.400756][T13531] udevd[13531]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.443654][ T30] audit: type=1326 audit(1772131039.346:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14403 comm="syz.0.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 606.615993][ T24] usb 4-1: USB disconnect, device number 42 [ 607.459717][T14428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.558747][ C0] hrtimer: interrupt took 36589 ns [ 608.122181][ T5866] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 609.545624][ T5866] usb 6-1: USB disconnect, device number 7 [ 609.705001][T14450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2407'. [ 609.983168][ T30] audit: type=1326 audit(1772131043.417:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.254498][ T30] audit: type=1326 audit(1772131043.417:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.416441][ T30] audit: type=1326 audit(1772131043.464:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.603906][ T30] audit: type=1326 audit(1772131043.464:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.650420][ T30] audit: type=1326 audit(1772131043.464:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.709117][ T30] audit: type=1326 audit(1772131043.464:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.826110][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 610.872155][ T30] audit: type=1326 audit(1772131043.464:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 610.909751][ T30] audit: type=1326 audit(1772131043.464:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 611.399404][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 611.446023][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.447292][ T30] audit: type=1326 audit(1772131043.464:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 611.519733][ T5866] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 611.529107][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.534120][ T30] audit: type=1326 audit(1772131043.464:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 611.851913][ T5866] usb 3-1: config 0 descriptor?? [ 612.095881][ T5866] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 612.436053][T14493] SELinux: syz.2.2409 (14493) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 612.472449][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 612.495221][ T5866] usb 3-1: USB disconnect, device number 32 [ 612.501271][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 616.493349][T14528] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2423'. [ 616.661355][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 616.661373][ T30] audit: type=1326 audit(1772131049.612:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 616.802555][ T30] audit: type=1326 audit(1772131049.612:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 617.042258][ T30] audit: type=1326 audit(1772131049.612:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 617.065961][ T30] audit: type=1326 audit(1772131049.612:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 617.273019][ T30] audit: type=1326 audit(1772131050.230:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 617.337542][ T30] audit: type=1326 audit(1772131050.239:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14530 comm="syz.5.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 618.679468][ T30] audit: type=1326 audit(1772131051.530:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 618.786959][T14561] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 618.794876][ T30] audit: type=1326 audit(1772131051.530:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 618.949089][T14567] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 619.202268][ T30] audit: type=1326 audit(1772131051.530:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 619.230404][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 619.244745][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 619.251647][ T30] audit: type=1326 audit(1772131051.530:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 619.472043][T14561] macvlan1: entered promiscuous mode [ 619.515675][T14561] macvlan1: entered allmulticast mode [ 619.704242][T14561] bond0: entered promiscuous mode [ 619.760159][T14561] gretap1: entered promiscuous mode [ 619.779025][T14561] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 619.902248][T14561] bond0: left promiscuous mode [ 619.907054][T14561] gretap1: left promiscuous mode [ 621.737122][T14592] syzkaller0: entered promiscuous mode [ 621.743046][T14592] syzkaller0: entered allmulticast mode [ 621.752358][T14592] tipc: Started in network mode [ 621.757208][T14592] tipc: Node identity be811209cb3b, cluster identity 4711 [ 621.765532][T14592] tipc: Enabled bearer , priority 0 [ 621.869462][T14591] tipc: Resetting bearer [ 621.882391][T14591] tipc: Disabling bearer [ 622.583419][T14598] mkiss: ax0: crc mode is auto. [ 622.622107][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 622.622122][ T30] audit: type=1326 audit(1772131055.245:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 622.727348][ T30] audit: type=1326 audit(1772131055.283:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 623.068321][T14594] SELinux: failed to load policy [ 623.133335][ T30] audit: type=1326 audit(1772131055.283:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 623.292181][T14615] syzkaller0: entered promiscuous mode [ 623.340341][T14615] syzkaller0: entered allmulticast mode [ 623.397187][ T30] audit: type=1326 audit(1772131055.283:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 624.953546][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 624.962483][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 624.971417][T14630] netlink: 'syz.3.2444': attribute type 13 has an invalid length. [ 624.979372][T14630] netlink: 'syz.3.2444': attribute type 12 has an invalid length. [ 625.734408][T14637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14637 comm=syz.5.2447 [ 625.774150][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2445'. [ 625.786609][T14634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 625.808902][T14643] binder: 14639:14643 ioctl c0306201 0 returned -14 [ 626.251376][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2450'. [ 627.641876][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 627.682957][T14659] syzkaller0: entered promiscuous mode [ 627.688467][T14659] syzkaller0: entered allmulticast mode [ 627.706075][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2452'. [ 629.562608][ T30] audit: type=1326 audit(1772131067.729:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 629.632805][ T30] audit: type=1326 audit(1772131067.729:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 629.672295][ T30] audit: type=1326 audit(1772131067.729:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 630.673082][ T30] audit: type=1326 audit(1772131067.729:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 630.699264][ T30] audit: type=1326 audit(1772131067.729:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 630.781126][T14683] syzkaller0: entered promiscuous mode [ 630.786589][T14683] syzkaller0: entered allmulticast mode [ 631.347460][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'. [ 631.362774][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2461'. [ 631.829897][ T30] audit: type=1400 audit(1772131069.517:3429): avc: denied { getopt } for pid=14694 comm="syz.0.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 631.880654][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 633.014470][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 633.026076][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 633.231588][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 633.241866][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.521710][ T24] usb 6-1: config 0 descriptor?? [ 633.536553][T14708] syzkaller0: entered promiscuous mode [ 633.547688][T14708] syzkaller0: entered allmulticast mode [ 633.944898][ T30] audit: type=1400 audit(1772131071.725:3430): avc: denied { map } for pid=14691 comm="syz.5.2462" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 634.072114][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'. [ 634.081049][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2468'. [ 634.090208][T14719] netlink: 'syz.4.2468': attribute type 13 has an invalid length. [ 634.098073][T14719] netlink: 'syz.4.2468': attribute type 12 has an invalid length. [ 634.345214][ T24] ath6kl: Failed to submit usb control message: -71 [ 634.424258][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 634.570527][ T24] ath6kl: Unable to send get target info: -71 [ 634.579681][ T24] ath6kl: Failed to init ath6kl core: -71 [ 634.599111][ T24] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 634.635094][ T24] usb 6-1: USB disconnect, device number 8 [ 635.328681][T14724] syzkaller0: entered promiscuous mode [ 635.335275][T14724] syzkaller0: entered allmulticast mode [ 635.361046][T14724] 0: reclassify loop, rule prio 0, protocol 800 [ 635.550688][T14733] syzkaller0: entered promiscuous mode [ 635.556619][T14733] syzkaller0: entered allmulticast mode [ 635.727228][ T3087] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 635.735081][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 635.894580][T14744] binder: 14741:14744 ioctl 4018620d 0 returned -22 [ 636.132748][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2474'. [ 636.241945][ T3087] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.399524][ T3087] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 636.948782][ T3087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.979524][ T3087] usb 1-1: config 0 descriptor?? [ 637.011726][ T3087] pwc: Askey VC010 type 2 USB webcam detected. [ 637.450024][ T3087] pwc: recv_control_msg error -32 req 02 val 2b00 [ 637.469738][ T3087] pwc: recv_control_msg error -32 req 02 val 2700 [ 637.492287][ T3087] pwc: recv_control_msg error -32 req 02 val 2c00 [ 637.522506][ T3087] pwc: recv_control_msg error -32 req 04 val 1000 [ 637.538747][ T3087] pwc: recv_control_msg error -32 req 04 val 1300 [ 637.582352][T14757] syzkaller0: entered promiscuous mode [ 637.582798][ T3087] pwc: recv_control_msg error -32 req 04 val 1400 [ 637.588234][T14757] syzkaller0: entered allmulticast mode [ 637.822084][ T3087] pwc: recv_control_msg error -32 req 02 val 2000 [ 637.844294][ T3087] pwc: recv_control_msg error -32 req 02 val 2100 [ 637.869145][ T3087] pwc: recv_control_msg error -32 req 04 val 1500 [ 637.907787][ T3087] pwc: recv_control_msg error -32 req 02 val 2500 [ 637.941017][ T3087] pwc: recv_control_msg error -32 req 02 val 2400 [ 637.952864][ T3087] pwc: recv_control_msg error -32 req 02 val 2600 [ 638.189814][ T3087] pwc: recv_control_msg error -71 req 02 val 2800 [ 638.206952][ T3087] pwc: recv_control_msg error -71 req 04 val 1100 [ 638.220050][ T3087] pwc: recv_control_msg error -71 req 04 val 1200 [ 638.228228][ T3087] pwc: Registered as video103. [ 638.234733][ T3087] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 638.272982][ T3087] usb 1-1: USB disconnect, device number 42 [ 638.337245][T14770] ubi31: attaching mtd0 [ 638.352822][T14770] ubi31: scanning is finished [ 638.357617][T14770] ubi31: empty MTD device detected [ 638.781074][T14770] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 638.788730][T14770] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 638.796061][T14770] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 638.803090][T14770] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 638.810668][T14770] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 638.817545][T14770] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 638.825615][T14770] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1241156753 [ 638.835766][T14770] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 638.847367][T14772] ubi31: background thread "ubi_bgt31d" started, PID 14772 [ 638.989396][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 639.788422][ T30] audit: type=1400 audit(1772131076.966:3431): avc: denied { bind } for pid=14773 comm="syz.5.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 639.989967][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 639.998391][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 640.008429][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.035116][ T24] usb 5-1: Product: syz [ 640.039317][ T24] usb 5-1: Manufacturer: syz [ 640.043914][ T24] usb 5-1: SerialNumber: syz [ 640.127081][ T24] usb 5-1: config 0 descriptor?? [ 640.494527][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 640.519309][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2488'. [ 640.844013][ T30] audit: type=1400 audit(1772131078.145:3432): avc: denied { read } for pid=14777 comm="syz.3.2487" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 640.905220][T14788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2488'. [ 641.121602][T14780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.211319][T14780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.275225][T14780] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 641.438540][T14780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.715904][T14780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 641.759361][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 642.482014][ T24] usb 5-1: USB disconnect, device number 37 [ 643.143694][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 643.157771][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 643.300379][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2491'. [ 643.445979][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 643.657009][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 643.830422][ T30] audit: type=1400 audit(1772131081.093:3433): avc: denied { ioctl } for pid=14820 comm="syz.4.2498" path="socket:[55830]" dev="sockfs" ino=55830 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 644.901455][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 644.910375][ T3087] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 644.960231][ T30] audit: type=1326 audit(1772131082.113:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 645.080915][ T30] audit: type=1326 audit(1772131082.113:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 645.085945][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2499'. [ 645.192227][ T30] audit: type=1326 audit(1772131082.113:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 646.221580][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 646.221844][ T5807] Bluetooth: hci1: command 0x0405 tx timeout [ 646.273857][ T30] audit: type=1326 audit(1772131082.113:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 646.317267][ T30] audit: type=1326 audit(1772131082.113:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 646.340802][ T3087] usb 4-1: Using ep0 maxpacket: 32 [ 646.345984][ T30] audit: type=1326 audit(1772131082.122:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 646.371536][ T3087] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 646.414895][ T3087] usb 4-1: config 0 has no interface number 0 [ 646.420989][ T3087] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 646.553252][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 646.598942][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2504'. [ 646.616757][ T3087] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 646.626719][ T3087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.640310][ T3087] usb 4-1: Product: syz [ 646.662946][ T3087] usb 4-1: Manufacturer: syz [ 646.667555][ T3087] usb 4-1: SerialNumber: syz [ 646.690513][ T3087] usb 4-1: config 0 descriptor?? [ 646.842397][ T30] audit: type=1326 audit(1772131083.881:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 646.877002][T14833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.927958][ T30] audit: type=1326 audit(1772131083.881:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14835 comm="syz.0.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 647.172240][T14833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 647.834625][ T5813] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 647.980161][ T30] audit: type=1326 audit(1772131084.920:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 648.029115][ T30] audit: type=1326 audit(1772131084.920:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 648.170636][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.171001][ T30] audit: type=1326 audit(1772131084.920:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 648.182236][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.283662][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.355831][ T30] audit: type=1326 audit(1772131084.920:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14860 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff53079c799 code=0x7ffc0000 [ 648.401300][ T5813] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.410571][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.860419][ T5813] usb 5-1: config 0 descriptor?? [ 649.354335][ T5813] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 649.590687][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'. [ 649.632636][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2511'. [ 649.770602][T14857] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2505'. [ 649.792942][T14857] CIFS mount error: No usable UNC path provided in device string! [ 649.792942][T14857] [ 649.803334][T14857] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 649.954721][ T5804] usb 5-1: USB disconnect, device number 38 [ 650.562058][ T3087] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 650.585651][ T3087] asix 4-1:0.188: probe with driver asix failed with error -71 [ 651.082356][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.088880][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.101764][ T3087] usb 4-1: USB disconnect, device number 43 [ 651.397589][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 651.418523][T14911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2517'. [ 651.628576][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2520'. [ 651.684327][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2520'. [ 651.857767][T14922] syzkaller0: entered promiscuous mode [ 651.863565][T14922] syzkaller0: entered allmulticast mode [ 652.528137][T14928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.558054][T14928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.310126][T14950] syzkaller0: entered promiscuous mode [ 655.333736][T14950] syzkaller0: entered allmulticast mode [ 655.463508][ T5888] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 655.739483][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.864459][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.887504][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.954025][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.001589][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.077320][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 656.078894][ T30] audit: type=1400 audit(1772131092.547:3448): avc: denied { bind } for pid=14961 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.282818][ T5888] usb 1-1: config 0 descriptor?? [ 657.538384][ T5888] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 658.434666][T14948] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2530'. [ 658.460473][T14948] CIFS mount error: No usable UNC path provided in device string! [ 658.460473][T14948] [ 658.477608][T14948] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.627382][ T5888] usb 1-1: USB disconnect, device number 43 [ 658.724596][T14900] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 658.905368][T14900] usb 4-1: Using ep0 maxpacket: 8 [ 658.920581][T14900] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 658.951542][T14900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.981819][T14900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 659.011426][T14900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 659.042419][T14900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.088413][T14900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 659.134738][T14900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.641183][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 659.694464][T14900] usb 4-1: usb_control_msg returned -32 [ 659.738964][T14900] usbtmc 4-1:16.0: can't read capabilities [ 659.881884][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 660.292819][T14985] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 660.292882][ T5888] usb 4-1: USB disconnect, device number 44 [ 661.401438][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2548'. [ 661.413042][T15024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 661.537791][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'. [ 661.549123][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2549'. [ 662.397673][ T30] audit: type=1800 audit(1772131098.433:3449): pid=15025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2547" name="bus" dev="ramfs" ino=56910 res=0 errno=0 [ 663.854693][T15051] syzkaller0: entered promiscuous mode [ 663.862795][T15051] syzkaller0: entered allmulticast mode [ 663.897081][T15051] 0: reclassify loop, rule prio 0, protocol 800 [ 663.996870][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2554'. [ 664.017726][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2554'. [ 664.333297][ T30] audit: type=1326 audit(1772131100.230:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="syz.4.2556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 664.974412][ T30] audit: type=1326 audit(1772131100.230:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="syz.4.2556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 665.348170][ T30] audit: type=1326 audit(1772131100.230:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="syz.4.2556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 665.535085][ T30] audit: type=1326 audit(1772131100.239:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15054 comm="syz.4.2556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 667.422075][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 667.430999][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 667.440781][T15094] netlink: 'syz.4.2565': attribute type 13 has an invalid length. [ 667.448762][T15094] netlink: 'syz.4.2565': attribute type 12 has an invalid length. [ 667.906172][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2564'. [ 668.039977][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2564'. [ 669.075575][ T30] audit: type=1400 audit(1772131104.712:3454): avc: denied { getopt } for pid=15098 comm="syz.3.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 669.183708][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'. [ 669.200315][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2569'. [ 670.585256][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.657138][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.673855][T15119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.786355][ T30] audit: type=1326 audit(1772131106.303:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 670.889300][ T30] audit: type=1326 audit(1772131106.350:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.076651][ T30] audit: type=1326 audit(1772131106.350:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.566720][ T30] audit: type=1326 audit(1772131106.425:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.591821][ T30] audit: type=1326 audit(1772131106.425:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.616429][ T30] audit: type=1326 audit(1772131107.070:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.641615][ T30] audit: type=1326 audit(1772131107.070:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.742274][ T30] audit: type=1326 audit(1772131107.099:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 671.957795][T15132] loop8: detected capacity change from 0 to 7 [ 671.978543][T15132] Dev loop8: unable to read RDB block 7 [ 671.984386][T15132] loop8: AHDI p1 p2 p3 [ 671.989529][T15132] loop8: partition table partially beyond EOD, truncated [ 672.000619][T15132] loop8: p1 start 1601398130 is beyond EOD, truncated [ 672.006332][ T30] audit: type=1326 audit(1772131107.099:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7379c799 code=0x7ffc0000 [ 672.033119][T15132] loop8: p2 start 1702059890 is beyond EOD, truncated [ 674.045976][T15158] binder: 15156:15158 ioctl 4018620d 0 returned -22 [ 674.060863][T15158] binder: 15156:15158 ioctl c0306201 0 returned -14 [ 674.075845][T15158] binder: 15156:15158 unknown command 0 [ 674.081517][T15158] binder: 15156:15158 ioctl c0306201 200000000280 returned -22 [ 674.164701][T15150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.481716][T15164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 679.533669][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 679.533685][ T30] audit: type=1326 audit(1772131114.501:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 679.661787][ T30] audit: type=1326 audit(1772131114.548:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 679.685528][ T30] audit: type=1326 audit(1772131114.548:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 679.765892][T15218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.656734][ T30] audit: type=1326 audit(1772131114.548:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.4.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 682.941163][T15248] tipc: Started in network mode [ 683.479792][T15248] tipc: Node identity 02dbbe577c5e, cluster identity 4711 [ 683.490681][T15248] tipc: Enabled bearer , priority 0 [ 683.590943][T15250] syzkaller0: entered promiscuous mode [ 683.596436][T15250] syzkaller0: entered allmulticast mode [ 683.878501][T15248] tipc: Resetting bearer [ 684.012685][T15247] tipc: Resetting bearer [ 684.592786][T15247] tipc: Disabling bearer [ 686.564881][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2609'. [ 686.622054][ T30] audit: type=1400 audit(1772131121.136:3603): avc: denied { write } for pid=15260 comm="syz.2.2603" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 687.201889][ T30] audit: type=1326 audit(1772131121.641:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 687.341215][ T30] audit: type=1326 audit(1772131121.641:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 687.422919][ T30] audit: type=1326 audit(1772131121.641:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 687.479453][ T30] audit: type=1326 audit(1772131121.641:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcee99c799 code=0x7ffc0000 [ 688.594261][ T30] audit: type=1400 audit(1772131122.979:3608): avc: denied { ioctl } for pid=15304 comm="syz.4.2618" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x564d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 688.864741][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 688.954464][ T793] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 688.965096][ T5888] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 689.114671][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 689.121085][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.144081][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 689.158412][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.176896][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 689.192022][ T793] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 689.202219][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.215001][ T5888] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 689.226960][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.235603][ T3087] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 689.238562][ T793] usb 4-1: config 0 descriptor?? [ 689.249260][ T5888] usb 5-1: Product: syz [ 689.253554][ T5888] usb 5-1: Manufacturer: syz [ 689.260592][ T5888] usb 5-1: SerialNumber: syz [ 689.332866][ T5888] usb 5-1: config 0 descriptor?? [ 689.426417][ T3087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.442883][ T3087] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 689.453725][ T3087] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 689.463545][ T3087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.485259][ T3087] usb 3-1: config 0 descriptor?? [ 689.499389][ T5804] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 689.510484][ T3087] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 689.517097][ T3087] dvb-usb: bulk message failed: -22 (3/0) [ 689.532581][ T3087] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 689.545496][ T3087] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 689.557162][ T3087] usb 3-1: media controller created [ 689.558947][ T5888] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input40 [ 689.582547][ T3087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 689.594995][ T5888] input: failed to attach handler mousedev to device input40, error: -5 [ 689.617236][ T3087] dvb-usb: bulk message failed: -22 (6/0) [ 689.623113][ T3087] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 689.651371][ T3087] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 689.662752][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 689.681257][ T5804] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 689.696381][ T3087] dvb-usb: schedule remote query interval to 150 msecs. [ 689.705930][ T5804] usb 6-1: config 0 has no interface number 0 [ 689.734853][ T3087] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 689.735230][ T793] playstation 0003:054C:05C4.0023: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 689.786084][ T5888] usb 5-1: USB disconnect, device number 39 [ 689.792437][ T5804] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 689.815433][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.830856][ T5804] usb 6-1: Product: syz [ 689.854316][ T5804] usb 6-1: Manufacturer: syz [ 689.870763][ T5804] usb 6-1: SerialNumber: syz [ 689.884744][ T5804] usb 6-1: config 0 descriptor?? [ 689.907472][ T3087] dvb-usb: bulk message failed: -22 (1/0) [ 689.913386][ T3087] dvb-usb: error while querying for an remote control event. [ 689.922444][ T793] playstation 0003:054C:05C4.0023: Invalid reportID received, expected 18 got 0 [ 689.945819][ T793] playstation 0003:054C:05C4.0023: Failed to retrieve DualShock4 pairing info: -22 [ 689.955680][ T793] playstation 0003:054C:05C4.0023: Failed to get MAC address from DualShock4 [ 689.958821][ T3087] usb 3-1: USB disconnect, device number 33 [ 689.967424][ T793] playstation 0003:054C:05C4.0023: Failed to create dualshock4. [ 689.997419][ T793] playstation 0003:054C:05C4.0023: probe with driver playstation failed with error -22 [ 690.026604][ T3087] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 690.711342][T15324] netlink: 'syz.4.2623': attribute type 2 has an invalid length. [ 691.395851][ T5804] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 691.428795][ T30] audit: type=1400 audit(1772131125.599:3609): avc: denied { read } for pid=15313 comm="syz.5.2621" lport=51984 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 691.626197][ T5804] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 691.641307][ T5804] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 691.657624][ T5804] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 691.688984][ T5804] usb 6-1: USB disconnect, device number 9 [ 692.020498][ T3087] usb 4-1: USB disconnect, device number 45 [ 692.614228][ T30] audit: type=1326 audit(1772131126.694:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00139c799 code=0x7ffc0000 [ 692.659235][ T30] audit: type=1326 audit(1772131126.694:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc00139c799 code=0x7ffc0000 [ 692.708414][ T30] audit: type=1326 audit(1772131126.694:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00139c799 code=0x7ffc0000 [ 692.865539][ T30] audit: type=1326 audit(1772131126.694:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.2.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc00139c799 code=0x7ffc0000 [ 692.865757][T15355] 9p: Bad value for 'wfdno' [ 692.977707][T15357] IPVS: length: 528 != 8 [ 694.177305][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 694.186261][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 694.195140][T15368] netlink: 'syz.0.2635': attribute type 13 has an invalid length. [ 694.202969][T15368] netlink: 'syz.0.2635': attribute type 12 has an invalid length. [ 696.668105][ T793] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 696.802252][T15398] [ 696.804602][T15398] ============================================ [ 696.810738][T15398] WARNING: possible recursive locking detected [ 696.816877][T15398] syzkaller #0 Tainted: G L [ 696.822842][T15398] -------------------------------------------- [ 696.828975][T15398] syz.2.2643/15398 is trying to acquire lock: [ 696.835040][T15398] ffff888032f698f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 696.843928][T15398] [ 696.843928][T15398] but task is already holding lock: [ 696.851266][T15398] ffff8880328468f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 696.860911][T15398] [ 696.860911][T15398] other info that might help us debug this: [ 696.868942][T15398] Possible unsafe locking scenario: [ 696.868942][T15398] [ 696.876363][T15398] CPU0 [ 696.879612][T15398] ---- [ 696.882860][T15398] lock(&dev->mutex#4); [ 696.887077][T15398] lock(&dev->mutex#4); [ 696.891304][T15398] [ 696.891304][T15398] *** DEADLOCK *** [ 696.891304][T15398] [ 696.899413][T15398] May be due to missing lock nesting notation [ 696.899413][T15398] [ 696.907696][T15398] 1 lock held by syz.2.2643/15398: [ 696.912771][T15398] #0: ffff8880328468f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 696.922841][T15398] [ 696.922841][T15398] stack backtrace: [ 696.928731][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.2.2643 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.928761][T15398] Tainted: [L]=SOFTLOCKUP [ 696.928768][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.928780][T15398] Call Trace: [ 696.928786][T15398] [ 696.928794][T15398] dump_stack_lvl+0x100/0x190 [ 696.928827][T15398] print_deadlock_bug.cold+0xbd/0xca [ 696.928856][T15398] __lock_acquire+0x12bb/0x2630 [ 696.928889][T15398] lock_acquire+0x1cf/0x380 [ 696.928914][T15398] ? comedi_do_insn+0x2e/0x360 [ 696.928931][T15398] ? __pfx___might_resched+0x10/0x10 [ 696.928950][T15398] __mutex_lock+0x1a2/0x1b90 [ 696.928967][T15398] ? comedi_do_insn+0x2e/0x360 [ 696.928993][T15398] ? comedi_do_insn+0x2e/0x360 [ 696.929012][T15398] ? __pfx___mutex_lock+0x10/0x10 [ 696.929031][T15398] ? __pfx___might_resched+0x10/0x10 [ 696.929048][T15398] ? __up_read+0x2c5/0x700 [ 696.929067][T15398] ? comedi_do_insn+0x2e/0x360 [ 696.929084][T15398] comedi_do_insn+0x2e/0x360 [ 696.929104][T15398] comedi_dio_bitfield2+0x3c0/0x420 [ 696.929122][T15398] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 696.929141][T15398] ? do_insn_ioctl+0xda/0x4e0 [ 696.929161][T15398] ? stack_trace_save+0x8e/0xc0 [ 696.929182][T15398] ? __pfx_stack_trace_save+0x10/0x10 [ 696.929203][T15398] bonding_dio_insn_bits+0x2b9/0x570 [ 696.929226][T15398] ? kasan_save_track+0x14/0x30 [ 696.929248][T15398] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 696.929270][T15398] ? __x64_sys_ioctl+0x18e/0x210 [ 696.929293][T15398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.929313][T15398] insn_rw_emulate_bits+0x2a2/0x5e0 [ 696.929339][T15398] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 696.929369][T15398] ? comedi_check_chanlist+0x27e/0x300 [ 696.929397][T15398] parse_insn+0x83f/0x19f0 [ 696.929417][T15398] ? trace_kmalloc+0x101/0x130 [ 696.929443][T15398] ? __pfx_parse_insn+0x10/0x10 [ 696.929462][T15398] ? __kmalloc_noprof+0x320/0x850 [ 696.929485][T15398] do_insn_ioctl+0x152/0x4e0 [ 696.929510][T15398] comedi_unlocked_ioctl+0xf68/0x3310 [ 696.929535][T15398] ? tomoyo_path_number_perm+0x188/0x580 [ 696.929565][T15398] ? futex_wait+0x125/0x380 [ 696.929585][T15398] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 696.929613][T15398] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.929638][T15398] ? do_vfs_ioctl+0x226/0x13e0 [ 696.929662][T15398] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 696.929686][T15398] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 696.929711][T15398] ? __fget_files+0x215/0x3d0 [ 696.929727][T15398] ? hook_file_ioctl_common+0x146/0x410 [ 696.929754][T15398] ? selinux_file_ioctl+0x139/0x290 [ 696.929772][T15398] ? selinux_file_ioctl+0xb4/0x290 [ 696.929791][T15398] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 696.929817][T15398] __x64_sys_ioctl+0x18e/0x210 [ 696.929842][T15398] do_syscall_64+0x106/0xf80 [ 696.929860][T15398] ? clear_bhb_loop+0x40/0x90 [ 696.929880][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.929897][T15398] RIP: 0033:0x7fc00139c799 [ 696.929912][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.929929][T15398] RSP: 002b:00007fc00231f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.929948][T15398] RAX: ffffffffffffffda RBX: 00007fc001615fa0 RCX: 00007fc00139c799 [ 696.929959][T15398] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 696.929970][T15398] RBP: 00007fc001432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 696.929990][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.930002][T15398] R13: 00007fc001616038 R14: 00007fc001615fa0 R15: 00007ffc59752078 [ 696.930021][T15398] [ 696.941818][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.308711][ T793] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 697.317839][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.328318][ T793] usb 1-1: config 0 descriptor?? [ 697.361048][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 697.789218][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 697.796113][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 697.802985][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 697.809766][ T793] pwc: recv_control_msg error -32 req 04 val 1000 [ 697.816624][ T793] pwc: recv_control_msg error -32 req 04 val 1300 [ 697.823380][ T793] pwc: recv_control_msg error -32 req 04 val 1400 [ 697.830416][ T793] pwc: recv_control_msg error -32 req 02 val 2000 [ 697.837460][ T793] pwc: recv_control_msg error -32 req 02 val 2100 [ 697.844303][ T793] pwc: recv_control_msg error -32 req 04 val 1500 [ 697.851141][ T793] pwc: recv_control_msg error -32 req 02 val 2500 [ 697.858013][ T793] pwc: recv_control_msg error -32 req 02 val 2400 [ 697.864806][ T793] pwc: recv_control_msg error -32 req 02 val 2600 [ 697.871616][ T793] pwc: recv_control_msg error -32 req 02 val 2900 [ 697.878404][ T793] pwc: recv_control_msg error -32 req 02 val 2800 [ 698.099877][ T793] pwc: recv_control_msg error -71 req 04 val 1200 [ 698.107996][ T793] pwc: Registered as video103. [ 698.113538][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 698.127422][ T793] usb 1-1: USB disconnect, device number 44