last executing test programs: 1m20.954691575s ago: executing program 2 (id=1069): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bbe1a00ddff1d00010902000200092afd7f000122e301090581038936050a7000"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, 0xfffffffffffffffc, 0x0) 1m20.953520986s ago: executing program 1 (id=1070): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xa439, 0x80, 0x800002, 0x23b9}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000013c0)={0x18, 0x1, {0xef6, @struct={0x750f, 0xff}, 0x0, 0x100000001, 0x3, 0x101, 0x5, 0x4, 0x1, @struct={0x400, 0xacb0}, 0x40, 0x5, [0xb, 0x1, 0x100, 0x7fffffffffffffff, 0xd6, 0x2]}, {0x1, @usage=0x6, 0x0, 0x4e0a, 0x0, 0x2, 0x100000000, 0x6, 0x40, @usage=0x38000000000000, 0xffff0000, 0xfffffff7, [0x4, 0x6, 0x7, 0xccb, 0x8, 0x4]}, {0x3, @usage=0x4, 0x0, 0x1, 0x100000001, 0x3d, 0x3ff, 0x2, 0xca, @usage=0xa0b, 0x3, 0x5, [0xefe, 0x7, 0x7, 0x587, 0x6, 0x3]}, {0x4, 0x7, 0x1f768db3}}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000884) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x14) 1m18.769519428s ago: executing program 2 (id=1071): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x25, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x1004, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x8, 0x7, 0x3, 0x8, 0x10, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008070, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x8, 0x2, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x4, 0xff, 0x3f8, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x80004, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x1, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x208, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x3, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0xfffffff8, 0xaf, 0x5, 0x6, 0x7, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x4, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m17.690788246s ago: executing program 1 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) lchown(&(0x7f0000000180)='./file0\x00', r8, 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000240)={{}, {@void, @max}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)=@svm={0x0, 0x1, 0x1080, {}, {"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"}}) 1m17.389318321s ago: executing program 0 (id=1077): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d00060905820200029aa186eec76021dcec44f5d80c57d1091a35c7059a9c45bf904d4284cca0cbe1bb913e6eda6e420fc70e8a6c75b8ea69258af7f03cc97ea30700000000bd1c879a887a341f40d2ad2a044706795853b3e864c370d496eb6f9358ddf5f771f1cf27b759cc5bc46bd792e716c7153b4ea880b9cf691f5901b16729bef743a65af5c2218a02ffc109e7b75e2026"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) syz_open_dev$loop(0x0, 0x81, 0x2a82) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) r5 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) 1m17.005352564s ago: executing program 4 (id=1078): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000100)=0x22) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000000c0)=0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x800) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x18b100, 0x0) ioctl$SNDCTL_TMR_SELECT(r5, 0x40045408) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x4000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000200)={0xffff, 0x0, &(0x7f0000000080)=[{0x0}], 0x0, 0x1}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) 1m15.059186683s ago: executing program 4 (id=1079): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1000100100000007, 0x0) wait4(r2, 0x0, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m15.014804452s ago: executing program 2 (id=1080): pipe(0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x4, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) 1m13.449411902s ago: executing program 2 (id=1081): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bbe1a00ddff1d00010902000200092afd7f000122e301090581038936050a7000"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, 0xfffffffffffffffc, 0x0) 1m13.339509912s ago: executing program 4 (id=1082): r0 = gettid() r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0xa518, r2, 'id0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x3}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0xb6615a4bbc8ccef4) rt_sigqueueinfo(r0, 0x1d, &(0x7f0000000240)={0xc, 0x5, 0xe}) 1m13.221764443s ago: executing program 3 (id=1083): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x64, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_io_uring_setup(0x76b9, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000002060102000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69700000000000000f9655db44993f18d7461cf58ec072b0235328509e8d7b6215b798675cd7379255fb3959f4e3df18"], 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) removexattr(0x0, &(0x7f0000000300)=ANY=[]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) mprotect(&(0x7f0000225000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0xe475}, 0x0) setresuid(0xee00, 0xee00, 0x0) remap_file_pages(&(0x7f00004d4000/0x4000)=nil, 0x4000, 0x0, 0x7fe, 0x8000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) 1m13.07363848s ago: executing program 4 (id=1084): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x85, 0x3, "dc1991"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.31685975s ago: executing program 1 (id=1085): capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x8000000, 0x0, 0x0, 0x1003}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42e01, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405040e0f240602050402000a000a000900040a240402010000d815000924060502010600000924030301030505f50904010000010200000904010101010200000905010920009301090725010006480f09040200000102000009040201010102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x4, 0x5, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m11.903716583s ago: executing program 0 (id=1086): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@mcast1, @dev={0xac, 0x14, 0x14, 0x19}, 0x1f, 0x7}}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES8=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050300000008000000000700000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x24044080) (async) r10 = dup(r1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0x25) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000580)={'gretap0\x00', r2, 0x8000, 0x20, 0x3, 0x195c4a78, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, {[@noop]}}}}}) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="01000000", @ANYRES16=r14, @ANYBLOB="01002cbd7000ffd9df250c000000180001801400020076657468315f746f5f687372000000000800038004000380"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000007300)={'gre0\x00', &(0x7f0000007240)={'syztnl2\x00', r12, 0xc0, 0x8000, 0x1, 0x3, {{0x17, 0x4, 0x3, 0x16, 0x5c, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@rr={0x7, 0x23, 0x59, [@empty, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, @local, @private=0xa010102, @remote, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @private=0xa010102, @private=0xa210100, @broadcast, @private=0xa010100]}]}}}}}) 1m10.701707816s ago: executing program 0 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce", 0x45}], 0x2}, 0x0) 1m9.491230713s ago: executing program 0 (id=1088): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r1, r1, 0x0, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000010400f69b000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42, 0x0, 0xfffffffc}, 0x28) 1m8.754345653s ago: executing program 2 (id=1089): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x5, 0x4402) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000180)=0x9) 1m8.358898696s ago: executing program 3 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1020}], 0x1}, 0x40) 1m8.068804093s ago: executing program 1 (id=1091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x5d, 0x8001, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @private1, 0x80, 0x80, 0xaf, 0x7}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)={0xcc, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m8.0605184s ago: executing program 4 (id=1092): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x43d5, &(0x7f0000000100)={0x0, 0x5c8, 0x40, 0x0, 0x1e3}, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="14000000100017e40107082f010000000000000000000000000a74000000030a01040000000000000000000000050900010073797a300000000008000b4000000003080007006e617400080007006e61740008000a4000000002340008800c00014000000000000000050c00014000000000000001010c00024000000000000000060c000140000000000000020044000000060a0300000000000000000007000002080009400000000108000940000000000c000640000000000000000108000b40000000010c0003400000000000000002140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) read$msr(r0, 0x0, 0x2f) syz_fuse_handle_req(r0, &(0x7f0000000b80)="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", 0x2000, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000280)=""/50, 0x32}], 0x4, &(0x7f00000006c0)=""/87, 0x57}, 0x7}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/252, 0xfc}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000002b80)=""/226, 0xe2}], 0x4}, 0xffff}], 0x2, 0x100, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x24004010) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x80000000}, 0x0, 0x0, 0x6, 0x2, 0x1b, 0x7, 0x2e, 0x9}}], 0x58, 0x4000000}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m7.685553721s ago: executing program 3 (id=1093): r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6d4f83, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x400, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1m5.50521506s ago: executing program 0 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1m4.545343683s ago: executing program 2 (id=1095): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x43d5, &(0x7f0000000100)={0x0, 0x5c8, 0x40, 0x0, 0x1e3}, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000000, 0xfffffffffffffe89, 0x0, &(0x7f0000000900)="c123612d6821d308091674888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="14000000100017e40107082f010000000000000000000000000a74000000030a01040000000000000000000000050900010073797a300000000008000b4000000003080007006e617400080007006e61740008000a4000000002340008800c00014000000000000000050c00014000000000000001010c00024000000000000000060c000140000000000000020044000000060a0300000000000000000007000002080009400000000108000940000000000c000640000000000000000108000b40000000010c0003400000000000000002140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, 0x0, 0x0, 0x40000102, 0x0) read$msr(r0, 0x0, 0x2f) syz_fuse_handle_req(r0, &(0x7f0000000b80)="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", 0x2000, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000280)=""/50, 0x32}], 0x4, &(0x7f00000006c0)=""/87, 0x57}, 0x7}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/252, 0xfc}, {&(0x7f00000007c0)=""/28, 0x1c}, {&(0x7f0000002b80)=""/226, 0xe2}], 0x4}, 0xffff}], 0x2, 0x100, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x24004010) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x80000000}, 0x0, 0x0, 0x6, 0x2, 0x1b, 0x7, 0x2e, 0x9}}], 0x58, 0x4000000}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m4.031931419s ago: executing program 1 (id=1096): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xf8, 0x120, 0x0, {0x0, 0x28e}, [@common=@ipv6header={{0x28}, {0x92, 0x10, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x800, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0xa39, 0x77, 'pptp\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1m3.841271709s ago: executing program 3 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgid(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/153) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) writev(r5, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) sendto$inet6(r3, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x801, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x118, 0xb4, &(0x7f0000000000)="b618bb3ccb26515ebc9b8f53da2578328a1d08b7e67c7e9c5b5933fe1e9d4859f6401b"}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x79f0, 0x4, &(0x7f0000002080)="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"}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x848, 0x6, &(0x7f0000000500)="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"}, {0x3, 0x118, 0x3, &(0x7f00000014c0)="f10dfc6318f7c2d620a6eada8b79299daeb46276dde4e0e4b56d659b4e2a5e15aeffdf"}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x250, 0x47d, &(0x7f0000001600)="f6d3bfbb9082d9857756af54726e266c180e17ff2f7560f91b01d76c266c29aaf4d5c7787a04c9a0b2b43d2b1381ff68fda80ff8952c06f71cb7b62913f5ebdd01b63cec3716d810611e"}, {0x2, 0x4d8, 0x4, &(0x7f0000000700)="c9c33e742c953235637044fa462c73fb0d4ff400738945de8cb8db03fc07a6fc4804410846a6cf146cf14e7f70dc0266565451ddabc9391c9a016c6c0cb795d9a0f1284bc7e18f1b3ae9d465cc11a91a6e36fff427d929d9000000000000000000000000000000000000007f755028a263d2882a81af4c781e46fc752230cfb231c51a304fe470d57056e96f46ee682bd31434cdeb7990f19e61de"}, {0x0, 0x430, 0xdd, &(0x7f0000001780)="960ec96251794fe09a02e516b7195b47121f49203edcae9ee45763b6ae3e8685b5458f857090b3e582c283fd9d46db774263267d7e8b293e462f51231a3cacf74a873395a0e4e39da62dae25578f48f55fe451bfc1971bb146a70f05713fa1bacad31df4935eeb6964dde497fbb9d129e35bf41116a7aea10c445c869842c997a258614c0530"}, {0x0, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0600000004000000080000000800000000000000"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 1m2.852773373s ago: executing program 0 (id=1098): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) userfaultfd(0x801) 1m0.830633726s ago: executing program 1 (id=1099): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bbe1a00ddff1d00010902000200092afd7f000122e301090581038936050a7000"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_cancel(0x0, 0xfffffffffffffffc, 0x0) 1m0.684099286s ago: executing program 3 (id=1100): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001d00)={0x2020}, 0x2020) 59.496571105s ago: executing program 4 (id=1101): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_mr_cache\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$peek(0x7, r0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r5 = socket(0x2, 0x80805, 0x0) flistxattr(r5, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r5, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 59.199294062s ago: executing program 3 (id=1102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtaction={0x390, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x37c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}, @m_skbmod={0x100, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xb1, 0x6, "d689bb046f16cffaa9bbe937d32051a6ac48b3c8d47f6d7b53ea78c2e71f9e03cb37e9f657e39ab7dabf4287fd188a32674a7f39b96784cd936ddcd8b621becdee1d0ee385c63bbd1823b82979bc66041b6a330da9dcc40b749d08263a4bd30cafe6a94b403e3f5ad4dfea6004af856adea1611d8a265aa5295bc5783797a2d13c8e3596c7efed287f04172ab744fb95ed2209c78804be19b1b217a11b11f43c5f49ad90a714a94bceecdd7df7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x124, 0x4, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x5, 0x1, 0x7}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3d0be}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}]}, {0xaa, 0x6, "9f00975e8c8a77edfe5b388e706c589c9c08c073740b7bb510bdd64d655ac41bd3c78983569843515263fa64f047b04580835872a45298d1fc86fafc7c5e3e95791d525058312b66815bd213bbd70d09690f35aeaea3182290d5c84795dbc35cf14873867fdcd20fb92e948a428352e0eeab19e8d7037c0f5f550382cbaefda22180cc278a30fbd66313beb6659f327139f7cf0ff895b35658a29b9742e002ad1674cf752a89"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xfc, 0x13, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11a8, 0x7}}]}, {0xc2, 0x6, "af2f8b98a40f452334e9e2865112919e135c38ab40f056026d72ae722788af865609b2a46a0c820c621332f16d720788192742d37028121921532e7ee53d44c9b9443cddbbe6278722d02d48aa47941cca07f3cc7d9be3a40c9c170bb6ed7fc90fcc1b6d2f3e111e464e394906210ed1d3fac533e2cb9bb3ca0d4c3039b28d520a78cb832b9447932fc37b5bf96cd3e417623d41f35b9f52b5a5dd2ce97b5e27f409c31a59176ef9c6be306d2b02acdee4a44a9cf13bcaa5e5b7bd1ee0a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0x390}}, 0x20040000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x7, 0x801) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 0s ago: executing program 32 (id=1098): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$netrom(0x6, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) userfaultfd(0x801) kernel console output (not intermixed with test programs): inder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.358230][ T30] audit: type=1400 audit(1773131113.653:471): avc: denied { open } for pid=8706 comm="syz.4.710" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.579264][ T30] audit: type=1400 audit(1773131113.973:472): avc: denied { write } for pid=8734 comm="syz.1.717" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.667843][ T1220] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 293.714563][ T30] audit: type=1400 audit(1773131114.123:473): avc: denied { read } for pid=8736 comm="syz.2.718" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.822471][ T30] audit: type=1400 audit(1773131114.123:474): avc: denied { open } for pid=8736 comm="syz.2.718" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.859167][ T30] audit: type=1400 audit(1773131114.253:475): avc: denied { map_create } for pid=8736 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 293.906835][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 294.332299][ T1220] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 294.343792][ T30] audit: type=1400 audit(1773131114.273:476): avc: denied { execmem } for pid=8738 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.363256][ T1220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.373546][ T1220] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.383692][ T30] audit: type=1400 audit(1773131114.353:477): avc: denied { create } for pid=8736 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.405072][ T1220] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.418210][ T30] audit: type=1400 audit(1773131114.353:478): avc: denied { read append } for pid=8736 comm="syz.2.718" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.441826][ T1220] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.451919][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.462795][ T30] audit: type=1400 audit(1773131114.353:479): avc: denied { open } for pid=8736 comm="syz.2.718" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.763510][ T1220] usb 2-1: GET_CAPABILITIES returned 0 [ 294.769893][ T1220] usbtmc 2-1:16.0: can't read capabilities [ 294.918360][ T8753] sp0: Synchronizing with TNC [ 295.792958][ T5913] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 296.466762][ T5913] usb 3-1: device descriptor read/64, error -71 [ 296.827027][ T5859] usb 2-1: USB disconnect, device number 32 [ 297.354067][ T5859] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 297.537729][ T5913] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 297.719255][ T5913] usb 3-1: device descriptor read/64, error -71 [ 297.747906][ T5859] usb 1-1: device descriptor read/64, error -71 [ 298.051992][ T5913] usb usb3-port1: attempt power cycle [ 298.240627][ T5859] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 298.526726][ T5859] usb 1-1: device descriptor read/64, error -71 [ 298.628737][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 298.628753][ T30] audit: type=1400 audit(1773131119.193:502): avc: denied { read } for pid=8778 comm="syz.4.730" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 298.730648][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 299.102099][ T5859] usb usb1-port1: attempt power cycle [ 299.108703][ T30] audit: type=1400 audit(1773131119.283:503): avc: denied { write } for pid=8780 comm="syz.3.731" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.141040][ T30] audit: type=1400 audit(1773131119.703:504): avc: denied { open } for pid=8778 comm="syz.4.730" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.291893][ T8788] net_ratelimit: 10 callbacks suppressed [ 299.291923][ T8788] netlink: zone id is out of range [ 299.303176][ T8788] netlink: zone id is out of range [ 299.308462][ T8788] netlink: zone id is out of range [ 299.313672][ T8788] netlink: zone id is out of range [ 299.319875][ T8788] netlink: zone id is out of range [ 299.325099][ T8788] netlink: zone id is out of range [ 299.330303][ T8788] netlink: zone id is out of range [ 299.335492][ T8788] netlink: zone id is out of range [ 299.340749][ T8788] netlink: zone id is out of range [ 299.346782][ T30] audit: type=1400 audit(1773131119.763:505): avc: denied { prog_load } for pid=8782 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.366351][ T8788] netlink: zone id is out of range [ 299.437061][ T30] audit: type=1400 audit(1773131119.763:506): avc: denied { bpf } for pid=8782 comm="syz.2.732" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.493368][ T5859] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 299.513800][ T30] audit: type=1400 audit(1773131119.763:507): avc: denied { perfmon } for pid=8782 comm="syz.2.732" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.537330][ T5859] usb 1-1: device descriptor read/8, error -71 [ 299.577454][ T8788] batman_adv: batadv0: Adding interface: macvtap5 [ 299.608795][ T8788] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.636166][ T8788] batman_adv: batadv0: Interface activated: macvtap5 [ 299.673152][ T30] audit: type=1400 audit(1773131119.763:508): avc: denied { create } for pid=8782 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.797097][ T5866] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 299.804727][ T5859] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 299.812531][ T30] audit: type=1400 audit(1773131119.793:509): avc: denied { write } for pid=8782 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.894691][ T5859] usb 1-1: device descriptor read/8, error -71 [ 300.029875][ T5859] usb usb1-port1: unable to enumerate USB device [ 300.037859][ T30] audit: type=1400 audit(1773131119.793:510): avc: denied { read } for pid=8782 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.058393][ T30] audit: type=1400 audit(1773131119.793:511): avc: denied { read } for pid=8782 comm="syz.2.732" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 300.535307][ T5866] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.550580][ T5866] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.577087][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.668841][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.813960][ T8791] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 300.824066][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.269821][ T5859] usb 4-1: USB disconnect, device number 28 [ 301.406742][ T793] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 301.452436][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 301.573739][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 303.038650][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 303.048281][ T793] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 303.056458][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.066604][ T793] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.075553][ T793] usb 1-1: config 0 has no interface number 0 [ 303.090477][ T793] usb 1-1: too many endpoints for config 0 interface 104 altsetting 255: 255, using maximum allowed: 30 [ 303.119244][ T793] usb 1-1: config 0 interface 104 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 303.466676][ T793] usb 1-1: config 0 interface 104 has no altsetting 0 [ 303.495759][ T793] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 303.515896][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.544157][ T8828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.743'. [ 303.753636][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 303.753676][ T30] audit: type=1400 audit(1773131124.213:566): avc: denied { create } for pid=8829 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.846135][ T793] usb 1-1: Product: syz [ 303.852215][ T793] usb 1-1: Manufacturer: syz [ 303.866831][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 303.880622][ T8826] batman_adv: batadv0: Adding interface: macvtap4 [ 303.886077][ T30] audit: type=1400 audit(1773131124.233:567): avc: denied { ioctl } for pid=8829 comm="syz.3.744" path="socket:[19971]" dev="sockfs" ino=19971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.896788][ T793] usb 1-1: SerialNumber: syz [ 303.930241][ T8828] netlink: 31 bytes leftover after parsing attributes in process `syz.2.743'. [ 304.178381][ T793] usb 1-1: config 0 descriptor?? [ 304.194193][ T8828] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 304.202256][ T30] audit: type=1400 audit(1773131124.233:568): avc: denied { module_request } for pid=8829 comm="syz.3.744" kmod="netdev-vcan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 304.227554][ T8826] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.263655][ T793] usb 1-1: can't set config #0, error -71 [ 304.276806][ T8828] netlink: 31 bytes leftover after parsing attributes in process `syz.2.743'. [ 304.385128][ T30] audit: type=1400 audit(1773131124.293:569): avc: denied { bind } for pid=8829 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.669534][ T8826] batman_adv: batadv0: Interface activated: macvtap4 [ 304.683964][ T793] usb 1-1: USB disconnect, device number 33 [ 304.822212][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 305.294514][ T30] audit: type=1400 audit(1773131124.303:570): avc: denied { write } for pid=8829 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.337655][ T30] audit: type=1400 audit(1773131124.303:571): avc: denied { write } for pid=8829 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 305.459986][ T30] audit: type=1400 audit(1773131124.593:572): avc: denied { read write } for pid=8827 comm="syz.2.743" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.485069][ T30] audit: type=1400 audit(1773131124.593:573): avc: denied { open } for pid=8827 comm="syz.2.743" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.526109][ T30] audit: type=1400 audit(1773131124.613:574): avc: denied { ioctl } for pid=8827 comm="syz.2.743" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.627776][ T30] audit: type=1400 audit(1773131124.733:575): avc: denied { sys_module } for pid=8829 comm="syz.3.744" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 305.726858][ T5913] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 305.907070][ T5913] usb 2-1: device descriptor read/64, error -71 [ 306.296758][ T5913] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 307.706799][ T5913] usb 2-1: device descriptor read/64, error -71 [ 307.782506][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 307.796771][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 307.838352][ T5913] usb usb2-port1: attempt power cycle [ 307.863603][ T8875] netlink: 'syz.4.753': attribute type 6 has an invalid length. [ 308.228507][ T5913] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 308.526747][ T5913] usb 2-1: device descriptor read/8, error -71 [ 308.972120][ T8898] qnx6: unable to read the first superblock [ 308.996804][ T5913] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 309.036379][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.073472][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 309.116867][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 309.116883][ T30] audit: type=1400 audit(1773131129.643:594): avc: denied { append } for pid=8895 comm="syz.0.763" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.241798][ T5913] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 309.252329][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.276918][ T5913] usb 2-1: Product: syz [ 309.281100][ T5913] usb 2-1: Manufacturer: syz [ 311.513941][ T5913] usb 2-1: SerialNumber: syz [ 311.555916][ T5913] usb 2-1: config 0 descriptor?? [ 311.568313][ T5913] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 311.594380][ T30] audit: type=1400 audit(1773131132.153:595): avc: denied { read write } for pid=8914 comm="syz.3.768" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 311.621600][ T30] audit: type=1400 audit(1773131132.153:596): avc: denied { open } for pid=8914 comm="syz.3.768" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 311.760272][ T5913] usb 2-1: USB disconnect, device number 36 [ 312.205863][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.229814][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.375053][ T30] audit: type=1400 audit(1773131132.933:597): avc: denied { kexec_image_load } for pid=8919 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 312.416827][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 312.497641][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 312.716115][ T8936] netlink: 'syz.2.773': attribute type 6 has an invalid length. [ 312.959250][ T5859] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 313.117490][ T30] audit: type=1400 audit(1773131133.593:598): avc: denied { bind } for pid=8919 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.176701][ T5859] usb 4-1: device descriptor read/64, error -71 [ 313.546731][ T5859] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 313.687132][ T5859] usb 4-1: device descriptor read/64, error -71 [ 314.033872][ T30] audit: type=1400 audit(1773131134.503:599): avc: denied { append } for pid=8947 comm="syz.2.777" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 314.114434][ T30] audit: type=1400 audit(1773131134.673:600): avc: denied { create } for pid=8959 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.633817][ T5859] usb usb4-port1: attempt power cycle [ 314.648926][ T30] audit: type=1400 audit(1773131134.693:601): avc: denied { write } for pid=8959 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.812449][ T30] audit: type=1400 audit(1773131135.373:602): avc: denied { shutdown } for pid=8967 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.098244][ T5866] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 315.166756][ T5859] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 315.193821][ T5859] usb 4-1: device descriptor read/8, error -71 [ 315.271255][ T5866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.286748][ T5866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.290151][ T30] audit: type=1400 audit(1773131135.853:603): avc: denied { read } for pid=8976 comm="syz.4.784" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 315.297770][ T5866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.330733][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.349294][ T8964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.374650][ T5866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.425399][ T30] audit: type=1400 audit(1773131135.853:604): avc: denied { open } for pid=8976 comm="syz.4.784" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 315.459272][ T5859] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 315.469308][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 315.798976][ T5859] usb 4-1: device descriptor read/8, error -71 [ 315.844271][ T5866] usb 1-1: USB disconnect, device number 34 [ 315.850267][ T30] audit: type=1400 audit(1773131135.893:605): avc: denied { ioctl } for pid=8976 comm="syz.4.784" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 315.880922][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.904722][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.919094][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.932749][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.941094][ T5859] usb usb4-port1: unable to enumerate USB device [ 316.235991][ T30] audit: type=1400 audit(1773131135.953:606): avc: denied { create } for pid=8976 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.247016][ T8972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 316.319248][ T30] audit: type=1400 audit(1773131135.973:607): avc: denied { create } for pid=8976 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.320711][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.453421][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 316.681882][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 316.805648][ T8995] netlink: 'syz.3.789': attribute type 6 has an invalid length. [ 316.999339][ T30] audit: type=1400 audit(1773131135.983:608): avc: denied { setopt } for pid=8976 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.031311][ T30] audit: type=1400 audit(1773131135.983:609): avc: denied { connect } for pid=8976 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.061667][ T30] audit: type=1400 audit(1773131135.983:610): avc: denied { write } for pid=8976 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.240531][ T10] usb 2-1: USB disconnect, device number 37 [ 318.948914][ T9020] batman_adv: batadv0: Adding interface: macvtap3 [ 318.955608][ T9020] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.076882][ T9020] batman_adv: batadv0: Interface activated: macvtap3 [ 319.366717][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 319.411240][ T9025] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 319.417768][ T9025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.490130][ T9025] vhci_hcd vhci_hcd.0: Device attached [ 319.506733][ T10] usb 2-1: device descriptor read/64, error -71 [ 319.802193][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 319.871437][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 320.068661][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 320.229048][ T9026] vhci_hcd: connection closed [ 320.229140][ T9027] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 320.240904][ T36] vhci_hcd vhci_hcd.3: stop threads [ 320.246094][ T36] vhci_hcd vhci_hcd.3: release socket [ 320.367649][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 320.386729][ T10] usb 2-1: device descriptor read/64, error -71 [ 320.496908][ T10] usb usb2-port1: attempt power cycle [ 320.690200][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 320.690210][ T30] audit: type=1400 audit(1773131141.253:616): avc: denied { append } for pid=9036 comm="syz.2.799" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.176947][ T30] audit: type=1400 audit(1773131141.703:617): avc: denied { ioctl } for pid=9036 comm="syz.2.799" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.201937][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 321.230518][ T10] usb 2-1: device descriptor read/8, error -71 [ 321.460309][ T9048] netlink: 'syz.3.802': attribute type 6 has an invalid length. [ 321.671007][ T5866] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.726716][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 321.747118][ T10] usb 2-1: device descriptor read/8, error -71 [ 321.837086][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 321.843585][ T5866] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 321.852989][ T5866] usb 5-1: config 179 has no interface number 0 [ 321.859633][ T10] usb usb2-port1: unable to enumerate USB device [ 321.866100][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 321.878050][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 321.890786][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.902333][ T5866] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 321.913982][ T5866] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.927496][ T5866] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 321.936549][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.948119][ T9041] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.980194][ T9058] syzkaller0: entered promiscuous mode [ 321.985794][ T9058] syzkaller0: entered allmulticast mode [ 322.003166][ T9058] net_ratelimit: 9 callbacks suppressed [ 322.003179][ T9058] syzkaller0: mtu less than device minimum [ 322.006706][ T6177] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 322.179754][ T6177] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.244070][ T6177] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.318189][ T6177] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.405021][ T6177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.523163][ T9054] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 322.557190][ T6177] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.702337][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 322.706794][ T5913] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 322.755391][ T30] audit: type=1400 audit(1773131143.313:618): avc: denied { read } for pid=5165 comm="acpid" name="js0" dev="devtmpfs" ino=3486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.774252][ T9041] netlink: 'syz.4.801': attribute type 25 has an invalid length. [ 322.859428][ T9041] netlink: 'syz.4.801': attribute type 9 has an invalid length. [ 322.879655][ T6177] usb 1-1: USB disconnect, device number 35 [ 322.899534][ T30] audit: type=1400 audit(1773131143.313:619): avc: denied { open } for pid=5165 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3486 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.000708][ T5913] usb 4-1: config index 0 descriptor too short (expected 512, got 36) [ 323.024895][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.037124][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.043764][ T5913] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 323.063458][ T30] audit: type=1400 audit(1773131143.313:620): avc: denied { ioctl } for pid=5165 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3486 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.176483][ T5913] usb 4-1: config 9 has no interfaces? [ 323.222615][ T1220] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 323.335234][ T5913] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 323.362363][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.401643][ T5913] usb 4-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 323.410705][ T30] audit: type=1400 audit(1773131143.493:621): avc: denied { read write } for pid=9040 comm="syz.4.801" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 323.435230][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.444623][ T5913] usb 4-1: Product: syz [ 323.450559][ T5913] usb 4-1: Manufacturer: syz [ 323.463673][ T30] audit: type=1400 audit(1773131143.493:622): avc: denied { open } for pid=9040 comm="syz.4.801" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 323.530339][ T1220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.538355][ T1220] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 323.538765][ T10] usb 5-1: USB disconnect, device number 20 [ 323.547447][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 323.547486][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 323.574217][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.603000][ T1220] usb 3-1: config 0 descriptor?? [ 324.669143][ T5913] usb 4-1: USB disconnect, device number 33 [ 324.686687][ T30] audit: type=1400 audit(1773131144.673:623): avc: denied { mount } for pid=9063 comm="syz.3.808" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 324.708519][ T1220] (null): keene_cmd_main failed (-110) [ 324.734927][ T1220] video4linux radio48: keene_cmd_main failed (-32) [ 324.848527][ T1220] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 325.036756][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.076783][ T9077] ubi0: attaching mtd0 [ 325.093238][ T9077] ubi0: scanning is finished [ 325.097893][ T9077] ubi0: empty MTD device detected [ 325.277121][ T24] usb 40-1: device descriptor read/8, error -110 [ 326.673339][ T30] audit: type=1400 audit(1773131147.233:624): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 326.704134][ T24] usb usb40-port1: attempt power cycle [ 326.821838][ T9083] netlink: 'syz.0.812': attribute type 6 has an invalid length. [ 327.281831][ T9077] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 327.289438][ T9077] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 327.296663][ T9077] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 327.303596][ T9077] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 327.311136][ T9077] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 327.317891][ T9077] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 327.325838][ T9077] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2468905115 [ 327.336573][ T9077] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 327.365128][ T9086] ubi0: background thread "ubi_bgt0d" started, PID 9086 [ 327.387681][ T24] usb usb40-port1: unable to enumerate USB device [ 327.636744][ T5859] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 327.797569][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 327.799043][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.819577][ T5859] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.830024][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.842758][ T5859] usb 2-1: config 0 descriptor?? [ 327.852004][ T5859] pwc: Askey VC010 type 2 USB webcam detected. [ 328.023810][ T5913] usb 3-1: USB disconnect, device number 24 [ 328.047960][ T24] usb 5-1: config index 0 descriptor too short (expected 512, got 36) [ 328.072570][ T24] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 328.111352][ T24] usb 5-1: config 9 has no interfaces? [ 328.121398][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 328.144255][ T24] usb 5-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 328.154242][ T24] usb 5-1: Product: syz [ 328.159646][ T24] usb 5-1: Manufacturer: syz [ 328.539765][ T5859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.548118][ T5859] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.560918][ T5859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.578013][ T5859] pwc: recv_control_msg error -32 req 04 val 1000 [ 328.585479][ T5859] pwc: recv_control_msg error -32 req 04 val 1300 [ 328.613048][ T5859] pwc: recv_control_msg error -32 req 04 val 1400 [ 328.631681][ T5859] pwc: recv_control_msg error -32 req 02 val 2000 [ 328.644578][ T5859] pwc: recv_control_msg error -32 req 02 val 2100 [ 328.652992][ T5859] pwc: recv_control_msg error -32 req 04 val 1500 [ 328.660476][ T5859] pwc: recv_control_msg error -32 req 02 val 2500 [ 328.668111][ T5859] pwc: recv_control_msg error -32 req 02 val 2400 [ 328.675491][ T5859] pwc: recv_control_msg error -32 req 02 val 2600 [ 328.683457][ T5859] pwc: recv_control_msg error -32 req 02 val 2900 [ 329.025922][ T1220] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 329.240718][ T1220] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.431044][ T5859] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.443130][ T5859] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.447461][ T24] usb 5-1: USB disconnect, device number 21 [ 330.457399][ T5859] pwc: Registered as video103. [ 330.468348][ T5859] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 330.476720][ T1220] usb 3-1: not running at top speed; connect to a high speed hub [ 330.524458][ T1220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.561321][ T5859] usb 2-1: USB disconnect, device number 42 [ 330.565471][ T1220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.641241][ T1220] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.662766][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.691694][ T1220] usb 3-1: Product: syz [ 330.830162][ T1220] usb 3-1: Manufacturer: syz [ 330.925523][ T1220] usb 3-1: SerialNumber: syz [ 331.084116][ T9111] tipc: Enabled bearer , priority 0 [ 331.099698][ T9111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.820'. [ 331.114353][ T9111] tipc: Resetting bearer [ 331.134658][ T9110] tipc: Disabling bearer [ 331.595438][ T7520] Bluetooth: hci5: Frame reassembly failed (-84) [ 331.748068][ T1220] usb 3-1: 0:2 : does not exist [ 331.956828][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 332.061773][ T1220] usb 3-1: USB disconnect, device number 25 [ 332.118078][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.141033][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.151218][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.160887][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.174995][ T9122] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.191891][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 332.389712][ T24] usb 4-1: USB disconnect, device number 34 [ 332.481323][ T30] audit: type=1400 audit(1773131153.043:625): avc: denied { create } for pid=9129 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 332.636805][ T1220] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 332.888372][ T1220] usb 5-1: config index 0 descriptor too short (expected 512, got 36) [ 332.896553][ T1220] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 332.927762][ T1220] usb 5-1: config 9 has no interfaces? [ 332.940930][ T1220] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 332.958685][ T1220] usb 5-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 332.981251][ T1220] usb 5-1: Product: syz [ 332.989929][ T1220] usb 5-1: Manufacturer: syz [ 333.077096][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 333.170502][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 334.255917][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 334.264640][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 334.282715][ T1220] usb 5-1: USB disconnect, device number 22 [ 335.677889][ T9157] sp0: Synchronizing with TNC [ 336.986887][ T30] audit: type=1400 audit(1773131157.553:626): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 337.096358][ T30] audit: type=1400 audit(1773131157.653:627): avc: denied { search } for pid=5475 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.698739][ T30] audit: type=1400 audit(1773131157.653:628): avc: denied { search } for pid=5475 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.744763][ T9166] netlink: 72 bytes leftover after parsing attributes in process `syz.3.832'. [ 337.746817][ T30] audit: type=1400 audit(1773131157.653:629): avc: denied { search } for pid=5475 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.834177][ T30] audit: type=1400 audit(1773131157.653:630): avc: denied { read } for pid=5475 comm="dhcpcd" name="n110" dev="tmpfs" ino=6231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.939737][ T9169] random: crng reseeded on system resumption [ 337.976196][ T30] audit: type=1400 audit(1773131157.653:631): avc: denied { open } for pid=5475 comm="dhcpcd" path="/run/udev/data/n110" dev="tmpfs" ino=6231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.211062][ T9170] FAT-fs (nbd0): unable to read boot sector [ 338.299054][ T30] audit: type=1400 audit(1773131157.653:632): avc: denied { getattr } for pid=5475 comm="dhcpcd" path="/run/udev/data/n110" dev="tmpfs" ino=6231 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.344555][ T9176] qnx6: unable to read the first superblock [ 338.365878][ T30] audit: type=1400 audit(1773131158.303:633): avc: denied { ioctl } for pid=9163 comm="syz.3.832" path="socket:[22610]" dev="sockfs" ino=22610 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.788584][ T30] audit: type=1400 audit(1773131158.423:634): avc: denied { open } for pid=9167 comm="syz.0.834" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 338.848679][ T30] audit: type=1400 audit(1773131158.443:635): avc: denied { ioctl } for pid=9167 comm="syz.0.834" path="socket:[22615]" dev="sockfs" ino=22615 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.905263][ T30] audit: type=1400 audit(1773131158.503:636): avc: denied { write } for pid=9167 comm="syz.0.834" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.270193][ T30] audit: type=1400 audit(1773131158.503:637): avc: denied { open } for pid=9167 comm="syz.0.834" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.271936][ T6867] Bluetooth: hci5: Frame reassembly failed (-84) [ 339.326851][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 339.733663][ T9194] sp0: Synchronizing with TNC [ 340.730245][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.210360][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.220441][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.227268][ T24] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 341.236299][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.339675][ T24] usb 3-1: config 0 descriptor?? [ 341.346695][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 341.498709][ T3563] Bluetooth: hci5: Frame reassembly failed (-84) [ 341.505107][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 341.716714][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 341.842023][ T1220] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 341.898447][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.916163][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 341.936296][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.946261][ T10] usb 5-1: config 0 descriptor?? [ 341.964570][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 342.021455][ T1220] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.032992][ T1220] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.043494][ T1220] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.052742][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.064636][ T9202] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 342.080257][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 342.097755][ T1220] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.107183][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 342.142935][ T24] usb 3-1: USB disconnect, device number 26 [ 342.283453][ T1220] usb 1-1: USB disconnect, device number 36 [ 342.374519][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 342.381627][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 342.389475][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 342.396567][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 342.406533][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 342.419487][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 342.437186][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 342.444306][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 342.457117][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 342.464035][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 342.474139][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 342.484174][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 342.505803][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 342.674511][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 342.713944][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 342.724517][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 342.801151][ T10] pwc: Registered as video103. [ 342.816957][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 342.927558][ T9217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.845'. [ 342.972432][ T10] usb 5-1: USB disconnect, device number 23 [ 343.607753][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 343.614607][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 343.697924][ T9223] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.847'. [ 343.829266][ T9225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 343.847070][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 343.847086][ T30] audit: type=1400 audit(1773131164.403:641): avc: denied { setopt } for pid=9222 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.878676][ T9225] xt_hashlimit: size too large, truncated to 1048576 [ 343.905771][ T30] audit: type=1400 audit(1773131164.403:642): avc: denied { accept } for pid=9222 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 344.450460][ T30] audit: type=1400 audit(1773131164.413:643): avc: denied { write } for pid=9222 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 344.545739][ T30] audit: type=1400 audit(1773131164.433:644): avc: denied { read } for pid=9222 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 344.579883][ T30] audit: type=1400 audit(1773131164.433:645): avc: denied { setopt } for pid=9224 comm="syz.4.848" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.606710][ T30] audit: type=1400 audit(1773131164.663:646): avc: denied { write } for pid=9227 comm="syz.3.849" name="wireless" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.608747][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 344.642654][ T30] audit: type=1400 audit(1773131164.673:647): avc: denied { create } for pid=9227 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 344.927703][ T30] audit: type=1400 audit(1773131164.683:648): avc: denied { connect } for pid=9227 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 345.046709][ T30] audit: type=1400 audit(1773131164.683:649): avc: denied { ioctl } for pid=9227 comm="syz.3.849" path="socket:[22714]" dev="sockfs" ino=22714 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 345.047546][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 345.207229][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.217867][ T30] audit: type=1400 audit(1773131165.643:650): avc: denied { read write } for pid=9238 comm="syz.2.852" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 345.218244][ T24] usb 5-1: config 5 has an invalid interface number: 9 but max is 1 [ 345.308791][ T9246] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 345.338946][ T9244] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.727058][ T24] usb 5-1: config 5 has an invalid interface number: 204 but max is 1 [ 345.774482][ T24] usb 5-1: config 5 has no interface number 0 [ 345.791951][ T24] usb 5-1: config 5 has no interface number 1 [ 345.824610][ T24] usb 5-1: config 5 interface 204 altsetting 249 has a duplicate endpoint with address 0x5, skipping [ 345.842384][ T24] usb 5-1: config 5 interface 204 altsetting 249 bulk endpoint 0x2 has invalid maxpacket 8 [ 345.853265][ T24] usb 5-1: config 5 interface 204 altsetting 249 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 345.870672][ T24] usb 5-1: config 5 interface 204 altsetting 249 endpoint 0x81 has invalid maxpacket 22810, setting to 1024 [ 346.025941][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 346.036853][ T24] usb 5-1: config 5 interface 204 altsetting 249 bulk endpoint 0x81 has invalid maxpacket 1024 [ 346.098556][ T24] usb 5-1: config 5 interface 204 altsetting 249 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.150787][ T24] usb 5-1: config 5 interface 9 has no altsetting 0 [ 346.170933][ T24] usb 5-1: config 5 interface 204 has no altsetting 0 [ 346.250807][ T9255] batman_adv: batadv0: Adding interface: macvtap6 [ 346.274461][ T24] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a83, bcdDevice= d.65 [ 346.285359][ T9255] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.316894][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.328721][ T24] usb 5-1: Product: syz [ 346.333014][ T24] usb 5-1: Manufacturer: syz [ 346.401343][ T24] usb 5-1: SerialNumber: syz [ 346.543327][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 346.653956][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 346.670288][ T9255] batman_adv: batadv0: Interface activated: macvtap6 [ 346.805953][ T24] ipaq 5-1:5.204: PocketPC PDA converter detected [ 346.831572][ T24] usb 5-1: active config #5 != 1 ?? [ 346.846796][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 346.877647][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 346.892780][ T24] uvcvideo 5-1:5.204: Found UVC 0.00 device syz (0bb4:0a83) [ 346.907861][ T24] uvcvideo 5-1:5.204: No valid video chain found. [ 346.929688][ T24] usb 5-1: USB disconnect, device number 24 [ 347.091070][ T10] usb 2-1: config index 0 descriptor too short (expected 512, got 36) [ 347.099575][ T10] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 347.109951][ T10] usb 2-1: config 9 has no interfaces? [ 347.116893][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 347.126714][ T10] usb 2-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 347.135006][ T10] usb 2-1: Product: syz [ 347.185972][ T10] usb 2-1: Manufacturer: syz [ 347.306696][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 348.690757][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 348.695613][ T10] usb 2-1: USB disconnect, device number 43 [ 348.904272][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.918890][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.956722][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.175242][ T24] usb 5-1: config 0 descriptor?? [ 349.184144][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 349.299857][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 349.299873][ T30] audit: type=1400 audit(1773131169.853:660): avc: denied { accept } for pid=9284 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.326552][ T30] audit: type=1400 audit(1773131169.883:661): avc: denied { shutdown } for pid=9284 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.776697][ T5886] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 349.911446][ T30] audit: type=1400 audit(1773131170.443:662): avc: denied { bind } for pid=9291 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 350.043385][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 350.196922][ T5866] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 350.382052][ T5866] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.413443][ T5866] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.471742][ T5866] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.482765][ T5886] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.528019][ T5866] usb 4-1: Manufacturer: syz [ 350.640467][ T5866] usb 4-1: config 0 descriptor?? [ 351.089050][ T9300] qnx6: unable to read the first superblock [ 351.578928][ T5886] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 351.588905][ T5886] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.598086][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 351.604596][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.612687][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 351.624130][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 351.624163][ T9287] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 351.630957][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 351.646811][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 351.653627][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 351.660510][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 351.666706][ T5866] rc_core: IR keymap rc-hauppauge not found [ 351.667772][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 351.672842][ T5866] Registered IR keymap rc-empty [ 351.673727][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 351.694824][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 351.706990][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 351.717041][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 351.760510][ T5886] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.897365][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 351.998441][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 352.014068][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 352.040402][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 352.180354][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 352.224023][ T24] pwc: Registered as video103. [ 352.239271][ T5886] usb 1-1: USB disconnect, device number 37 [ 352.260932][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 352.341594][ T24] usb 5-1: USB disconnect, device number 25 [ 352.696968][ T1220] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 352.807904][ T9316] netlink: 96 bytes leftover after parsing attributes in process `syz.2.869'. [ 352.824938][ T5866] usb 4-1: USB disconnect, device number 35 [ 352.841862][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 352.878978][ T1220] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.886707][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.4.870'. [ 352.919113][ T1220] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.934906][ T1220] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.962801][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.004580][ T9312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.014970][ T1220] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 353.266716][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 353.680840][ T1220] usb 2-1: USB disconnect, device number 44 [ 353.687947][ T24] usb 5-1: config index 0 descriptor too short (expected 512, got 36) [ 353.714425][ T24] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 353.769218][ T24] usb 5-1: config 9 has no interfaces? [ 353.818026][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 353.841490][ T24] usb 5-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 353.853585][ T24] usb 5-1: Product: syz [ 353.859274][ T24] usb 5-1: Manufacturer: syz [ 355.132955][ T24] usb 5-1: USB disconnect, device number 26 [ 355.196848][ T5866] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 355.379481][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.388553][ T5866] usb 4-1: not running at top speed; connect to a high speed hub [ 355.397645][ T5866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.408679][ T5866] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.417785][ T5866] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.436269][ T5866] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.445744][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.492500][ T5866] usb 4-1: Product: syz [ 355.497147][ T5866] usb 4-1: Manufacturer: syz [ 355.502002][ T5866] usb 4-1: SerialNumber: syz [ 355.576786][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 355.703889][ T5859] kernel write not supported for file /uhid (pid: 5859 comm: kworker/0:4) [ 355.752003][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 355.780373][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.798793][ T24] usb 1-1: config 0 has no interface number 0 [ 355.831576][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 355.850136][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.870493][ T24] usb 1-1: Product: syz [ 355.886316][ T24] usb 1-1: Manufacturer: syz [ 356.366240][ T30] audit: type=1400 audit(1773131176.513:663): avc: denied { create } for pid=9351 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.366355][ T5866] usb 4-1: 0:2 : does not exist [ 356.391368][ T5866] usb 4-1: unit 0 not found! [ 356.399942][ T5866] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 356.408305][ T24] usb 1-1: SerialNumber: syz [ 356.415459][ T24] usb 1-1: config 0 descriptor?? [ 356.423762][ T5866] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 356.424732][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 356.442027][ T30] audit: type=1400 audit(1773131176.513:664): avc: denied { bind } for pid=9351 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.477792][ T24] usb 1-1: selecting invalid altsetting 1 [ 356.483206][ T5866] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 356.492740][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 356.550418][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.563630][ T30] audit: type=1400 audit(1773131176.513:665): avc: denied { write } for pid=9351 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 356.577311][ T5866] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 356.590123][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 356.615430][ T24] usb 1-1: media controller created [ 357.526606][ T5866] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 357.545676][ T5866] usb 4-1: USB disconnect, device number 36 [ 357.585794][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.669935][ T9348] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 357.675120][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.064136][ T9370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.882'. [ 358.368591][ T24] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 358.398007][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 358.436835][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 358.579759][ T24] usb 1-1: USB disconnect, device number 38 [ 358.957548][ T1328] Bluetooth: hci5: Frame reassembly failed (-84) [ 358.964199][ T1328] Bluetooth: hci5: Frame reassembly failed (-84) [ 359.008316][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 359.009010][ T1328] Bluetooth: hci5: Frame reassembly failed (-84) [ 359.028055][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 359.580937][ T5913] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 359.867714][ T5913] usb 3-1: config index 0 descriptor too short (expected 512, got 36) [ 359.894420][ T5913] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 359.905694][ T5913] usb 3-1: config 9 has no interfaces? [ 359.930715][ T5913] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 359.962369][ T5913] usb 3-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 360.004681][ T30] audit: type=1400 audit(1773131180.553:666): avc: denied { create } for pid=9383 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.036556][ T5913] usb 3-1: Product: syz [ 360.050588][ T5913] usb 3-1: Manufacturer: syz [ 360.072101][ T30] audit: type=1400 audit(1773131180.553:667): avc: denied { accept } for pid=9383 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 360.950305][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 360.956590][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 361.636799][ T5913] usb 3-1: USB disconnect, device number 27 [ 361.767745][ T5807] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 362.639843][ T9410] tipc: Started in network mode [ 362.644714][ T9410] tipc: Node identity b29ec5f09cc5, cluster identity 4711 [ 362.740185][ T9410] tipc: Enabled bearer , priority 0 [ 362.755349][ T9410] netlink: 'syz.4.895': attribute type 21 has an invalid length. [ 362.764503][ T9410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.895'. [ 362.777715][ T30] audit: type=1400 audit(1773131183.333:668): avc: denied { block_suspend } for pid=9414 comm="syz.1.897" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 362.801045][ T9410] tipc: Resetting bearer [ 362.880912][ T9407] tipc: Disabling bearer [ 363.412776][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 364.066895][ T5859] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 364.286018][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.904'. [ 365.206115][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 365.242718][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 365.286868][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.905'. [ 365.414174][ T24] usb 2-1: config index 0 descriptor too short (expected 512, got 36) [ 365.443240][ T24] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 365.480052][ T24] usb 2-1: config 9 has no interfaces? [ 365.496178][ T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 365.516204][ T24] usb 2-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 365.552202][ T24] usb 2-1: Product: syz [ 365.566555][ T24] usb 2-1: Manufacturer: syz [ 365.953628][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.486859][ T24] usb 2-1: USB disconnect, device number 45 [ 367.619788][ T5859] usb 5-1: device descriptor read/all, error -71 [ 367.695591][ T30] audit: type=1400 audit(1773131188.243:669): avc: denied { getopt } for pid=9456 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.746696][ T30] audit: type=1400 audit(1773131188.243:670): avc: denied { bind } for pid=9456 comm="syz.2.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.901177][ T9462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.910'. [ 367.986796][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 367.994540][ T30] audit: type=1326 audit(1773131188.543:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9463 comm="syz.3.911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491af9c799 code=0x0 [ 367.994565][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 368.109426][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 369.746799][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 369.770053][ T5810] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 370.186810][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 370.196265][ T5810] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 370.388106][ T5810] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 370.566314][ T5810] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 370.576863][ T5810] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 370.670174][ T5810] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 370.680546][ T5810] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.694268][ T5810] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.703688][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.850016][ T9493] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 371.012268][ T30] audit: type=1400 audit(1773131191.473:672): avc: denied { map } for pid=9488 comm="syz.4.919" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.123290][ T5810] usb 3-1: GET_CAPABILITIES returned 0 [ 371.166145][ T5810] usbtmc 3-1:16.0: can't read capabilities [ 371.198952][ T30] audit: type=1400 audit(1773131191.473:673): avc: denied { execute } for pid=9488 comm="syz.4.919" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.300634][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 371.318862][ T9481] usbtmc 3-1:16.0: Unable to send data, error -71 [ 371.389294][ T30] audit: type=1400 audit(1773131191.953:674): avc: denied { execute } for pid=9496 comm="syz.0.921" path="/192/cpuacct.stat" dev="tmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 371.520222][ T5810] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 371.629743][ T24] usb 3-1: USB disconnect, device number 28 [ 371.651302][ T30] audit: type=1400 audit(1773131192.203:675): avc: denied { listen } for pid=9498 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.986758][ T5866] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 372.006742][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 372.014356][ T5810] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 372.024213][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.032300][ T5810] usb 2-1: Product: syz [ 372.036526][ T5810] usb 2-1: Manufacturer: syz [ 372.041270][ T5810] usb 2-1: SerialNumber: syz [ 372.048305][ T5810] usb 2-1: config 0 descriptor?? [ 372.055092][ T5810] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 372.063133][ T5810] dvb-usb: bulk message failed: -22 (4/0) [ 372.069862][ T5810] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 372.080161][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 372.085861][ T5810] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 372.098890][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.108515][ T5810] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 372.116506][ T5810] usb 2-1: media controller created [ 372.128751][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.138539][ T5866] usb 4-1: config index 0 descriptor too short (expected 512, got 36) [ 372.154400][ T5810] usb 2-1: selecting invalid altsetting 3 [ 372.160201][ T5866] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 372.170303][ T5810] ttusb2: set interface to alts=3 failed [ 372.176155][ T5866] usb 4-1: config 9 has no interfaces? [ 372.183002][ T5866] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 372.192237][ T5866] usb 4-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 372.200522][ T5866] usb 4-1: Product: syz [ 372.204679][ T5866] usb 4-1: Manufacturer: syz [ 372.289732][ T9495] dvb-usb: bulk message failed: -22 (8/0) [ 372.292128][ T5810] DVB: Unable to find symbol tda10086_attach() [ 372.301856][ T5810] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 372.313932][ T9495] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 372.315656][ T5810] dvb-usb: bulk message failed: -22 (4/0) [ 372.347530][ T9495] ttusb2: i2c transfer failed. [ 372.356194][ T5810] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 372.376191][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 372.386992][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 372.396295][ T5810] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 372.406433][ T30] audit: type=1400 audit(1773131192.963:676): avc: denied { ioctl } for pid=9511 comm="syz.4.926" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23389 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.437746][ T5810] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 372.450399][ T5810] usb 2-1: USB disconnect, device number 46 [ 372.510926][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 372.517397][ T5810] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 372.531616][ T9518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.490421][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.497037][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.529655][ T5866] usb 4-1: USB disconnect, device number 37 [ 373.566759][ T1220] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 373.790323][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 373.817910][ T1220] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 373.839519][ T1220] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 373.849945][ T1220] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.860237][ T1220] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.875128][ T1220] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.884311][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.141253][ T1220] usb 3-1: GET_CAPABILITIES returned 0 [ 374.147191][ T1220] usbtmc 3-1:16.0: can't read capabilities [ 374.502326][ T5913] usb 3-1: USB disconnect, device number 29 [ 374.713424][ T30] audit: type=1400 audit(1773131195.253:677): avc: denied { getopt } for pid=9531 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.770055][ T30] audit: type=1400 audit(1773131195.263:678): avc: denied { getopt } for pid=9531 comm="syz.1.932" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.798400][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 374.813465][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 375.167254][ T5810] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 376.039776][ T5866] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 376.221825][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.247497][ T30] audit: type=1400 audit(1773131196.813:679): avc: denied { create } for pid=9547 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 376.250232][ T5810] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.282650][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.295878][ T5810] usb 1-1: config 0 descriptor?? [ 376.302512][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.340578][ T5866] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.349902][ T30] audit: type=1400 audit(1773131196.853:680): avc: denied { write } for pid=9547 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 376.351397][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.391241][ T5810] pwc: Askey VC010 type 2 USB webcam detected. [ 376.408667][ T5866] usb 5-1: config 0 descriptor?? [ 376.432346][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 376.587612][ T9553] qnx6: unable to read the first superblock [ 376.706725][ T5859] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 376.772818][ T30] audit: type=1400 audit(1773131197.333:681): avc: denied { create } for pid=9555 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 376.786756][ T5810] pwc: recv_control_msg error -32 req 02 val 2b00 [ 376.821981][ T5810] pwc: recv_control_msg error -32 req 02 val 2700 [ 376.829712][ T5810] pwc: recv_control_msg error -32 req 02 val 2c00 [ 376.838558][ T5810] pwc: recv_control_msg error -32 req 04 val 1000 [ 376.848361][ T5810] pwc: recv_control_msg error -32 req 04 val 1300 [ 376.855799][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 376.863138][ T30] audit: type=1400 audit(1773131197.333:682): avc: denied { ioctl } for pid=9555 comm="syz.2.937" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.863625][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 376.897528][ T5810] pwc: recv_control_msg error -32 req 04 val 1400 [ 376.905380][ T5810] pwc: recv_control_msg error -32 req 02 val 2000 [ 376.912733][ T5810] pwc: recv_control_msg error -32 req 02 val 2100 [ 376.919687][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 376.927452][ T5810] pwc: recv_control_msg error -32 req 04 val 1500 [ 376.934227][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.943096][ T5859] usb 4-1: not running at top speed; connect to a high speed hub [ 376.952106][ T5810] pwc: recv_control_msg error -32 req 02 val 2500 [ 376.959234][ T5810] pwc: recv_control_msg error -32 req 02 val 2400 [ 376.966881][ T5866] pwc: recv_control_msg error -32 req 04 val 1000 [ 376.973639][ T5859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.983968][ T5859] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 376.995342][ T5810] pwc: recv_control_msg error -32 req 02 val 2600 [ 377.002970][ T5866] pwc: recv_control_msg error -32 req 04 val 1300 [ 377.010771][ T5810] pwc: recv_control_msg error -32 req 02 val 2900 [ 377.011256][ T5866] pwc: recv_control_msg error -32 req 04 val 1400 [ 377.026733][ T5913] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 377.028711][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.044434][ T5866] pwc: recv_control_msg error -32 req 02 val 2000 [ 377.051191][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.059390][ T5859] usb 4-1: Product: syz [ 377.063652][ T5866] pwc: recv_control_msg error -32 req 02 val 2100 [ 377.070625][ T5866] pwc: recv_control_msg error -32 req 04 val 1500 [ 377.078315][ T5859] usb 4-1: Manufacturer: syz [ 377.083207][ T5859] usb 4-1: SerialNumber: syz [ 377.088592][ T5866] pwc: recv_control_msg error -32 req 02 val 2500 [ 377.101715][ T5866] pwc: recv_control_msg error -32 req 02 val 2400 [ 377.122445][ T5866] pwc: recv_control_msg error -32 req 02 val 2600 [ 377.133383][ T5866] pwc: recv_control_msg error -32 req 02 val 2900 [ 377.198230][ T5913] usb 3-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 377.207653][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.215730][ T5913] usb 3-1: Product: syz [ 377.221397][ T5913] usb 3-1: Manufacturer: syz [ 377.226400][ T5810] pwc: recv_control_msg error -71 req 04 val 1100 [ 377.232990][ T5913] usb 3-1: SerialNumber: syz [ 377.236564][ T5810] pwc: recv_control_msg error -71 req 04 val 1200 [ 377.274989][ T5810] pwc: Registered as video103. [ 377.345700][ T5859] usb 4-1: unit 0 not found! [ 377.351482][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 377.460698][ T5810] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 377.476875][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 377.485329][ T5866] videodev: could not get a free minor [ 377.496733][ T5866] pwc: Failed to register as video device (-23). [ 377.503389][ T5859] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 377.521702][ T5866] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -23 [ 377.531391][ T5810] usb 1-1: USB disconnect, device number 39 [ 377.547127][ T5859] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 377.567141][ T5866] usb 5-1: USB disconnect, device number 29 [ 377.595763][ T5859] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 377.623996][ T5859] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 377.656054][ T5859] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 377.690999][ T5913] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 377.708386][ T5859] usb 4-1: USB disconnect, device number 38 [ 377.734760][ T5913] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 377.785213][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.845205][ T5913] usb 3-1: USB disconnect, device number 30 [ 377.877808][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 377.919463][ T9562] netlink: 328 bytes leftover after parsing attributes in process `syz.0.942'. [ 378.020013][ T9567] netlink: 328 bytes leftover after parsing attributes in process `syz.1.944'. [ 378.062320][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 378.125620][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 378.208551][ T30] audit: type=1400 audit(1773131198.773:683): avc: denied { create } for pid=9572 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 378.261265][ T30] audit: type=1400 audit(1773131198.803:684): avc: denied { ioctl } for pid=9572 comm="syz.2.947" path="socket:[24615]" dev="sockfs" ino=24615 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 378.534247][ T9590] qnx6: unable to read the first superblock [ 379.361477][ T9600] netlink: 'syz.2.953': attribute type 6 has an invalid length. [ 379.390389][ T9600] netlink: 'syz.2.953': attribute type 6 has an invalid length. [ 379.673124][ T30] audit: type=1400 audit(1773131200.233:685): avc: denied { mount } for pid=9602 comm="syz.1.954" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 379.699337][ T9603] overlayfs: upper fs does not support tmpfile. [ 379.784302][ T30] audit: type=1400 audit(1773131200.263:686): avc: denied { mounton } for pid=9602 comm="syz.1.954" path="/bus" dev="bpf" ino=24653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 380.727621][ T9614] sp0: Synchronizing with TNC [ 380.837697][ T5810] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 381.024457][ T5810] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 381.088594][ T5810] usb 3-1: config 150 has no interface number 0 [ 381.097131][ T5810] usb 3-1: config 150 interface 204 has no altsetting 0 [ 381.320384][ T5810] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 381.379922][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.408911][ T5810] usb 3-1: Product: syz [ 381.431268][ T5810] usb 3-1: Manufacturer: syz [ 381.451471][ T5810] usb 3-1: SerialNumber: syz [ 381.699528][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.717223][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.767485][ T30] audit: type=1400 audit(1773131202.333:687): avc: denied { create } for pid=9631 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 381.768110][ T5810] xr_serial 3-1:150.204: xr_serial converter detected [ 382.116679][ T30] audit: type=1400 audit(1773131202.673:688): avc: denied { write } for pid=9631 comm="syz.0.964" path="socket:[23646]" dev="sockfs" ino=23646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 382.786245][ T30] audit: type=1400 audit(1773131203.083:689): avc: denied { execute } for pid=9612 comm="syz.2.957" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 382.842035][ T5859] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 383.254554][ T5810] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 383.306665][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 383.531966][ T9650] qnx6: unable to read the first superblock [ 383.656258][ T24] usb 3-1: USB disconnect, device number 31 [ 383.664663][ T24] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 383.684886][ T24] xr_serial 3-1:150.204: device disconnected [ 383.723781][ T5859] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.786122][ T5859] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.894371][ T5859] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 383.961100][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.035570][ T5859] usb 1-1: Product: syz [ 384.055039][ T5859] usb 1-1: Manufacturer: syz [ 384.071647][ T5859] usb 1-1: SerialNumber: syz [ 385.076911][ T5810] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 385.799746][ T9662] sp0: Synchronizing with TNC [ 386.043306][ T5859] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 386.075035][ T5859] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 386.122776][ T5810] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 386.205363][ T5810] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 386.245684][ T5810] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.264140][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.278022][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.309538][ T5859] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 386.353102][ T9658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.398279][ T5859] usb 1-1: USB disconnect, device number 40 [ 386.408850][ T5810] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.425331][ T5810] usb 4-1: invalid MIDI out EP 0 [ 386.473718][ T30] audit: type=1400 audit(1773131207.033:690): avc: denied { bind } for pid=9668 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 386.594288][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.764273][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.812413][ T5810] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 386.828639][ T9658] tipc: Started in network mode [ 386.834660][ T9658] tipc: Node identity c238754ad78b, cluster identity 4711 [ 387.021960][ T9658] tipc: Enabled bearer , priority 0 [ 387.127252][ T1220] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 387.323871][ T24] usb 4-1: USB disconnect, device number 39 [ 387.334677][ T1220] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.350232][ T1220] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.362208][ T1220] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.407332][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.471894][ T9657] tipc: Disabling bearer [ 387.528105][ T9678] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 387.539222][ T1220] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.594574][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 387.657106][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 387.797421][ T1220] usb 2-1: USB disconnect, device number 47 [ 387.956737][ T5866] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 388.252335][ T5866] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 388.280594][ T5866] usb 5-1: config 150 has no interface number 0 [ 388.291533][ T5866] usb 5-1: config 150 interface 204 has no altsetting 0 [ 388.305424][ T5866] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 388.315160][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.323220][ T5866] usb 5-1: Product: syz [ 388.327696][ T5866] usb 5-1: Manufacturer: syz [ 388.332323][ T5866] usb 5-1: SerialNumber: syz [ 388.559744][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.573470][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.597185][ T5866] xr_serial 5-1:150.204: xr_serial converter detected [ 388.973915][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 389.068094][ T9710] sp0: Synchronizing with TNC [ 389.188553][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 389.251135][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 389.650125][ T5866] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 389.656523][ T5866] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 389.693642][ T5866] usb 5-1: USB disconnect, device number 30 [ 389.721837][ T5866] xr_serial 5-1:150.204: device disconnected [ 390.018501][ T9724] netlink: 256 bytes leftover after parsing attributes in process `syz.0.988'. [ 390.027583][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 390.396309][ T30] audit: type=1400 audit(1773131210.953:691): avc: denied { unlink } for pid=9734 comm="syz.0.991" name="#6" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 390.626740][ T30] audit: type=1400 audit(1773131211.043:692): avc: denied { mount } for pid=9734 comm="syz.0.991" name="/" dev="overlay" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.707330][ T30] audit: type=1400 audit(1773131211.273:693): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 391.179468][ T1220] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 391.352399][ T1220] usb 1-1: config index 0 descriptor too short (expected 512, got 36) [ 391.737005][ T1220] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 391.780108][ T1220] usb 1-1: config 9 has no interfaces? [ 391.801173][ T1220] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 391.823024][ T1220] usb 1-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 391.836697][ T1220] usb 1-1: Product: syz [ 391.840985][ T1220] usb 1-1: Manufacturer: syz [ 392.051802][ T30] audit: type=1400 audit(1773131212.563:694): avc: denied { write } for pid=9745 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 392.852709][ T1220] usb 1-1: USB disconnect, device number 41 [ 392.971123][ T30] audit: type=1400 audit(1773131213.533:695): avc: denied { read write } for pid=9771 comm="syz.2.1000" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 393.085112][ T30] audit: type=1400 audit(1773131213.533:696): avc: denied { open } for pid=9771 comm="syz.2.1000" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 393.470406][ T30] audit: type=1400 audit(1773131214.003:697): avc: denied { ioctl } for pid=9766 comm="syz.1.999" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 393.479469][ T9775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.528138][ T24] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 393.631858][ T30] audit: type=1400 audit(1773131214.193:698): avc: denied { create } for pid=9766 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.697955][ T24] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 393.716518][ T30] audit: type=1400 audit(1773131214.193:699): avc: denied { setopt } for pid=9766 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.738335][ T24] usb 5-1: config 150 has no interface number 0 [ 393.744609][ T24] usb 5-1: config 150 interface 204 has no altsetting 0 [ 393.790000][ T24] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 393.804889][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.843346][ T24] usb 5-1: Product: syz [ 393.855996][ T24] usb 5-1: Manufacturer: syz [ 393.867446][ T24] usb 5-1: SerialNumber: syz [ 394.102131][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.136402][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.157420][ T24] xr_serial 5-1:150.204: xr_serial converter detected [ 394.213145][ T9785] vxfs: WRONG superblock magic 00000000 at 1 [ 394.219925][ T9785] vxfs: WRONG superblock magic 00000000 at 8 [ 394.227178][ T9785] vxfs: can't find superblock. [ 394.368543][ T9775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.707182][ T5859] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 394.727928][ T9775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.932010][ T9775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.968180][ T5859] usb 3-1: config index 0 descriptor too short (expected 512, got 36) [ 394.982137][ T5859] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 394.999589][ T5859] usb 3-1: config 9 has no interfaces? [ 395.006413][ T5859] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 395.020598][ T5859] usb 3-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 395.029753][ T5859] usb 3-1: Product: syz [ 395.034014][ T5859] usb 3-1: Manufacturer: syz [ 395.089654][ T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 395.096553][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 397.877200][ T24] usb 5-1: USB disconnect, device number 31 [ 398.809570][ T5859] usb 3-1: USB disconnect, device number 32 [ 398.962822][ T24] xr_serial 5-1:150.204: device disconnected [ 402.032160][ T78] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.062891][ T78] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.147516][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 402.306755][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.314979][ T78] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.787634][ T30] audit: type=1400 audit(1773131223.333:700): avc: denied { set_context_mgr } for pid=9813 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 402.811211][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 402.914025][ T30] audit: type=1400 audit(1773131223.343:701): avc: denied { map } for pid=9813 comm="syz.1.1014" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 403.086865][ T30] audit: type=1400 audit(1773131223.463:702): avc: denied { call } for pid=9813 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 403.186903][ T30] audit: type=1400 audit(1773131223.543:703): avc: denied { bind } for pid=9816 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 404.104941][ T9809] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 404.179725][ T9826] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.117005][ T30] audit: type=1400 audit(1773131225.683:704): avc: denied { read write } for pid=9828 comm="syz.4.1019" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 405.726699][ T30] audit: type=1400 audit(1773131225.703:705): avc: denied { open } for pid=9828 comm="syz.4.1019" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 406.107771][ T30] audit: type=1400 audit(1773131225.703:706): avc: denied { ioctl } for pid=9828 comm="syz.4.1019" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 406.180711][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 406.835997][ T30] audit: type=1400 audit(1773131226.033:707): avc: denied { firmware_load } for pid=9828 comm="syz.4.1019" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 410.717181][ T9841] xt_TCPMSS: Only works on TCP SYN packets [ 411.187232][ T1220] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 412.457103][ T1220] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 412.465501][ T1220] usb 1-1: config 150 has no interface number 0 [ 412.561276][ T1220] usb 1-1: config 150 interface 204 has no altsetting 0 [ 412.611546][ T1220] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 412.638449][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 412.827559][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.846826][ T1220] usb 1-1: Product: syz [ 412.873200][ T1220] usb 1-1: Manufacturer: syz [ 412.896832][ T1220] usb 1-1: SerialNumber: syz [ 413.087807][ T9861] qnx6: unable to read the first superblock [ 413.145835][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.032893][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.317030][ T1220] xr_serial 1-1:150.204: xr_serial converter detected [ 416.243385][ T1220] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 416.518704][ T1220] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 416.602070][ T1220] usb 1-1: USB disconnect, device number 42 [ 416.620120][ T1220] xr_serial 1-1:150.204: device disconnected [ 418.800457][ T30] audit: type=1400 audit(1773131239.353:708): avc: denied { mount } for pid=9871 comm="syz.1.1030" name="/" dev="ramfs" ino=25665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.057402][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 419.102561][ T9890] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 419.152379][ T9886] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 419.684054][ T24] IPVS: starting estimator thread 0... [ 419.901499][ T1220] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 419.910774][ T9896] IPVS: using max 42 ests per chain, 100800 per kthread [ 420.127450][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 420.325549][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.466789][ T1220] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 420.646998][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.792865][ T1220] usb 4-1: config 0 descriptor?? [ 421.296435][ T1220] pwc: Askey VC010 type 2 USB webcam detected. [ 421.723877][ T1220] pwc: recv_control_msg error -32 req 02 val 2b00 [ 421.745132][ T1220] pwc: recv_control_msg error -32 req 02 val 2700 [ 421.767491][ T1220] pwc: recv_control_msg error -32 req 02 val 2c00 [ 421.774614][ T1220] pwc: recv_control_msg error -32 req 04 val 1000 [ 421.907132][ T1220] pwc: recv_control_msg error -32 req 04 val 1300 [ 421.920766][ T1220] pwc: recv_control_msg error -32 req 04 val 1400 [ 422.016692][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 422.844726][ T1220] pwc: recv_control_msg error -32 req 02 val 2000 [ 422.903084][ T1220] pwc: recv_control_msg error -32 req 02 val 2100 [ 422.948406][ T1220] pwc: recv_control_msg error -32 req 04 val 1500 [ 422.976418][ T1220] pwc: recv_control_msg error -32 req 02 val 2500 [ 422.988852][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 423.023791][ T1220] pwc: recv_control_msg error -32 req 02 val 2400 [ 423.032182][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 423.051781][ T1220] pwc: recv_control_msg error -32 req 02 val 2600 [ 423.063437][ T24] usb 5-1: config 0 has no interface number 0 [ 423.081860][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 423.088890][ T6177] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 423.097078][ T1220] pwc: recv_control_msg error -32 req 02 val 2900 [ 423.115811][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 423.127583][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.139489][ T24] usb 5-1: Product: syz [ 423.143702][ T24] usb 5-1: Manufacturer: syz [ 423.148650][ T24] usb 5-1: SerialNumber: syz [ 423.187174][ T24] usb 5-1: config 0 descriptor?? [ 423.258276][ T6177] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 423.276903][ T6177] usb 1-1: config 150 has no interface number 0 [ 423.292842][ T6177] usb 1-1: config 150 interface 204 has no altsetting 0 [ 423.301341][ T793] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 423.305749][ T1220] pwc: recv_control_msg error -71 req 04 val 1100 [ 423.548306][ T6177] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 423.561569][ T1220] pwc: recv_control_msg error -71 req 04 val 1200 [ 423.655799][ T1220] pwc: Registered as video103. [ 423.664087][ T6177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.689335][ T1220] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 423.702957][ T6177] usb 1-1: Product: syz [ 423.726652][ T6177] usb 1-1: Manufacturer: syz [ 423.805175][ T6177] usb 1-1: SerialNumber: syz [ 423.816285][ T793] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.925852][ T793] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.941955][ T1220] usb 4-1: USB disconnect, device number 40 [ 423.970975][ T793] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.013026][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.050025][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.121274][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.175681][ T9912] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 424.176361][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.193724][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.249011][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 424.270012][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 424.298636][ T6177] xr_serial 1-1:150.204: xr_serial converter detected [ 424.305590][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 424.312744][ T793] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.371445][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 424.392578][ T1220] libceph: connect (1)[c::]:6789 error -101 [ 424.406564][ T1220] libceph: mon0 (1)[c::]:6789 connect error [ 424.413105][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 424.432740][ T5886] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 424.446788][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 424.506205][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 424.545809][ T9920] ceph: No mds server is up or the cluster is laggy [ 424.581162][ T24] usb 5-1: USB disconnect, device number 32 [ 424.598427][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.641126][ T5886] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 424.699722][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.710011][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.744706][ T9915] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 424.897651][ T5913] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 425.574940][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 426.006277][ T5913] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 426.439620][ T5913] usb 4-1: config 0 has no interface number 0 [ 426.455562][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.681337][ T5913] usb 4-1: config 0 interface 184 has no altsetting 0 [ 426.690682][ T793] usb 3-1: USB disconnect, device number 33 [ 426.812585][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 427.172018][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.268496][ T5913] usb 4-1: Product: syz [ 427.422605][ T5913] usb 4-1: Manufacturer: syz [ 427.820839][ T5913] usb 4-1: SerialNumber: syz [ 427.922481][ T5913] usb 4-1: config 0 descriptor?? [ 427.977404][ T5886] usb 2-1: USB disconnect, device number 48 [ 428.024286][ T5913] usb 4-1: can't set config #0, error -71 [ 428.082536][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 428.541445][ T5913] usb 4-1: USB disconnect, device number 41 [ 429.620933][ T6177] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 429.696655][ T6177] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 429.862861][ T6177] usb 1-1: USB disconnect, device number 43 [ 429.886993][ T9947] random: crng reseeded on system resumption [ 429.903332][ T6177] xr_serial 1-1:150.204: device disconnected [ 430.069560][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 430.076984][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 430.274102][ T9953] qnx6: unable to read the first superblock [ 431.026099][ T30] audit: type=1400 audit(1773131251.573:709): avc: denied { map } for pid=9961 comm="syz.1.1054" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 431.565314][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 433.519238][ T9969] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1056'. [ 433.649304][ T30] audit: type=1400 audit(1773131254.213:710): avc: denied { getopt } for pid=9968 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.859321][ T30] audit: type=1400 audit(1773131255.403:711): avc: denied { read } for pid=9979 comm="syz.1.1060" laddr=fe80::b lport=33964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 434.890667][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.898338][ T5886] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 434.906309][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.084046][ T5886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.349425][ T5886] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.409710][ T5886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.472287][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.523001][ T9974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 435.543531][ T30] audit: type=1400 audit(1773131256.043:712): avc: denied { bind } for pid=9979 comm="syz.1.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.799835][ T5886] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.897172][ T9997] sp0: Synchronizing with TNC [ 436.646880][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 436.657296][ T6177] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 436.779609][ T5913] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 438.076742][ T6177] usb 1-1: Using ep0 maxpacket: 8 [ 438.099950][ T5913] usb 3-1: config index 0 descriptor too short (expected 512, got 36) [ 438.146219][ T6177] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.159452][ T5913] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 438.193453][ T5886] usb 4-1: USB disconnect, device number 42 [ 438.199585][ T24] usb 2-1: device not accepting address 49, error -71 [ 438.251232][ T6177] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.262735][ T5913] usb 3-1: config 9 has no interfaces? [ 438.291180][ T5913] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 438.310645][ T6177] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.342203][ T5913] usb 3-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 438.389232][ T6177] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.425540][ T5913] usb 3-1: Product: syz [ 438.452849][ T5913] usb 3-1: Manufacturer: syz [ 438.483285][ T6177] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.525664][ T6177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.711273][ T6177] usb 1-1: can't set config #16, error -71 [ 438.740168][ T5913] usb 3-1: USB disconnect, device number 34 [ 438.774954][ T6177] usb 1-1: USB disconnect, device number 44 [ 438.957575][ T5886] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 439.117336][ T6177] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 439.146723][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 439.154061][ T5886] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 439.167663][ T5886] usb 4-1: config 0 has no interface number 0 [ 439.180564][ T5886] usb 4-1: config 0 interface 184 has no altsetting 0 [ 439.187745][ T5913] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 439.209248][ T5886] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 439.219517][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.229363][ T5886] usb 4-1: Product: syz [ 439.234043][ T5886] usb 4-1: Manufacturer: syz [ 439.241691][ T5886] usb 4-1: SerialNumber: syz [ 439.261169][ T5886] usb 4-1: config 0 descriptor?? [ 439.298502][ T6177] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.316942][ T6177] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 439.337194][ T6177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.350266][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 439.371665][ T5913] usb 3-1: config index 0 descriptor too short (expected 512, got 36) [ 439.388452][ T6177] usb 1-1: config 0 descriptor?? [ 439.403411][ T5913] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 439.428824][ T6177] pwc: Askey VC010 type 2 USB webcam detected. [ 439.447577][ T5913] usb 3-1: config 9 has no interfaces? [ 439.461085][ T5913] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 439.485488][ T5913] usb 3-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 439.494351][ T5913] usb 3-1: Product: syz [ 439.499324][ T5913] usb 3-1: Manufacturer: syz [ 439.562954][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 439.574478][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 439.672251][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 439.688457][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.702130][ T5886] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 439.729005][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.748935][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.764611][ T5886] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 439.925562][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.943298][ T6177] pwc: recv_control_msg error -32 req 02 val 2b00 [ 440.313165][ T5913] usb 3-1: USB disconnect, device number 35 [ 440.332394][ T5886] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 440.356938][T10009] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 440.379754][ T6177] pwc: recv_control_msg error -32 req 02 val 2700 [ 440.445045][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.470132][ T5886] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 440.478635][ T6177] pwc: recv_control_msg error -32 req 02 val 2c00 [ 440.491294][ T6177] pwc: recv_control_msg error -32 req 04 val 1000 [ 440.506784][ T1220] libceph: connect (1)[c::]:6789 error -101 [ 440.519441][ T1220] libceph: mon0 (1)[c::]:6789 connect error [ 440.533569][ T5886] usb 4-1: USB disconnect, device number 43 [ 440.548195][ T6177] pwc: recv_control_msg error -32 req 04 val 1300 [ 440.565922][ T6177] pwc: recv_control_msg error -32 req 04 val 1400 [ 440.587006][ T6177] pwc: recv_control_msg error -32 req 02 val 2000 [ 440.597039][ T6177] pwc: recv_control_msg error -32 req 02 val 2100 [ 440.619648][ T6177] pwc: recv_control_msg error -32 req 04 val 1500 [ 440.661065][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 440.672639][ T6177] pwc: recv_control_msg error -32 req 02 val 2500 [ 440.683880][ T6177] pwc: recv_control_msg error -32 req 02 val 2400 [ 440.697777][ T6177] pwc: recv_control_msg error -32 req 02 val 2600 [ 440.704943][ T6177] pwc: recv_control_msg error -32 req 02 val 2900 [ 440.754325][T10018] ceph: No mds server is up or the cluster is laggy [ 440.773525][ T6306] udevd[6306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.929986][ T24] libceph: connect (1)[c::]:6789 error -101 [ 440.949605][ T6177] pwc: recv_control_msg error -71 req 04 val 1100 [ 440.981782][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 440.997206][ T6177] pwc: recv_control_msg error -71 req 04 val 1200 [ 441.043254][ T6177] pwc: Registered as video103. [ 441.132518][ T6177] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 441.194623][ T6177] usb 1-1: USB disconnect, device number 45 [ 441.206829][T10024] tipc: Started in network mode [ 441.211718][T10024] tipc: Node identity 080211000001, cluster identity 4711 [ 441.283461][T10024] tipc: Enabled bearer , priority 0 [ 441.296172][ T5886] usb 2-1: USB disconnect, device number 50 [ 441.318687][ T24] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 441.558444][T10031] netlink: 'syz.4.1072': attribute type 6 has an invalid length. [ 441.594475][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 441.659927][ T24] usb 3-1: config 0 has no interface number 0 [ 441.693530][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.776656][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 441.837114][T10030] netlink: 'syz.4.1072': attribute type 6 has an invalid length. [ 441.872379][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 441.936672][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 442.038774][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 442.157867][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 442.191981][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 442.216217][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.274466][ T24] usb 3-1: config 0 descriptor?? [ 442.302090][ T30] audit: type=1400 audit(1773131262.863:713): avc: denied { setopt } for pid=10039 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.322256][T10027] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.377127][T10027] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.550494][ T6177] tipc: Node number set to 134418688 [ 442.638099][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 442.744229][ T30] audit: type=1400 audit(1773131263.303:714): avc: denied { ioctl } for pid=10040 comm="syz.1.1075" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 442.849600][ T24] usb 3-1: USB disconnect, device number 36 [ 442.855591][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 442.892475][T10050] qnx6: unable to read the first superblock [ 442.924146][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 442.946764][ T5886] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 443.137116][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 443.311417][ T5886] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 443.584510][ T5886] usb 1-1: config 0 has no interface number 0 [ 444.553410][ T5886] usb 1-1: config 0 interface 184 has no altsetting 0 [ 444.611208][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.638361][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.660337][ T5886] usb 1-1: Product: syz [ 444.670389][ T5886] usb 1-1: Manufacturer: syz [ 444.674992][ T5886] usb 1-1: SerialNumber: syz [ 444.701884][ T5886] usb 1-1: config 0 descriptor?? [ 445.899879][ T30] audit: type=1400 audit(1773131265.773:715): avc: denied { setopt } for pid=10057 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 446.267849][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.307543][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.358172][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 446.405568][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.453410][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 446.490785][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 446.552708][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 446.602472][ T5886] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 446.617049][ T6177] libceph: connect (1)[c::]:6789 error -101 [ 446.628273][T10068] ceph: No mds server is up or the cluster is laggy [ 446.635146][ T6177] libceph: mon0 (1)[c::]:6789 connect error [ 446.658792][ T5886] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 446.927068][ T24] libceph: connect (1)[c::]:6789 error -101 [ 447.012593][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 447.322455][ T5886] usb 1-1: USB disconnect, device number 46 [ 447.554790][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1083'. [ 447.615504][ T6177] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 447.822834][ T6177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.877531][ T5886] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 447.915895][ T6177] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 447.998183][ T24] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 448.016772][ T6177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.220180][ T5886] usb 3-1: config index 0 descriptor too short (expected 512, got 36) [ 448.752549][ T5886] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 448.775949][ T6177] usb 5-1: config 0 descriptor?? [ 448.795628][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.807176][ T6177] pwc: Askey VC010 type 2 USB webcam detected. [ 448.835484][ T5886] usb 3-1: config 9 has no interfaces? [ 448.843515][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 449.030006][ T5886] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice=dd.00 [ 449.044642][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.105588][ T5886] usb 3-1: New USB device strings: Mfr=255, Product=29, SerialNumber=0 [ 449.202869][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 449.217357][ T5886] usb 3-1: Product: syz [ 449.221548][ T5886] usb 3-1: Manufacturer: syz [ 449.241780][ T6177] pwc: recv_control_msg error -32 req 02 val 2b00 [ 449.249505][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.291031][ T6177] pwc: recv_control_msg error -32 req 02 val 2700 [ 449.313241][ T6177] pwc: recv_control_msg error -32 req 02 val 2c00 [ 449.324804][ T6177] pwc: recv_control_msg error -32 req 04 val 1000 [ 449.332505][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.344032][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.353596][ T6177] pwc: recv_control_msg error -32 req 04 val 1300 [ 449.361622][ T6177] pwc: recv_control_msg error -32 req 04 val 1400 [ 449.382174][ T24] usb 2-1: Product: syz [ 449.418018][ T6177] pwc: recv_control_msg error -32 req 02 val 2000 [ 449.425838][ T24] usb 2-1: Manufacturer: syz [ 449.435124][ T6177] pwc: recv_control_msg error -32 req 02 val 2100 [ 449.458097][ T24] usb 2-1: SerialNumber: syz [ 449.470174][ T6177] pwc: recv_control_msg error -32 req 04 val 1500 [ 449.511915][ T6177] pwc: recv_control_msg error -32 req 02 val 2500 [ 449.520678][ T6177] pwc: recv_control_msg error -32 req 02 val 2400 [ 449.534050][ T6177] pwc: recv_control_msg error -32 req 02 val 2600 [ 450.039559][ T5886] usb 3-1: USB disconnect, device number 37 [ 450.086522][ T6177] pwc: recv_control_msg error -32 req 02 val 2900 [ 450.354972][T10075] mmap: syz.3.1083 (10075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 450.428352][ T6177] pwc: recv_control_msg error -71 req 04 val 1100 [ 450.530580][ T6177] pwc: recv_control_msg error -71 req 04 val 1200 [ 450.542680][ T24] usb 2-1: unit 0 not found! [ 450.623606][ T6177] pwc: Registered as video103. [ 450.758172][T10097] netlink: zone id is out of range [ 450.782347][T10097] netlink: zone id is out of range [ 450.802737][T10097] netlink: zone id is out of range [ 450.816100][T10097] netlink: zone id is out of range [ 450.846490][ T24] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 450.869083][ T6177] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 450.947469][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 451.066239][ T6177] usb 5-1: USB disconnect, device number 33 [ 451.079531][T10098] batman_adv: batadv0: Adding interface: macvtap4 [ 451.162441][T10097] netlink: zone id is out of range [ 451.162451][T10098] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.196698][ T24] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 451.265574][T10102] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 451.299182][ T24] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 451.335260][T10097] netlink: zone id is out of range [ 451.640595][T10097] netlink: zone id is out of range [ 451.645708][T10097] netlink: zone id is out of range [ 451.694953][ T24] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 451.738607][T10097] netlink: zone id is out of range [ 451.765088][T10097] netlink: zone id is out of range [ 451.765100][T10098] batman_adv: batadv0: Interface activated: macvtap4 [ 451.838873][ T24] usb 2-1: USB disconnect, device number 51 [ 454.111812][T10102] bond1: entered promiscuous mode [ 454.287977][T10102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.645574][T10104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.683444][T10104] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 454.763595][T10104] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 454.834588][T10104] bond1: (slave wireguard0): making interface the new active one [ 454.883163][T10104] wireguard0: entered promiscuous mode [ 454.904599][T10104] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 456.955469][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 460.255946][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 464.275690][ C0] sched: DL replenish lagged too much [ 497.374773][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.554601][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.609634][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.933725][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.616543][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 632.623514][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5180/1:b..l P77/1:b..l P5818/1:b..l [ 632.633987][ C0] rcu: (detected by 0, t=10502 jiffies, g=41217, q=817 ncpus=2) [ 632.641700][ C0] task:syz-executor state:R running task stack:23416 pid:5818 tgid:5818 ppid:5803 task_flags:0x400140 flags:0x00080000 [ 632.656297][ C0] Call Trace: [ 632.659584][ C0] [ 632.662513][ C0] __schedule+0xfee/0x6120 [ 632.666926][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 632.672122][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 632.677321][ C0] ? __pfx___schedule+0x10/0x10 [ 632.682170][ C0] ? mark_held_locks+0x40/0x70 [ 632.686947][ C0] preempt_schedule_irq+0x50/0x90 [ 632.691967][ C0] irqentry_exit+0x17b/0x670 [ 632.696554][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.702530][ C0] RIP: 0010:__nr_to_section+0x7/0x100 [ 632.707900][ C0] Code: e9 b0 fb ff ff 48 89 df e8 06 47 f3 ff e9 76 fb ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb <49> 89 dc 49 c1 ec 07 e8 5d c2 86 ff e9 a5 00 00 00 31 ed e8 51 c2 [ 632.727506][ C0] RSP: 0018:ffffc900044977a0 EFLAGS: 00000202 [ 632.733569][ C0] RAX: 1ffffffff1c23be5 RBX: 0000000000000010 RCX: ffffffff82806b11 [ 632.741533][ C0] RDX: dffffc0000000000 RSI: ffffffff8281fd80 RDI: 0000000000000010 [ 632.749493][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 632.757454][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 632.765416][ C0] R13: 0000000004c201c9 R14: 0000000000000000 R15: 00000000033a04eb [ 632.773377][ C0] ? __update_page_owner_free_handle.isra.0+0x371/0x4d0 [ 632.780299][ C0] ? lookup_page_ext+0x10/0x100 [ 632.785162][ C0] lookup_page_ext+0x46/0x100 [ 632.789841][ C0] __update_page_owner_free_handle.isra.0+0xa4/0x4d0 [ 632.796524][ C0] __reset_page_owner+0x93/0x190 [ 632.801459][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 632.806652][ C0] ? __free_slab+0xd0/0x220 [ 632.811154][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 632.816867][ C0] qlist_free_all+0x47/0xe0 [ 632.821366][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 632.826805][ C0] __kasan_slab_alloc+0x69/0x90 [ 632.831658][ C0] __kmalloc_noprof+0x2b9/0x850 [ 632.836513][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 632.842058][ C0] tomoyo_path_perm+0x276/0x460 [ 632.846900][ C0] ? tomoyo_path_perm+0x262/0x460 [ 632.851923][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 632.857320][ C0] ? find_held_lock+0x2b/0x80 [ 632.861995][ C0] ? __might_fault+0xc5/0x140 [ 632.866670][ C0] ? __might_fault+0xc5/0x140 [ 632.871346][ C0] security_inode_getattr+0x116/0x280 [ 632.876713][ C0] vfs_statx+0x11f/0x3f0 [ 632.880952][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 632.885740][ C0] ? do_getname+0x191/0x390 [ 632.890242][ C0] vfs_fstatat+0x77/0xe0 [ 632.894489][ C0] __do_sys_newfstatat+0x9d/0x120 [ 632.899510][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 632.905154][ C0] ? __x64_sys_umount+0x124/0x1a0 [ 632.910172][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 632.915549][ C0] do_syscall_64+0x106/0xf80 [ 632.920134][ C0] ? clear_bhb_loop+0x40/0x90 [ 632.924817][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.930694][ C0] RIP: 0033:0x7f491af9adda [ 632.935104][ C0] RSP: 002b:00007ffe27397198 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 632.943508][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f491af9adda [ 632.951482][ C0] RDX: 00007ffe273971c0 RSI: 00007ffe27397250 RDI: 00000000ffffff9c [ 632.959454][ C0] RBP: 00007ffe27397250 R08: 00007ffe27398250 R09: 00000000ffffffff [ 632.967428][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe273982e0 [ 632.975399][ C0] R13: 00007f491b031f90 R14: 00000000000703af R15: 00007ffe27398320 [ 632.983393][ C0] [ 632.986410][ C0] task:kswapd0 state:R running task stack:26408 pid:77 tgid:77 ppid:2 task_flags:0x220840 flags:0x00080000 [ 632.999922][ C0] Call Trace: [ 633.003197][ C0] [ 633.006121][ C0] __schedule+0xfee/0x6120 [ 633.010535][ C0] ? find_held_lock+0x2b/0x80 [ 633.015208][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 633.020407][ C0] ? __pfx___schedule+0x10/0x10 [ 633.025238][ C0] ? mark_held_locks+0x40/0x70 [ 633.029986][ C0] preempt_schedule_irq+0x50/0x90 [ 633.035006][ C0] irqentry_exit+0x17b/0x670 [ 633.039615][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.045589][ C0] RIP: 0010:lock_release+0x19e/0x320 [ 633.050867][ C0] Code: ff 65 0f c1 05 cb eb 28 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 1d a4 28 12 0f 85 63 01 00 00 48 83 c4 [ 633.070472][ C0] RSP: 0018:ffffc9000215ee70 EFLAGS: 00000206 [ 633.076537][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e75e0 RCX: ffffc9000215ee7c [ 633.084503][ C0] RDX: 0000000000000002 RSI: ffffffff8de4ec23 RDI: ffffffff8c1afaa0 [ 633.092470][ C0] RBP: ffffffff81b8019e R08: 0000000000000001 R09: 0000000000000007 [ 633.100436][ C0] R10: 0000000000000200 R11: 000000000001750d R12: ffff88801e364980 [ 633.108397][ C0] R13: ffffc9000215ef28 R14: 0000000000000202 R15: 0000000000000003 [ 633.116367][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 633.121569][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 633.126572][ C0] ? kasan_save_stack+0x30/0x50 [ 633.131428][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.137581][ C0] arch_stack_walk+0x94/0xf0 [ 633.142169][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 633.147540][ C0] stack_trace_save+0x8e/0xc0 [ 633.152216][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 633.157589][ C0] ? __lock_acquire+0x4a5/0x2630 [ 633.162528][ C0] kasan_save_stack+0x30/0x50 [ 633.167202][ C0] ? kasan_save_stack+0x30/0x50 [ 633.172082][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 633.177260][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 633.182719][ C0] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 633.188614][ C0] ? preempt_count_add+0x76/0x150 [ 633.193637][ C0] security_inode_free+0xa4/0x170 [ 633.198656][ C0] __destroy_inode+0x20a/0x740 [ 633.203428][ C0] destroy_inode+0x91/0x1c0 [ 633.207946][ C0] evict+0x599/0xad0 [ 633.211852][ C0] ? __pfx_evict+0x10/0x10 [ 633.216276][ C0] ? iput.part.0+0x5fd/0xf50 [ 633.220875][ C0] iput.part.0+0x605/0xf50 [ 633.225299][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 633.230574][ C0] iput+0x35/0x40 [ 633.234207][ C0] dentry_unlink_inode+0x2a1/0x490 [ 633.239317][ C0] __dentry_kill+0x1d0/0x600 [ 633.243906][ C0] ? shrink_dentry_list+0x10e/0x5e0 [ 633.249103][ C0] shrink_dentry_list+0x180/0x5e0 [ 633.254124][ C0] ? list_lru_walk_one+0x3c/0x50 [ 633.259063][ C0] prune_dcache_sb+0xea/0x150 [ 633.263738][ C0] ? list_lru_count_one+0x147/0x320 [ 633.268936][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 633.274223][ C0] super_cache_scan+0x328/0x550 [ 633.279059][ C0] do_shrink_slab+0x416/0x11e0 [ 633.283833][ C0] shrink_slab+0x171/0x12b0 [ 633.288347][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 633.293285][ C0] ? __pfx_get_random_u8+0x10/0x10 [ 633.298403][ C0] shrink_one+0x398/0x7f0 [ 633.302728][ C0] ? shrink_node+0x2620/0x3e20 [ 633.307492][ C0] ? shrink_node+0x2682/0x3e20 [ 633.312254][ C0] shrink_node+0x26a2/0x3e20 [ 633.316846][ C0] ? shrink_node+0x23a9/0x3e20 [ 633.321608][ C0] ? __pfx_shrink_node+0x10/0x10 [ 633.326517][ C0] ? find_held_lock+0x2b/0x80 [ 633.331196][ C0] ? balance_pgdat+0xbb7/0x1ca0 [ 633.336044][ C0] balance_pgdat+0xbb7/0x1ca0 [ 633.340725][ C0] ? find_held_lock+0x2b/0x80 [ 633.345405][ C0] ? __pfx_balance_pgdat+0x10/0x10 [ 633.350514][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 633.355709][ C0] ? debug_object_free+0x295/0x550 [ 633.360825][ C0] ? __lock_acquire+0x4a5/0x2630 [ 633.365789][ C0] ? rcu_is_watching+0x12/0xc0 [ 633.370555][ C0] kswapd+0x556/0xba0 [ 633.374536][ C0] ? __pfx_kswapd+0x10/0x10 [ 633.379017][ C0] ? rcu_is_cpu_rrupt_from_idle+0x1f0/0x270 [ 633.384912][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 633.390980][ C0] ? __kthread_parkme+0x18c/0x230 [ 633.396014][ C0] ? kthread+0x13a/0x450 [ 633.400265][ C0] ? __pfx_kswapd+0x10/0x10 [ 633.404770][ C0] kthread+0x370/0x450 [ 633.408838][ C0] ? __pfx_kthread+0x10/0x10 [ 633.413431][ C0] ret_from_fork+0x754/0xd80 [ 633.418021][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 633.423120][ C0] ? __switch_to+0x7b4/0x1120 [ 633.427775][ C0] ? __pfx_kthread+0x10/0x10 [ 633.432361][ C0] ret_from_fork_asm+0x1a/0x30 [ 633.437136][ C0] [ 633.440146][ C0] task:udevd state:R running task stack:23688 pid:5180 tgid:5180 ppid:1 task_flags:0x400140 flags:0x00080000 [ 633.453668][ C0] Call Trace: [ 633.456943][ C0] [ 633.459870][ C0] __schedule+0xfee/0x6120 [ 633.464300][ C0] ? __pfx___schedule+0x10/0x10 [ 633.469151][ C0] ? mark_held_locks+0x40/0x70 [ 633.474011][ C0] preempt_schedule_irq+0x50/0x90 [ 633.479016][ C0] irqentry_exit+0x17b/0x670 [ 633.483602][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.489577][ C0] RIP: 0010:unwind_next_frame+0x1ce/0x1ea0 [ 633.495379][ C0] Code: 25 02 00 00 49 81 ff 00 9e 93 8b 0f 83 18 02 00 00 8b 35 f5 6e 5a 0c 4c 89 f8 48 2d 00 00 00 81 48 c1 e8 08 8d 56 ff 41 89 c3 <39> d0 0f 83 8a 15 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d [ 633.514987][ C0] RSP: 0018:ffffc900035572c0 EFLAGS: 00000206 [ 633.521053][ C0] RAX: 000000000001b881 RBX: 0000000000000001 RCX: 1ffff920006aae6f [ 633.529009][ C0] RDX: 00000000000a939e RSI: 00000000000a939f RDI: ffffffff8e1268e8 [ 633.536990][ C0] RBP: ffffc90003557378 R08: 000000006ed9bd88 R09: 0000000000000007 [ 633.544964][ C0] R10: 0000000000000200 R11: 000000000001b881 R12: ffffc90003557380 [ 633.552934][ C0] R13: ffffc90003557330 R14: ffffc90003557365 R15: ffffffff82b88145 [ 633.560903][ C0] ? kernfs_get_inode+0x45/0x470 [ 633.565859][ C0] ? kernfs_get_inode+0x46/0x470 [ 633.570801][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.576958][ C0] arch_stack_walk+0x94/0xf0 [ 633.581574][ C0] ? kernfs_get_inode+0x46/0x470 [ 633.586516][ C0] stack_trace_save+0x8e/0xc0 [ 633.591184][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 633.596554][ C0] ? __lock_acquire+0x4a5/0x2630 [ 633.601495][ C0] ? __lock_acquire+0x4a5/0x2630 [ 633.606434][ C0] save_stack+0x162/0x1e0 [ 633.610762][ C0] ? __pfx_save_stack+0x10/0x10 [ 633.615609][ C0] ? __free_frozen_pages+0x7e1/0x10d0 [ 633.620981][ C0] ? qlist_free_all+0x47/0xe0 [ 633.625649][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 633.631262][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 633.636285][ C0] ? kmem_cache_alloc_lru_noprof+0x246/0x6e0 [ 633.642262][ C0] ? alloc_inode+0x183/0x250 [ 633.646849][ C0] ? iget_locked+0x1d9/0x6d0 [ 633.651437][ C0] ? kernfs_get_inode+0x46/0x470 [ 633.656377][ C0] ? page_ext_put+0x3e/0xd0 [ 633.660884][ C0] __reset_page_owner+0x84/0x190 [ 633.665823][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 633.671020][ C0] ? __free_slab+0xd0/0x220 [ 633.675515][ C0] qlist_free_all+0x47/0xe0 [ 633.679998][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 633.685459][ C0] __kasan_slab_alloc+0x69/0x90 [ 633.690310][ C0] kmem_cache_alloc_lru_noprof+0x246/0x6e0 [ 633.696115][ C0] ? alloc_inode+0x183/0x250 [ 633.700708][ C0] alloc_inode+0x183/0x250 [ 633.705122][ C0] iget_locked+0x1d9/0x6d0 [ 633.709542][ C0] ? __pfx_iget_locked+0x10/0x10 [ 633.714476][ C0] ? kernfs_root+0xee/0x2a0 [ 633.718982][ C0] ? kernfs_root+0xee/0x2a0 [ 633.723482][ C0] kernfs_get_inode+0x46/0x470 [ 633.728230][ C0] kernfs_iop_lookup+0x1a7/0x2d0 [ 633.733162][ C0] __lookup_slow+0x251/0x460 [ 633.737750][ C0] ? __pfx___lookup_slow+0x10/0x10 [ 633.742871][ C0] ? dput.part.0+0x45b/0x570 [ 633.747465][ C0] lookup_slow+0x50/0x70 [ 633.751707][ C0] link_path_walk+0x1377/0x1cc0 [ 633.756566][ C0] path_openat+0x1be/0x31a0 [ 633.761063][ C0] ? kasan_save_stack+0x3f/0x50 [ 633.765907][ C0] ? kasan_save_stack+0x30/0x50 [ 633.770754][ C0] ? kasan_save_track+0x14/0x30 [ 633.775604][ C0] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 633.781222][ C0] ? __pfx_path_openat+0x10/0x10 [ 633.786167][ C0] do_file_open+0x20e/0x430 [ 633.790667][ C0] ? __pfx_do_file_open+0x10/0x10 [ 633.795705][ C0] ? alloc_fd+0x476/0x790 [ 633.800032][ C0] ? do_getname+0x191/0x390 [ 633.804532][ C0] do_sys_openat2+0x10d/0x1e0 [ 633.809207][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 633.814424][ C0] ? __sys_recvmsg+0x18c/0x220 [ 633.819185][ C0] ? __pfx___sys_recvmsg+0x10/0x10 [ 633.824286][ C0] __x64_sys_openat+0x12d/0x210 [ 633.829115][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 633.834493][ C0] do_syscall_64+0x106/0xf80 [ 633.839078][ C0] ? clear_bhb_loop+0x40/0x90 [ 633.843751][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.849635][ C0] RIP: 0033:0x7fc4982a7407 [ 633.854041][ C0] RSP: 002b:00007fff64e67ea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 633.862447][ C0] RAX: ffffffffffffffda RBX: 00007fc498996880 RCX: 00007fc4982a7407 [ 633.870411][ C0] RDX: 0000000000080000 RSI: 00007fff64e68020 RDI: ffffffffffffff9c [ 633.878375][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 633.886341][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055afd3d907f5 [ 633.894306][ C0] R13: 000055afd3d907f5 R14: 0000000000000001 R15: 0000000000000000 [ 633.902284][ C0] [ 633.905295][ C0] rcu: rcu_preempt kthread starved for 10624 jiffies! g41217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 633.916478][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 633.926433][ C0] rcu: RCU grace-period kthread stack dump: [ 633.932299][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 633.945787][ C0] Call Trace: [ 633.949058][ C0] [ 633.951986][ C0] __schedule+0xfee/0x6120 [ 633.956399][ C0] ? __lock_acquire+0x4a5/0x2630 [ 633.961349][ C0] ? __pfx___schedule+0x10/0x10 [ 633.966191][ C0] ? find_held_lock+0x2b/0x80 [ 633.970864][ C0] ? schedule+0x2bf/0x390 [ 633.975288][ C0] schedule+0xdd/0x390 [ 633.979334][ C0] schedule_timeout+0x127/0x280 [ 633.984184][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 633.989553][ C0] ? __pfx_process_timeout+0x10/0x10 [ 633.994838][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 634.000637][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 634.006101][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 634.010864][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 634.016151][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 634.021097][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 634.026302][ C0] ? rcu_is_watching+0x12/0xc0 [ 634.031046][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 634.036849][ C0] rcu_gp_kthread+0x179/0x230 [ 634.041527][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 634.046721][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 634.052525][ C0] ? __kthread_parkme+0x18c/0x230 [ 634.057549][ C0] ? kthread+0x13a/0x450 [ 634.061781][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 634.066983][ C0] kthread+0x370/0x450 [ 634.071039][ C0] ? __pfx_kthread+0x10/0x10 [ 634.075598][ C0] ret_from_fork+0x754/0xd80 [ 634.080170][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 634.085277][ C0] ? __switch_to+0x7b4/0x1120 [ 634.089954][ C0] ? __pfx_kthread+0x10/0x10 [ 634.094545][ C0] ret_from_fork_asm+0x1a/0x30 [ 634.099318][ C0] [ 634.102327][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 634.108632][ C0] Sending NMI from CPU 0 to CPUs 1: [ 634.113833][ C1] NMI backtrace for cpu 1 [ 634.113846][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.113865][ C1] Tainted: [L]=SOFTLOCKUP [ 634.113870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.113878][ C1] RIP: 0010:mark_lock+0x9c/0xa20 [ 634.113900][ C1] Code: 01 00 00 00 48 8b 54 24 68 65 48 2b 15 75 dd 28 12 0f 85 ea 07 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 46 22 03 74 8d 41 be 00 02 00 00 bb 09 00 00 00 eb 8e 8b 05 fb [ 634.113912][ C1] RSP: 0018:ffffc90000a07e00 EFLAGS: 00000046 [ 634.113924][ C1] RAX: 0000000000000003 RBX: 0000000000000008 RCX: 0000000000000003 [ 634.113932][ C1] RDX: 0000000000000008 RSI: ffff88801e6a3090 RDI: ffff88801e6a24c0 [ 634.113941][ C1] RBP: ffffc90000a07ea0 R08: 0000000000000000 R09: 0000000000000007 [ 634.113949][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88801e6a3090 [ 634.113957][ C1] R13: ffff88801e6a24c0 R14: 0000000000000003 R15: 0000000000000003 [ 634.113965][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 634.113979][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.113988][ C1] CR2: 00007fffe8037ac0 CR3: 0000000078112000 CR4: 00000000003526f0 [ 634.113997][ C1] Call Trace: [ 634.114001][ C1] [ 634.114007][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 634.114024][ C1] ? __lock_acquire+0x4a5/0x2630 [ 634.114044][ C1] __lock_acquire+0x4a5/0x2630 [ 634.114064][ C1] ? lock_acquire+0x1cf/0x380 [ 634.114083][ C1] lock_acquire+0x1cf/0x380 [ 634.114101][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 634.114117][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 634.114131][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 634.114147][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.114165][ C1] unwind_next_frame+0xd1/0x1ea0 [ 634.114179][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 634.114193][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 634.114208][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.114225][ C1] arch_stack_walk+0x94/0xf0 [ 634.114241][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 634.114255][ C1] stack_trace_save+0x8e/0xc0 [ 634.114270][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 634.114286][ C1] ? stack_trace_save+0x8e/0xc0 [ 634.114302][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 634.114317][ C1] ? common_startup_64+0x13e/0x148 [ 634.114331][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 634.114350][ C1] kasan_save_stack+0x30/0x50 [ 634.114368][ C1] ? kasan_save_stack+0x30/0x50 [ 634.114384][ C1] ? kasan_save_track+0x14/0x30 [ 634.114401][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 634.114418][ C1] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 634.114436][ C1] ? kmalloc_reserve+0x148/0x350 [ 634.114451][ C1] ? __alloc_skb+0x185/0x710 [ 634.114463][ C1] ? synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 634.114485][ C1] ? nft_synproxy_do_eval+0x941/0xd50 [ 634.114501][ C1] ? nft_do_chain+0x2e8/0x1930 [ 634.114517][ C1] ? nft_do_chain_inet+0xee/0x340 [ 634.114532][ C1] ? nf_hook_slow+0xbf/0x220 [ 634.114544][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 634.114562][ C1] ? ip6_input+0xe0/0x2f0 [ 634.114578][ C1] ? ipv6_rcv+0x263/0x3d0 [ 634.114594][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 634.114612][ C1] ? __netif_receive_skb+0x1f/0x120 [ 634.114629][ C1] ? process_backlog+0x37a/0x1580 [ 634.114645][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 634.114662][ C1] ? net_rx_action+0xa40/0xf20 [ 634.114680][ C1] ? handle_softirqs+0x1eb/0x9e0 [ 634.114695][ C1] ? __irq_exit_rcu+0xef/0x150 [ 634.114709][ C1] ? irq_exit_rcu+0x9/0x30 [ 634.114723][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 634.114745][ C1] kasan_save_track+0x14/0x30 [ 634.114762][ C1] __kasan_slab_alloc+0x89/0x90 [ 634.114781][ C1] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 634.114798][ C1] ? kmalloc_reserve+0x148/0x350 [ 634.114813][ C1] ? __kasan_slab_alloc+0x60/0x90 [ 634.114832][ C1] kmalloc_reserve+0x148/0x350 [ 634.114849][ C1] __alloc_skb+0x185/0x710 [ 634.114860][ C1] ? __alloc_skb+0x5b7/0x710 [ 634.114872][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 634.114885][ C1] ? rcu_is_watching+0x12/0xc0 [ 634.114901][ C1] synproxy_send_client_synack_ipv6+0x19f/0x7a0 [ 634.114918][ C1] ? ww_mutex_trylock+0x10/0xd00 [ 634.114931][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 634.114948][ C1] ? net_generic+0xea/0x2a0 [ 634.114965][ C1] nft_synproxy_do_eval+0x941/0xd50 [ 634.114983][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 634.115002][ C1] ? do_raw_spin_lock+0x128/0x260 [ 634.115018][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 634.115035][ C1] nft_do_chain+0x2e8/0x1930 [ 634.115052][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 634.115068][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 634.115085][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 634.115107][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 634.115128][ C1] nft_do_chain_inet+0xee/0x340 [ 634.115143][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 634.115158][ C1] ? nf_nat_ipv6_local_in+0x37e/0x6c0 [ 634.115179][ C1] ? lock_acquire+0x1cf/0x380 [ 634.115198][ C1] nf_hook_slow+0xbf/0x220 [ 634.115212][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 634.115229][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 634.115247][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 634.115265][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 634.115285][ C1] ip6_input+0xe0/0x2f0 [ 634.115301][ C1] ? __pfx_ip6_input+0x10/0x10 [ 634.115318][ C1] ipv6_rcv+0x263/0x3d0 [ 634.115335][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 634.115351][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 634.115369][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 634.115388][ C1] ? lock_acquire+0x1cf/0x380 [ 634.115406][ C1] ? process_backlog+0x32a/0x1580 [ 634.115425][ C1] ? process_backlog+0x32a/0x1580 [ 634.115442][ C1] __netif_receive_skb+0x1f/0x120 [ 634.115460][ C1] process_backlog+0x37a/0x1580 [ 634.115485][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 634.115504][ C1] net_rx_action+0xa40/0xf20 [ 634.115524][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 634.115542][ C1] ? __print_lock_name+0x60/0x80 [ 634.115563][ C1] ? rcu_is_watching+0x12/0xc0 [ 634.115579][ C1] handle_softirqs+0x1eb/0x9e0 [ 634.115594][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 634.115611][ C1] __irq_exit_rcu+0xef/0x150 [ 634.115626][ C1] irq_exit_rcu+0x9/0x30 [ 634.115640][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 634.115653][ C1] [ 634.115658][ C1] [ 634.115662][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.115677][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 634.115690][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 634.115701][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 634.115711][ C1] RAX: 00000000044a4f25 RBX: ffff88801e6a24c0 RCX: ffffffff8b8f9c75 [ 634.115720][ C1] RDX: 0000000000000000 RSI: ffffffff8de74cf8 RDI: ffffffff8c1afaa0 [ 634.115728][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 634.115735][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498 [ 634.115744][ C1] R13: 0000000000000001 R14: ffffffff90d98310 R15: 0000000000000000 [ 634.115755][ C1] ? ct_kernel_exit+0x125/0x180 [ 634.115770][ C1] default_idle+0x9/0x10 [ 634.115784][ C1] default_idle_call+0x6c/0xb0 [ 634.115799][ C1] do_idle+0x35b/0x4b0 [ 634.115816][ C1] ? __pfx_do_idle+0x10/0x10 [ 634.115833][ C1] cpu_startup_entry+0x4f/0x60 [ 634.115849][ C1] start_secondary+0x21d/0x2d0 [ 634.115867][ C1] ? __pfx_start_secondary+0x10/0x10 [ 634.115887][ C1] common_startup_64+0x13e/0x148 [ 634.115905][ C1]