last executing test programs: 12m10.043625525s ago: executing program 0 (id=495): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="7f67a76d3a35", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0ff5a212bd35e12fc32b95e9b6833fd5173150e125a55c71f520843f569b5da8", "4ad0eccf913b5e6bd1b47b6d9ef560206c001dd299e10e3a89c8226029312bcba06d7e453e4978d6536b601da90ec757", "f98f7e18ac4778bdf4ff85c4e5605d1689eb03e8f1250809c36cae1b", {"cf99c5c46a30928cfad069c141a84314", "b8be54b6325f35c30e31e6f2c0f78b6b"}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c97dcca5"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) (async) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) (async) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="0644ccf4d065cb02a61998b01b674e80122bb2989b3999d2a8400679a7a519d19da9ea68d804373e6291f7ef20c4b2628a48950c2a2a48ebfb2b1dd00d93261e2031adc908b512bedc4ff085a6f91c455d9afe7ee10abf082357888b95380ed50fe865a0", 0x64}, {&(0x7f0000000580)="1ce709ae7eb4e18119f76b5963791ebf3a608a291b3679a302a480cf9966c51a8b7c6c33b9cf067a129c223c8ca66112152d9fe91ec4", 0x36}, {&(0x7f00000008c0)="9607f12a9f14347ff3c293f252690d44cc589d6e517c360ac74d13fef47358f35e26584f7d", 0x25}], 0x4}}], 0x2, 0x20008811) (async) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="0644ccf4d065cb02a61998b01b674e80122bb2989b3999d2a8400679a7a519d19da9ea68d804373e6291f7ef20c4b2628a48950c2a2a48ebfb2b1dd00d93261e2031adc908b512bedc4ff085a6f91c455d9afe7ee10abf082357888b95380ed50fe865a0", 0x64}, {&(0x7f0000000580)="1ce709ae7eb4e18119f76b5963791ebf3a608a291b3679a302a480cf9966c51a8b7c6c33b9cf067a129c223c8ca66112152d9fe91ec4", 0x36}, {&(0x7f00000008c0)="9607f12a9f14347ff3c293f252690d44cc589d6e517c360ac74d13fef47358f35e26584f7d", 0x25}], 0x4}}], 0x2, 0x20008811) 12m8.272797282s ago: executing program 0 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001400)="b1e203074731d90a5bc6f13485d5", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000300000000", 0x39}], 0x1) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xff, 'syz0\x00', {0xa750}}}}, {{@ip={@remote, @local, 0xffffffff, 0x0, 'macvtap0\x00', 'netpci0\x00', {}, {0xff}, 0x62, 0x1, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x6, 0x5942a0a598be6c2, 0x5, 0x7], 0x2, 0x6}, {0x2, [0x1, 0x4, 0x0, 0x1, 0x4, 0x2], 0x5, 0x1}}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0x0, 'batadv0\x00', '\x00', {0xff}, {}, 0x73, 0x2, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x800, 0x1, 0x7bf6, 0x9, 0x7ff, 0xc6, 0x8]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 12m7.591940493s ago: executing program 0 (id=501): mount(&(0x7f0000000000)=@sr0, 0x0, 0x0, 0x1000048, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0x9, 0x7, 0x1, 0x8, 0x20012, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x8c}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x28}}, 0x4008080) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) socket$netlink(0x10, 0x3, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f000001aa40)=""/102392, 0x18ff8) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 12m4.499536911s ago: executing program 0 (id=515): ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e23, 0x2, 0xcd, 0xffffffff, 0x3}}, 0x44) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xffffffffffffffff) 12m1.283400358s ago: executing program 0 (id=523): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) pwritev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000240)="bc8ade31212e4fa350765ff2b3544f6ebfc8103f9cb869d3e2040dc99979620a2fb69da01a9ddeb3475c4e5534c111145ca3006d98b6e4f59f0745af44f58033250f5bdf88d51070b0253e5f8460f2fd8298397d89c7bb2b066bd6defa20b47eec5e982f6b96c72ff721d81f929d4e97d0115e8d04db8e", 0x77}, {&(0x7f00000003c0)="f01cc5dd762b12a826df63c647ee376bf46f2d74ffbeeca5de4d062cb56b0571c55760a255228a79fde8dcea3486f0b169ea4f337da2d9c3b2139c37f5ba912fd6ed6577b7ee0a6232d6a4b948f0a57693cd4fd9bd24a4ccfe80bfbdf1688dbc165153bae869d3fb08470449a2809f8a69c9c3357834127ba7604391c98226e3d93be74f2a80955db74952472a67407f9c458316a4d323cf143aa494e384b2940f331de59806", 0xa6}, {&(0x7f0000000500)="f4637e45", 0x4}, {&(0x7f0000000540)="2507510d978c6dc0ae312d45d5394c16f2d703b3376a4f80633b0b713582c8422061663dd86a6ac276627e3188a5f73031ab7be370ed30c277e4f1f0895ec8266b57163e112ead690802a86937ebbeeacd9a45ca09ace76f1ef871858ed44d490defed92dacfcf44f4cedde0fdd82ae7e561e02dfeca2a008e0ef6f08499b47f8f8a89a5d93a517f4662fd4dcf76421ae3216489a68e097bcd84e1df428b071b0dbbcc868099b97aab6bbc43309b9a5ee4955f26dbf0584c7a5a2dac3b", 0xbd}, {&(0x7f0000000600)="71cd77ca945bce636c1361176a637b6e841e262a35a4e6920868e0091fec24448c52eee905d65414c0aa695b2372ea3eedab37b93f314f6ef1e4d2854c508e511dfa0387efae9e54450eaa6b8ecfc1685365fa1c741549f89ee0525b94798ac275e48b5702a62a1791a3d7c3da0964cc50eafbe09fe3992060177d1c0f3ced547f87e03df48549d4c3e57c", 0x8b}], 0x5, 0x1, 0xfffffffc) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x3f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m59.950519773s ago: executing program 0 (id=528): r0 = inotify_init() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) 11m44.894819425s ago: executing program 32 (id=528): r0 = inotify_init() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2000fb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) 23.923397053s ago: executing program 5 (id=2714): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80040, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000580)={0x3, 0xffff}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4028800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x2bb}], 0x1, 0x40000000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000002fac1e000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 23.65585469s ago: executing program 5 (id=2716): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1801000010000108000000000000000000000003", @ANYRES32=r4, @ANYBLOB="0b00000000000000f8001a8018000a8014000700fe"], 0x118}}, 0x0) 23.539564524s ago: executing program 5 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x81}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) sendto$inet6(r2, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) (rerun: 64) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000280)={0xfffffff8, 0x8, 0xfffffffd, 0x4, 0x88, "57855a2a054e26cba795bf3a588d3f00", 0xb0, 0x4}) (async) read(r1, &(0x7f0000000100)=""/133, 0x85) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x88) (async) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c833003ffe54f53e430e0d2af6e9f88a1d5d2fdad505a37dd8216902cf70b9bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d000000000000", 0x64}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f0000000b40)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9cdd81ae4009a071d0209e3a41890d2943d15ad4a8fefc21f74de71773a", 0x93}, {&(0x7f0000000c00)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {&(0x7f0000000cc0)="3d044f36f5552e866c3e5bb625333ef189fed6d8891dcfb57a8af0678117c5669c82577417732f234f36a56f0d93d87af4c5fc3ab6cee7349ad7727eb4a3c5112fe13630c22e2455ea850820fbcbf233c0313409a9988cdff271cee9ed03d0d21e5ce72041046a8f77a63ff19fc8b050c522430571530885a968f466dca589223abdb0d2ef3d65ae3d3330e20d2b0a65514313c8a11f2aabb1a771b5704198da9cf8c4650ca654d2fa047c4b8800efa103147f9d2a94c6d1b4e21b3c9dbd8cb8d2aaaef558253cfc76e7b5541cf74c26d20a3ac061f8cb7a92b4c4e38f5db671b3b065a358d76662135ddd869b42e4dc2e9ed3b4b232a4215e30f688caef66ebac74f58ef34139266bcfb7055a838fe80dc25a1b541c8e673e56e94b1263c900122a5bd4a1670b9fabface28fef99d81bcce6727eea3403ae2ecdd69b1c6b5c84c7ce6b0ee500aafde6a7c87d3e2dad571e2a983cb9a5b02d2779033f95e2eb88cee8fd792f8354acf392a73ea69e724634f7858d351c564f2206ab6001cafc78bd91c10de8b370920b085f76fbf49a1b30c52ede89d87f59dff53a4c17fa2450904fdd726f33510e200166034a078434064cc018035d45e242feb43840240944a9f056d105350cca3ed1a58253fd70b292e4a61c0178ed37d7dce2164a7607fdf9e0ea2f0e48d3b94c05db51566f9c9e6c5d8db185723fc3fd74408a33f98682fd5bd371db5d87ae8d7f9969a7b7975a97030445a959cde1a0910d37b1cc2be02c7b924288dbdef1edcb1005679ff13d3e42df5f35e5a2db1782e76ff2b54b11dc6245b7c974d61c730bec067a2f4869c45e1d984914dd253e9318173925918dac1199fd8f920c8412d2db567374fb8b662c718f462aeafd5bfa0ac8ab0d084a6bac390cb0375159a988f784ad996a48c8813d3dec5c0d1e0922f3a9a35d17883e93d141b0df2727aa61f4e6fb3b363773e0ea670b2d22781b1ea0464047397a028840d05eac44c0463218b0b345306b68da577c019d8f9349854f7feae6211c8d901399f26c5cb06ad60dc4d6e0db1c3f266b0c11a8f3fe30575cef7ae4195c1aa2be4816d2a1e00bb22cc0992e19b7cae73e8cce4878c5d0413965426344b1f58668869969113c5cf5d2dcbc74395c93d871b1df40750a3e2bf415d0cebb2c4398885cd59c06e8a8efecab9e4088350f17ad68d21b9ab92beb888b0cd8ea0fa91d4d41bbdb7b8a10bef8b04027a66db34dd6dbc67615e1f2b794019303861e312366980ff015aaaa3e89ea627318c530ee2b2340b3d57027701413e00a2e22072380123e8749e3b5d19021d750b435b2c6c08ae7710c5e90bd918ad9e6c3f520616a19fa5fda161ab24d56d4b29d6e71880575fcb4fb66c6f1a22a7bbfcdfdfd39d8302f722f9aab98fc4b7474f151e1bc7ead7271b63ca5a51215cf0b417b6c0ca8ca3f72b723ffa66a96f70f281f98dabab1956cb4e4decffa7cf4a272b3b811b833b1db02a7a785d39d62c315d7a6aba26a0f86a0e9194f1c2d42b472333d8e077ffaa2f9c100198d5a857d5d1789c14a0ddf0560045ce96a109514c38580e29988c669ca2838b555304294338112ad52e6ab89cd2c1b2de6aa8c7c07d2d955905fa79577f3ad12bcfb919440c4610082ac7da2cb2d2d81ae8cafad94f53776a5f49816d0588c03868e432863e28024cbc9270bac8886cdf8c95768ee50475cc4502cf3f51f217c04050fc5623a21a1e0b034e55d3610158af853ed0d091aaa94b5ad4e1ea4ffce865fb3d5f8867f3a67b48c2c8028bd9f42afa88c0d3fe5c2fe3f7c99a9609eaa8c1d50f542b55c5673a3f761fad232afecaaee20792a97e9bb196dda2cfb26f770adc2250deb8e0f8db9c1416e5c2cf6f5be7383efa377ca4594d65c370bbf1713e30e2dd0b159a88a2928eea13a285d08f83eaed977ca380960e070e57bb689aa034ebedc9e6cbf6f57d13f3f9a79722a97a3875629077b33fc5fbcb62a11fdfa932ec5d89bab5b076f902c9fb62fa1289dca4cb0845cf95d6838748b741d1a3d4ccd37d2a40ce4ef881032dffc44148e93672d380d0fdd7677a4a295cd377f8e48f10dd691ae2e288ad632d5e7c6c57da71885e3935d8839e0a05a8ff7749a0fed7b7cb23de745cde57982ce362503d26659e2080fb9ff5ca63bd610460a5dc119f05cb1b006b64de5a078f84a1e302565f414fa6316b6607e03c18805948ff6c16d8b8eeab2ad5fa7ce5940f3fcd911ec6d80230b15563fbd2be0dc09e529327a2374d5c15fe667b8168c88ecb0d13cd2ee4f994cce0272c99be012a0d092f4000756be625284f9aecd9565c43bb0f69ea5b16284b024f31122e3e6e7104d0f8d5ac96f0cd4a9e53372f0a5df793e1b4d57a0f91619b2daf21299fd9fcfacfbbe0b27643a4597073c6da888d85d873ac26190bd6386967da5f1da6b18b19944d1279aae4aba62c4120171deb0eb1e1a1ac4f8d0bfe73e7dd0204e3682fa83c11f3b695a54a3e024a7937b87bd891326bf8b1061e9a49d3a660c49eb4a39bb92259ebdc4982475c873b1d85e9713f3271882eebd090ccb167ae9a59829b62235352b664f1c050766a55350f7981b1f885aae6a84a99547530cf5dcfe30b27328d5c2561692358d1acbe9bc1999a927c8daf630a4cb945e15d441cfed27874cee9dd820f4f59331b66a3b86b24540bd3dd2207081564c0d9e5788fa908cbbbc5eb8b3b39cf0944ddeb452913013de160b83013a6ce6c71a4ebb9fba0c64e69d11296b386252bea3dc03e0b3c415fcd8a53a5cd49f3e725ef7e7bd43144f51f78a79713e3f2a12f5fe4ee52164d48aec30e8688dc3b5b5fe5f23dec7abf0aee5b148d09d948c1afeae1e0cbff4563423118b5bfbedb74e01486d2c1eef94c7b66ff3e76db46ece84154aa8ec462f6ec84f0942c6cad475aafd7d2647a58606a24c182669705b273545ecadcf9d6eef33c95dcb1f09ac944ef816ffe3586c322afcf3d750a87bef633cdc9fb413134494e972b7ca65c091822346a1fa0223e77a41c937b7e0ab71d243c65d3a09fb57bca2e2a2c2941bac03bfba3bb38c56d5478eab5dbf6b33f3aba56cb0d9ee8d55dd98bc48d6beb246d3fb0aa52eab253d10802ef7e70bccdd3ec265381896bd3623600f7904752055317d67e3f36494a8e0d8ac911b46e1b36c0dc57d13174ff05886303ae3c2ef4f06071132cc1885219a699ba1d79a985f9b21d2147497152eca2308e9c9a3be3ee5e0c0b7fa5fc3f33fe12cb2c026334e453db615b4f74d1c0288c184a4c14b053c3a071513f4f7c8a3997693f111753739bd0eeef4f890a420bd0110f7296799a505762ae44297f2a04304b71563ad9cc8f68b927790d18f58da8804394a4d0919d939167b0e4cdee6ba88208c628a466a05d52ef09126271e82c4a7e4b0fd66885d2d6bf563b01d9ce1ce58f1dea91312a9031b335ba7665da23d15e259008b56b89b49bf1aa1007ea35b125f78f43f619fe4c6ceb8445cf5fb866faca2902ae303142525401dfa24b148307e0a18620baba8fea648b551e6c3092d126192ff51b396b00dafc2fc4f1149e3d7d4572d2dca69b262dfe69b2d1d7ac61ebe61a2ae46b18c20e98db24ff39e314c1c62520af9d1847c104caca86a3df151fea892463ceb0929f44934a67c09ffc3ced430f38b1f3889e87fd3f99bf1f467a6c763965d8bc69ae5a77655798daea573345647c312362f3a86cb043baef0a4ccb1aee536229a821c6897ff5cb1e5b8a818d12e6482155caa6d151de00d5eeb50d83543d73c2cc486a7c86326a92e184fd822bc750aed095442f3e6eaaced52ae72e80b39a8e663af9dc26341798dbe5e4863b823485f5cd25f35f9f16b2578201a7662a831ded8f2afbe9ebf233e504824727eb9605e2f1097ca9d17640ac489a61c11c5d76c7afd1dfcd09210c89856654ea4be6460ae9af5a0950b5a20a28a2b2b28387f985d981d072b5c0561d1eb8b9075038eda12ee2fa1224f6ca2b67c7193df72ddc4e910c93d7544fb594833b204a01baa0e1079e4a1cad6b6edb2a31dea3814bdeb411f1a1a4d854dc99f000662957872005db01471a95e53475263b22a47087b0c85e33db6ac30ee6f26e81b06ec9b5bd781cf386b10b0d156a703ad451b3589960a546310ae8483fe60609801e242c63125652ac8857447a0478fd98d3822afef3f9146e336eba1b241004b4bee86cc1087453ef6aceb55a2d80b57624cf149b35da9a145f08211e7880276748c37d7326fff19be41535707ef4dbeaccf9c2555b1ef3e24ac6b6065e97dacc8c514e11ab822537baf0da7f32198d1bbf74008138b4fab7453f02db9a996c98ccb0cff4e40a1e502f2a1bba20462067ea38928a42a30d844626a7feaaccede8d3f7861741d9e62bff08e621dcadb3303c836dbb7ade37633b314ca8ec219c03ba4a1c720bb37ba3727c85b6c87f0b2a4a956f4a2e9db625465479faf63b4c5cd14188ce71cd28fd610ea32306dcf7a6133d79475cbdb03dee71ab095258b34a0d02a6e138e8a386caca078eba537c42e6f7e095116dcdb70321312ed238be621404a58cf29b65c5b2ee5dc568f02bf208201215e3cefdd2e435ed11e5ae0dc85c6cf06965dcabebf25fdd10d485037ca4bb864abb907c77ce4fa817f57c7707b21ca892eb9f4d3251f4948c3145c55a7f26e0b54ca45e4c6cd189b56516a0c99ef3f9f54e5ea859565bf2595e9b41d2c350cebc830f06073c215e00bfa38e4852803d757c4b1fb756bd675446452eae04316d4dc613b9b43421156fa642019d7c23ca77a52a3841b3f0d356d18ed34f864243a14b8c84ed5933d2a3d48038127b838311781198c8493d1fa462bd558953ff1ed6607e610051b1c337a741fc42a7cedd5a4ffa08cdeb59e08734833657cb59e05bf22989475f1fa7a17fbbb9a6996e17e67012b4e84de956a6540d5b62d29bb56eeb2576d088c0d45033e9a099bbbddd8b32d655afdef24b57811f835f7bb506510fac0db6d33b9ec416dd0622a0d11e98a00e3d05cf12caad90f2154b89dc1b9c8b000e81a00c10b99c35fa8443ece8e92a9f94c81b212cb6351a8cc598b28f2fcfe9720762787a6ada8502899640c3f5bc74aaea1c7292ddf59a8d5b4114d698936f2e6a7e0cc3c5eb2112ba00534319d0ec4a73a40ea04789345ec1117ca5022b9fe27d80b6cc6ef03e27a0ff563627ac69ddb31875eef3eaf5e8224a0e0dc5b48596deeef13bc9714fa52981d9165faf47a9600938d3a0e55a7238c5148a5738865e43fe3702cca8d186f1a1e8cbec0f6dcdfcc4e4d570208ae6043b09b846842737fa3cc6e44ce2a0692da45a6a273c1323d8de2ce4da2c2b8fb4d634053949e213442089fc9eb0346a906122963e3ab232d880dbca59189220ed19816630056ec6412600419ce54e54294f2f680d37f1c6c06ffed178aac72702a45602cbb8277278fe0833116543e3e931891cf40b7ad4656640884ef0dd01a7451d8a7f8639ec793ac58a87596ca14077eaa7c138e1a17f5f1398f40bb17b92e0e1088fbe2e39b6442ec3055d29fdfcb40a72f460d3f938d8720f2a093110eaf0cd12b937b2711ad57675ae96783d3aa388838910d43dec9c5546810f9ffeaa5aef27dd7268fbdd811ea879e2e7f7ee5b908b2f8171c71233d18ed45a7c200d34e4891779935b27309787aaf0599c6187be1b30571cef81385c6b460a372abd2cc330cba59e14758aa2638c1c286d3682b48f543451afff9d00113021e78b", 0x1000}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="b7d77122ff0e4e10075f1aea20a1dd71fd9685bfad6d382d971ef3d62a2a012f7d06f00576a349d7f5e806512101a1ab500915f3f907550ba9d8071279004ff65644851c526604972b086716368cd6cf777c582bc523f87ee79f9ba6b58d65d1eb742691c9a11d2523141a94b874f6f178d76742b442232d1fd588c4a67c143b7d7120884217465d7d0662c65e21b2359a9170e32921892046124cb01b710352c20a09e5a3d1a5cfc0b6", 0xaa}, {&(0x7f0000002d80)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002e40)="681e388480ae1de8bb3858bed89384e10b6c181e12775f4be4156a56d13d439dbca05257d413af77d56992e79a18ca4d1f1aad78b6237a831e29e3e86eb81ace7e8805801498aa5c9319e4c61b260c0bbfe9b4840d5d3f319d5ba138acbfea81715c2e62b0ae4c215b489a7a4c56a6dd38e756b8ec3b6ac3aa91e41e52ead07e1c8f46f6f0f19787597192acd73fd42a546c36f1036e90b9ecf5f112a5144e68fae8dea8aaa3f4961a956a4c3a952149f2dd5e6758550474f97f2654302dbcc014de79489e969652ae177316e5837d090f88d60f401c6f00198933477149f49a417161ff3fa85366a4d5921749286b6e62681ad9d0e766d6255cda72fdc39ffd8f67deab46d955de32c14a6bc5f71e7b2a87110eafabaf4d66c1295e347cdd5bd6f4726a3f13190a9bee2b5d4fd8934f4794a765d0d463a6cd1aefaf39011d62782781c4ae43fa49fa9a810fae91b199b61e24ac36a2fe7c48073f7690bc44322ed303493d825330aa75c3e4edeee318a146e4f3082cc2879ecd6922bd649c045a3e4a1d170deda05e3c02c7477474f1c42fdbf71262f4e949637a7850a8e4a3eb0a5ffca8b2e52a5b62596371ee7e6cac728b1e193c57ed7c337a940a7bdbb148ceca4a3a00a0e867e636d1bc97f7e06c8dae588632b46730abe5da1486b0f6fd8df57281d885d1643180a1249f025899720e3b51b5ac8bad96e89c13fe4c7ae8704f3850e4c87ef32a79c54eda527321314f6b04d54ba372fa617fa3c0cc4e79f9929647ab868f7488ba26fe0afa86f2f3427d73dbe60eeb91a5220566ce3083f4f1f25efc43e70f1c18a4ff26892526394dba3b1a77260ea5b20bf5fc2419b7eea2a55a548abab5a0c61709149e509e47f116c09ccd384614cb9421318ca0b8f39db906b8a498f131b4043b88b1bb1e08b6004191900bc9422470806142f279cab0ef8fbdbe88022e2a959f5db3a38d9f8f6c59e8e48286fd9b06225b70f0c9dbd43ccc665db33517aec7eab15914999e86b785a5c34a7a4c0488bb8d15136fb2839f4a1eba0ed8c258bc19e9b00463337ef9e1129172c7554326b57307fc41771bb8de454bc72118e3223234473e5846d7a88e5559c2fe197ea9f30a9b67529a79ed019b27f9bbe611470321c9dbd65009d3b2b7aba018a7cf2b6ff2a43cf854f28226c7428be47ea8ee4b70d431999ecdc1d9c5d36843e98e16689e23188c05e5949391f9a9e75910780213774ea1c9fd51500aa1f17bdffefb94e76f754411b1312adaa6692671721a6db580d3345f586e8d6a5e71b2e0e0ee0558ea29e29fcc65433cdb8ba54a51d30231fbf9109e76e6918e39079041a4ba52e38fe27791e9ccefad188ef749e188f406731136aecedd698feefc809f3a6b2c87b5b353e3bc9ec5724522877d134cfc2f7fd9434aa996013f070371533ba965fe8d9c0fc23027abc63dedd420b9b41534dfb46ecc9535f53632c8fa9caded9e0ee68f0c229012a82e3ec0a934ea3b40eaea07f400f20020b60357a5a0c026cdb317c669cbc28bab388810d19848f4cb714b3eaf068f4337d352ef22cc1bbced97ebbca1e9d71da5a243c692bcafddf1bb12444adc71ea6adf346ca449d9b438ce61f148335f45fdd79915793505fd058e6d6168878f250d11e992fbcb9478803be504c72552b76bd0526e8ecb85df148e7e1163305a0880ba62ea30585646cf274bb2e8b343d13a1c48efa75659aecef1342e2968a7a968bde65fa3c3de03ba81a62b05d467d5960d27df2d34a376f3dd43d3bc0ae4fe2f557e0e64abee93ad3f22f9a4f43a3953c0c709329ce9da0618a21a3b9e2f8a0f8f49c3ea7026dc0f8524a9904308629b52e968e0a964979ff7237f2e93d916b76c79b90daebda6c956fe5aba789f3d1edac4dc1afe5dd90f7eb87bfae7c4a39e3daa4f6614bffe68d36e8cb6cabf6e89829a740805ee4df134d6430378916573fe6542e01166a3e88c2265dec4ca728591d9f052b591dcd502aa3741520711fca977b1bd496175efaaca65b65b09b6ec4f9ccd10a3badfe9556c7fa295e72c7c3e3995581ce1ee7e37a70b1648c5ee9979644a4341d1595a4776ec7ce60593dcdc0ec3cea651ee953d66783fdb9ad1840f260cd016dd4bb83b54db8b5d43f53ff47ed9c00d22a8cfde072573896f283a0be12459b57ff0c5a93833971bdaccc78dc7574bd7563cbe96fb19ab256b1f38281e410dcbf91be283975b575e2171f1894e69071a14901f54ab7663eb319e89fd8e003620fab9d6482f42a5640ea07c26de363055a8c2d89c1ac83e2a0f706adb2a7e701fc8d4324887dd594cffb4a4bc4b9510b5f38d5cd7c4e265948b3994b1bf0e76cb4da78ed3941765d1c5eb2989e87e9112db5f90ecc9140303deb24a84b9484a063e2de73be87a6c469f40893f3fbe992b60a777d4110e697ab28ccec005cc5207fad2a9917cf2e787332fcdcee508941df50a28bb38bf20db2b026b75f288f9d4a4567c039fcfffce00a8e26da221d7658e5e869e3f1c01dd14aec591630ca445ed37374def6a56cd91efe39df5117caffc4e18115b21e6dbec15e8107c6fada585242df2c4248252ced4dc1e87c104ebcfb39c88af9c30be33b77f18697c9eab91086d6228678148ea61f4070bf3ac24b4a8f9f841d336df9e6161432f11d21930afda7ab756666db41effb39f14ef97fbd85a57f1182061ae9b078e252b3e754d92857f57f3763faa42a60d6accbd347116fd8c2d4f8f050ee4c6ee65037deeecebdd4968c4fcc8a77ceff4d4205c0904a60056c79e442cb428c324b447c4887951dc4d171587fadf268b3302e6deb9abe25fccf65bb6b2fab8c0a6bf38bd25f9ca0dd2f3791127ed27abe227afd15b4a93004768562a0984edf77f3ab3c5914477b4f31de2b1e80a90edff27bb2986336c6fdf5805b31bbb2b6947e739534e0857958efed807eb6ec9f2f7d44b16ff931b62936b04ff1d2453e4022a58d8e23787eef1643bfa73b373acfef22989c15360e675889bf1f070246cd52b65a82b157a51322bd9ef11ac66ef289a7be82855ee45d594627bd28cec461ef4ace0e8b2dd5cf1b2487642d39f2556f72d4653056ce730f6badfa7de333f340da0edb7ed475f2dced3b49ea68b0aa525955825b0c587f811a6ee0b3912571a73453f25de37ee883320eb44e059e50fbac5fcb715d629a1307da9123474d74a4279b12b6039b5f3e35c2c7c9d2442a925504b99848ab7d6e6f77cefda37ac652a72b60f8932cfe9c1d59cca490e2d373ed3df2639bc4bc602865c6474d850f2cb7ac22459ddfdebd1408de64a89fa4e4f7c5648583013cd4d1eb333eed93fe47fcd1fba55101e02636ad200c507c0862402bd6641be252d0e65180e2179040f0b976f76f88badd5dfde6982e053c261e7a814a5792d8bad5312b4dc2694766b9748206e4d82e10afa16b54aa6690acedff998b09b4f660b8ee307aaf953b78ed296d8d75b73ce0f987802c908d33b4b27bac5a260e73fa10104b2520007ce3ab6f7af88d48b3f3f4f7814a32938c6f72f62dc3afe388edfa0548299dfe8e70a3af83a494a9b558094a6bd5454da814117ffad22425ec5e34373623b606312a8aca23e388462d31f9ae2c0246bca2c8185877cbab689889688060150f20d32e17e035c5977150a63db89813c8aff0c53d9aa336e06b8a9f44687f2889f0b2fb9870da15013660306475f45a15b9abc67945029694e565887588e7357edbc87fa39ea9302def5b14310c04d229f0f782cca341da3e2676a06db92fa25ae499baa9b3af61dfc0fbc89855bfe23a5198c4ab7ae47b48aaf164c0ef933da9d8a6b3526b8dbcf378941cb468956bb1da651aab85b572b3742e857ab896873ee75a866b0d0e5da1cb1196b7af0155fb8ef3069b59f2004771a61d3a1ca4aa0907057bba30f4a8f185b2a412817965638053edf37814c40b632cb4c3b734d9b87940f8fe204b79b6aa28c94b6f71108c66b08383e05c8eefd0c5ae5c589eef936c3e49fc7c5ad5af2a412bcb7734ae2a9d81ceca67bbb722fa1b63ae1849bb6b0624a4fcc8ad694a7bcab8d5073048face1b55509d2a626daca3ceafec44e20d90800e6d94a60b29c1d3f195cf458bd651af3c5ce1910cdbe2abbb4ca6c25c2fbef0144a68d597680e0533b46697944aea898ea26f1834f4d0fdd0aa8398eecfde4fe0b18d6689dc4a8b179b7e0f9f8e15e119037e31f1c8d5db750305f97783521b55c4127d250b7e518c835140c49c7b0d6900ec5765f07a85f6d7e2ecc3cf32f5bc8b1d60e6e8759245bea5715f00a9b3f36b43cc0e6df7f67b9242fc190a9f09410750f58a8b4854164c43e3d566ec2e03749a7a61782aa438d996949111095a5bf30ed8e9d793d4ba95dd92d1832fcba1302a3ffac928084b210390c29ca91e257e5e1c4050d85214be19ed8f09031a4614f7aad18f36da0ee00b3ae64f3bf8a61f7480a2b88aeead7cdbfe8baea0589856e5505173c24b3c81f5e454bca98fc72c82b7287e2c98e973d4ba9afc20843daeed9fb602e2ad599c338f11850de621ff7c74196b651162469eedbe986b94b925c4240b6f31c300a082b38e7b569594a7acbe5fd11", 0xccb}], 0x9) 23.319813648s ago: executing program 5 (id=2719): syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 20.299909378s ago: executing program 5 (id=2723): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f00000001c0)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) syz_emit_ethernet(0x1c1, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd697a262d018b3afefe80000000000000e1ffffff000000aaff020000000000000000000000000001332a000000000000000100c910fc010000000000000000000000000001050207ff07500000000012810500e2000000000000000200000000f3ffff0400000000000000000000000000000002000000000000000500000000000000aa4f10000000000008000000000000000300000000000000c910fc000000000000000000000000000001c910fc020000000000000000000000000001c91000000000000000000000000000000001f5b0964351e86d27ebdf10644b767741375315eaa9e003ddc4cffd6a3f5f3ab7574ded8d817cd84db793acac249b04e647bd5f329a2c8e9e61cecfa752895d7957583d9acc48b8df1fc2c95e96330935384e13738de2e2fbace2cbdb51e745c86e3dcdf5fd65d8b66fde80f93cec92f48bcb79be179f4f2bd75cd67b88038ec01b5d9ad35b5235f6a7641ed27c4b2db459db3ce0e94146234b23fb15d265ebb738db9a737db72d7ed43784ef74a2fc7ff2fc05028001008b00907800ff000dffffffffffffffb2389eb0b907415521991b6094fe5961a6b978fb55fc1ed5433e8ee5eded9c2d18a50e70b2b813e1b4a20f36a7393438a5923b6712967d7e799af2fa390ddfac51c9f0090a063b0a21fde3bb32c2b9f7018d03a4c31d6f9b520cf85f7d6a09ff96aeca909cbc1804383013378fa1c26d3cfb2390dc05c9a5120f4a7d5006ed2750f83d7338c7fbb85f97d7069486fd9452efe5e8b6905559305eb0bc04ba27e83efc692f8076bb4f6469896e424e9a804682cee981559f7d907b22f04918582199cbfb849cc9fe214d02e329c13136bbd050af23615e90d2a6c3f09d770c246a17ebcf9659"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2800f5ff000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a300000c6060a010612fdff000000000073797a3100080000040004800900020073797a32000000001400000011000000de000000006a26593c00000a4777f5606ae8ef66bf084c8c16298c058e32f57290b8190d6758b8b1c7c4b26416639016b1afd8c801f7f200c445de9cfc8ce9813d473d07a0269cc010fa43f658173949b90f686c22cede38a75a47de4cbe11b52e7ba0c7d0193948ba9ab14f233c72abc2724cd11017c4faf0f85cce0e136e36197c56a375160ad74bdedf17b81ef938ee3d52739100"/231], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 19.383592658s ago: executing program 5 (id=2726): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001300)="d80000001000810468f70082db44b904021d080b01001600e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x8414) 18.563252064s ago: executing program 33 (id=2726): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001300)="d80000001000810468f70082db44b904021d080b01001600e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x8414) 14.539651608s ago: executing program 4 (id=2739): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="cbb2", 0x2, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a00)="8985", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x3c) r8 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u32=&(0x7f00000001c0)=0x2}}) shutdown(r0, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x202, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_SPORT={0x6, 0x7, 0x1, 0x0, 0x4e24}, @NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e23}, @NFTA_TUNNEL_KEY_TOS={0x5, 0x5, 0x3}]}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x200448c1}, 0x80) 11.167194255s ago: executing program 2 (id=2746): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) futex(0x0, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x85000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000780)='./file0\x00', 0x10000, 0x1) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x8, 0x36c00000, 0x23, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x1, 0x6, 0x1}}) read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x2, r5}) r6 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x1, 0x20501) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="18114559", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000dd720000f0ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018370000010000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185a00000a000000000000000000000064b0f0ffffffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000005a91500001000000"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x52, &(0x7f00000000c0)=""/82, 0x40f00, 0x4, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x8, 0x1c0}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r6, r1], &(0x7f0000000640)=[{0x0, 0x3, 0xa, 0x5}, {0x0, 0x1, 0xc, 0x6}, {0x1, 0x1, 0x1, 0x8}, {0x0, 0x1, 0xc, 0x2}, {0x5, 0x2, 0x5, 0x5}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x13000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="33000000060000000000000000000000000000000000001003000000000000000a000000000000002f6465762f766373230000"], 0x33) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x80, 0x800000, 0x0, 0x0, 0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) preadv2(r1, &(0x7f0000000840)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0x7fffffff, 0x100, 0xa) 11.027327809s ago: executing program 4 (id=2747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x20801, 0x1, 0xff, 0x9, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 9.258797283s ago: executing program 2 (id=2754): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x1400000, 0x1, 0x80000001, 0x7a4c, 0x8, 0x16, 0x6, 0x7, 0x5, 0x3, 0x5, 0x1ff, 0xfffffff9, 0x1, 0xc6c, 0x5, 0x6fcf, 0x0, 0x4, 0x743, 0x5, 0x2, 0x6, 0x2, 0x2, 0x3, 0x7a, 0x8b, 0xa, 0x5a47, 0xdc]}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000180)) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=r5, @ANYBLOB="010027bd700005000000020000000900010073797a30000000000900030073797a310000000014000200776c616e3000"/58], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r9, &(0x7f0000000000)='bond_slave_0\x00', 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) 8.283293392s ago: executing program 3 (id=2755): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfd111000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="aa0bdb30528bdeb3791e9716c75a76dd1ceeb73f7454ac2afaae0f4cc729dc0a0b7d7aa6e84a82056202baa6715e464f430fb797063d7fe1c55b24152ba60930cd9f697dba21e5420950b1d688cafadec16098d73bfb40a8111b2cf6b3806e1028897e641661407eadc7ff3329d380f75b9f76263f3829008d0029a14218bf0b4b5a3c59522139a002375aefcd46606fec6df3aeb00c", @ANYRES32, @ANYRES8=r0], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x40880) recvfrom$inet(r6, &(0x7f0000002880)=""/4113, 0x1011, 0x2102, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) 8.273314705s ago: executing program 4 (id=2756): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfd111000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="aa0bdb30528bdeb3791e9716c75a76dd1ceeb73f7454ac2afaae0f4cc729dc0a0b7d7aa6e84a82056202baa6715e464f430fb797063d7fe1c55b24152ba60930cd9f697dba21e5420950b1d688cafadec16098d73bfb40a8111b2cf6b3806e1028897e641661407eadc7ff3329d380f75b9f76263f3829008d0029a14218bf0b4b5a3c59522139a002375aefcd46606fec6df3aeb00c", @ANYRES32, @ANYRES8=r0], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x40880) recvfrom$inet(r6, &(0x7f0000002880)=""/4113, 0x1011, 0x2102, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) 6.307870818s ago: executing program 3 (id=2758): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r6, &(0x7f0000000240)=@abs={0x1, 0x0, 0x404e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x1e0, 0x32, 0x1c0, 0x4, 0x0, {0x0, 0x8, 0x4}, {}, {0x0, 0x400}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x3, 0xfffffffe, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x22, 0x0, 0x2, 0xa}) 5.779239726s ago: executing program 2 (id=2759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) r2 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r7, 0x7, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x4, r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x04\x00\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95\x17\x16\xfc\x91\xa0\xbbE\x80)mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\a0{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb\xb7mLY#)\xc2\xa4\x8a\xc5\xca\xf5;W:-\xb4(\xce\x02y\x04\'\xbcY\xb0%\xea|\xbf\xc9\xda\xaet\xac\xee\xd5\xcb\xe8\xfc\xa8\xe9\xff\x06\x8d\x1f\xdf\xf7\x80+\xcc\x1e\nmt\x1d\xdf\xe0\x17\r\b\xc1)\x8b\x99O\xbc\x18\xf5\xcd\x81\x82\xe98\xdb\xe4\x9d\r\x9e\xd2\x93O\xc0\xbf\xda/\x05\xa8\xa8\xf7\xdf\x101<\x03\xd8\xccu8w\x93\xf5U\xde\x1f8\xe2\xafX+\'\xad\xbd\aH\xc0\xf4\xc6\xfd\x86+X\xbai\x02\nw\x97\x92R\x8d\xcb8\x16O(sz\xf5', 0x7) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000100), 0x0, 0x80800) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) 4.774961162s ago: executing program 4 (id=2760): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x22) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x1) 3.73044817s ago: executing program 1 (id=2761): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x68, 0xe, 0x4, 0x4000, 0xe, {0x77359400}, {0x1, 0x8, 0x3, 0x1, 0x7, 0xc, "29d4ec6c"}, 0x3, 0x1, {&(0x7f0000000040)=[{0x2, 0x4, {0x4}, 0x10}, {0x7, 0x39e, {0x7ff}, 0x7}]}, 0x7}) 3.45927369s ago: executing program 1 (id=2762): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "e893fddb"}]}}, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010200000000000000000000000005000100f40000000900020073797a30000000000500050002000000756b1785d85632637e2fb8f8a13e58af1330"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) sendfile(r4, r3, 0x0, 0x100000002) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="24efff0011fa5f0414f9f400000008000f0001000000", 0x16) 3.266211913s ago: executing program 3 (id=2763): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1801000010000108000000000000000000000008", @ANYRES32=r4, @ANYBLOB="0b00000000000000f8001a8018000a8014000700fe"], 0x118}}, 0x0) 3.157901383s ago: executing program 2 (id=2764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x20, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1b}]}, 0x20}], 0x1}, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002dbd70027100c1582100000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) socket$inet6_icmp(0xa, 0x2, 0x3a) 2.97389787s ago: executing program 4 (id=2765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) 2.927684122s ago: executing program 3 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x13000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 2.255930425s ago: executing program 2 (id=2767): sched_rr_get_interval(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB, @ANYBLOB='\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100)=0xfffffffffffffe7a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r6, 0xffffffffffffffff, 0x0) 2.130205184s ago: executing program 3 (id=2768): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x10000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 1.899291669s ago: executing program 4 (id=2769): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x30, 0x52, {0x52, 0x5, "edf2d6e8b8d3fe62e7bc873820f2ca30e8289b122096a0243c470cc684dfaf093c33e1026a78527ec6631a510f2a2d1484d8c916f5b502a2d2e785d4bfaa44f6a126f93ba8d9267964f9cbc866951522"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="0003b4000000b403ca55f325a750884cabc6605d72af172f030fcfa873a8c8f9a6f2dd8f55ec82b5b2b6211c3c63c554f725cbb24ce577ad888987f9365d22eba6dc6898031e150370b2546ef4d3d827759dc486d071f2eaff3fd7c6c333301275a3138d7e14f14fbd93b133789ab6c501925134fdc9bcd1e709e5f74582511ff96279b05f9f2b47a7d0ec665dc16e1f9cc315d6223c2628e82a3d0895fd3254417634b103f21fe8e6f3ab652d11296a46633d3cf95315fefe3fb4776bfa2185547e0ec8899ae7c49e0366fa1dd748ac"]}, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x0, 0x0, 0x57, "fe64384fbe16c8779d1929bf222153a8c3ebd38486e87f6597fac46b2dd5d7d17bf8d26173cfe4517fda82365c09b2b58f15a612234b2ea1518bbf0c92f15a4e48f8aa04fb1aa71b4e9b432e265919cd5a24e13810c05d"}, &(0x7f0000000c80)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)={0x21, 0x0, 0x4, "5a24bfa0"}}) 1.898671063s ago: executing program 1 (id=2770): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000a4ff00000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) close(r1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) 1.771444323s ago: executing program 3 (id=2771): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x20801, 0x1, 0xff, 0x9, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 797.664136ms ago: executing program 1 (id=2772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000020601080000000000000000003f0000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 598.810394ms ago: executing program 1 (id=2773): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x900, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0)="fc", 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x800000000004) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xffffffffffffffff) r9 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000300)={0x8, 0x3000, 0x8, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r9}) 20.239791ms ago: executing program 2 (id=2774): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x22) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r1, &(0x7f00000031c0), 0x0, 0x22, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x1) 0s ago: executing program 1 (id=2775): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="10020000091401000000005c72010000"], 0x10}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000ffa400e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c3"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) close(r1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ 747.493861][T10722] cdc_wdm 3-1:1.0: skipping garbage [ 747.499799][T14175] Dev loop5: unable to read RDB block 7 [ 747.505361][T14175] loop5: unable to read partition table [ 747.511335][T14175] loop5: partition table beyond EOD, truncated [ 747.517531][T14175] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 747.563048][T14169] vlan2: entered promiscuous mode [ 747.592696][T10722] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 747.598803][T10722] cdc_wdm 3-1:1.0: Unknown control protocol [ 747.981628][T14182] qnx6: unable to read the first superblock [ 747.988965][T14182] qnx6: unable to read the first superblock [ 747.994916][T14182] qnx6: unable to read the first superblock [ 748.641168][ T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 748.825502][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 748.838750][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.920920][ T5873] usb 5-1: USB disconnect, device number 71 [ 749.031566][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.144079][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 749.207588][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.232278][ T24] usb 4-1: Product: syz [ 749.242999][ T24] usb 4-1: Manufacturer: syz [ 749.287469][ T24] usb 4-1: SerialNumber: syz [ 749.322061][ T24] usb 4-1: config 0 descriptor?? [ 749.324749][T14204] netlink: 'syz.4.2134': attribute type 4 has an invalid length. [ 749.531067][T14207] netlink: 'syz.1.2135': attribute type 27 has an invalid length. [ 749.709034][ T24] usb 3-1: USB disconnect, device number 73 [ 749.792876][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2138'. [ 749.869181][ T793] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 749.916126][T14216] netlink: 'syz.1.2139': attribute type 27 has an invalid length. [ 750.040114][ T793] usb 6-1: Using ep0 maxpacket: 8 [ 750.117475][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.344599][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.377410][T14214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14214 comm=syz.4.2138 [ 750.407779][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 750.407827][ T793] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 750.407849][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.414219][ T793] usb 6-1: config 0 descriptor?? [ 750.492109][T14225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14225 comm=syz.1.2142 [ 751.130397][T13950] usb 4-1: USB disconnect, device number 79 [ 751.192613][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x4 [ 751.275736][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x6 [ 752.270962][T14206] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2136'. [ 752.302628][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x5 [ 752.330139][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.644263][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.669322][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.683075][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.690202][T14254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2149'. [ 752.699406][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.708238][T14254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2149'. [ 752.717926][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.727326][ T793] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 752.776891][ T793] elecom 0003:056E:00FE.0012: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.5-1/input0 [ 752.841535][ T793] usb 6-1: USB disconnect, device number 60 [ 752.930253][T14258] netlink: 'syz.4.2150': attribute type 27 has an invalid length. [ 753.251784][T14261] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2151'. [ 753.278003][T14255] fido_id[14255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 753.494250][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2155'. [ 753.555678][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 753.662919][ T29] audit: type=1400 audit(1772442300.200:1129): avc: denied { accept } for pid=14279 comm="syz.3.2148" lport=38267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 753.838483][ T29] audit: type=1400 audit(1772442300.369:1130): avc: denied { write } for pid=14279 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 754.161112][ T24] usb 5-1: config 0 has no interfaces? [ 754.167350][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.179119][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.226823][ T24] usb 5-1: config 0 descriptor?? [ 754.361893][T14289] qnx6: unable to read the first superblock [ 754.372245][T14289] qnx6: unable to read the first superblock [ 754.378398][T14289] qnx6: unable to read the first superblock [ 754.544717][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.581385][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.616309][ T5873] usb 5-1: USB disconnect, device number 72 [ 755.105226][ T793] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 755.211485][ T5873] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 755.286374][ T793] usb 6-1: device descriptor read/64, error -71 [ 755.596470][ T793] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 755.746366][T14315] netlink: 'syz.2.2163': attribute type 27 has an invalid length. [ 755.788562][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 755.794898][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.805246][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.816061][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 755.825847][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.834028][ T5873] usb 5-1: Product: syz [ 755.855327][ T5873] usb 5-1: Manufacturer: syz [ 755.863360][ T5873] usb 5-1: SerialNumber: syz [ 755.870818][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 755.947694][ T793] usb 6-1: device descriptor read/64, error -71 [ 756.955899][ T793] usb usb6-port1: attempt power cycle [ 756.997317][ T5873] usb 5-1: 0:2 : does not exist [ 757.148569][ T5873] usb 5-1: USB disconnect, device number 73 [ 757.442457][ T793] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 757.498217][ T793] usb 6-1: device descriptor read/8, error -71 [ 757.744971][ T5873] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 757.776209][ T793] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 757.808423][ T793] usb 6-1: device descriptor read/8, error -71 [ 757.941874][ T793] usb usb6-port1: unable to enumerate USB device [ 757.946780][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 757.963821][ T5873] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 757.991091][ T5873] usb 5-1: config 0 has no interface number 0 [ 758.008278][ T5873] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.053951][ T5873] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 758.076572][ T5873] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 758.116980][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.127006][ T5873] usb 5-1: Product: syz [ 758.152465][ T5873] usb 5-1: Manufacturer: syz [ 758.158080][ T5873] usb 5-1: SerialNumber: syz [ 758.481008][T14343] qnx6: unable to read the first superblock [ 758.491229][T14343] qnx6: unable to read the first superblock [ 758.497395][T14343] qnx6: unable to read the first superblock [ 758.531688][ T5873] usb 5-1: config 0 descriptor?? [ 758.549758][ T5873] redrat3 5-1:0.83: Couldn't find all endpoints [ 759.194991][ T793] usb 5-1: USB disconnect, device number 74 [ 759.257944][ T29] audit: type=1400 audit(1772442305.442:1131): avc: denied { create } for pid=14351 comm="syz.3.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 759.333979][ T29] audit: type=1400 audit(1772442305.460:1132): avc: denied { sys_admin } for pid=14351 comm="syz.3.2172" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 760.427968][ T29] audit: type=1400 audit(1772442306.546:1133): avc: denied { ioctl } for pid=14367 comm="syz.5.2177" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 760.916419][ T29] audit: type=1400 audit(1772442306.574:1134): avc: denied { ioctl } for pid=14373 comm="syz.4.2179" path="socket:[40259]" dev="sockfs" ino=40259 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 761.026666][T14384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2182'. [ 761.031264][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 761.104927][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2182'. [ 763.524341][ T793] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 763.612767][T14417] IPv6: addrconf: prefix option has invalid lifetime [ 763.695342][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 763.701255][T14419] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2196'. [ 763.720444][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.736695][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 763.747101][ T793] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 763.756420][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.770646][T14419] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2196'. [ 763.782729][ T793] usb 5-1: config 0 descriptor?? [ 763.863039][ T29] audit: type=1400 audit(1772442309.747:1135): avc: denied { shutdown } for pid=14422 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 764.164498][ T793] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 764.180605][ T29] audit: type=1400 audit(1772442309.747:1136): avc: denied { read } for pid=14422 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 764.290897][ T793] usb 5-1: USB disconnect, device number 75 [ 764.308259][T14430] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2192'. [ 765.180621][T14433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2192'. [ 767.606088][T14466] netlink: 'syz.4.2206': attribute type 4 has an invalid length. [ 767.615585][T14466] netlink: 'syz.4.2206': attribute type 4 has an invalid length. [ 768.429108][ T793] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 768.804040][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 768.824033][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.833785][ T793] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 768.952488][ T42] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 769.270445][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 769.308989][ T42] usb 3-1: config 0 has no interfaces? [ 769.364145][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 769.371032][ T29] audit: type=1400 audit(1772442314.885:1137): avc: denied { ioctl } for pid=14480 comm="syz.1.2211" path="pid:[4026532801]" dev="nsfs" ino=4026532801 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 769.395037][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 769.414072][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.458047][ T42] usb 3-1: Manufacturer: syz [ 769.459423][T14483] : renamed from bond_slave_0 (while UP) [ 769.470214][ T793] usb 6-1: config 0 descriptor?? [ 769.487192][ T42] usb 3-1: config 0 descriptor?? [ 770.153980][ T793] hid_parser_main: 47 callbacks suppressed [ 770.153994][ T793] aquacomputer_d5next 0003:0C70:F0B6.0013: unknown main item tag 0x3 [ 770.447152][T14492] netlink: 'syz.1.2212': attribute type 8 has an invalid length. [ 770.504242][T14493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2212'. [ 770.814557][ T793] aquacomputer_d5next 0003:0C70:F0B6.0013: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 771.115727][ T793] usb 6-1: USB disconnect, device number 65 [ 772.778651][T14508] overlayfs: failed to resolve './file0': -2 [ 773.290242][ T42] usb 3-1: USB disconnect, device number 74 [ 773.379567][T14525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2220'. [ 773.412733][T14525] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2220'. [ 773.644173][T14533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.725805][ T29] audit: type=1400 audit(1772442318.928:1138): avc: denied { watch_reads } for pid=14522 comm="syz.5.2217" path="/338" dev="tmpfs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 773.783945][ T29] audit: type=1400 audit(1772442318.937:1139): avc: denied { accept } for pid=14522 comm="syz.5.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 775.020105][T14550] netlink: 'syz.2.2223': attribute type 8 has an invalid length. [ 775.077458][T14551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2223'. [ 776.207326][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 776.511296][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 777.063587][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.118133][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.150530][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.196639][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.265428][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.288664][T14580] bridge0: port 3(erspan0) entered disabled state [ 777.295204][T14580] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.302678][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.321307][ T10] usb 4-1: config 0 descriptor?? [ 777.329804][T13950] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 777.348445][T14580] bridge0: entered allmulticast mode [ 777.446825][ T5858] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 777.543088][T13950] usb 6-1: device descriptor read/64, error -71 [ 778.177719][T14586] overlayfs: failed to clone lowerpath [ 778.237662][T14588] overlayfs: failed to clone lowerpath [ 778.643807][ T5858] usb 5-1: device descriptor read/64, error -71 [ 778.669776][T14580] erspan0: left allmulticast mode [ 778.674819][T14580] erspan0: left promiscuous mode [ 778.691094][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.698624][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.707275][T14580] bridge0: port 3(erspan0) entered disabled state [ 778.716662][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.728580][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.750148][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.772631][T14580] bridge_slave_1: left allmulticast mode [ 778.778778][T14580] bridge_slave_1: left promiscuous mode [ 778.785839][T14580] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.793229][T13950] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 778.822029][T14580] bridge_slave_0: left allmulticast mode [ 778.831896][T14580] bridge_slave_0: left promiscuous mode [ 778.842071][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.852770][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.886256][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.947661][ T5858] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 778.963991][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 778.985395][T14581] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 778.993420][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 779.028135][T13950] usb 6-1: device descriptor read/64, error -71 [ 779.034947][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 779.053810][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input25 [ 779.081579][T14590] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 779.095979][ T10] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 779.146260][T13950] usb usb6-port1: attempt power cycle [ 779.156361][ T5858] usb 5-1: device descriptor read/64, error -71 [ 779.167109][T14581] usb 2-1: device descriptor read/64, error -71 [ 779.274857][ T5858] usb usb5-port1: attempt power cycle [ 779.284585][T14590] usb 3-1: Using ep0 maxpacket: 32 [ 779.327125][T14590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.339979][T14590] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 779.349702][T14590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.391746][T14590] usb 3-1: config 0 descriptor?? [ 779.434150][T14581] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 779.448643][T14590] hub 3-1:0.0: USB hub found [ 779.551962][T13950] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 779.615939][T14581] usb 2-1: device descriptor read/64, error -71 [ 779.672161][ T5858] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 779.679787][T14590] hub 3-1:0.0: 1 port detected [ 779.702282][ T5858] usb 5-1: device descriptor read/8, error -71 [ 779.744333][T14581] usb usb2-port1: attempt power cycle [ 779.818844][T13950] usb 6-1: device not accepting address 68, error -71 [ 779.968642][ T5858] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 780.001050][ T5858] usb 5-1: device descriptor read/8, error -71 [ 780.118120][T14581] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 780.129769][ T5858] usb usb5-port1: unable to enumerate USB device [ 780.161265][T14581] usb 2-1: device descriptor read/8, error -71 [ 780.188621][T14590] usb 3-1: USB disconnect, device number 75 [ 780.417180][T14581] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 780.462929][T14581] usb 2-1: device descriptor read/8, error -71 [ 780.594783][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2235'. [ 780.718555][T14581] usb usb2-port1: unable to enumerate USB device [ 780.760772][T14604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14604 comm=syz.4.2235 [ 781.652742][T14590] usb 4-1: USB disconnect, device number 80 [ 781.755550][T14613] Set syz1 is full, maxelem 0 reached [ 781.960019][T14624] trusted_key: syz.3.2240 sent an empty control message without MSG_MORE. [ 782.015370][T14624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.135326][ T29] audit: type=1400 audit(1772442326.761:1140): avc: denied { listen } for pid=14614 comm="syz.3.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.191116][ T42] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 782.373033][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 782.392753][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 782.406509][ T42] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 782.435423][ T42] usb 3-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 782.484983][ T42] usb 3-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=1f.6f [ 782.523420][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.529688][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 782.559219][ T42] usb 3-1: Product: syz [ 782.576300][T14633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 782.585781][ T42] usb 3-1: Manufacturer: syz [ 782.607196][ T42] usb 3-1: SerialNumber: syz [ 782.627819][T14633] bond4: (slave wlan0): Releasing backup interface [ 782.643616][T14633] bond5: (slave wlan0): Enslaving as an active interface with an up link [ 782.867666][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2237'. [ 782.880922][ T42] usb 3-1: USB disconnect, device number 76 [ 783.005302][T14640] tipc: Enabled bearer , priority 0 [ 783.078578][T14641] tipc: Disabling bearer [ 783.119922][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2248'. [ 783.130775][T14647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2248'. [ 783.293178][T14651] FAULT_INJECTION: forcing a failure. [ 783.293178][T14651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.306536][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2249'. [ 783.331274][T14651] CPU: 0 UID: 0 PID: 14651 Comm: syz.5.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.331303][T14651] Tainted: [L]=SOFTLOCKUP [ 783.331309][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.331319][T14651] Call Trace: [ 783.331326][T14651] [ 783.331333][T14651] dump_stack_lvl+0x100/0x190 [ 783.331365][T14651] should_fail_ex.cold+0x5/0xa [ 783.331389][T14651] _copy_from_user+0x2e/0xd0 [ 783.331415][T14651] kstrtouint_from_user+0xd6/0x1d0 [ 783.331434][T14651] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 783.331451][T14651] ? __lock_acquire+0x4a5/0x2630 [ 783.331481][T14651] ? lock_acquire+0x1cf/0x380 [ 783.331514][T14651] proc_fail_nth_write+0x83/0x220 [ 783.331539][T14651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.331570][T14651] vfs_write+0x2aa/0x1070 [ 783.331598][T14651] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 783.331623][T14651] ? __pfx_vfs_write+0x10/0x10 [ 783.331647][T14651] ? __fget_files+0x215/0x3d0 [ 783.331671][T14651] ? __fget_files+0x21f/0x3d0 [ 783.331695][T14651] ksys_write+0x12a/0x250 [ 783.331721][T14651] ? __pfx_ksys_write+0x10/0x10 [ 783.331754][T14651] do_syscall_64+0x106/0xf80 [ 783.331773][T14651] ? clear_bhb_loop+0x40/0x90 [ 783.331795][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.331812][T14651] RIP: 0033:0x7fe48315cfce [ 783.331827][T14651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.331842][T14651] RSP: 002b:00007fe484126fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 783.331858][T14651] RAX: ffffffffffffffda RBX: 00007fe4841276c0 RCX: 00007fe48315cfce [ 783.331870][T14651] RDX: 0000000000000001 RSI: 00007fe4841270a0 RDI: 0000000000000004 [ 783.331881][T14651] RBP: 00007fe484127090 R08: 0000000000000000 R09: 0000000000000000 [ 783.331892][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.331902][T14651] R13: 00007fe483416038 R14: 00007fe483415fa0 R15: 00007ffec6cada58 [ 783.331927][T14651] [ 783.766231][T14654] mkiss: ax0: crc mode is auto. [ 784.051835][T14665] tmpfs: Bad value for 'mpol' [ 784.551449][T14665] netlink: 'syz.2.2253': attribute type 4 has an invalid length. [ 784.569990][T14665] netlink: 'syz.2.2253': attribute type 4 has an invalid length. [ 784.651727][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 784.918213][ T793] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 785.225653][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 785.245865][ T793] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.293611][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 785.365804][T14685] loop5: detected capacity change from 0 to 7 [ 786.270067][ T793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 786.569559][ T793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 786.581195][T14685] Dev loop5: unable to read RDB block 7 [ 786.586828][T14685] loop5: unable to read partition table [ 786.592703][T14685] loop5: partition table beyond EOD, truncated [ 786.598932][T14685] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 786.678789][ T793] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 786.690100][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.915337][ T793] hub 3-1:1.0: bad descriptor, ignoring hub [ 786.930047][ T793] hub 3-1:1.0: probe with driver hub failed with error -5 [ 786.939465][ T793] cdc_wdm 3-1:1.0: skipping garbage [ 786.944648][ T793] cdc_wdm 3-1:1.0: skipping garbage [ 786.960084][ T793] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 786.968264][ T793] cdc_wdm 3-1:1.0: Unknown control protocol [ 786.972349][T14700] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2265'. [ 787.435446][ T29] audit: type=1400 audit(1772442587.816:1141): avc: denied { shutdown } for pid=14687 comm="syz.5.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 788.218536][T13950] usb 3-1: USB disconnect, device number 77 [ 788.250657][T14714] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2268'. [ 788.304851][T14712] x_tables: duplicate underflow at hook 3 [ 788.972316][T14714] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2268'. [ 788.985790][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.838962][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2272'. [ 790.848061][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2272'. [ 790.888112][ T6535] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.894920][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2272'. [ 790.897055][ T6535] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.919107][ T6535] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.933178][ T6535] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.962821][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2272'. [ 791.198228][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2275'. [ 792.169021][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2280'. [ 792.180751][ T29] audit: type=1400 audit(1772442592.250:1142): avc: denied { setattr } for pid=14779 comm="syz.2.2280" name="NETLINK" dev="sockfs" ino=42472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 792.207870][T14590] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 792.463290][T14590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.474335][T14590] usb 6-1: config 0 has no interfaces? [ 792.479841][T14590] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 792.490528][T14590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.501821][T14590] usb 6-1: config 0 descriptor?? [ 793.156625][T14789] qnx6: unable to read the first superblock [ 793.163899][T14789] qnx6: unable to read the first superblock [ 793.169934][T14789] qnx6: unable to read the first superblock [ 793.368408][T14768] qnx4: unable to read the superblock [ 793.410323][ T793] usb 6-1: USB disconnect, device number 70 [ 793.440342][T14792] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2283'. [ 794.213720][T14809] 9p: Bad value for 'rfdno' [ 794.301660][ T29] audit: type=1400 audit(1772442594.233:1143): avc: denied { kexec_image_load } for pid=14803 comm="syz.3.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 794.676656][T14822] FAULT_INJECTION: forcing a failure. [ 794.676656][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.013574][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.5.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.013605][T14822] Tainted: [L]=SOFTLOCKUP [ 795.013611][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.013622][T14822] Call Trace: [ 795.013628][T14822] [ 795.013636][T14822] dump_stack_lvl+0x100/0x190 [ 795.013669][T14822] should_fail_ex.cold+0x5/0xa [ 795.013693][T14822] _copy_from_user+0x2e/0xd0 [ 795.013720][T14822] copy_msghdr_from_user+0x9f/0x4f0 [ 795.013745][T14822] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 795.013781][T14822] ___sys_sendmsg+0x106/0x1e0 [ 795.013807][T14822] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.013843][T14822] ? find_held_lock+0x2b/0x80 [ 795.013882][T14822] __sys_sendmmsg+0x205/0x430 [ 795.013903][T14822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 795.013929][T14822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 795.013963][T14822] ? fput+0x79/0x100 [ 795.013983][T14822] ? ksys_write+0x1ac/0x250 [ 795.014010][T14822] ? __pfx_ksys_write+0x10/0x10 [ 795.014040][T14822] __x64_sys_sendmmsg+0x9c/0x100 [ 795.014059][T14822] ? lockdep_hardirqs_on+0x78/0x100 [ 795.014077][T14822] do_syscall_64+0x106/0xf80 [ 795.014095][T14822] ? clear_bhb_loop+0x40/0x90 [ 795.014117][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.014135][T14822] RIP: 0033:0x7fe48319c799 [ 795.014151][T14822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.014168][T14822] RSP: 002b:00007fe484106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 795.014185][T14822] RAX: ffffffffffffffda RBX: 00007fe483416090 RCX: 00007fe48319c799 [ 795.014197][T14822] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000006 [ 795.014208][T14822] RBP: 00007fe484106090 R08: 0000000000000000 R09: 0000000000000000 [ 795.014219][T14822] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 795.014230][T14822] R13: 00007fe483416128 R14: 00007fe483416090 R15: 00007ffec6cada58 [ 795.014255][T14822] [ 795.304661][T14824] ip6t_srh: unknown srh match flags 4000 [ 795.616697][T14836] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2295'. [ 796.492449][ T29] audit: type=1400 audit(1772442596.281:1144): avc: denied { ioctl } for pid=14845 comm="syz.3.2298" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 796.550301][ T29] audit: type=1400 audit(1772442596.328:1145): avc: denied { create } for pid=14833 comm="syz.5.2294" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 797.441397][T13950] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 797.532036][T14857] qnx6: unable to read the first superblock [ 797.539319][T14857] qnx6: unable to read the first superblock [ 797.545370][T14857] qnx6: unable to read the first superblock [ 797.863142][T13950] usb 3-1: device descriptor read/64, error -71 [ 798.447502][T14872] netlink: 'syz.4.2306': attribute type 4 has an invalid length. [ 798.466613][T14872] netlink: 'syz.4.2306': attribute type 4 has an invalid length. [ 798.781349][T13950] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 798.855924][T14581] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 799.284836][T14880] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2308'. [ 799.392416][T14581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.404761][T14581] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.427773][T14581] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.436971][T13950] usb 3-1: device descriptor read/64, error -71 [ 799.449379][T14581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.515339][T14881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2308'. [ 799.713196][T13950] usb usb3-port1: attempt power cycle [ 799.731975][T14581] usb 2-1: config 0 descriptor?? [ 799.744853][T14581] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 799.972689][ T29] audit: type=1400 audit(1772442599.546:1146): avc: denied { bind } for pid=14888 comm="syz.3.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 800.096016][T13950] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 800.450282][T13950] usb 3-1: device not accepting address 80, error -71 [ 800.593602][ T29] audit: type=1800 audit(1772442600.107:1147): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2310" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 801.032715][T14908] qnx6: unable to read the first superblock [ 801.039519][T14908] qnx6: unable to read the first superblock [ 801.045525][T14908] qnx6: unable to read the first superblock [ 801.209668][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2317'. [ 801.752376][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'. [ 801.835658][T13950] usb 2-1: USB disconnect, device number 74 [ 802.567143][T14938] ip6t_srh: unknown srh match flags 4000 [ 803.378161][ T29] audit: type=1400 audit(1772442602.707:1148): avc: denied { listen } for pid=14949 comm="syz.2.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 803.425836][ T29] audit: type=1400 audit(1772442602.707:1149): avc: denied { accept } for pid=14949 comm="syz.2.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 803.998173][T14972] FAULT_INJECTION: forcing a failure. [ 803.998173][T14972] name failslab, interval 1, probability 0, space 0, times 0 [ 804.011260][T14972] CPU: 1 UID: 0 PID: 14972 Comm: syz.5.2335 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.011288][T14972] Tainted: [L]=SOFTLOCKUP [ 804.011294][T14972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 804.011305][T14972] Call Trace: [ 804.011311][T14972] [ 804.011319][T14972] dump_stack_lvl+0x100/0x190 [ 804.011350][T14972] should_fail_ex.cold+0x5/0xa [ 804.011374][T14972] should_failslab+0xc2/0x120 [ 804.011403][T14972] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 804.011428][T14972] ? __alloc_skb+0x140/0x710 [ 804.011457][T14972] __alloc_skb+0x140/0x710 [ 804.011472][T14972] ? __alloc_skb+0x5b7/0x710 [ 804.011487][T14972] ? __pfx___alloc_skb+0x10/0x10 [ 804.011516][T14972] ? __lock_acquire+0x4a5/0x2630 [ 804.011547][T14972] alloc_skb_with_frags+0xe0/0x810 [ 804.011575][T14972] sock_alloc_send_pskb+0x801/0x980 [ 804.011611][T14972] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 804.011636][T14972] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 804.011656][T14972] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 804.011678][T14972] ? __pfx_avc_has_perm+0x10/0x10 [ 804.011709][T14972] unix_dgram_sendmsg+0x3c7/0x1820 [ 804.011737][T14972] ? sock_has_perm+0x258/0x2f0 [ 804.011764][T14972] ? __pfx_sock_has_perm+0x10/0x10 [ 804.011793][T14972] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 804.011817][T14972] ? iovec_from_user+0xda/0x140 [ 804.011851][T14972] ? __might_fault+0x40/0x140 [ 804.011873][T14972] ? __might_fault+0xc5/0x140 [ 804.011898][T14972] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 804.011924][T14972] ____sys_sendmsg+0xa54/0xc30 [ 804.011950][T14972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.011977][T14972] ? __pfx__kstrtoull+0x10/0x10 [ 804.012001][T14972] ___sys_sendmsg+0x190/0x1e0 [ 804.012026][T14972] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.012062][T14972] ? find_held_lock+0x2b/0x80 [ 804.012101][T14972] __sys_sendmmsg+0x205/0x430 [ 804.012123][T14972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 804.012150][T14972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 804.012182][T14972] ? fput+0x79/0x100 [ 804.012203][T14972] ? ksys_write+0x1ac/0x250 [ 804.012229][T14972] ? __pfx_ksys_write+0x10/0x10 [ 804.012260][T14972] __x64_sys_sendmmsg+0x9c/0x100 [ 804.012278][T14972] ? lockdep_hardirqs_on+0x78/0x100 [ 804.012297][T14972] do_syscall_64+0x106/0xf80 [ 804.012314][T14972] ? clear_bhb_loop+0x40/0x90 [ 804.012337][T14972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.012354][T14972] RIP: 0033:0x7fe48319c799 [ 804.012371][T14972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.012387][T14972] RSP: 002b:00007fe484106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 804.012404][T14972] RAX: ffffffffffffffda RBX: 00007fe483416090 RCX: 00007fe48319c799 [ 804.012416][T14972] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000006 [ 804.012427][T14972] RBP: 00007fe484106090 R08: 0000000000000000 R09: 0000000000000000 [ 804.012437][T14972] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 804.012447][T14972] R13: 00007fe483416128 R14: 00007fe483416090 R15: 00007ffec6cada58 [ 804.012471][T14972] [ 804.468493][ T793] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 804.663243][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.688216][ T793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.720922][ T793] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.777247][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.814041][ T793] usb 5-1: config 0 descriptor?? [ 804.846765][ T793] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 805.642600][T14993] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 807.749647][ T5858] usb 5-1: USB disconnect, device number 80 [ 807.983186][T15011] syzkaller0: entered promiscuous mode [ 807.993783][T15011] syzkaller0: entered allmulticast mode [ 808.237975][T15020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15020 comm=syz.5.2348 [ 809.418372][ T5858] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 809.654087][ T29] audit: type=1400 audit(1772442608.582:1150): avc: denied { create } for pid=15053 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 809.781720][ T5858] usb 5-1: device descriptor read/64, error -71 [ 809.788074][T13950] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 809.823485][ T10] hid_parser_main: 5 callbacks suppressed [ 809.823508][ T10] hid-generic 0000:008B:0000.0015: unknown main item tag 0x0 [ 809.889831][ T29] audit: type=1400 audit(1772442608.591:1151): avc: denied { bind } for pid=15053 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 809.946799][ T29] audit: type=1400 audit(1772442608.591:1152): avc: denied { write } for pid=15053 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 809.950106][ T10] hid-generic 0000:008B:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 810.060353][ T5858] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 810.495935][T13950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.531397][T13950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 810.564164][T13950] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 810.592850][T13950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.618869][T13950] usb 2-1: config 0 descriptor?? [ 810.635778][T13950] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 810.643392][ T5858] usb 5-1: device descriptor read/64, error -71 [ 810.740389][T15065] syzkaller0: entered promiscuous mode [ 810.747044][T15065] syzkaller0: entered allmulticast mode [ 810.768926][ T5858] usb usb5-port1: attempt power cycle [ 811.092153][T15073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 811.150431][ T5858] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 811.180239][ T5858] usb 5-1: device descriptor read/8, error -71 [ 811.493404][ T5858] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 811.645209][ T5858] usb 5-1: device descriptor read/8, error -71 [ 811.743075][T15083] Set syz1 is full, maxelem 0 reached [ 811.783822][ T5858] usb usb5-port1: unable to enumerate USB device [ 811.967174][T15043] ceph: No mds server is up or the cluster is laggy [ 812.176038][T15086] ip6t_srh: unknown srh match flags 4000 [ 812.205716][T15093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15093 comm=syz.4.2367 [ 812.877048][ T10] usb 2-1: USB disconnect, device number 75 [ 812.935456][ T5858] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 813.164611][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 813.182552][ T5858] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x1 is Bulk; changing to Interrupt [ 813.193186][ T5858] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x82 is Bulk; changing to Interrupt [ 813.203335][ T5858] usb 5-1: config 1 interface 0 has no altsetting 0 [ 813.213028][ T5858] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 813.254229][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.286509][ T5858] usb 5-1: Product: 㐁 [ 813.541167][ T5858] usb 5-1: Manufacturer: 씦Ȟ甛袗⌹ힰ磤쐙Ꮫᨀꐚ窷ᡧ飕髥橭ᔳԑ鬤簺蜘գ砂겣⟿綸龒깺敜暜郿爡櫚ﰼ䁙樫籠꘴풆鞻鞹鄥മ৐欽 [ 813.615136][ T5858] usb 5-1: SerialNumber: ᤆ뿰ꑦ㙕㧉䒙糪鴀欷朹즠쵹⥰ᖫ伷鿨ᷠỂ韀ĕ≛଩踷촁楌ꒈ룳⻆価䬰㖕 [ 813.663601][T15093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.688519][T15093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 813.912793][T15108] syzkaller0: entered promiscuous mode [ 813.953191][T15108] syzkaller0: entered allmulticast mode [ 814.185192][ T5858] usb 5-1: USB disconnect, device number 85 [ 814.745992][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2375'. [ 815.122581][ T29] audit: type=1400 audit(1772442613.708:1153): avc: denied { getopt } for pid=15128 comm="syz.4.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 817.635687][T15151] ip6t_srh: unknown srh match flags 4000 [ 819.432676][T15179] netlink: 'syz.1.2393': attribute type 8 has an invalid length. [ 819.508196][ T29] audit: type=1400 audit(1772442617.805:1154): avc: denied { audit_read } for pid=15176 comm="syz.1.2393" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 819.744671][T15188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15188 comm=syz.3.2397 [ 820.456590][T15192] qnx6: unable to read the first superblock [ 820.483150][T15192] qnx6: unable to read the first superblock [ 820.578293][T15201] netlink: 'syz.5.2400': attribute type 8 has an invalid length. [ 820.625961][T15201] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2400'. [ 820.904016][T15192] qnx6: unable to read the first superblock [ 821.659106][ T793] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 821.815145][ T29] audit: type=1400 audit(1772442619.797:1155): avc: denied { read } for pid=15212 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 822.033529][ T793] usb 4-1: device descriptor read/64, error -71 [ 822.482894][ T793] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 822.514428][T15223] qnx6: unable to read the first superblock [ 822.520449][T15223] qnx6: unable to read the first superblock [ 822.526373][T15223] qnx6: unable to read the first superblock [ 822.583746][ T29] audit: type=1400 audit(1772442620.695:1156): avc: denied { ioctl } for pid=15224 comm="syz.2.2406" path="socket:[43662]" dev="sockfs" ino=43662 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 822.644500][ T793] usb 4-1: device descriptor read/64, error -71 [ 822.719358][T15230] xt_ecn: cannot match TCP bits for non-tcp packets [ 822.773373][ T793] usb usb4-port1: attempt power cycle [ 823.273450][ T793] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 823.423029][ T793] usb 4-1: device descriptor read/8, error -71 [ 823.452149][T15244] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2410'. [ 823.615978][ T29] audit: type=1326 audit(1772442621.649:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15251 comm="syz.5.2413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48319c799 code=0x0 [ 823.653393][ T29] audit: type=1400 audit(1772442621.687:1158): avc: denied { setopt } for pid=15253 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 823.701263][ T793] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 823.723182][ T793] usb 4-1: device descriptor read/8, error -71 [ 823.747736][ T29] audit: type=1326 audit(1772442621.780:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15251 comm="syz.5.2413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48319c799 code=0x0 [ 823.791283][T15258] veth0_to_team: entered promiscuous mode [ 823.823718][T15258] ipip0: entered promiscuous mode [ 823.830104][T15258] ipip0: entered allmulticast mode [ 823.836864][T15258] team0: Device ipip0 is of different type [ 823.914892][ T793] usb usb4-port1: unable to enumerate USB device [ 823.949030][ T29] audit: type=1400 audit(1772442621.958:1160): avc: denied { read } for pid=15253 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 824.043069][T15257] veth0_to_team: left promiscuous mode [ 824.373319][T15273] netlink: 'syz.1.2420': attribute type 4 has an invalid length. [ 824.545912][T10722] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 824.865923][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 824.890615][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.911414][T10722] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 824.979109][T10722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.009665][T10722] usb 6-1: config 0 descriptor?? [ 825.789156][T15290] fuse: Unknown parameter 'user_id00000000000000000000' [ 825.792447][T10722] aquacomputer_d5next 0003:0C70:F0B6.0016: unknown main item tag 0x3 [ 825.828015][T10722] aquacomputer_d5next 0003:0C70:F0B6.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 826.192135][ T793] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 826.287513][T10722] usb 6-1: USB disconnect, device number 71 [ 826.351485][T15293] fido_id[15293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 826.591309][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 826.702541][ T793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.722086][ T793] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 827.073911][ T793] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 827.089485][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.100520][ T793] usb 4-1: Product: syz [ 827.104686][ T793] usb 4-1: Manufacturer: syz [ 827.109270][ T793] usb 4-1: SerialNumber: syz [ 827.251760][ T793] usb 4-1: config 0 descriptor?? [ 827.983462][T15315] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2433'. [ 828.379776][T15316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2433'. [ 828.629361][T13950] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 828.832342][T13950] usb 3-1: Using ep0 maxpacket: 32 [ 828.839610][T13950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 828.848883][T13950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.917632][ T793] usb 4-1: USB disconnect, device number 85 [ 828.943404][T13950] usb 3-1: language id specifier not provided by device, defaulting to English [ 828.966783][T13950] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 829.391673][T13950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.401624][T13950] usb 3-1: Product: syz [ 829.406140][T13950] usb 3-1: Manufacturer: Ꭵ媌☿▦਀볎橪㎭靔◈灱ൌỰ쭻潠嫥炨섺䤷〒難ࠆ馼廫雐ꂾ鳆瞀苡榹ꔇ틓̔䔹羾๗疺湧瞶≈敒碘鬎⓷梐瑦搰 [ 829.424259][T13950] usb 3-1: SerialNumber: syz [ 829.439018][T13950] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 829.857258][T13950] usb 3-1: USB disconnect, device number 82 [ 830.197369][T15342] fuse: Unknown parameter 'user_id00000000000000000000' [ 832.106334][ T29] audit: type=1400 audit(1772442629.591:1161): avc: denied { getopt } for pid=15365 comm="syz.4.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 832.151928][ T29] audit: type=1400 audit(1772442629.591:1162): avc: denied { write } for pid=15365 comm="syz.4.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 832.364549][T15370] tipc: Started in network mode [ 832.370430][T15370] tipc: Node identity ce889ce84da7, cluster identity 4711 [ 832.383337][T15370] tipc: Enabled bearer , priority 0 [ 832.858451][T15380] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2448'. [ 833.101106][T15370] syzkaller0: entered promiscuous mode [ 833.106586][T15370] syzkaller0: entered allmulticast mode [ 833.237804][T15370] tipc: Resetting bearer [ 833.377405][T15368] tipc: Resetting bearer [ 835.297603][T15368] tipc: Disabling bearer [ 835.310181][T10722] tipc: Node number set to 2200935656 [ 855.998383][T15413] tmpfs: Bad value for 'nr_blocks' [ 856.021866][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 856.317027][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 856.378876][T15437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.410736][T15437] bond2: (slave wlan0): Enslaving as an active interface with an up link [ 856.619419][T15446] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 856.654285][T15445] netlink: 'syz.4.2462': attribute type 4 has an invalid length. [ 857.104684][T15455] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.2465'. [ 859.230761][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 859.297655][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 859.594738][T14590] libceph: connect (1)[c::]:6789 error -101 [ 859.600977][T14590] libceph: mon0 (1)[c::]:6789 connect error [ 859.866816][T15490] loop5: detected capacity change from 0 to 7 [ 860.322987][T15485] ceph: No mds server is up or the cluster is laggy [ 860.331379][T14590] libceph: connect (1)[c::]:6789 error -101 [ 860.337434][T14590] libceph: mon0 (1)[c::]:6789 connect error [ 860.722927][T15490] Dev loop5: unable to read RDB block 7 [ 860.728517][T15490] loop5: unable to read partition table [ 860.734326][T15490] loop5: partition table beyond EOD, truncated [ 860.740490][T15490] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 860.886067][ T29] audit: type=1400 audit(1772442912.507:1163): avc: denied { read } for pid=15507 comm="syz.2.2476" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 861.101742][ T29] audit: type=1400 audit(1772442912.507:1164): avc: denied { open } for pid=15507 comm="syz.2.2476" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 861.179212][T14590] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 861.430046][T14590] usb 5-1: no configurations [ 861.455628][T14590] usb 5-1: can't read configurations, error -22 [ 861.467479][ T793] kernel read not supported for file /vga_arbiter (pid: 793 comm: kworker/1:2) [ 861.620527][T14590] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 861.722913][T15528] hugetlbfs: Unknown parameter 'nWԆDF(\' [ 861.727412][ T29] audit: type=1400 audit(1772442913.302:1165): avc: denied { remount } for pid=15526 comm="syz.5.2481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 861.804244][T14590] usb 5-1: no configurations [ 861.808869][T14590] usb 5-1: can't read configurations, error -22 [ 861.846745][T14590] usb usb5-port1: attempt power cycle [ 861.853547][ T29] audit: type=1400 audit(1772442913.424:1166): avc: denied { write } for pid=15529 comm="syz.3.2482" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 861.942901][T13153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 861.966809][T13153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 861.967722][ T29] audit: type=1400 audit(1772442913.536:1167): avc: denied { unmount } for pid=8105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 861.979503][T13153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 862.006586][T13153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 862.189409][T15540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2486'. [ 862.254017][T14590] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 862.286431][T14590] usb 5-1: no configurations [ 862.291111][T14590] usb 5-1: can't read configurations, error -22 [ 862.541766][ T793] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 862.646792][T14590] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 862.679962][T14590] usb 5-1: no configurations [ 862.684571][T14590] usb 5-1: can't read configurations, error -22 [ 862.696011][T14590] usb usb5-port1: unable to enumerate USB device [ 862.713485][ T793] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 862.724611][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.736019][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.746437][ T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 862.766750][ T793] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 862.776605][ T793] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 862.784848][ T793] usb 6-1: Manufacturer: syz [ 862.802174][ T793] usb 6-1: config 0 descriptor?? [ 862.963946][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2489'. [ 863.016729][T15551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15551 comm=syz.3.2489 [ 863.202872][T14590] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 863.292446][T15543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2487'. [ 863.306972][ T793] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 863.364274][ T793] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 863.364783][T14590] usb 2-1: device descriptor read/64, error -71 [ 863.641120][T14590] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 863.697393][ T793] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 863.779972][T14590] usb 2-1: device descriptor read/64, error -71 [ 863.853462][ T29] audit: type=1400 audit(1772442915.285:1168): avc: denied { append } for pid=15556 comm="syz.4.2491" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 863.899120][T14590] usb usb2-port1: attempt power cycle [ 864.154175][ T793] usb 4-1: device descriptor read/64, error -71 [ 864.271773][T14590] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 864.293574][T14590] usb 2-1: device descriptor read/8, error -71 [ 864.410747][ T793] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 864.550000][ T793] usb 4-1: device descriptor read/64, error -71 [ 864.561693][T14590] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 864.582337][T14590] usb 2-1: device descriptor read/8, error -71 [ 864.667524][ T793] usb usb4-port1: attempt power cycle [ 864.710304][T14590] usb usb2-port1: unable to enumerate USB device [ 864.839452][T10722] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 864.998933][T10722] usb 5-1: Using ep0 maxpacket: 16 [ 865.005390][T10722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.015736][T10722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 865.026788][T10722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 865.036849][ T793] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 865.044396][T10722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 865.054226][T10722] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.068343][T10722] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 865.077472][T10722] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 865.085624][T10722] usb 5-1: Manufacturer: syz [ 865.090437][ T793] usb 4-1: device descriptor read/8, error -71 [ 865.098511][T10722] usb 5-1: config 0 descriptor?? [ 865.351929][ T793] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 865.396450][ T793] usb 4-1: device descriptor read/8, error -71 [ 865.514783][ T793] usb usb4-port1: unable to enumerate USB device [ 865.595285][ T793] usb 6-1: USB disconnect, device number 72 [ 865.620634][T10722] rc_core: IR keymap rc-hauppauge not found [ 865.626539][T10722] Registered IR keymap rc-empty [ 865.649438][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 865.684327][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 865.705699][T10722] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 865.727861][T10722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 865.751606][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 865.846379][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 865.943101][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.075819][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.132823][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.164291][ T42] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 866.180484][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.207044][T15580] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 866.207114][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.222948][ T29] audit: type=1400 audit(1772442917.483:1169): avc: denied { mount } for pid=15569 comm="syz.2.2495" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 866.263446][ T29] audit: type=1400 audit(1772442917.493:1170): avc: denied { mounton } for pid=15569 comm="syz.2.2495" path="/478/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 866.289223][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.314145][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.336725][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.368136][T10722] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.523053][T10722] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 866.543456][T10722] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 866.960747][T15586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.969434][T15586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.147978][T10722] usb 5-1: USB disconnect, device number 90 [ 867.564544][ T5858] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 867.799546][ T29] audit: type=1326 audit(1772442918.980:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 867.958837][ T29] audit: type=1326 audit(1772442918.989:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 867.988700][ T29] audit: type=1326 audit(1772442919.017:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.012973][ T5858] usb 2-1: no configurations [ 868.017723][ T5858] usb 2-1: can't read configurations, error -22 [ 868.031351][ T29] audit: type=1326 audit(1772442919.017:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.059681][ T29] audit: type=1326 audit(1772442919.017:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.087243][ T29] audit: type=1326 audit(1772442919.017:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.198905][T14590] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 868.200116][ T29] audit: type=1326 audit(1772442919.017:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.293795][ T5858] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 868.334885][T15605] buffer_io_error: 10 callbacks suppressed [ 868.335005][T15605] Buffer I/O error on dev loop9, logical block 1, async page read [ 868.366539][ C0] blk_print_req_error: 10 callbacks suppressed [ 868.366555][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.383377][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.392113][T15605] Buffer I/O error on dev loop9, logical block 1, async page read [ 868.392584][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.410562][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.418645][T15605] Buffer I/O error on dev loop9, logical block 1, async page read [ 868.418753][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.437211][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.446447][T15605] Buffer I/O error on dev loop9, logical block 1, async page read [ 868.473664][T14590] usb 5-1: device descriptor read/64, error -71 [ 868.483880][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.494517][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.535398][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.535414][T15605] Buffer I/O error on dev loop9, logical block 1, async page read [ 868.553843][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.563061][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.574331][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.584974][T15605] ldm_validate_partition_table(): Disk read failed. [ 868.649516][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.671875][ T29] audit: type=1326 audit(1772442919.017:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.696955][ T29] audit: type=1326 audit(1772442919.017:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20219c799 code=0x7ffc0000 [ 868.703130][ T5858] usb 2-1: no configurations [ 868.713772][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.726717][ T5858] usb 2-1: can't read configurations, error -22 [ 868.756284][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.762060][ T5858] usb usb2-port1: attempt power cycle [ 868.773510][T15605] Dev loop9: unable to read RDB block 0 [ 868.784469][T15605] loop9: unable to read partition table [ 868.806716][T14590] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 868.842652][T15605] loop9: partition table beyond EOD, truncated [ 868.997031][T14590] usb 5-1: device descriptor read/64, error -71 [ 869.065421][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 869.117556][T14590] usb usb5-port1: attempt power cycle [ 869.126794][ T42] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 869.160677][ T42] usb 6-1: can't read configurations, error -71 [ 869.178783][ T5858] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 869.211756][ T5858] usb 2-1: no configurations [ 869.221007][ T5858] usb 2-1: can't read configurations, error -22 [ 869.371519][ T5858] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 869.913053][ T5858] usb 2-1: no configurations [ 869.917963][ T5858] usb 2-1: can't read configurations, error -22 [ 869.929906][T14590] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 869.944627][ T5858] usb usb2-port1: unable to enumerate USB device [ 869.978769][T14590] usb 5-1: device descriptor read/8, error -71 [ 870.237102][T14590] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 870.271969][T14590] usb 5-1: device descriptor read/8, error -71 [ 870.410658][T14590] usb usb5-port1: unable to enumerate USB device [ 870.869777][T14590] libceph: connect (1)[c::]:6789 error -101 [ 870.904310][T14590] libceph: mon0 (1)[c::]:6789 connect error [ 871.535203][T15626] ceph: No mds server is up or the cluster is laggy [ 871.544293][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 871.550324][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 871.948605][ T5858] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 872.016466][T15645] geneve2: entered promiscuous mode [ 872.022408][T15645] geneve2: entered allmulticast mode [ 872.140069][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 872.177711][ T5858] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 872.191340][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.206089][ T5858] usb 3-1: Product: syz [ 872.214878][ T5858] usb 3-1: Manufacturer: syz [ 872.221770][T15653] ip6t_srh: unknown srh match flags 4000 [ 872.241679][ T5858] usb 3-1: SerialNumber: syz [ 872.265549][ T5858] usb 3-1: config 0 descriptor?? [ 872.707309][ T5858] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 083 [ 872.915776][T15638] i2c i2c-1: failure reading data [ 873.061372][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 873.061387][ T29] audit: type=1400 audit(1772442923.909:1307): avc: denied { execute } for pid=15661 comm="syz.5.2519" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 874.770020][ T5858] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 874.985386][ T5858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.009488][ T5858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.031491][ T5858] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 875.040968][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 875.049347][ T5858] usb 4-1: SerialNumber: syz [ 875.051002][ T42] usb 3-1: USB disconnect, device number 83 [ 875.467309][T15738] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 875.488216][T15735] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 876.483377][ T29] audit: type=1400 audit(1772442926.239:1308): avc: denied { getopt } for pid=15733 comm="syz.1.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 876.541375][ T5858] usb 4-1: 0:2 : does not exist [ 876.550407][ T5858] usb 4-1: unit 5 not found! [ 876.878005][T15745] bond3: (slave geneve2): making interface the new active one [ 876.900260][ T5858] usb 4-1: USB disconnect, device number 90 [ 876.975612][T15745] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 877.691194][ T695] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.692867][T15427] udevd[15427]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.719204][ T695] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.838130][T15761] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2536'. [ 877.906385][ T695] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 877.973586][ T695] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 878.228744][ T5858] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 878.461252][ T5858] usb 6-1: device descriptor read/64, error -71 [ 878.774440][ T5858] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 878.887745][T15777] netlink: 'syz.1.2541': attribute type 9 has an invalid length. [ 878.900666][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 878.960757][ T5858] usb 6-1: device descriptor read/64, error -71 [ 879.113613][ T5858] usb usb6-port1: attempt power cycle [ 879.366371][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2543'. [ 879.501100][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 879.533171][T15790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 879.540892][T15783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15783 comm=syz.1.2543 [ 879.623969][T15790] bond2: (slave wlan0): Releasing backup interface [ 879.635308][T15790] bond4: (slave wlan0): Enslaving as an active interface with an up link [ 879.719661][ T5858] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 879.741521][ T5858] usb 6-1: device descriptor read/8, error -71 [ 879.762735][ T24] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 879.858975][ T42] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 879.946359][ T24] usb 3-1: config 0 has no interfaces? [ 879.954235][ T24] usb 3-1: string descriptor 0 read error: -22 [ 879.960878][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 879.970348][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.979948][ T24] usb 3-1: config 0 descriptor?? [ 879.997668][ T5858] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 880.019528][ T5858] usb 6-1: device descriptor read/8, error -71 [ 880.040448][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 880.049212][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.059478][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.069343][ T42] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 880.078580][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 880.086712][ T42] usb 5-1: SerialNumber: syz [ 880.136878][ T5858] usb usb6-port1: unable to enumerate USB device [ 880.243167][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 880.272697][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 880.293790][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 880.314767][ T42] usb 5-1: 0:2 : does not exist [ 880.339784][ T42] usb 5-1: unit 5 not found! [ 880.407096][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 880.418708][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 880.431446][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 880.440647][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 880.449083][ T10] usb 4-1: Product: syz [ 880.453237][ T10] usb 4-1: Manufacturer: syz [ 880.612001][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 880.627457][ T42] usb 5-1: USB disconnect, device number 95 [ 880.646595][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 880.663264][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 880.669575][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 880.692645][T15427] udevd[15427]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.874279][ T24] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 880.906303][ T42] usb 4-1: USB disconnect, device number 91 [ 880.921689][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2554'. [ 880.934231][T15816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2554'. [ 881.046850][ T24] usb 6-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 881.059460][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 881.072068][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 881.084920][ T24] usb 6-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 881.100150][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 881.112138][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 881.122487][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 881.219159][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.249813][T15813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 881.743307][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.766173][ T24] usb 6-1: invalid MIDI out EP 0 [ 882.340224][ C0] blk_print_req_error: 4 callbacks suppressed [ 882.340241][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.356903][ C0] buffer_io_error: 18 callbacks suppressed [ 882.356912][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 882.371246][T15836] Buffer I/O error on dev loop9, logical block 1, async page read [ 882.379895][T15836] Buffer I/O error on dev loop9, logical block 1, async page read [ 882.381185][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 882.712594][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.723258][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 882.731347][T15836] Buffer I/O error on dev loop9, logical block 1, async page read [ 882.742278][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.752931][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 882.755092][ T24] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 882.788904][ T10] usb 3-1: USB disconnect, device number 84 [ 882.857724][ T24] usb 6-1: USB disconnect, device number 79 [ 882.877496][T15836] Buffer I/O error on dev loop9, logical block 1, async page read [ 882.879480][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.895951][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 882.939002][T15836] Buffer I/O error on dev loop9, logical block 1, async page read [ 882.943594][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.943624][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 882.945718][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.947739][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.947959][T15836] ldm_validate_partition_table(): Disk read failed. [ 882.948098][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.951217][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.951622][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 882.957127][T15836] Dev loop9: unable to read RDB block 0 [ 882.961614][T15836] loop9: unable to read partition table [ 882.961720][T15836] loop9: partition table beyond EOD, truncated [ 883.301579][ T24] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 883.483936][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 883.507109][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 883.517093][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 883.556751][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.614268][T15854] qnx6: unable to read the first superblock [ 883.620936][T15854] qnx6: unable to read the first superblock [ 883.627900][T15854] qnx6: unable to read the first superblock [ 883.632192][T15842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 883.663428][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 884.335130][T10722] usb 6-1: USB disconnect, device number 80 [ 884.344505][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 884.368812][ T29] audit: type=1400 audit(1772442934.442:1309): avc: denied { map } for pid=15839 comm="syz.5.2560" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 884.528650][T15862] ip6t_srh: unknown srh match flags 4000 [ 884.656839][T15868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 884.788334][ T29] audit: type=1400 audit(1772442934.751:1310): avc: denied { mounton } for pid=15865 comm="syz.4.2569" path="/489/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 884.814319][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 884.869754][ T29] audit: type=1400 audit(1772442934.751:1311): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 884.892921][ T29] audit: type=1400 audit(1772442934.769:1312): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 884.914910][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.914969][ T29] audit: type=1400 audit(1772442934.769:1313): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 885.033272][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 885.038199][ T29] audit: type=1400 audit(1772442934.769:1314): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 885.069920][ T29] audit: type=1400 audit(1772442934.769:1315): avc: denied { open } for pid=15865 comm="syz.4.2569" path="/489/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 885.097264][ T29] audit: type=1400 audit(1772442934.769:1316): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 885.097576][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 885.133227][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.142631][ T24] usb 4-1: Product: syz [ 885.147008][ T24] usb 4-1: Manufacturer: syz [ 885.151205][ T29] audit: type=1400 audit(1772442934.769:1317): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 885.174401][ T24] usb 4-1: SerialNumber: syz [ 885.322259][ T24] usb 4-1: config 0 descriptor?? [ 885.408341][ T29] audit: type=1400 audit(1772442934.769:1318): avc: denied { read } for pid=15865 comm="syz.4.2569" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 886.241330][T10722] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 886.354833][T15900] loop5: detected capacity change from 0 to 7 [ 886.474952][T15900] Dev loop5: unable to read RDB block 7 [ 886.481015][T15900] loop5: unable to read partition table [ 886.487678][T15900] loop5: partition table beyond EOD, truncated [ 886.493892][T15900] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 887.348253][T10722] usb 6-1: device descriptor read/64, error -71 [ 887.355831][ T42] usb 4-1: USB disconnect, device number 92 [ 887.742841][T15910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 887.759685][T10722] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 888.894727][T10722] usb 6-1: device descriptor read/64, error -71 [ 889.013670][T10722] usb usb6-port1: attempt power cycle [ 889.620040][T15940] netlink: 'syz.4.2590': attribute type 4 has an invalid length. [ 889.847142][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 889.850727][ T29] audit: type=1400 audit(1772442939.615:1337): avc: denied { setopt } for pid=15937 comm="syz.1.2589" lport=54979 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 890.155336][T15950] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2592'. [ 890.283547][T10722] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 890.336550][T10722] usb 6-1: Using ep0 maxpacket: 32 [ 890.348742][T10722] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 890.358342][T10722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.481736][T10722] usb 6-1: Product: syz [ 890.499346][T10722] usb 6-1: Manufacturer: syz [ 890.503965][T10722] usb 6-1: SerialNumber: syz [ 890.589306][T10722] usb 6-1: config 0 descriptor?? [ 890.885612][T10722] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 891.039989][T10722] usb 6-1: USB disconnect, device number 83 [ 891.163958][T15963] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 891.188564][T15965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.032215][ T5858] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 893.189874][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 893.202734][ T5858] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 893.243499][ T5858] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.288350][ T5858] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.302652][ T29] audit: type=1400 audit(1772442942.833:1338): avc: denied { write } for pid=15975 comm="syz.5.2602" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 893.328300][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.359570][ T29] audit: type=1400 audit(1772442942.833:1339): avc: denied { open } for pid=15975 comm="syz.5.2602" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 893.364949][ T5858] usbtmc 4-1:16.0: bulk endpoints not found [ 894.404602][ T24] usb 4-1: USB disconnect, device number 93 [ 894.419322][ T42] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 894.616181][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 894.625021][ T42] usb 6-1: not running at top speed; connect to a high speed hub [ 894.634198][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.654457][ T42] usb 6-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 894.686768][ T42] usb 6-1: config 1 interface 0 has no altsetting 0 [ 894.706689][ T42] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 894.718569][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.726558][ T42] usb 6-1: Product: syz [ 894.750775][ T42] usb 6-1: Manufacturer: syz [ 894.755424][ T42] usb 6-1: SerialNumber: syz [ 895.107470][ T42] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input28 [ 895.160625][ T5160] bcm5974 6-1:1.0: could not read from device [ 895.178332][ T5160] bcm5974 6-1:1.0: could not read from device [ 895.198416][ T42] bcm5974 6-1:1.0: could not read from device [ 895.228642][ T42] input: failed to attach handler mousedev to device input28, error: -5 [ 895.254098][ T5160] bcm5974 6-1:1.0: could not read from device [ 895.286244][ T42] usb 6-1: USB disconnect, device number 84 [ 895.303300][ T5160] bcm5974 6-1:1.0: could not read from device [ 895.580768][T15996] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 895.589760][T15996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 896.630480][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'. [ 897.315558][T16013] netlink: 'syz.2.2607': attribute type 10 has an invalid length. [ 897.370347][T16013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2607'. [ 897.641896][T16025] ip6t_srh: unknown srh match flags 4000 [ 898.384727][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 898.433707][T16047] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 898.457638][T16048] binder: 16043:16048 ioctl c0306201 0 returned -14 [ 898.470099][T16047] bond2: (slave wlan0): Releasing backup interface [ 898.838424][ T29] audit: type=1400 audit(1772442948.024:1340): avc: denied { read } for pid=16053 comm="syz.4.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 898.893849][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 898.905992][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 899.676638][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 899.689337][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 899.917666][T16075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.962875][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 900.128469][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 900.279547][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 900.336692][T16056] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 900.581352][T16080] wireguard0: entered promiscuous mode [ 900.586954][T16080] wireguard0: entered allmulticast mode [ 901.163682][T16086] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 901.183672][T16089] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 901.190378][T16089] binder: 16088:16089 ioctl 4018620d 200000000100 returned -1 [ 901.289775][T16091] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2626'. [ 902.385441][ T29] audit: type=1800 audit(1772442950.905:1341): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2627" name="bus" dev="overlay" ino=2652 res=0 errno=0 [ 902.487119][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2625'. [ 903.218355][T16114] validate_nla: 42 callbacks suppressed [ 903.218372][T16114] netlink: 'syz.5.2631': attribute type 4 has an invalid length. [ 903.239427][T16114] netlink: 'syz.5.2631': attribute type 4 has an invalid length. [ 903.678510][T16131] ip6t_srh: unknown srh match flags 4000 [ 903.889109][T16136] Set syz1 is full, maxelem 0 reached [ 905.185401][T10722] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 905.423846][T10722] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=5f.b1 [ 905.452160][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2630'. [ 905.471823][T10722] usb 2-1: New USB device strings: Mfr=137, Product=72, SerialNumber=3 [ 905.506417][T10722] usb 2-1: Product: syz [ 905.566642][T10722] usb 2-1: Manufacturer: syz [ 905.605222][T10722] usb 2-1: SerialNumber: syz [ 905.719500][ T42] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 905.730248][T16165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2630'. [ 905.860080][T10722] usb 2-1: config 0 descriptor?? [ 905.886410][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.899018][T10722] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 905.922611][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.944519][T10722] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 905.972949][ T42] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.987398][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.996383][T10722] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 906.009683][ T42] usb 6-1: SerialNumber: syz [ 906.104848][ T29] audit: type=1400 audit(1772442954.815:1342): avc: denied { mounton } for pid=16174 comm="syz.2.2640" path="/proc/1762/task" dev="proc" ino=46068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 906.279840][T13950] usb 2-1: USB disconnect, device number 84 [ 906.317237][ T42] usb 6-1: 0:2 : does not exist [ 906.354111][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 906.363596][ T29] audit: type=1400 audit(1772442954.918:1343): avc: denied { write } for pid=16139 comm="syz.1.2635" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 906.465804][T16180] : entered promiscuous mode [ 906.567035][ T42] usb 6-1: USB disconnect, device number 85 [ 906.947943][T16187] buffer_io_error: 18 callbacks suppressed [ 906.947960][T16187] Buffer I/O error on dev loop9, logical block 1, async page read [ 906.962376][ C1] blk_print_req_error: 4 callbacks suppressed [ 906.962398][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 906.979086][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 906.995789][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.006437][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 907.014330][T16187] Buffer I/O error on dev loop9, logical block 1, async page read [ 907.036036][T16187] Buffer I/O error on dev loop9, logical block 1, async page read [ 907.048618][T15427] udevd[15427]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.069541][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.080195][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 907.088248][T16187] Buffer I/O error on dev loop9, logical block 1, async page read [ 907.091581][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.106644][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 907.198703][T16187] Buffer I/O error on dev loop9, logical block 1, async page read [ 907.207545][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.218162][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 907.238693][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.249720][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.260730][T16187] ldm_validate_partition_table(): Disk read failed. [ 907.267793][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.446654][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.493294][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 907.507512][T16197] random: crng reseeded on system resumption [ 907.513791][T16187] Dev loop9: unable to read RDB block 0 [ 907.514787][ T29] audit: type=1400 audit(1772442956.134:1344): avc: denied { append } for pid=16184 comm="syz.2.2643" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 907.775631][T16187] loop9: unable to read partition table [ 907.782298][T16187] loop9: partition table beyond EOD, truncated [ 909.346818][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.354237][T16196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.408992][T16196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.426778][T16196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.476464][T16214] netlink: 'syz.4.2651': attribute type 2 has an invalid length. [ 909.545610][ T29] audit: type=1400 audit(1772443214.033:1345): avc: denied { watch } for pid=16215 comm="syz.4.2652" path="/509/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 909.568886][ T29] audit: type=1400 audit(1772443214.033:1346): avc: denied { watch_sb watch_reads } for pid=16215 comm="syz.4.2652" path="/509/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 909.663862][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 909.724254][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2653'. [ 909.860567][ T29] audit: type=1400 audit(1772443214.332:1347): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 911.767239][T16251] openvswitch: netlink: Flow key attr not present in new flow. [ 912.108795][ T29] audit: type=1400 audit(1772443216.109:1348): avc: denied { mount } for pid=16244 comm="syz.2.2659" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 912.551530][ T29] audit: type=1400 audit(1772443216.820:1349): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 912.797377][T16263] ip6t_srh: unknown srh match flags 4000 [ 913.149898][T13950] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 913.357079][T16275] qnx6: unable to read the first superblock [ 913.365433][T16275] qnx6: unable to read the first superblock [ 913.371393][T16275] qnx6: unable to read the first superblock [ 913.635189][T13950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 913.648568][T13950] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 913.682304][T16282] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2666'. [ 913.701787][T13950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 913.745183][T13950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.830164][T16270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 913.846519][T13950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.105287][T13950] usb 5-1: USB disconnect, device number 96 [ 914.167051][ T29] audit: type=1400 audit(1772443218.363:1350): avc: denied { execute } for pid=16285 comm="syz.3.2668" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 914.298629][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 914.321137][ T78] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.330314][ T78] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.340819][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 914.357342][ T78] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.404653][ T78] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.664455][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 916.257541][T16330] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 916.502995][T16334] netlink: 'syz.2.2675': attribute type 1 has an invalid length. [ 916.540241][T16339] random: crng reseeded on system resumption [ 916.540968][ T29] audit: type=1400 audit(1772443476.579:1351): avc: denied { write } for pid=16338 comm="syz.1.2676" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 916.639498][ T29] audit: type=1400 audit(1772443476.654:1352): avc: denied { ioctl } for pid=16338 comm="syz.1.2676" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 916.869552][T10722] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 917.488331][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2679'. [ 917.508502][T10722] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 917.532987][T10722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.540991][T10722] usb 2-1: Product: syz [ 917.565002][T10722] usb 2-1: Manufacturer: syz [ 917.573351][T10722] usb 2-1: SerialNumber: syz [ 917.603915][T10722] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 917.621601][ T42] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 918.288624][T16352] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 918.386396][ T29] audit: type=1400 audit(1772443478.300:1353): avc: denied { accept } for pid=16338 comm="syz.1.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 918.784088][ T42] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 918.802249][ T42] ath9k_htc: Failed to initialize the device [ 918.860735][ T42] usb 2-1: ath9k_htc: USB layer deinitialized [ 919.122012][ T24] usb 2-1: USB disconnect, device number 85 [ 920.111567][T14590] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 920.420315][T14590] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 920.585528][T14590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.815293][ T29] audit: type=1400 audit(1772443480.583:1354): avc: denied { ioctl } for pid=16403 comm="syz.4.2690" path="socket:[48501]" dev="sockfs" ino=48501 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 921.036953][T14590] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 921.230240][T16407] loop3: detected capacity change from 0 to 7 [ 921.237523][T16407] Dev loop3: unable to read RDB block 7 [ 921.243321][T16407] loop3: unable to read partition table [ 921.250391][T16407] loop3: partition table beyond EOD, truncated [ 921.276765][T16407] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 921.605640][T14590] gspca_sunplus: reg_w_riv err -110 [ 921.610958][T14590] sunplus 3-1:8.0: probe with driver sunplus failed with error -110 [ 922.175914][ T5858] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 922.562518][T16418] ceph: No mds server is up or the cluster is laggy [ 923.070606][ T29] audit: type=1400 audit(1772443481.948:1355): avc: denied { getopt } for pid=16423 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 923.222399][ T5858] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 923.253813][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.354099][ T5858] usb 5-1: Product: syz [ 923.360822][ T5858] usb 5-1: Manufacturer: syz [ 923.365416][ T5858] usb 5-1: SerialNumber: syz [ 923.474322][T16437] ALSA: mixer_oss: invalid OSS volume '' [ 923.482264][T16437] netlink: 'syz.3.2698': attribute type 8 has an invalid length. [ 923.508448][T13950] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 923.539881][T16438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2698'. [ 923.817129][T14590] usb 3-1: USB disconnect, device number 85 [ 923.903235][T16444] xt_hashlimit: size too large, truncated to 1048576 [ 923.966665][T13950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.990960][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2703'. [ 923.999161][T13950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 924.013756][T13950] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 925.042949][ T29] audit: type=1400 audit(1772443739.911:1356): avc: denied { module_load } for pid=16411 comm="syz.4.2692" path="/sys/power/pm_wakeup_irq" dev="sysfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 925.051595][ T5858] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 925.083838][T13950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 925.105139][T13950] usb 2-1: SerialNumber: syz [ 925.153287][ T5858] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 925.198011][ T5858] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 925.251453][T10722] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 925.251822][ T5858] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 925.268966][ T5858] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 925.332433][ T5858] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 925.351572][ T5858] usb 5-1: USB disconnect, device number 97 [ 925.382698][T13950] usb 2-1: 0:2 : does not exist [ 925.431557][T13950] usb 2-1: USB disconnect, device number 86 [ 925.445912][T10722] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 925.475773][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.497859][T10722] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 925.529401][T10722] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 925.546450][T10722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.565979][T10722] usb 6-1: config 0 descriptor?? [ 925.580223][T10722] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 925.598081][T10722] usbhid 6-1:0.0: can't add hid device: -22 [ 925.611488][T10722] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 925.804086][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'. [ 925.816956][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.850319][T16444] bridge_slave_0 (unregistering): left allmulticast mode [ 925.857351][T16444] bridge_slave_0 (unregistering): left promiscuous mode [ 925.864437][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.919192][T13950] usb 6-1: USB disconnect, device number 86 [ 926.085831][ T5858] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 926.548580][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.568186][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.585940][ T5858] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 927.047204][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.064942][ T5858] usb 5-1: config 0 descriptor?? [ 927.314582][T10722] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 927.565945][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x3 [ 927.574555][T10722] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 927.586569][T10722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.594912][T10722] usb 3-1: Product: syz [ 927.604155][ T5858] aquacomputer_d5next 0003:0C70:F0B6.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 927.614389][T10722] usb 3-1: Manufacturer: syz [ 927.621022][T10722] usb 3-1: SerialNumber: syz [ 927.652962][T10722] usb 3-1: config 0 descriptor?? [ 927.693997][T10722] usb 3-1: selecting invalid altsetting 3 [ 927.732818][T10722] comedi comedi5: could not set alternate setting 3 in high speed [ 927.745634][T10722] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 927.776224][T10722] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 927.784211][ T5858] usb 5-1: USB disconnect, device number 98 [ 927.936864][T16481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.958056][T16481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.991280][ T24] usb 3-1: USB disconnect, device number 86 [ 928.011100][T10722] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 929.667286][T10722] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 929.801594][T10722] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 929.810766][T10722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 929.831885][T10722] usb 4-1: Product: syz [ 929.847052][T10722] usb 4-1: Manufacturer: syz [ 929.852158][T10722] usb 4-1: SerialNumber: syz [ 929.870529][ T29] audit: type=1400 audit(1772443745.055:1357): avc: denied { write } for pid=16506 comm="syz.4.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 929.900955][ T29] audit: type=1400 audit(1772443745.074:1358): avc: denied { connect } for pid=16506 comm="syz.4.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 930.176070][T10722] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 930.614811][ T29] audit: type=1400 audit(1772443745.729:1359): avc: denied { read write } for pid=16486 comm="syz.3.2715" name="lp0" dev="devtmpfs" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 930.681020][T16492] netlink: 'syz.3.2715': attribute type 21 has an invalid length. [ 930.711792][T16492] IPv6: NLM_F_CREATE should be specified when creating new route [ 930.812034][ T5858] usb 4-1: USB disconnect, device number 94 [ 930.876063][ T5858] usblp0: removed [ 930.978985][ T29] audit: type=1400 audit(1772443745.748:1360): avc: denied { open } for pid=16486 comm="syz.3.2715" path="/dev/usb/lp0" dev="devtmpfs" ino=3758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 931.009703][T16515] input: syz0 as /devices/virtual/input/input29 [ 931.954090][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 932.627528][ T24] usb 5-1: device descriptor read/64, error -71 [ 932.686888][ T54] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.713102][ T54] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.916211][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 933.072623][ T24] usb 5-1: device descriptor read/64, error -71 [ 933.203296][ T54] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.216784][ T24] usb usb5-port1: attempt power cycle [ 933.247140][ T54] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.427680][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 933.437762][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 933.451288][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 933.480694][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 933.488288][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 933.500040][ T29] audit: type=1400 audit(1772443748.441:1361): avc: denied { mounton } for pid=16530 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 933.559772][ T54] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.574777][ T54] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.586160][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 933.611984][ T24] usb 5-1: device descriptor read/8, error -71 [ 933.868010][ T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 934.018688][ T24] usb 5-1: device descriptor read/8, error -71 [ 934.041475][ T54] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.145710][ T54] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.146015][ T24] usb usb5-port1: unable to enumerate USB device [ 934.500157][ T54] erspan0: left allmulticast mode [ 934.513956][ T54] erspan0: left promiscuous mode [ 934.526126][ T54] bridge0: port 3(erspan0) entered disabled state [ 934.605258][ T5858] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 934.613917][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.810009][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 934.833528][ T5858] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 934.854715][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.923088][ T5858] usb 4-1: Product: syz [ 934.927687][ T5858] usb 4-1: Manufacturer: syz [ 934.943137][ T5858] usb 4-1: SerialNumber: syz [ 934.967908][ T5858] usb 4-1: config 0 descriptor?? [ 935.207299][ T5858] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 935.257683][ T5858] usb 4-1: USB disconnect, device number 95 [ 935.477948][T16551] tmpfs: Bad value for 'mpol' [ 935.568364][T16549] netlink: 'syz.1.2733': attribute type 4 has an invalid length. [ 935.640188][T16550] netlink: 'syz.1.2733': attribute type 4 has an invalid length. [ 935.731786][ T5819] Bluetooth: hci0: command tx timeout [ 936.006072][ T5858] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 936.255114][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2735'. [ 936.283711][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 936.303749][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.313944][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 936.325130][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.333658][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 936.333686][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 936.333724][ T5858] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 936.333746][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.415642][ T5858] hub 2-1:1.0: bad descriptor, ignoring hub [ 936.422110][ T5858] hub 2-1:1.0: probe with driver hub failed with error -5 [ 936.430193][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 936.435983][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 936.441622][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.447424][ T5858] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 936.461078][ T5858] cdc_wdm 2-1:1.0: Unknown control protocol [ 936.493789][ T54] bond0 (unregistering): Released all slaves [ 936.519968][ T54] bond1 (unregistering): Released all slaves [ 936.550206][ T54] bond2 (unregistering): Released all slaves [ 936.580413][ T54] bond3 (unregistering): Released all slaves [ 936.614171][ T54] bond4 (unregistering): Released all slaves [ 936.665624][ T54] bond5 (unregistering): (slave wlan0): Releasing backup interface [ 936.693069][ T54] bond5 (unregistering): Released all slaves [ 936.901323][ T54] : left promiscuous mode [ 937.092610][T16530] chnl_net:caif_netlink_parms(): no params data found [ 937.657937][ T54] tipc: Left network mode [ 937.857465][T16530] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.881597][T16530] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.134226][ T5819] Bluetooth: hci0: command tx timeout [ 938.352712][T16530] bridge_slave_0: entered allmulticast mode [ 938.360155][T16530] bridge_slave_0: entered promiscuous mode [ 938.383741][T16530] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.429581][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.448158][T16530] bridge_slave_1: entered allmulticast mode [ 938.461867][T16530] bridge_slave_1: entered promiscuous mode [ 938.563034][T16530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.703206][ T5858] usb 2-1: USB disconnect, device number 87 [ 938.783457][T16530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.953189][T16530] team0: Port device team_slave_0 added [ 938.977862][T16604] ip6t_srh: unknown srh match flags 4000 [ 939.148850][T16530] team0: Port device team_slave_1 added [ 939.280056][T16530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.299995][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.497786][T16530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.648950][T16530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.658079][T16530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.725536][T16530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.052470][ T54] hsr_slave_0: left promiscuous mode [ 940.097857][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.122194][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.155047][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.198973][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.286424][ T54] veth1_macvtap: left promiscuous mode [ 940.335432][ T5819] Bluetooth: hci0: command tx timeout [ 940.511302][ T54] veth0_macvtap: left promiscuous mode [ 940.536575][ T54] veth1_vlan: left promiscuous mode [ 940.553126][ T54] veth0_vlan: left promiscuous mode [ 940.809234][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 940.984136][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.118393][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.168059][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 941.211194][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 941.272443][ T24] usb 5-1: SerialNumber: syz [ 941.306147][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 941.573318][T16655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2751'. [ 941.620224][ T54] team0 (unregistering): Port device team_slave_1 removed [ 941.657046][ T54] team0 (unregistering): Port device team_slave_0 removed [ 941.756777][ T24] usb 5-1: 0:2 : does not exist [ 941.832708][ T24] usb 5-1: USB disconnect, device number 103 [ 941.922343][T15427] udevd[15427]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.980599][T16530] hsr_slave_0: entered promiscuous mode [ 942.021436][T16530] hsr_slave_1: entered promiscuous mode [ 942.032570][T16530] debugfs: 'hsr0' already exists in 'hsr' [ 942.075302][T16530] Cannot create hsr debugfs directory [ 942.269211][T16668] loop5: detected capacity change from 0 to 7 [ 942.405198][ T29] audit: type=1400 audit(1772443756.738:1362): avc: denied { cmd } for pid=16664 comm="syz.2.2754" path="socket:[47971]" dev="sockfs" ino=47971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 942.488560][T16668] Dev loop5: unable to read RDB block 7 [ 942.494298][T16668] loop5: unable to read partition table [ 942.500907][T16668] loop5: partition table beyond EOD, truncated [ 942.507242][T16668] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 942.575861][ T5819] Bluetooth: hci0: command tx timeout [ 948.294070][T16530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 948.385108][T16530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 948.442950][T16721] netlink: 'syz.2.2764': attribute type 27 has an invalid length. [ 948.782178][T16530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 948.912579][T16530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 949.054662][ T54] IPVS: stop unused estimator thread 0... [ 949.307435][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.387909][T16530] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.417442][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.424575][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.487684][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.494823][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.701429][ T977] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 949.992686][ T977] usb 5-1: config 0 has no interfaces? [ 950.003415][ T977] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 950.032669][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.062870][ T977] usb 5-1: config 0 descriptor?? [ 950.168152][T16755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.313068][ T977] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 950.460474][T16745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.469161][T16745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.631785][T16768] Set syz1 is full, maxelem 0 reached [ 950.690843][ T5858] usb 5-1: USB disconnect, device number 104 [ 950.744034][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.785466][ T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.022221][ T29] audit: type=1400 audit(1772443764.745:1363): avc: denied { write } for pid=16769 comm="syz.1.2773" path="socket:[49467]" dev="sockfs" ino=49467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 951.109207][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.162358][ T977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 951.195722][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 951.215145][ T977] usb 4-1: SerialNumber: syz [ 951.443349][ T5858] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 951.652003][ T977] usb 4-1: 0:2 : does not exist [ 951.864413][ T977] usb 4-1: USB disconnect, device number 96 [ 951.878496][ T5858] usb 5-1: config 0 has no interfaces? [ 1064.154009][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1064.160963][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6514/1:b..l [ 1064.169249][ C1] rcu: (detected by 1, t=10502 jiffies, g=73437, q=565 ncpus=2) [ 1064.176945][ C1] task:kworker/u8:12 state:R running task stack:24648 pid:6514 tgid:6514 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1064.191054][ C1] Workqueue: iou_exit io_ring_exit_work [ 1064.196587][ C1] Call Trace: [ 1064.199838][ C1] [ 1064.202744][ C1] __schedule+0xfee/0x6120 [ 1064.207145][ C1] ? __pfx___schedule+0x10/0x10 [ 1064.211981][ C1] ? mark_held_locks+0x40/0x70 [ 1064.216721][ C1] preempt_schedule_irq+0x50/0x90 [ 1064.221716][ C1] irqentry_exit+0x17b/0x670 [ 1064.226278][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.232243][ C1] RIP: 0010:__orc_find+0x3d/0xf0 [ 1064.237161][ C1] Code: 53 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 89 ff 48 89 fd eb 0c <48> 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 [ 1064.256751][ C1] RSP: 0018:ffffc90003187588 EFLAGS: 00000206 [ 1064.262801][ C1] RAX: ffffffff9179f9b4 RBX: ffffffff90f2c004 RCX: dffffc0000000000 [ 1064.270743][ C1] RDX: ffffffff81d1f6f5 RSI: 0000000000000000 RDI: ffffffff90f2c004 [ 1064.278687][ C1] RBP: ffffffff90f2c004 R08: ffffffff9179f9ba R09: 0000000000000007 [ 1064.286633][ C1] R10: 0000000000000200 R11: 000000000000d1fa R12: ffffffff90f2c004 [ 1064.294575][ C1] R13: ffffffff81d1fa4f R14: ffffffff90f2c004 R15: ffffffff90f2c004 [ 1064.302529][ C1] ? kthread+0x36f/0x450 [ 1064.306754][ C1] ? kthread+0x15/0x450 [ 1064.310883][ C1] ? kthread+0x36f/0x450 [ 1064.315094][ C1] unwind_next_frame+0x2ec/0x1ea0 [ 1064.320094][ C1] ? kthread+0x370/0x450 [ 1064.324306][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1064.330431][ C1] arch_stack_walk+0x94/0xf0 [ 1064.334992][ C1] ? kthread+0x370/0x450 [ 1064.339202][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 1064.344546][ C1] stack_trace_save+0x8e/0xc0 [ 1064.349192][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1064.354538][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1064.359449][ C1] kasan_save_stack+0x30/0x50 [ 1064.364099][ C1] ? kasan_save_stack+0x30/0x50 [ 1064.368920][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1064.374262][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1064.380300][ C1] ? kmem_cache_free+0x44b/0x6a0 [ 1064.385206][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 1064.390562][ C1] ? io_req_caches_free+0x24/0x60 [ 1064.395558][ C1] ? io_ring_exit_work+0x3eb/0xce9 [ 1064.400640][ C1] ? process_one_work+0x9d7/0x1920 [ 1064.405729][ C1] ? worker_thread+0x5da/0xe40 [ 1064.410461][ C1] ? kthread+0x370/0x450 [ 1064.414687][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1064.419856][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1064.425981][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1064.431849][ C1] ? __io_req_caches_free+0x1a6/0x220 [ 1064.437192][ C1] kmem_cache_free+0x44b/0x6a0 [ 1064.441926][ C1] ? __io_req_caches_free+0x43/0x220 [ 1064.447185][ C1] __io_req_caches_free+0x1a6/0x220 [ 1064.452359][ C1] io_req_caches_free+0x24/0x60 [ 1064.457182][ C1] io_ring_exit_work+0x3eb/0xce9 [ 1064.462090][ C1] ? try_to_wake_up+0xcf1/0x1a80 [ 1064.467001][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1064.472445][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1064.478225][ C1] ? try_to_wake_up+0x160/0x1a80 [ 1064.483138][ C1] ? rcu_is_watching+0x12/0xc0 [ 1064.487874][ C1] process_one_work+0x9d7/0x1920 [ 1064.492795][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1064.498139][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1064.503572][ C1] worker_thread+0x5da/0xe40 [ 1064.508134][ C1] ? kthread+0x13a/0x450 [ 1064.512343][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1064.517429][ C1] kthread+0x370/0x450 [ 1064.521474][ C1] ? __pfx_kthread+0x10/0x10 [ 1064.526041][ C1] ret_from_fork+0x754/0xd80 [ 1064.530608][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.535694][ C1] ? rcu_is_watching+0x12/0xc0 [ 1064.540427][ C1] ? __switch_to+0x7b4/0x1120 [ 1064.545074][ C1] ? __pfx_kthread+0x10/0x10 [ 1064.549636][ C1] ret_from_fork_asm+0x1a/0x30 [ 1064.554378][ C1] [ 1064.557367][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10536 jiffies! g73437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1064.569659][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=79202 [ 1064.577519][ C1] rcu: rcu_preempt kthread starved for 10537 jiffies! g73437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1064.588848][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1064.598783][ C1] rcu: RCU grace-period kthread stack dump: [ 1064.604635][ C1] task:rcu_preempt state:I stack:27976 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1064.616512][ C1] Call Trace: [ 1064.619772][ C1] [ 1064.622682][ C1] __schedule+0xfee/0x6120 [ 1064.627083][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1064.632006][ C1] ? __pfx___schedule+0x10/0x10 [ 1064.636836][ C1] ? find_held_lock+0x2b/0x80 [ 1064.641490][ C1] ? schedule+0x2bf/0x390 [ 1064.645800][ C1] schedule+0xdd/0x390 [ 1064.649843][ C1] schedule_timeout+0x127/0x280 [ 1064.654670][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1064.660015][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1064.665273][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1064.671065][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1064.676501][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1064.681257][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1064.686527][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1064.691441][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1064.696625][ C1] ? rcu_is_watching+0x12/0xc0 [ 1064.701361][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1064.707150][ C1] rcu_gp_kthread+0x179/0x230 [ 1064.711806][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1064.716978][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1064.722774][ C1] ? __kthread_parkme+0x18c/0x230 [ 1064.727775][ C1] ? kthread+0x13a/0x450 [ 1064.731994][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1064.737176][ C1] kthread+0x370/0x450 [ 1064.741221][ C1] ? __pfx_kthread+0x10/0x10 [ 1064.745782][ C1] ret_from_fork+0x754/0xd80 [ 1064.750349][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.755439][ C1] ? __switch_to+0x7b4/0x1120 [ 1064.760087][ C1] ? __pfx_kthread+0x10/0x10 [ 1064.764644][ C1] ret_from_fork_asm+0x1a/0x30 [ 1064.769385][ C1] [ 1064.772374][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1064.778676][ C1] CPU: 1 UID: 0 PID: 1296 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.789228][ C1] Tainted: [L]=SOFTLOCKUP [ 1064.793518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.803542][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1064.809933][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 21 52 f6 48 89 df e8 3e 71 52 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 c5 90 42 f6 65 8b 05 5e ee 7a 08 85 c0 74 16 5b [ 1064.829511][ C1] RSP: 0018:ffffc90004e9f968 EFLAGS: 00000246 [ 1064.835546][ C1] RAX: 0000000000000006 RBX: ffffffff9b4a14c0 RCX: 0000000000000004 [ 1064.843487][ C1] RDX: 0000000000000000 RSI: ffffffff8de72ef9 RDI: ffffffff8c1af6a0 [ 1064.851429][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 1064.859378][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f512ba0 [ 1064.867317][ C1] R13: ffffffff9b4a15c8 R14: 0000000000000000 R15: ffffffff9b4a1600 [ 1064.875259][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 1064.884157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.890709][ C1] CR2: 00007fceb4f1c008 CR3: 00000000829f9000 CR4: 00000000003526f0 [ 1064.898652][ C1] Call Trace: [ 1064.901912][ C1] [ 1064.904818][ C1] uart_write_room+0x2d2/0x930 [ 1064.909562][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 1064.914815][ C1] tty_write_room+0x66/0x90 [ 1064.919290][ C1] handle_tx+0x14a/0x620 [ 1064.923508][ C1] dev_hard_start_xmit+0x121/0x7d0 [ 1064.928596][ C1] __dev_queue_xmit+0x32c1/0x4800 [ 1064.933597][ C1] ? finish_task_switch.isra.0+0x205/0xb80 [ 1064.939377][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1064.944725][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1064.949636][ C1] ? ref_tracker_free+0x37e/0x6c0 [ 1064.954634][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1064.959640][ C1] ? rcu_is_watching+0x12/0xc0 [ 1064.964381][ C1] ? __pfx_tx+0x10/0x10 [ 1064.968514][ C1] tx+0xc4/0x130 [ 1064.972034][ C1] kthread+0x1d8/0x3c0 [ 1064.976079][ C1] ? __kthread_parkme+0xbb/0x230 [ 1064.980989][ C1] ? __pfx_kthread+0x10/0x10 [ 1064.985548][ C1] ? rcu_is_watching+0x12/0xc0 [ 1064.990279][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1064.996057][ C1] ? __kthread_parkme+0x18c/0x230 [ 1065.001058][ C1] ? kthread+0x13a/0x450 [ 1065.005271][ C1] ? __pfx_kthread+0x10/0x10 [ 1065.009832][ C1] kthread+0x370/0x450 [ 1065.013878][ C1] ? __pfx_kthread+0x10/0x10 [ 1065.018436][ C1] ret_from_fork+0x754/0xd80 [ 1065.023010][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.028099][ C1] ? __switch_to+0x7b4/0x1120 [ 1065.032746][ C1] ? __pfx_kthread+0x10/0x10 [ 1065.037307][ C1] ret_from_fork_asm+0x1a/0x30 [ 1065.042047][ C1]