last executing test programs: 13.271232898s ago: executing program 2 (id=1585): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) 10.833936369s ago: executing program 1 (id=1593): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00O\x00'/27], 0x48) 10.041078587s ago: executing program 3 (id=1595): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x248a4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r6, 0x0, 0x0, 0x80000) shutdown(r6, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="15060000000022000000010000003000018014000400fc010000000000000000ab6b8b2d0001060005004e220000060001000a000000080006000100000037"], 0x44}, 0x5}, 0x0) 9.059286082s ago: executing program 3 (id=1596): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b07, &(0x7f0000000540)={'wlan1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000180)='cgroup\x00', 0x150001, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r4 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0xfffffffffffffffc, 0x28, 0x2000000, 0x1}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000140)={'\x00', 0x1, 0x7ff, 0x6, 0x7, 0x7f}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x2}, 0x94) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_POLL(r5, 0x640f) ioctl$COMEDI_POLL(r5, 0x640f) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x400e2df, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) 8.44948384s ago: executing program 2 (id=1598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') inotify_init() r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8.246616771s ago: executing program 3 (id=1599): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000240)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x8, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) capset(0x0, &(0x7f0000000880)={0x0, 0xdd2, 0xffffffb3, 0x0, 0x8, 0x10}) 8.132305325s ago: executing program 4 (id=1600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x5, 0x90}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.128396208s ago: executing program 1 (id=1601): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_setup(0x68e4, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0xffffffff}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$FITHAW(r3, 0xc0045878) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 6.917542636s ago: executing program 1 (id=1603): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x64}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.91586194s ago: executing program 3 (id=1604): syz_io_uring_setup(0x4d71, &(0x7f00000001c0)={0x0, 0xc20e, 0x400, 0x2, 0xbfd00000}, 0x0, &(0x7f0000000280)) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48}) 6.906875879s ago: executing program 4 (id=1605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, 0x0, 0x0) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) write$tun(r0, 0x0, 0xdc) 6.007160919s ago: executing program 0 (id=1606): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x7, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x248a4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r6, 0x0, 0x0, 0x80000) shutdown(r6, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="15060000000022000000010000003000018014000400fc010000000000000000ab6b8b2d0001060005004e220000060001000a000000080006000100000037"], 0x44}, 0x5}, 0x0) 4.987036801s ago: executing program 4 (id=1607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xac, 0x4800000000000, 0x0, 0x9, 0x97b]}, &(0x7f0000000240)=0x78) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) write$FUSE_STATX(r3, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) nanosleep(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.842956456s ago: executing program 2 (id=1608): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast1, 0xf}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) io_setup(0x5, &(0x7f0000000180)) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, 0x0, 0x8091) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000005c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000029000b0027bd700000000000050055c6"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.837557185s ago: executing program 0 (id=1609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000"], 0x64}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.2415193s ago: executing program 1 (id=1610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 4.161832631s ago: executing program 2 (id=1611): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00O\x00'/27], 0x48) 3.924885701s ago: executing program 0 (id=1612): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, 0x0, 0x0, 0x0) 3.168151466s ago: executing program 1 (id=1613): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_setup(0x68e4, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0xffffffff}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) ioctl$FITHAW(r3, 0xc0045878) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 2.294945774s ago: executing program 0 (id=1614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05", 0x36}], 0x1) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0), &(0x7f0000000300)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x600040, 0xa5) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x894) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 2.190308203s ago: executing program 1 (id=1615): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000240)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x8, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) capset(&(0x7f0000000480)={0x20080522}, 0x0) 2.167525432s ago: executing program 0 (id=1616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x5, 0x90}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.159892143s ago: executing program 3 (id=1617): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)) 2.054947154s ago: executing program 3 (id=1618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') inotify_init() r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.97226096s ago: executing program 4 (id=1619): syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.445953909s ago: executing program 4 (id=1620): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x64}}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.19397115s ago: executing program 0 (id=1621): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000002200)='./file0\x00', 0x4000, 0x0, &(0x7f0000004300)) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1.001534367s ago: executing program 2 (id=1622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x5, 0x90}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 826.183915ms ago: executing program 4 (id=1623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 0s ago: executing program 2 (id=1624): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 301.800137][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.998930][ T30] audit: type=1326 audit(1756385211.465:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.114408][ T5587] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 302.149742][ T30] audit: type=1326 audit(1756385211.465:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.177225][ T30] audit: type=1326 audit(1756385211.465:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.200431][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.209272][ T30] audit: type=1326 audit(1756385211.465:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.232481][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.529288][ T30] audit: type=1326 audit(1756385211.465:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.553478][ T30] audit: type=1326 audit(1756385211.465:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.594389][ T30] audit: type=1326 audit(1756385211.465:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.639292][ T5587] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 302.658599][ T30] audit: type=1326 audit(1756385211.465:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8885 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 302.659407][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 302.681838][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.748350][ T5587] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.865413][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 302.880183][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 302.974408][ T5906] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 302.995623][ T5587] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 303.033688][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.244466][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 303.259008][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 303.269161][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 303.463104][ T5587] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.465034][ T5906] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.494181][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.510160][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.523130][ T5587] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 303.546866][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.564422][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 303.567336][ T5587] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.633932][ T5906] usb 4-1: Product: syz [ 303.635076][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.638715][ T5906] usb 4-1: Manufacturer: syz [ 303.664119][ T5906] usb 4-1: SerialNumber: syz [ 303.680232][ T5906] usb 4-1: config 0 descriptor?? [ 303.680295][ T5587] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.698838][ T5921] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 303.710367][ T5587] usb 3-1: string descriptor 0 read error: -22 [ 303.717968][ T5587] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 303.727198][ T5587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.742479][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub [ 303.748695][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5 [ 303.818955][ T5587] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 303.884532][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 303.893860][ T5921] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.910029][ T5921] usb 1-1: config 1 interface 0 has no altsetting 0 [ 303.919614][ T5921] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 303.929894][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.938642][ T5921] usb 1-1: Product: з [ 303.969309][ T5921] usb 1-1: Manufacturer: ೛凷邳殰揺聍ᾷუ净聯筧䒀ꔤꓙ莫醅ᦣꋻ璮꿎溁ሎ튍磚췄净ꑻퟧᇎ䒕볎䥨砼瓜⍅᫂뷑耙ન頩抮쀅앜闶ύ볆䳏Ꮘ씫ꈙ넂礨﵇쏀ｃ㞼㹄⦳祁ꄣ滐ᇠ㛾驓≱誑셼럹球䠔淢댨禗逻௣䁰䭅奄睱絨鎃㎃쩃孎㻕ᜃ෽눸柋맞ꙏ艻龩䙫鸩땤退콰뢆 [ 304.002686][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.016218][ T5921] usb 1-1: SerialNumber: 㯇ḥ퉤ꘀᘔ룮Ʒ爐烁ᇽ왢隋췻⒨闯퐒땹㡨ᅉ䴁뎬ﵬ쁤냚杦ǹᙨ仧䐵٩彬ᓘᘝ␵킣틒씯웹ᾂ솂㱦ꈺ㟅∲鞊䷊枲绦栯鋧奋襆璇⾖ŵ瞍諅ʝ礀╼ш謭蒪溭拗炜窥햋ｅ〇觳Ⴈ輿즼挼ᆒ⴮闾顽ᘯ얡蜻骷汦ꣀ錊阏썬嶟忒爨ӌꐳ郙䱻콳 [ 304.047379][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.124699][ T5906] usb 4-1: USB disconnect, device number 25 [ 304.325580][ T5921] usbhid 1-1:1.0: can't add hid device: -71 [ 304.331586][ T5921] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 304.400416][ T5921] usb 1-1: USB disconnect, device number 19 [ 305.254412][ T5921] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 305.274423][ T5587] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 305.444673][ T5587] usb 5-1: Using ep0 maxpacket: 32 [ 305.452972][ T5587] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 305.470490][ T5587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.475841][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.493318][ T5587] usb 5-1: Product: syz [ 305.493591][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.504472][ T5587] usb 5-1: Manufacturer: syz [ 305.511983][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.514190][ T5587] usb 5-1: SerialNumber: syz [ 305.531214][ T5921] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 305.541330][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.579814][ T5921] usb 2-1: config 0 descriptor?? [ 305.586922][ T5587] usb 5-1: config 0 descriptor?? [ 305.622216][ T5587] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 306.251461][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 306.332122][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 306.465745][ T5921] usb 2-1: USB disconnect, device number 31 [ 306.467183][ T9] usb 3-1: USB disconnect, device number 28 [ 306.704707][ T5937] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 306.894570][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 307.142891][ T5587] gspca_ov534_9: reg_r err -71 [ 307.157340][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 307.171126][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 307.176633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.186867][ T9] usb 3-1: Product: syz [ 307.191037][ T9] usb 3-1: Manufacturer: syz [ 307.196249][ T9] usb 3-1: SerialNumber: syz [ 307.205685][ T9] usb 3-1: config 0 descriptor?? [ 307.210755][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 307.210766][ T30] audit: type=1400 audit(1756385216.975:573): avc: denied { getopt } for pid=8945 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.342389][ T30] audit: type=1400 audit(1756385217.035:574): avc: denied { unlink } for pid=8947 comm="syz.0.866" name="#1" dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 307.369689][ T30] audit: type=1400 audit(1756385217.045:575): avc: denied { mount } for pid=8947 comm="syz.0.866" name="/" dev="overlay" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 307.392157][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.402737][ T5937] usb 4-1: config 0 has no interfaces? [ 307.408581][ T5937] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 307.418349][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.429242][ T5937] usb 4-1: config 0 descriptor?? [ 307.441528][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.504392][ T5587] gspca_ov534_9: Unknown sensor 0000 [ 307.504467][ T5587] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 307.521318][ T5587] usb 5-1: USB disconnect, device number 26 [ 307.743401][ T8938] program syz.3.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.755079][ T5587] usb 4-1: USB disconnect, device number 26 [ 307.930983][ T30] audit: type=1400 audit(1756385217.695:576): avc: denied { read write } for pid=8952 comm="syz.4.867" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.967177][ T30] audit: type=1400 audit(1756385217.695:577): avc: denied { open } for pid=8952 comm="syz.4.867" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 309.022656][ T30] audit: type=1400 audit(1756385218.795:578): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 309.250087][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 309.278455][ T8970] overlayfs: failed to resolve './file0': -2 [ 309.515978][ T9] usb 3-1: USB disconnect, device number 29 [ 309.937228][ T8977] tipc: Started in network mode [ 309.966530][ T8977] tipc: Node identity 4285965ffce9, cluster identity 4711 [ 309.998308][ T8977] tipc: Enabled bearer , priority 0 [ 310.104407][ T8980] syzkaller0: entered promiscuous mode [ 310.280491][ T8980] syzkaller0: entered allmulticast mode [ 310.400198][ T8977] tipc: Resetting bearer [ 310.586882][ T8976] tipc: Resetting bearer [ 310.688725][ T8976] tipc: Disabling bearer [ 310.711615][ T30] audit: type=1400 audit(1756385220.485:579): avc: denied { bind } for pid=8989 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.764566][ T5587] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 310.805388][ T30] audit: type=1400 audit(1756385220.585:580): avc: denied { listen } for pid=8987 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.943228][ T30] audit: type=1400 audit(1756385220.695:581): avc: denied { setopt } for pid=8987 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.425890][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.439980][ T5587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.457062][ T5587] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.469997][ T5937] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 311.480423][ T5587] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 311.495859][ T5587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.527567][ T5587] usb 5-1: config 0 descriptor?? [ 311.614543][ T9005] rdma_rxe: rxe_newlink: failed to add lo [ 311.847893][ T5937] usb 2-1: device descriptor read/64, error -71 [ 312.084413][ T5937] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 312.216858][ T5937] usb 2-1: device descriptor read/64, error -71 [ 312.425336][ T5937] usb usb2-port1: attempt power cycle [ 312.457267][ T5587] usbhid 5-1:0.0: can't add hid device: -71 [ 312.464074][ T5587] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 312.480220][ T5587] usb 5-1: USB disconnect, device number 27 [ 312.547038][ T30] audit: type=1400 audit(1756385222.325:582): avc: denied { bind } for pid=9011 comm="syz.2.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.824751][ T5937] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 312.845490][ T5937] usb 2-1: device descriptor read/8, error -71 [ 313.096242][ T5937] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 313.328221][ T5937] usb 2-1: device descriptor read/8, error -71 [ 313.520713][ T5937] usb usb2-port1: unable to enumerate USB device [ 313.903527][ T9030] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 313.920306][ T5937] IPVS: starting estimator thread 0... [ 314.004092][ T30] audit: type=1400 audit(1756385223.775:583): avc: denied { create } for pid=9037 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.028570][ T9031] IPVS: using max 38 ests per chain, 91200 per kthread [ 314.088527][ T30] audit: type=1400 audit(1756385223.825:584): avc: denied { connect } for pid=9037 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.344369][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 314.504343][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 314.511196][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.533239][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 314.544970][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 314.714620][ T5906] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 314.846519][ T5921] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 314.880954][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 314.891343][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.899958][ T5921] usb 4-1: Product: syz [ 314.905407][ T5921] usb 4-1: Manufacturer: syz [ 314.910654][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 314.920865][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.928953][ T5921] usb 4-1: SerialNumber: syz [ 314.934277][ T5906] usb 1-1: Product: syz [ 314.937531][ T5921] usb 4-1: config 0 descriptor?? [ 314.948083][ T5906] usb 1-1: Manufacturer: syz [ 314.952681][ T5906] usb 1-1: SerialNumber: syz [ 314.964262][ T5921] cdc_acm 4-1:0.0: skipping garbage [ 314.973463][ T5906] usb 1-1: config 0 descriptor?? [ 315.004379][ T5937] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 315.156842][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 315.162031][ T30] audit: type=1400 audit(1756385224.935:585): avc: denied { create } for pid=9050 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 315.187417][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.257342][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.281805][ T5937] usb 2-1: config 0 has no interfaces? [ 315.288483][ T30] audit: type=1400 audit(1756385224.935:586): avc: denied { write } for pid=9050 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 315.312344][ T30] audit: type=1400 audit(1756385224.935:587): avc: denied { write } for pid=9050 comm="syz.2.898" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.318537][ T5937] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 315.336820][ T30] audit: type=1400 audit(1756385225.035:588): avc: denied { write } for pid=9040 comm="syz.3.895" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 315.364785][ T30] audit: type=1400 audit(1756385225.045:589): avc: denied { mount } for pid=9040 comm="syz.3.895" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.388630][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.408976][ T5937] usb 2-1: config 0 descriptor?? [ 315.420326][ T30] audit: type=1400 audit(1756385225.195:590): avc: denied { read } for pid=9056 comm="syz.2.900" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.476445][ T5937] usb 4-1: USB disconnect, device number 27 [ 315.628569][ T5587] usb 2-1: USB disconnect, device number 36 [ 315.822016][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 315.829441][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 315.836691][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 315.848361][ T5906] usb 1-1: USB disconnect, device number 20 [ 316.018182][ T30] audit: type=1400 audit(1756385225.795:591): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 316.314362][ T5906] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 316.607320][ T5906] usb 4-1: device descriptor read/64, error -71 [ 316.664911][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.673602][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.994352][ T5906] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.184355][ T5906] usb 4-1: device descriptor read/64, error -71 [ 317.318489][ T5906] usb usb4-port1: attempt power cycle [ 317.664455][ T5906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 317.685074][ T5906] usb 4-1: device descriptor read/8, error -71 [ 317.964582][ T5906] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 318.059050][ T5906] usb 4-1: device descriptor read/8, error -71 [ 318.375356][ T5906] usb usb4-port1: unable to enumerate USB device [ 318.618545][ T9109] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.913'. [ 319.463395][ T30] audit: type=1400 audit(1756385229.235:592): avc: denied { create } for pid=9118 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.504796][ T30] audit: type=1400 audit(1756385229.235:593): avc: denied { setopt } for pid=9118 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.526958][ T30] audit: type=1400 audit(1756385229.235:594): avc: denied { create } for pid=9118 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 319.696530][ T9125] evm: overlay not supported [ 319.726545][ T30] audit: type=1400 audit(1756385229.235:595): avc: denied { ioctl } for pid=9118 comm="syz.3.917" path="socket:[20509]" dev="sockfs" ino=20509 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 319.754348][ T30] audit: type=1400 audit(1756385229.235:596): avc: denied { connect } for pid=9118 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 320.544375][ T5587] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 320.709757][ T5587] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.729248][ T5587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.750800][ T5587] usb 5-1: Product: syz [ 320.760560][ T5587] usb 5-1: Manufacturer: syz [ 320.765517][ T5587] usb 5-1: SerialNumber: syz [ 320.776070][ T5587] usb 5-1: config 0 descriptor?? [ 320.986836][ T5587] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.265224][ T30] audit: type=1400 audit(1756385231.035:597): avc: denied { append } for pid=9150 comm="syz.1.929" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.418010][ T5921] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 321.424701][ T30] audit: type=1400 audit(1756385231.085:598): avc: denied { create } for pid=9150 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 321.529692][ T9154] ubi: mtd0 is already attached to ubi31 [ 322.004365][ T5921] usb 1-1: device descriptor read/64, error -71 [ 322.275255][ T5921] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 322.424908][ T5921] usb 1-1: device descriptor read/64, error -71 [ 322.894615][ T5921] usb usb1-port1: attempt power cycle [ 323.234490][ T5921] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 323.275012][ T5921] usb 1-1: device descriptor read/8, error -71 [ 323.874415][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 323.896578][ T5921] usb 1-1: device descriptor read/8, error -71 [ 324.018557][ T5921] usb usb1-port1: unable to enumerate USB device [ 324.044660][ T5587] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 324.173673][ T5587] usb 5-1: USB disconnect, device number 28 [ 324.596533][ T9188] netlink: 'syz.2.939': attribute type 6 has an invalid length. [ 324.651062][ T5937] IPVS: starting estimator thread 0... [ 324.754486][ T9193] IPVS: using max 40 ests per chain, 96000 per kthread [ 324.918549][ T5921] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 325.023475][ T9199] ubi: mtd0 is already attached to ubi31 [ 325.411500][ T30] audit: type=1400 audit(1756385235.185:599): avc: denied { name_bind } for pid=9198 comm="syz.1.943" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 325.432961][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.561553][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 325.572415][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.674928][ T5921] usb 1-1: config 0 has no interfaces? [ 325.694469][ T5921] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 325.703529][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.736379][ T5921] usb 1-1: config 0 descriptor?? [ 325.794369][ T5906] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 325.859015][ T30] audit: type=1400 audit(1756385235.635:600): avc: denied { connect } for pid=9207 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.965839][ T5906] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 325.974094][ T5906] usb 5-1: config 0 has no interface number 0 [ 325.984434][ T5906] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 325.993500][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.006724][ T9182] program syz.0.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.016697][ T5906] usb 5-1: Product: syz [ 326.020869][ T5906] usb 5-1: Manufacturer: syz [ 326.021540][ T9] usb 1-1: USB disconnect, device number 25 [ 326.025894][ T5906] usb 5-1: SerialNumber: syz [ 326.039004][ T5906] usb 5-1: config 0 descriptor?? [ 326.114393][ T5937] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 326.244503][ T5937] usb 4-1: device descriptor read/64, error -71 [ 326.514459][ T5937] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 326.710337][ T5937] usb 4-1: device descriptor read/64, error -71 [ 326.734727][ T913] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 326.844156][ T5937] usb usb4-port1: attempt power cycle [ 327.033604][ T5906] usb 5-1: Firmware version (0.0) predates our first public release. [ 327.054096][ T5906] usb 5-1: Please update to version 0.2 or newer [ 327.084389][ T913] usb 3-1: device descriptor read/64, error -71 [ 327.129090][ T5906] usb 5-1: USB disconnect, device number 29 [ 327.271480][ T30] audit: type=1400 audit(1756385237.045:601): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 327.406738][ T913] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 327.814416][ T5937] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 327.845128][ T5937] usb 4-1: device descriptor read/8, error -71 [ 328.050322][ T913] usb 3-1: device descriptor read/64, error -71 [ 328.124758][ T5937] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 328.207665][ T5937] usb 4-1: device descriptor read/8, error -71 [ 328.436816][ T5937] usb usb4-port1: unable to enumerate USB device [ 328.487801][ T913] usb usb3-port1: attempt power cycle [ 328.624374][ T5906] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 328.823578][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.834950][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.842944][ T5906] usb 5-1: Product: syz [ 328.847661][ T913] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 328.855270][ T5906] usb 5-1: Manufacturer: syz [ 328.859856][ T5906] usb 5-1: SerialNumber: syz [ 328.873715][ T5906] usb 5-1: config 0 descriptor?? [ 328.891999][ T913] usb 3-1: device descriptor read/8, error -71 [ 329.148898][ T5906] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.284491][ T913] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 329.292169][ T5921] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 329.315216][ T913] usb 3-1: device descriptor read/8, error -71 [ 329.424829][ T913] usb usb3-port1: unable to enumerate USB device [ 329.454455][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 329.462107][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 329.472366][ T5921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 329.488189][ T5921] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.497571][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.506017][ T5921] usb 1-1: Product: syz [ 329.510352][ T5921] usb 1-1: Manufacturer: syz [ 329.515305][ T5921] usb 1-1: SerialNumber: syz [ 329.543190][ T5921] usb 1-1: config 0 descriptor?? [ 329.881311][ T30] audit: type=1326 audit(1756385239.635:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 329.918902][ T5921] usb 1-1: USB disconnect, device number 26 [ 330.024557][ T30] audit: type=1326 audit(1756385239.635:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.052454][ T30] audit: type=1326 audit(1756385239.645:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.077645][ T30] audit: type=1326 audit(1756385239.645:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.103041][ T30] audit: type=1326 audit(1756385239.645:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.143347][ T30] audit: type=1326 audit(1756385239.645:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.170585][ T30] audit: type=1326 audit(1756385239.645:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9252 comm="syz.2.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f438e98ebe9 code=0x7ffc0000 [ 330.904414][ T913] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 330.918613][ T5906] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 330.934031][ T5906] usb 5-1: USB disconnect, device number 30 [ 331.076120][ T913] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 331.084429][ T913] usb 1-1: config 0 has no interface number 0 [ 331.123760][ T913] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 331.241912][ T913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.262510][ T913] usb 1-1: Product: syz [ 331.271159][ T913] usb 1-1: Manufacturer: syz [ 331.278944][ T913] usb 1-1: SerialNumber: syz [ 331.288058][ T913] usb 1-1: config 0 descriptor?? [ 332.626042][ T9291] fuse: Bad value for 'group_id' [ 332.635517][ T9291] fuse: Bad value for 'group_id' [ 332.766565][ T913] usb 1-1: Firmware version (0.0) predates our first public release. [ 332.774784][ T913] usb 1-1: Please update to version 0.2 or newer [ 332.848241][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 332.848257][ T30] audit: type=1400 audit(1756385242.625:619): avc: denied { ioctl } for pid=9292 comm="syz.1.972" path="socket:[21561]" dev="sockfs" ino=21561 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.853820][ T913] usb 1-1: USB disconnect, device number 27 [ 333.567736][ T30] audit: type=1400 audit(1756385243.275:620): avc: denied { read write } for pid=9317 comm="syz.2.980" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 333.595796][ T30] audit: type=1400 audit(1756385243.275:621): avc: denied { open } for pid=9317 comm="syz.2.980" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 334.127937][ T9327] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 335.169777][ T5906] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 335.744410][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 335.751191][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.798591][ T5906] usb 4-1: config 0 has no interfaces? [ 335.804087][ T5906] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 336.243904][ T9371] input: syz1 as /devices/virtual/input/input34 [ 336.251258][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.253267][ T9372] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 336.289247][ T9] IPVS: starting estimator thread 0... [ 336.424625][ T9373] IPVS: using max 45 ests per chain, 108000 per kthread [ 336.426446][ T5906] usb 4-1: config 0 descriptor?? [ 336.454428][ T5937] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 336.675368][ T9341] program syz.3.988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.692247][ T5906] usb 4-1: USB disconnect, device number 36 [ 336.698999][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 336.713796][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.729049][ T5937] usb 2-1: config 0 has no interfaces? [ 336.734924][ T5937] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 336.765236][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.806014][ T5937] usb 2-1: config 0 descriptor?? [ 337.048382][ T5937] usb 2-1: USB disconnect, device number 37 [ 337.360477][ T9388] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.999'. [ 337.374695][ T5587] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 337.534491][ T5587] usb 3-1: Using ep0 maxpacket: 8 [ 337.703474][ T5587] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.720297][ T5587] usb 3-1: config 179 has no interface number 0 [ 337.734159][ T5587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.883073][ T30] audit: type=1326 audit(1756385247.655:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 337.884332][ T5587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.957666][ T5587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.959212][ T30] audit: type=1326 audit(1756385247.655:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.149130][ T30] audit: type=1326 audit(1756385247.655:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.182219][ T5587] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 338.195072][ T5587] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 338.224183][ T5587] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 338.291464][ T30] audit: type=1326 audit(1756385247.655:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.314882][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.345848][ T5587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.376044][ T30] audit: type=1326 audit(1756385247.655:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.399389][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.431924][ T9382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.523586][ T30] audit: type=1326 audit(1756385247.655:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.546933][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.746956][ T30] audit: type=1326 audit(1756385247.655:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.774653][ T30] audit: type=1326 audit(1756385247.655:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.797980][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.805335][ T30] audit: type=1326 audit(1756385247.655:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 338.834428][ T30] audit: type=1326 audit(1756385247.655:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 339.577802][ T5587] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input35 [ 339.618047][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.654228][ T9406] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 339.671341][ T5906] IPVS: starting estimator thread 0... [ 339.702534][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.774506][ T9407] IPVS: using max 49 ests per chain, 117600 per kthread [ 340.317465][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 340.479131][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 340.619380][ T9] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.644850][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 340.654182][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 340.671458][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.680688][ T9] usb 4-1: Product: з [ 340.681890][ T5906] usb 3-1: USB disconnect, device number 34 [ 340.684947][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 340.699256][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 340.710059][ T9] usb 4-1: Manufacturer: ೛凷邳殰揺聍ᾷუ净聯筧䒀ꔤꓙ莫醅ᦣꋻ璮꿎溁ሎ튍磚췄净ꑻퟧᇎ䒕볎䥨砼瓜⍅᫂뷑耙ન頩抮쀅앜闶ύ볆䳏Ꮘ씫ꈙ넂礨﵇쏀ｃ㞼㹄⦳祁ꄣ滐ᇠ㛾驓≱誑셼럹球䠔淢댨禗逻௣䁰䭅奄睱絨鎃㎃쩃孎㻕ᜃ෽눸柋맞ꙏ艻龩䙫鸩땤退콰뢆 [ 340.748095][ T9] usb 4-1: SerialNumber: 㯇ḥ퉤ꘀᘔ룮Ʒ爐烁ᇽ왢隋췻⒨闯퐒땹㡨ᅉ䴁뎬ﵬ쁤냚杦ǹᙨ仧䐵٩彬ᓘᘝ␵킣틒씯웹ᾂ솂㱦ꈺ㟅∲鞊䷊枲绦栯鋧奋襆璇⾖ŵ瞍諅ʝ礀╼ш謭蒪溭拗炜窥햋ｅ〇觳Ⴈ輿즼挼ᆒ⴮闾顽ᘯ얡蜻骷汦ꣀ錊阏썬嶟忒爨ӌꐳ郙䱻콳 [ 340.804430][ T5587] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 340.970326][ T5587] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 340.978986][ T5587] usb 2-1: config 0 has no interface number 0 [ 340.988422][ T5587] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 340.998217][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.006662][ T5587] usb 2-1: Product: syz [ 341.010250][ T9429] netlink: 'syz.0.1015': attribute type 6 has an invalid length. [ 341.011338][ T5587] usb 2-1: Manufacturer: syz [ 341.034424][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 341.042002][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 341.050211][ T5587] usb 2-1: SerialNumber: syz [ 341.060638][ T9] usb 4-1: USB disconnect, device number 37 [ 341.067479][ T5587] usb 2-1: config 0 descriptor?? [ 341.263719][ T9434] input: syz1 as /devices/virtual/input/input36 [ 341.490559][ T5587] usb 2-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 341.699962][ T5587] usb 2-1: Firmware: build [ 341.905405][ T5587] usb 2-1: failed to fetch extended address, random address set [ 341.913591][ T5587] usb 2-1: atusb_probe: initialization failed, error = -524 [ 341.924651][ T5587] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 342.059969][ T5587] usb 2-1: USB disconnect, device number 38 [ 342.625892][ T9451] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 342.660628][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.995731][ T9451] team0: Port device bond0 added [ 343.400189][ T9471] rdma_rxe: rxe_newlink: failed to add lo [ 344.454495][ T913] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 344.656296][ T913] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 344.701126][ T913] usb 1-1: config 0 has no interface number 0 [ 344.777457][ T913] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 344.837756][ T913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.922303][ T913] usb 1-1: Product: syz [ 344.969133][ T913] usb 1-1: Manufacturer: syz [ 345.020549][ T913] usb 1-1: SerialNumber: syz [ 345.205911][ T913] usb 1-1: config 0 descriptor?? [ 346.064443][ T913] usb 1-1: Firmware: major: 84, minor: 103, hardware type: UNKNOWN (73) [ 346.326860][ T913] usb 1-1: Firmware: build [ 346.471567][ T913] usb 1-1: failed to fetch extended address, random address set [ 346.481399][ T913] usb 1-1: atusb_probe: initialization failed, error = -524 [ 346.544001][ T913] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 346.571863][ T913] usb 1-1: USB disconnect, device number 28 [ 346.635701][ T9509] input: syz1 as /devices/virtual/input/input37 [ 348.075897][ T6024] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 348.277357][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 348.305471][ T6024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.360210][ T6024] usb 5-1: config 0 has no interfaces? [ 348.380276][ T6024] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 348.400483][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.422853][ T6024] usb 5-1: config 0 descriptor?? [ 348.618745][ T9529] 9pnet_virtio: no channels available for device syz [ 349.014047][ T9517] program syz.4.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.037661][ T6024] usb 5-1: USB disconnect, device number 31 [ 349.484447][ T913] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 349.649688][ T913] usb 1-1: Using ep0 maxpacket: 8 [ 349.656832][ T913] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 349.668872][ T913] usb 1-1: config 0 has no interface number 0 [ 349.685956][ T913] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.709586][ T913] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 349.721541][ T9539] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 349.734740][ T913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.760066][ T9539] IPVS: sed: FWM 3 0x00000003 - no destination available [ 349.761514][ T913] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.784668][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 349.803217][ T913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 349.828360][ T913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.861279][ T913] usb 1-1: config 0 descriptor?? [ 349.900981][ T913] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 349.901742][ T9541] netlink: 'syz.1.1051': attribute type 10 has an invalid length. [ 350.181655][ T9482] Set syz1 is full, maxelem 65536 reached [ 350.248500][ T9551] ubi: mtd0 is already attached to ubi31 [ 350.680463][ T6024] usb 1-1: USB disconnect, device number 29 [ 350.692229][ T6024] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 350.904399][ T5909] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 351.100473][ T9558] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 351.164402][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 351.173702][ T5909] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.188610][ T5909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 351.198737][ T5909] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 351.208836][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.219390][ T5909] usb 5-1: Product: з [ 351.223582][ T5909] usb 5-1: Manufacturer: ೛凷邳殰揺聍ᾷუ净聯筧䒀ꔤꓙ莫醅ᦣꋻ璮꿎溁ሎ튍磚췄净ꑻퟧᇎ䒕볎䥨砼瓜⍅᫂뷑耙ન頩抮쀅앜闶ύ볆䳏Ꮘ씫ꈙ넂礨﵇쏀ｃ㞼㹄⦳祁ꄣ滐ᇠ㛾驓≱誑셼럹球䠔淢댨禗逻௣䁰䭅奄睱絨鎃㎃쩃孎㻕ᜃ෽눸柋맞ꙏ艻龩䙫鸩땤退콰뢆 [ 351.260029][ T5909] usb 5-1: SerialNumber: 㯇ḥ퉤ꘀᘔ룮Ʒ爐烁ᇽ왢隋췻⒨闯퐒땹㡨ᅉ䴁뎬ﵬ쁤냚杦ǹᙨ仧䐵٩彬ᓘᘝ␵킣틒씯웹ᾂ솂㱦ꈺ㟅∲鞊䷊枲绦栯鋧奋襆璇⾖ŵ瞍諅ʝ礀╼ш謭蒪溭拗炜窥햋ｅ〇觳Ⴈ輿즼挼ᆒ⴮闾顽ᘯ얡蜻骷汦ꣀ錊阏썬嶟忒爨ӌꐳ郙䱻콳 [ 351.636052][ T5909] usbhid 5-1:1.0: can't add hid device: -71 [ 351.642119][ T5909] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 351.798273][ T5909] usb 5-1: USB disconnect, device number 32 [ 351.907888][ T9573] misc userio: Invalid payload size [ 351.913988][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 351.914003][ T30] audit: type=1400 audit(1756385261.685:633): avc: denied { create } for pid=9571 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 352.004354][ T6024] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 352.008693][ T9573] overlayfs: failed to resolve './file1': -2 [ 352.021471][ T9575] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1059'. [ 352.137411][ T9574] tmpfs: Bad value for 'mpol' [ 352.164380][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 352.323464][ T6024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.347430][ T6024] usb 1-1: config 0 has no interfaces? [ 352.352954][ T6024] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 352.376272][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 352.385483][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.405041][ T6024] usb 1-1: config 0 descriptor?? [ 352.565277][ T9585] rdma_rxe: rxe_newlink: failed to add lo [ 352.637861][ T6024] usb 1-1: USB disconnect, device number 30 [ 353.331855][ T30] audit: type=1400 audit(1756385263.105:634): avc: denied { read } for pid=9576 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.453960][ T30] audit: type=1400 audit(1756385263.155:635): avc: denied { shutdown } for pid=9576 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.735607][ T9612] input: syz1 as /devices/virtual/input/input38 [ 354.762985][ T9613] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 355.041000][ T9619] netlink: 'syz.1.1076': attribute type 6 has an invalid length. [ 356.836490][ T9624] overlayfs: failed to resolve './file1': -2 [ 357.367520][ T9625] tmpfs: Bad value for 'mpol' [ 357.481153][ T30] audit: type=1400 audit(1756385267.245:636): avc: denied { block_suspend } for pid=9652 comm="syz.1.1084" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.987962][ T9667] ubi: mtd0 is already attached to ubi31 [ 358.897165][ T9671] netlink: 'syz.4.1089': attribute type 6 has an invalid length. [ 358.931880][ T9674] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 359.579863][ T9686] input: syz1 as /devices/virtual/input/input39 [ 360.298612][ T9694] misc userio: Invalid payload size [ 362.216096][ T9694] overlayfs: failed to resolve './file1': -2 [ 362.440001][ T9713] ubi: mtd0 is already attached to ubi31 [ 362.798771][ T9699] tmpfs: Bad value for 'mpol' [ 362.932287][ T9715] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 362.984994][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.002960][ T9715] team0: Port device bond0 added [ 363.099858][ T30] audit: type=1400 audit(1756385272.875:637): avc: denied { bind } for pid=9718 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.150565][ T30] audit: type=1400 audit(1756385272.875:638): avc: denied { accept } for pid=9718 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.172146][ T30] audit: type=1400 audit(1756385272.915:639): avc: denied { write } for pid=9718 comm="syz.0.1105" path="socket:[23062]" dev="sockfs" ino=23062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.197674][ T30] audit: type=1400 audit(1756385272.915:640): avc: denied { write } for pid=9718 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 363.217755][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.218476][ T9728] tipc: Started in network mode [ 363.230998][ T9728] tipc: Node identity bec68bb6ef46, cluster identity 4711 [ 363.239140][ T9728] tipc: Enabled bearer , priority 0 [ 363.260386][ T9728] syzkaller0: entered promiscuous mode [ 363.266045][ T9728] syzkaller0: entered allmulticast mode [ 363.347546][ T9727] tipc: Resetting bearer [ 363.372631][ T5937] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 363.391587][ T9727] tipc: Disabling bearer [ 363.434536][ T5964] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 363.526856][ T5937] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 363.536917][ T9739] input: syz1 as /devices/virtual/input/input40 [ 363.545280][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.583320][ T5937] usb 2-1: config 0 descriptor?? [ 363.589564][ T30] audit: type=1400 audit(1756385273.355:641): avc: denied { create } for pid=9740 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.606957][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 363.839624][ T5964] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 363.848756][ T5964] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 363.879652][ T30] audit: type=1400 audit(1756385273.365:642): avc: denied { bind } for pid=9740 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.039897][ T5964] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.279906][ T5964] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.359994][ T5964] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.501569][ T5964] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.629613][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.720245][ T5964] usbtmc 4-1:16.0: bulk endpoints not found [ 364.874398][ T5587] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 365.034467][ T5587] usb 3-1: Using ep0 maxpacket: 16 [ 365.050598][ T5587] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.103270][ T5587] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 365.113111][ T5587] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 365.203660][ T5587] usb 3-1: Product: syz [ 365.208291][ T5587] usb 3-1: Manufacturer: syz [ 365.212978][ T5587] usb 3-1: SerialNumber: syz [ 365.226581][ T5587] usb 3-1: config 0 descriptor?? [ 365.260634][ T5937] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 365.443182][ T5937] usb 3-1: USB disconnect, device number 35 [ 365.980705][ T9765] ubi: mtd0 is already attached to ubi31 [ 367.001241][ T5587] usb 2-1: USB disconnect, device number 39 [ 367.038281][ T5937] usb 4-1: USB disconnect, device number 38 [ 367.524440][ T5937] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 367.607664][ T9787] input: syz1 as /devices/virtual/input/input41 [ 367.746735][ T5937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 367.762645][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 367.800202][ T5937] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.830276][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 367.909852][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.019479][ T5937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 368.031453][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.043006][ T5937] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.059379][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.118371][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.134253][ T5937] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 368.189027][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 368.200160][ T5937] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.306308][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 368.320367][ T5937] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 368.334687][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 368.434451][ T5937] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 368.457939][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.464438][ T5909] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 368.504213][ T5937] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 368.625527][ T5909] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 368.654411][ T913] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 368.672300][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.685589][ T5909] usb 2-1: config 0 descriptor?? [ 368.814598][ T913] usb 1-1: Using ep0 maxpacket: 16 [ 368.863764][ T913] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.956216][ T913] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 368.983787][ T913] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 369.021258][ T913] usb 1-1: Product: syz [ 369.043825][ T913] usb 1-1: Manufacturer: syz [ 369.061558][ T913] usb 1-1: SerialNumber: syz [ 369.119582][ T913] usb 1-1: config 0 descriptor?? [ 369.356641][ T913] usb 1-1: USB disconnect, device number 31 [ 369.762677][ T5909] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 369.964814][ T9822] fuse: Unknown parameter 'group_i00000000000000000000' [ 371.020504][ T9843] input: syz1 as /devices/virtual/input/input42 [ 371.485424][ T6024] usb 3-1: USB disconnect, device number 36 [ 371.539377][ T5587] usb 2-1: USB disconnect, device number 40 [ 372.259804][ T30] audit: type=1326 audit(1756385282.035:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.294405][ T913] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 372.306940][ T5909] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 372.318103][ T30] audit: type=1326 audit(1756385282.055:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.344067][ T30] audit: type=1326 audit(1756385282.055:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.369870][ T30] audit: type=1326 audit(1756385282.055:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.404807][ T30] audit: type=1326 audit(1756385282.055:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.428460][ T30] audit: type=1326 audit(1756385282.055:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.452186][ T30] audit: type=1326 audit(1756385282.065:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.491677][ T30] audit: type=1326 audit(1756385282.065:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.492248][ T913] usb 4-1: config 0 has no interfaces? [ 372.520670][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 372.526510][ T913] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 372.537594][ T913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.546089][ T30] audit: type=1326 audit(1756385282.065:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.546274][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 372.588072][ T30] audit: type=1326 audit(1756385282.065:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9853 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6f58ebe9 code=0x7ffc0000 [ 372.595147][ T913] usb 4-1: config 0 descriptor?? [ 372.631740][ T5909] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 372.643643][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 372.652181][ T5909] usb 2-1: Product: syz [ 372.660449][ T5909] usb 2-1: Manufacturer: syz [ 372.665332][ T5909] usb 2-1: SerialNumber: syz [ 372.672774][ T5909] usb 2-1: config 0 descriptor?? [ 372.681340][ T9850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 372.872140][ T5587] usb 4-1: USB disconnect, device number 39 [ 372.971119][ T5909] usb 2-1: USB disconnect, device number 41 [ 374.404429][ T5934] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 374.447954][ T9882] netlink: 'syz.2.1157': attribute type 6 has an invalid length. [ 374.565824][ T5934] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 374.629002][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.637905][ T9889] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 374.650015][ T5934] usb 2-1: config 0 descriptor?? [ 374.657477][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.667822][ T9876] overlayfs: failed to resolve './file0': -2 [ 374.691975][ T9889] team0: Port device bond0 added [ 375.704360][ T5964] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 375.873928][ T5964] usb 1-1: config 0 has no interfaces? [ 375.888117][ T5964] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 375.927714][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.969128][ T5964] usb 1-1: config 0 descriptor?? [ 376.087809][ T5934] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 376.194136][ T5934] usb 1-1: USB disconnect, device number 32 [ 377.379226][ T6024] usb 2-1: USB disconnect, device number 42 [ 377.412983][ T9927] misc userio: Invalid payload size [ 378.111273][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.120164][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.121891][ T9915] warn_alloc: 1 callbacks suppressed [ 378.121903][ T9915] syz.4.1169: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 378.150736][ T9915] CPU: 1 UID: 0 PID: 9915 Comm: syz.4.1169 Not tainted syzkaller #0 PREEMPT(full) [ 378.150760][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.150770][ T9915] Call Trace: [ 378.150776][ T9915] [ 378.150783][ T9915] dump_stack_lvl+0x16c/0x1f0 [ 378.150808][ T9915] warn_alloc+0x248/0x3a0 [ 378.150828][ T9915] ? __pfx_warn_alloc+0x10/0x10 [ 378.150855][ T9915] ? hash_ipport4_resize+0x1b4/0x1b10 [ 378.150877][ T9915] ? __vmalloc_node_noprof+0xad/0xf0 [ 378.150913][ T9915] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 378.150949][ T9915] ? hash_ipport4_resize+0x1b4/0x1b10 [ 378.150979][ T9915] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.151011][ T9915] ? ___kmalloc_large_node+0xed/0x160 [ 378.151045][ T9915] __kvmalloc_node_noprof+0x30a/0x620 [ 378.151064][ T9915] ? hash_ipport4_resize+0x1b4/0x1b10 [ 378.151088][ T9915] ? hash_ipport4_resize+0x1b4/0x1b10 [ 378.151116][ T9915] ? hash_ipport4_resize+0x1b4/0x1b10 [ 378.151138][ T9915] hash_ipport4_resize+0x1b4/0x1b10 [ 378.151165][ T9915] ? __pfx_hash_ipport4_add+0x10/0x10 [ 378.151189][ T9915] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 378.151218][ T9915] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 378.151247][ T9915] call_ad.constprop.0+0x36d/0x940 [ 378.151275][ T9915] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 378.151300][ T9915] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 378.151324][ T9915] ? __pfx___nla_validate_parse+0x10/0x10 [ 378.151362][ T9915] ? __nla_parse+0x40/0x60 [ 378.151390][ T9915] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 378.151424][ T9915] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 378.151455][ T9915] ? rcu_sync_enter+0x50/0x350 [ 378.151522][ T9915] nfnetlink_rcv_msg+0x9fc/0x1200 [ 378.151559][ T9915] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 378.151590][ T9915] ? __lock_acquire+0x62e/0x1ce0 [ 378.151642][ T9915] ? avc_has_perm_noaudit+0x149/0x3b0 [ 378.151671][ T9915] netlink_rcv_skb+0x155/0x420 [ 378.151693][ T9915] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 378.151722][ T9915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.151757][ T9915] ? ns_capable+0xd7/0x110 [ 378.151781][ T9915] nfnetlink_rcv+0x1b3/0x430 [ 378.151806][ T9915] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 378.151829][ T9915] ? netlink_deliver_tap+0x1ae/0xd30 [ 378.151847][ T9915] netlink_unicast+0x5aa/0x870 [ 378.151863][ T9915] ? __pfx_netlink_unicast+0x10/0x10 [ 378.151875][ T9915] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 378.151893][ T9915] netlink_sendmsg+0x8d1/0xdd0 [ 378.151908][ T9915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.151927][ T9915] ____sys_sendmsg+0xa98/0xc70 [ 378.151943][ T9915] ? copy_msghdr_from_user+0x10a/0x160 [ 378.151955][ T9915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.151974][ T9915] ? __pfx_futex_wake_mark+0x10/0x10 [ 378.151988][ T9915] ___sys_sendmsg+0x134/0x1d0 [ 378.152001][ T9915] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.152031][ T9915] __sys_sendmsg+0x16d/0x220 [ 378.152044][ T9915] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.152055][ T9915] ? __x64_sys_futex+0x1e0/0x4c0 [ 378.152094][ T9915] do_syscall_64+0xcd/0x4c0 [ 378.152110][ T9915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.152122][ T9915] RIP: 0033:0x7f9c6d78ebe9 [ 378.152132][ T9915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.152143][ T9915] RSP: 002b:00007f9c6e6ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.152155][ T9915] RAX: ffffffffffffffda RBX: 00007f9c6d9b5fa0 RCX: 00007f9c6d78ebe9 [ 378.152162][ T9915] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 378.152168][ T9915] RBP: 00007f9c6d811e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.152175][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.152181][ T9915] R13: 00007f9c6d9b6038 R14: 00007f9c6d9b5fa0 R15: 00007ffc9064d8b8 [ 378.152195][ T9915] [ 378.522612][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.584717][ T9915] Mem-Info: [ 378.587861][ T9915] active_anon:12858 inactive_anon:0 isolated_anon:0 [ 378.587861][ T9915] active_file:3542 inactive_file:40680 isolated_file:0 [ 378.587861][ T9915] unevictable:777 dirty:479 writeback:0 [ 378.587861][ T9915] slab_reclaimable:12014 slab_unreclaimable:101598 [ 378.587861][ T9915] mapped:34846 shmem:4210 pagetables:1285 [ 378.587861][ T9915] sec_pagetables:0 bounce:0 [ 378.587861][ T9915] kernel_misc_reclaimable:0 [ 378.587861][ T9915] free:1297581 free_pcp:20663 free_cma:0 [ 378.663178][ T9915] Node 0 active_anon:57872kB inactive_anon:0kB active_file:14168kB inactive_file:162520kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:139464kB dirty:1924kB writeback:0kB shmem:15384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12040kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.697396][ T9927] overlayfs: failed to resolve './file1': -2 [ 378.704234][ T9915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.734811][ T9915] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.890650][ T9915] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 378.907318][ T9915] Node 0 DMA32 free:1281960kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:57952kB inactive_anon:0kB active_file:14168kB inactive_file:161200kB unevictable:1572kB writepending:1924kB present:3129332kB managed:2539384kB mlocked:0kB bounce:0kB free_pcp:62956kB local_pcp:16520kB free_cma:0kB [ 378.940375][ T9915] lowmem_reserve[]: 0 0 1 1 1 [ 378.945362][ T9915] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 379.055268][ T9935] tmpfs: Bad value for 'mpol' [ 379.060154][ T9915] lowmem_reserve[]: 0 0 0 0 0 [ 379.075494][ T9915] Node 1 Normal free:3884092kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22724kB local_pcp:10016kB free_cma:0kB [ 379.111110][ T9915] lowmem_reserve[]: 0 0 0 0 0 [ 379.116016][ T9915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 379.129345][ T9915] Node 0 DMA32: 563*4kB (UME) 227*8kB (UM) 58*16kB (UE) 75*32kB (UME) 281*64kB (UM) 71*128kB (UE) 22*256kB (UME) 13*512kB (UM) 14*1024kB (UME) 4*2048kB (UME) 292*4096kB (M) = 1265316kB [ 379.149012][ T9915] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 379.162054][ T9915] Node 1 Normal: 205*4kB (U) 47*8kB (UME) 47*16kB (UME) 51*32kB (UME) 21*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3884092kB [ 379.220470][ T9915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.243848][ T9915] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.266659][ T9915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.289551][ T9915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.312757][ T9915] 51318 total pagecache pages [ 379.328188][ T9915] 0 pages in swap cache [ 379.345553][ T9915] Free swap = 124996kB [ 379.356655][ T9915] Total swap = 124996kB [ 379.367159][ T9915] 2097051 pages RAM [ 379.376313][ T9915] 0 pages HighMem/MovableOnly [ 379.386967][ T9915] 430243 pages reserved [ 379.395412][ T9915] 0 pages cma reserved [ 379.880307][ T9950] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1179'. [ 380.893259][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 380.893270][ T30] audit: type=1400 audit(1756385290.665:658): avc: denied { read } for pid=9959 comm="syz.2.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.914388][ T6024] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 381.076355][ T6024] usb 2-1: Using ep0 maxpacket: 16 [ 381.096335][ T30] audit: type=1400 audit(1756385290.875:659): avc: denied { create } for pid=9963 comm="syz.2.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 381.105545][ T6024] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 381.685191][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 381.693330][ T6024] usb 2-1: Product: syz [ 381.698296][ T6024] usb 2-1: Manufacturer: syz [ 381.707690][ T6024] usb 2-1: SerialNumber: syz [ 381.724802][ T6024] usb 2-1: config 0 descriptor?? [ 381.907208][ T30] audit: type=1400 audit(1756385291.665:660): avc: denied { read } for pid=9969 comm="syz.0.1186" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 383.737395][ T30] audit: type=1400 audit(1756385291.665:661): avc: denied { ioctl } for pid=9969 comm="syz.0.1186" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 384.337859][ T6024] usb 2-1: USB disconnect, device number 43 [ 384.554835][ T9980] ubi: mtd0 is already attached to ubi31 [ 384.790329][ T9984] ubi: mtd0 is already attached to ubi31 [ 385.772790][ T9996] input: syz1 as /devices/virtual/input/input43 [ 388.491948][T10022] fuse: Bad value for 'user_id' [ 388.500971][T10022] fuse: Bad value for 'user_id' [ 388.864749][T10029] fuse: Bad value for 'user_id' [ 388.869690][T10029] fuse: Bad value for 'user_id' [ 389.014469][T10032] netlink: 'syz.0.1205': attribute type 6 has an invalid length. [ 390.864713][T10050] ubi: mtd0 is already attached to ubi31 [ 391.711173][T10056] program syz.4.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.327364][T10068] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1213'. [ 394.279721][T10087] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 394.292967][T10085] input: syz1 as /devices/virtual/input/input44 [ 394.528041][T10096] fuse: Bad value for 'fd' [ 394.534140][T10094] netlink: 'syz.3.1224': attribute type 6 has an invalid length. [ 395.280473][T10108] input: syz1 as /devices/virtual/input/input45 [ 395.510817][T10109] ubi: mtd0 is already attached to ubi31 [ 397.083093][ T30] audit: type=1400 audit(1756385306.855:662): avc: denied { map } for pid=10119 comm="syz.1.1233" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 397.848472][T10129] netlink: 'syz.2.1235': attribute type 27 has an invalid length. [ 397.904615][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.912649][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.924480][T10134] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 398.010209][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.022720][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.077402][T10129] vlan2: left promiscuous mode [ 398.082183][T10129] bridge0: left promiscuous mode [ 398.104902][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.124112][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.155624][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.193642][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.218054][T10141] fuse: Bad value for 'fd' [ 399.846911][T10167] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1247'. [ 400.176298][ T6024] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 400.192019][ T30] audit: type=1400 audit(1756385309.965:663): avc: denied { append } for pid=10169 comm="syz.0.1249" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 400.384407][ T6024] usb 2-1: Using ep0 maxpacket: 8 [ 400.482691][ T6024] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.495796][ T6024] usb 2-1: config 1 interface 0 has no altsetting 0 [ 400.510378][ T6024] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 400.637668][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.645751][ T6024] usb 2-1: Product: з [ 400.652357][ T6024] usb 2-1: Manufacturer: ೛凷邳殰揺聍ᾷუ净聯筧䒀ꔤꓙ莫醅ᦣꋻ璮꿎溁ሎ튍磚췄净ꑻퟧᇎ䒕볎䥨砼瓜⍅᫂뷑耙ન頩抮쀅앜闶ύ볆䳏Ꮘ씫ꈙ넂礨﵇쏀ｃ㞼㹄⦳祁ꄣ滐ᇠ㛾驓≱誑셼럹球䠔淢댨禗逻௣䁰䭅奄睱絨鎃㎃쩃孎㻕ᜃ෽눸柋맞ꙏ艻龩䙫鸩땤退콰뢆 [ 400.837951][ T6024] usb 2-1: SerialNumber: 㯇ḥ퉤ꘀᘔ룮Ʒ爐烁ᇽ왢隋췻⒨闯퐒땹㡨ᅉ䴁뎬ﵬ쁤냚杦ǹᙨ仧䐵٩彬ᓘᘝ␵킣틒씯웹ᾂ솂㱦ꈺ㟅∲鞊䷊枲绦栯鋧奋襆璇⾖ŵ瞍諅ʝ礀╼ш謭蒪溭拗炜窥햋ｅ〇觳Ⴈ輿즼挼ᆒ⴮闾顽ᘯ얡蜻骷汦ꣀ錊阏썬嶟忒爨ӌꐳ郙䱻콳 [ 401.243941][ T6024] usbhid 2-1:1.0: can't add hid device: -71 [ 401.253996][ T6024] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 401.301209][ T6024] usb 2-1: USB disconnect, device number 44 [ 402.731152][T10205] netlink: 'syz.0.1258': attribute type 27 has an invalid length. [ 402.878237][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.885543][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.948559][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.965857][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.033891][ T6071] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.048297][ T6071] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.058957][ T6071] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.069578][ T6071] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.124490][ T5587] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 403.191506][ T5964] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 403.306051][ T5587] usb 5-1: Using ep0 maxpacket: 16 [ 403.466406][ T5587] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 403.475778][ T5587] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 403.483868][ T5587] usb 5-1: Product: syz [ 403.488266][ T5587] usb 5-1: Manufacturer: syz [ 403.492898][ T5587] usb 5-1: SerialNumber: syz [ 403.499324][ T5587] usb 5-1: config 0 descriptor?? [ 403.594482][ T5964] usb 3-1: device descriptor read/64, error -71 [ 403.734085][ T5587] usb 5-1: USB disconnect, device number 33 [ 403.855781][ T5964] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 404.067949][T10231] binder: 10226:10231 ioctl c0306201 0 returned -14 [ 404.074745][ T30] audit: type=1400 audit(1756385313.845:664): avc: denied { ioctl } for pid=10226 comm="syz.1.1266" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 404.104065][ T5964] usb 3-1: device descriptor read/64, error -71 [ 404.214637][ T5964] usb usb3-port1: attempt power cycle [ 404.554451][ T5964] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 404.586012][ T5937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 404.586565][ T5964] usb 3-1: device descriptor read/8, error -71 [ 404.834973][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 404.896269][ T5964] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 404.926977][ T5964] usb 3-1: device descriptor read/8, error -71 [ 404.952540][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.045401][ T5964] usb usb3-port1: unable to enumerate USB device [ 405.115918][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 405.170187][ T5937] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.179446][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.193961][ T5937] usb 1-1: Product: syz [ 405.211755][ T5937] usb 1-1: Manufacturer: syz [ 405.303300][ T5937] usb 1-1: SerialNumber: syz [ 405.325258][ T5937] usb 1-1: config 0 descriptor?? [ 405.341003][ T5937] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 405.830503][ T5937] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 406.143619][ T5937] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 406.159512][ T5937] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 406.328053][ T5937] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 406.380126][ T5937] em28xx 1-1:0.0: No AC97 audio processor [ 406.624358][ T5587] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 406.804579][ T5587] usb 3-1: Using ep0 maxpacket: 32 [ 406.897755][ T5587] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.922769][ T5587] usb 3-1: config 0 has no interfaces? [ 406.941385][ T5587] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 407.043365][ T5587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.247223][ T5587] usb 3-1: config 0 descriptor?? [ 407.413254][ T5587] usb 1-1: USB disconnect, device number 33 [ 407.432114][ T5587] em28xx 1-1:0.0: Disconnecting em28xx [ 407.461471][ T5587] em28xx 1-1:0.0: Freeing device [ 407.602619][T10258] 9pnet_virtio: no channels available for device syz [ 407.628386][ T5937] usb 3-1: USB disconnect, device number 41 [ 408.916917][T10270] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 409.290590][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 410.434632][ T5964] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 410.615162][ T5964] usb 3-1: device descriptor read/64, error -71 [ 410.672650][T10294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.722267][T10294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.904365][ T5964] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 410.924558][ T30] audit: type=1400 audit(1756385320.695:665): avc: denied { sqpoll } for pid=10300 comm="syz.1.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 411.044357][ T5964] usb 3-1: device descriptor read/64, error -71 [ 411.054977][ T30] audit: type=1400 audit(1756385320.835:666): avc: denied { watch watch_reads } for pid=10300 comm="syz.1.1289" path="/247" dev="tmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 411.077906][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.154591][ T5964] usb usb3-port1: attempt power cycle [ 411.524520][ T5964] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 411.563051][ T5964] usb 3-1: device descriptor read/8, error -71 [ 411.651342][T10311] misc userio: Invalid payload size [ 411.689457][ T30] audit: type=1400 audit(1756385321.465:667): avc: denied { sys_module } for pid=10305 comm="syz.3.1291" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 411.801246][T10315] overlayfs: failed to resolve './file1': -2 [ 411.854375][ T5964] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 412.021127][ T5964] usb 3-1: device descriptor read/8, error -71 [ 412.246942][ T5964] usb usb3-port1: unable to enumerate USB device [ 412.266459][T10315] tmpfs: Bad value for 'mpol' [ 413.764805][ T30] audit: type=1400 audit(1756385323.545:668): avc: denied { connect } for pid=10348 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 414.109896][T10352] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 414.681951][T10366] overlayfs: failed to resolve './file0': -2 [ 417.592949][T10393] fuse: Invalid rootmode [ 417.638784][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 417.685059][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 418.935134][ T5587] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 419.176276][ T5587] usb 3-1: config 0 has no interfaces? [ 419.182022][ T5587] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.242417][ T5587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.258445][ T5587] usb 3-1: config 0 descriptor?? [ 419.435402][ T5964] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 419.500112][ T5587] usb 3-1: USB disconnect, device number 46 [ 419.547266][ T30] audit: type=1326 audit(1756385329.315:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 419.589939][ T30] audit: type=1326 audit(1756385329.325:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 419.624804][ T30] audit: type=1326 audit(1756385329.325:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 419.650789][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.660192][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.699979][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.731766][ T30] audit: type=1326 audit(1756385329.325:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 419.748328][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.786603][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.799414][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.806941][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.819269][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.832313][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.844382][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.859966][ T5964] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 419.867534][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.881602][ T5964] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.893926][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.907890][ T5964] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 419.924416][ T5964] usb 4-1: string descriptor 0 read error: -22 [ 419.930811][ T5964] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 419.945550][T10426] netlink: 'syz.1.1326': attribute type 6 has an invalid length. [ 419.958267][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.990024][ T5964] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 420.065276][ T30] audit: type=1326 audit(1756385329.345:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 420.155159][ T30] audit: type=1326 audit(1756385329.345:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 420.181597][ T30] audit: type=1326 audit(1756385329.345:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 420.205539][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.222175][ T30] audit: type=1326 audit(1756385329.345:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 420.247710][ T30] audit: type=1326 audit(1756385329.345:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 420.346989][ T30] audit: type=1326 audit(1756385329.345:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10409 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd2a218ebe9 code=0x7ffc0000 [ 421.956751][T10449] ubi: mtd0 is already attached to ubi31 [ 424.104340][ T5587] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 424.256068][ T5587] usb 2-1: config 0 has no interfaces? [ 424.552852][ T5964] usb 4-1: USB disconnect, device number 40 [ 425.213096][ T5587] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 425.222254][ T5587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.235458][ T5587] usb 2-1: config 0 descriptor?? [ 425.458715][ T6024] usb 2-1: USB disconnect, device number 45 [ 425.569694][T10496] overlayfs: failed to resolve './file0': -2 [ 426.055890][T10506] fuse: Unknown parameter 'user_i00000000000000000000' [ 426.913834][T10522] fuse: Bad value for 'rootmode' [ 427.469283][T10525] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 427.623395][T10528] netlink: 'syz.2.1356': attribute type 10 has an invalid length. [ 427.633248][T10525] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.673154][T10528] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.841029][T10532] netlink: 'syz.0.1357': attribute type 6 has an invalid length. [ 427.897387][T10535] misc userio: Invalid payload size [ 429.016682][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1362'. [ 429.089455][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1362'. [ 429.131330][T10535] overlayfs: failed to resolve './file1': -2 [ 429.251199][T10552] tmpfs: Bad value for 'mpol' [ 429.325899][T10557] fuse: Bad value for 'rootmode' [ 429.440849][T10562] program syz.4.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.704364][ T6024] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 429.865674][ T6024] usb 1-1: device descriptor read/64, error -71 [ 430.014051][T10569] fuse: Unknown parameter 'user_i00000000000000000000' [ 430.374367][ T6024] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 430.554454][ T6024] usb 1-1: device descriptor read/64, error -71 [ 430.736002][ T6024] usb usb1-port1: attempt power cycle [ 431.248786][T10586] ubi: mtd0 is already attached to ubi31 [ 431.606987][ T6024] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 433.603333][ T6024] usb 1-1: device not accepting address 36, error -71 [ 434.383324][T10594] misc userio: Invalid payload size [ 434.445324][T10596] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 435.122667][T10611] 9pnet_virtio: no channels available for device syz [ 435.636175][T10613] overlayfs: failed to resolve './file1': -2 [ 435.766900][T10613] tmpfs: Bad value for 'mpol' [ 436.412154][T10625] ubi: mtd0 is already attached to ubi31 [ 437.384359][ T6024] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 437.404960][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 437.413835][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 437.514386][ T6024] usb 4-1: device descriptor read/64, error -71 [ 437.954477][ T6024] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 438.146355][ T6024] usb 4-1: device descriptor read/64, error -71 [ 438.257713][ T6024] usb usb4-port1: attempt power cycle [ 438.964336][ T6024] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 438.988179][T10655] fuse: Unknown parameter 'user_id00000000000000000000' [ 439.024664][ T6024] usb 4-1: device descriptor read/8, error -71 [ 439.195361][T10656] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1395'. [ 439.324338][ T6024] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 439.365530][ T6024] usb 4-1: device descriptor read/8, error -71 [ 439.475944][ T6024] usb usb4-port1: unable to enumerate USB device [ 439.539693][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.548028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.495340][T10678] netlink: 'syz.0.1403': attribute type 10 has an invalid length. [ 442.023112][T10693] input: syz1 as /devices/virtual/input/input46 [ 442.187347][T10696] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1407'. [ 443.312158][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 443.312176][ T30] audit: type=1326 audit(1756385353.085:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 443.342088][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.391011][ T30] audit: type=1326 audit(1756385353.085:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 443.453311][ T30] audit: type=1326 audit(1756385353.085:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 443.476713][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.873097][ T30] audit: type=1326 audit(1756385353.085:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 443.930075][ T30] audit: type=1326 audit(1756385353.095:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 443.981787][ T30] audit: type=1326 audit(1756385353.125:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 444.008841][ T30] audit: type=1326 audit(1756385353.125:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 444.079251][ T30] audit: type=1326 audit(1756385353.125:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 444.130111][ T30] audit: type=1326 audit(1756385353.125:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 444.153551][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.493663][ T30] audit: type=1326 audit(1756385353.125:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.4.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 444.729362][T10731] fuse: Unknown parameter 'use00000000000000000000' [ 444.814361][ T913] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 445.004663][ T913] usb 5-1: Using ep0 maxpacket: 32 [ 445.010925][ T913] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 445.021571][ T913] usb 5-1: config 0 has no interface number 0 [ 445.030192][ T913] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 445.042695][ T913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.130340][ T913] usb 5-1: Product: syz [ 445.164906][ T913] usb 5-1: Manufacturer: syz [ 445.234202][ T913] usb 5-1: SerialNumber: syz [ 445.441778][ T913] usb 5-1: config 0 descriptor?? [ 445.458904][ T913] smsc95xx v2.0.0 [ 445.863054][ T913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 445.883913][ T913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.898257][T10746] input: syz1 as /devices/virtual/input/input47 [ 446.355521][ T913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 446.407725][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 446.416774][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 446.862937][ T913] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 447.444427][ T5937] usb 5-1: USB disconnect, device number 34 [ 449.461910][T10795] ubi: mtd0 is already attached to ubi31 [ 449.579107][T10797] misc userio: Invalid payload size [ 449.675843][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 449.675896][ T30] audit: type=1326 audit(1756385359.455:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 449.705392][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.954425][ T30] audit: type=1326 audit(1756385359.485:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.287187][ T30] audit: type=1326 audit(1756385359.485:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.383884][T10797] overlayfs: failed to resolve './file1': -2 [ 450.399238][ T30] audit: type=1326 audit(1756385359.485:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.422635][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.506084][T10800] tmpfs: Bad value for 'mpol' [ 450.549244][ T30] audit: type=1326 audit(1756385359.485:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.572639][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.721475][ T30] audit: type=1326 audit(1756385359.485:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.794387][ T30] audit: type=1326 audit(1756385359.485:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.851515][ T30] audit: type=1326 audit(1756385359.485:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.915438][ T30] audit: type=1326 audit(1756385359.485:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 450.938874][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.734359][ T30] audit: type=1326 audit(1756385359.485:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.3.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fef8ebe9 code=0x7ffc0000 [ 451.834379][ T913] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 452.122793][T10831] input: syz1 as /devices/virtual/input/input48 [ 452.185753][ T913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 452.201035][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.314308][ T913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.357272][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.388710][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.495719][ T913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 452.509809][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.531750][T10841] fuse: Unknown parameter 'user_id00000000000000000000' [ 452.539076][ T913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.657556][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.714979][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.727745][ T913] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 452.738268][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 452.749276][ T913] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.844477][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 452.857191][ T913] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 452.872273][ T913] usb 1-1: string descriptor 0 read error: -22 [ 452.878706][ T913] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.888126][ T913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.947953][ T913] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 453.283372][T10853] ubi: mtd0 is already attached to ubi31 [ 454.224440][ T6024] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 454.388321][ T6024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.400223][ T6024] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.416355][ T6024] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 454.428138][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.437651][ T6024] usb 2-1: Product: syz [ 454.442191][ T6024] usb 2-1: Manufacturer: syz [ 454.450013][ T6024] usb 2-1: SerialNumber: syz [ 454.457807][ T6024] usb 2-1: config 0 descriptor?? [ 455.064475][ T913] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 455.493711][ T5937] usb 1-1: USB disconnect, device number 38 [ 455.674554][ T913] usb 5-1: Using ep0 maxpacket: 8 [ 455.893583][ T913] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 455.907408][ T913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.917897][ T913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.927805][ T913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.961779][T10891] fuse: Unknown parameter 'user_id00000000000000000000' [ 456.005618][ T913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.021090][ T913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.030846][ T913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.296112][ T913] usb 5-1: usb_control_msg returned -32 [ 456.301775][ T913] usbtmc 5-1:16.0: can't read capabilities [ 457.134508][ T5937] usb 2-1: USB disconnect, device number 46 [ 458.158190][ T913] usb 5-1: USB disconnect, device number 35 [ 458.661024][ T913] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 459.079678][ T913] usb 5-1: Using ep0 maxpacket: 8 [ 459.202120][ T913] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.322402][T10915] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 459.331494][T10915] team0: Port device netdevsim0 added [ 459.361882][ T913] usb 5-1: config 1 interface 0 has no altsetting 0 [ 459.416546][ T913] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.40 [ 459.442412][ T913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.452777][ T913] usb 5-1: Product: з [ 459.474583][ T913] usb 5-1: Manufacturer: ೛凷邳殰揺聍ᾷუ净聯筧䒀ꔤꓙ莫醅ᦣꋻ璮꿎溁ሎ튍磚췄净ꑻퟧᇎ䒕볎䥨砼瓜⍅᫂뷑耙ન頩抮쀅앜闶ύ볆䳏Ꮘ씫ꈙ넂礨﵇쏀ｃ㞼㹄⦳祁ꄣ滐ᇠ㛾驓≱誑셼럹球䠔淢댨禗逻௣䁰䭅奄睱絨鎃㎃쩃孎㻕ᜃ෽눸柋맞ꙏ艻龩䙫鸩땤退콰뢆 [ 459.507898][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.544382][ T913] usb 5-1: SerialNumber: 㯇ḥ퉤ꘀᘔ룮Ʒ爐烁ᇽ왢隋췻⒨闯퐒땹㡨ᅉ䴁뎬ﵬ쁤냚杦ǹᙨ仧䐵٩彬ᓘᘝ␵킣틒씯웹ᾂ솂㱦ꈺ㟅∲鞊䷊枲绦栯鋧奋襆璇⾖ŵ瞍諅ʝ礀╼ш謭蒪溭拗炜窥햋ｅ〇觳Ⴈ輿즼挼ᆒ⴮闾顽ᘯ얡蜻骷汦ꣀ錊阏썬嶟忒爨ӌꐳ郙䱻콳 [ 459.575579][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.698126][T10925] fuse: Bad value for 'fd' [ 459.990041][ T913] usbhid 5-1:1.0: can't add hid device: -71 [ 460.076661][ T913] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 460.125733][ T913] usb 5-1: USB disconnect, device number 36 [ 464.747907][T10970] input: syz1 as /devices/virtual/input/input49 [ 464.821434][T10973] fuse: Unknown parameter 'user_id00000000000000000000' [ 465.201245][T10978] input: syz1 as /devices/virtual/input/input50 [ 467.095742][T11004] input: syz1 as /devices/virtual/input/input51 [ 467.276439][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 468.076965][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 469.532308][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 469.532320][ T30] audit: type=1326 audit(1756385379.305:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.586181][ T30] audit: type=1326 audit(1756385379.305:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.613423][ T30] audit: type=1326 audit(1756385379.305:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.638860][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.646686][ T30] audit: type=1326 audit(1756385379.305:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.670087][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.676825][ T30] audit: type=1326 audit(1756385379.305:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.700777][ T30] audit: type=1326 audit(1756385379.305:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.724169][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.896759][ T30] audit: type=1326 audit(1756385379.305:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 469.920193][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.062587][T11044] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 470.062587][T11044] program syz.3.1498 not setting count and/or reply_len properly [ 470.429702][ T30] audit: type=1326 audit(1756385379.305:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 470.500650][ T30] audit: type=1326 audit(1756385379.305:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 470.524056][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.532492][ T30] audit: type=1326 audit(1756385379.305:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 470.555883][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.084558][ T913] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 473.165941][ T6024] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 473.274547][ T913] usb 5-1: Using ep0 maxpacket: 32 [ 473.309162][ T913] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 473.318768][ T913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.337660][ T6024] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.348006][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.361373][ T6024] usb 2-1: Product: syz [ 473.369840][ T913] usb 5-1: Product: syz [ 473.377076][ T6024] usb 2-1: Manufacturer: syz [ 473.382940][ T6024] usb 2-1: SerialNumber: syz [ 473.387741][ T913] usb 5-1: Manufacturer: syz [ 473.402718][ T6024] usb 2-1: config 0 descriptor?? [ 473.413744][ T913] usb 5-1: SerialNumber: syz [ 473.489509][ T913] usb 5-1: config 0 descriptor?? [ 473.498278][ T913] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 473.664592][ T6024] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.036026][T11106] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 475.036026][T11106] program syz.3.1515 not setting count and/or reply_len properly [ 475.460260][ T913] gspca_ov534_9: reg_r err -71 [ 475.890346][ T913] gspca_ov534_9: Unknown sensor 0000 [ 475.890430][ T913] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 475.906469][ T913] usb 5-1: USB disconnect, device number 37 [ 476.045688][T11113] lo speed is unknown, defaulting to 1000 [ 476.051780][T11113] lo speed is unknown, defaulting to 1000 [ 476.062304][T11113] lo speed is unknown, defaulting to 1000 [ 476.082363][T11113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 476.119444][T11113] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 476.235225][T11113] lo speed is unknown, defaulting to 1000 [ 476.250006][T11113] lo speed is unknown, defaulting to 1000 [ 476.261723][T11113] lo speed is unknown, defaulting to 1000 [ 476.273402][T11113] lo speed is unknown, defaulting to 1000 [ 476.286099][T11113] lo speed is unknown, defaulting to 1000 [ 476.392625][ T6024] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 476.393648][ T30] audit: type=1400 audit(1756385385.815:747): avc: denied { setopt } for pid=11109 comm="syz.0.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 476.451217][ T30] audit: type=1400 audit(1756385385.975:748): avc: denied { connect } for pid=11109 comm="syz.0.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 476.458047][ T6024] usb 2-1: USB disconnect, device number 47 [ 476.470685][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.496757][ T30] audit: type=1400 audit(1756385385.995:749): avc: denied { mount } for pid=11109 comm="syz.0.1517" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 476.881225][ T5587] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 477.012319][T11127] ubi: mtd0 is already attached to ubi31 [ 477.076014][ T5587] usb 5-1: device descriptor read/64, error -71 [ 477.156686][ T30] audit: type=1400 audit(1756385386.915:750): avc: denied { mount } for pid=11128 comm="syz.0.1522" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 477.514435][ T5587] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 477.694393][ T5587] usb 5-1: device descriptor read/64, error -71 [ 477.796193][ T30] audit: type=1400 audit(1756385387.565:751): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 477.834216][ T5587] usb usb5-port1: attempt power cycle [ 478.284350][ T5587] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 478.304992][ T5587] usb 5-1: device descriptor read/8, error -71 [ 478.586469][ T5587] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 478.614838][ T5587] usb 5-1: device descriptor read/8, error -71 [ 478.725248][ T5587] usb usb5-port1: unable to enumerate USB device [ 479.934872][T11172] 9pnet_virtio: no channels available for device syz [ 480.004483][ T30] audit: type=1400 audit(1756385389.745:752): avc: denied { mount } for pid=11161 comm="syz.1.1531" name="/" dev="rpc_pipefs" ino=29933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 482.974067][ T30] audit: type=1400 audit(1756385392.745:753): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 483.221558][T11215] input: syz1 as /devices/virtual/input/input52 [ 483.315440][T11216] input: syz1 as /devices/virtual/input/input53 [ 485.539352][T11218] overlayfs: failed to resolve './file1': -2 [ 485.750578][T11218] tmpfs: Bad value for 'mpol' [ 486.007047][ T5934] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 486.221247][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 486.241484][ T5934] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 486.250031][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.272654][ T5934] usb 1-1: config 0 has no interface number 0 [ 486.290780][ T5934] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 486.329197][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.447446][ T5934] usb 1-1: config 0 descriptor?? [ 486.463500][ T5934] ldusb 1-1:0.55: Interrupt in endpoint not found [ 486.873685][ T5964] usb 1-1: USB disconnect, device number 39 [ 488.186316][ T913] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 488.446250][ T913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 488.453706][ T913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 488.464799][ T913] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.900211][ T913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 488.907731][ T913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 488.918478][ T913] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 488.930601][ T913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 488.938109][ T913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 488.993395][ T913] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.013819][ T913] usb 5-1: string descriptor 0 read error: -22 [ 489.024168][ T913] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 489.037950][ T913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.072481][ T913] adutux 5-1:168.0: interrupt endpoints not found [ 489.234716][ T5934] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 489.602159][ T6024] usb 5-1: USB disconnect, device number 42 [ 489.688137][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 489.714562][ T5934] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 489.724213][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.735781][ T5934] usb 1-1: Product: syz [ 489.741419][ T5934] usb 1-1: Manufacturer: syz [ 489.748077][ T5934] usb 1-1: SerialNumber: syz [ 489.760337][ T5934] usb 1-1: config 0 descriptor?? [ 489.782638][ T5934] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 490.949921][T11287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11287 comm=syz.1.1568 [ 491.330298][T11290] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 491.334398][ T30] audit: type=1400 audit(1756385401.055:754): avc: denied { getopt } for pid=11286 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 491.947870][ T5934] gspca_ov534_9: reg_r err -71 [ 492.284431][ T5934] gspca_ov534_9: Unknown sensor 0000 [ 492.284505][ T5934] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 492.315918][ T5934] usb 1-1: USB disconnect, device number 40 [ 493.951296][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1575'. [ 494.334392][ T5909] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 494.374331][ T5934] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 494.578122][ T5934] usb 5-1: config 0 has no interfaces? [ 494.646905][ T5934] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 494.656818][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.665248][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.712120][ T5909] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.721546][ T5909] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 494.725003][ T5934] usb 5-1: config 0 descriptor?? [ 494.767454][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.797098][ T5909] usb 3-1: config 0 descriptor?? [ 494.868131][T11331] fuse: Unknown parameter '0x0000000000000009' [ 495.033272][ T5909] usb 5-1: USB disconnect, device number 43 [ 495.783406][T11341] input: syz1 as /devices/virtual/input/input54 [ 495.944320][ T6024] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 496.386170][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 496.460088][ T6024] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 496.470505][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.484425][ T6024] usb 5-1: Product: syz [ 496.488652][ T6024] usb 5-1: Manufacturer: syz [ 496.493365][ T6024] usb 5-1: SerialNumber: syz [ 496.530931][ T6024] usb 5-1: config 0 descriptor?? [ 496.560558][ T6024] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 497.613191][ T5587] usb 3-1: USB disconnect, device number 47 [ 497.756779][T11347] input: syz1 as /devices/virtual/input/input55 [ 497.872141][ T30] audit: type=1400 audit(1756385407.645:755): avc: denied { bind } for pid=11349 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 498.081083][T11356] fuse: Unknown parameter '0x0000000000000004' [ 499.190839][ T6024] gspca_ov534_9: reg_r err -71 [ 499.975474][ T6024] gspca_ov534_9: Unknown sensor 0000 [ 499.975529][ T6024] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 500.049526][ T6024] usb 5-1: USB disconnect, device number 44 [ 500.802347][ T30] audit: type=1400 audit(1756385410.575:756): avc: denied { ioctl } for pid=11382 comm="syz.4.1592" path="socket:[30443]" dev="sockfs" ino=30443 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 500.977898][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.984356][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.384520][ T30] audit: type=1400 audit(1756385412.135:757): avc: denied { setattr } for pid=11382 comm="syz.4.1592" name="UDP-Lite" dev="sockfs" ino=29604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 502.996484][T11410] Set syz1 is full, maxelem 65536 reached [ 506.475393][ T30] audit: type=1326 audit(1756385416.205:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 506.749077][ T30] audit: type=1326 audit(1756385416.205:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 506.794596][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1608'. [ 506.854055][ T30] audit: type=1326 audit(1756385416.205:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 506.942869][ T30] audit: type=1326 audit(1756385416.205:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 506.966303][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.695399][ T30] audit: type=1326 audit(1756385416.205:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 507.724490][ T30] audit: type=1326 audit(1756385416.205:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 507.802935][ T30] audit: type=1326 audit(1756385416.205:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 507.999055][ T30] audit: type=1326 audit(1756385416.205:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 508.022646][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.158960][ T30] audit: type=1326 audit(1756385416.215:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 508.185786][ T30] audit: type=1326 audit(1756385416.215:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11441 comm="syz.4.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6d78ebe9 code=0x7ffc0000 [ 510.169543][T11492] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 511.214516][ C0] ================================================================== [ 511.222626][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 511.230529][ C0] Read of size 2 at addr ffff88805c1f382a by task swapper/0/0 [ 511.237977][ C0] [ 511.240293][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 511.240310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.240319][ C0] Call Trace: [ 511.240326][ C0] [ 511.240332][ C0] dump_stack_lvl+0x116/0x1f0 [ 511.240352][ C0] print_report+0xcd/0x630 [ 511.240368][ C0] ? __virt_addr_valid+0x81/0x610 [ 511.240386][ C0] ? __phys_addr+0xe8/0x180 [ 511.240404][ C0] ? rose_timer_expiry+0x45a/0x4d0 [ 511.240424][ C0] kasan_report+0xe0/0x110 [ 511.240439][ C0] ? rose_timer_expiry+0x45a/0x4d0 [ 511.240459][ C0] rose_timer_expiry+0x45a/0x4d0 [ 511.240479][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.240497][ C0] call_timer_fn+0x197/0x620 [ 511.240518][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 511.240540][ C0] ? rcu_is_watching+0x12/0xc0 [ 511.240556][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.240576][ C0] __run_timers+0x6ef/0x960 [ 511.240597][ C0] ? __pfx___run_timers+0x10/0x10 [ 511.240623][ C0] run_timer_base+0x114/0x190 [ 511.240643][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 511.240663][ C0] ? rcu_is_watching+0x12/0xc0 [ 511.240679][ C0] run_timer_softirq+0x1a/0x40 [ 511.240699][ C0] handle_softirqs+0x216/0x8e0 [ 511.240723][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 511.240742][ C0] __irq_exit_rcu+0x109/0x170 [ 511.240757][ C0] irq_exit_rcu+0x9/0x30 [ 511.240772][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 511.240787][ C0] [ 511.240792][ C0] [ 511.240797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.240812][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 511.240827][ C0] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 511.240840][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 511.240853][ C0] RAX: 0000000001fa16db RBX: 0000000000000000 RCX: ffffffff8b93bc29 [ 511.240862][ C0] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 511.240871][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 511.240880][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 511.240888][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4c90 R15: 0000000000000000 [ 511.240901][ C0] ? ct_kernel_exit+0x139/0x190 [ 511.240919][ C0] default_idle+0x13/0x20 [ 511.240934][ C0] default_idle_call+0x6d/0xb0 [ 511.240953][ C0] do_idle+0x391/0x510 [ 511.240971][ C0] ? __pfx_do_idle+0x10/0x10 [ 511.240987][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 511.241004][ C0] cpu_startup_entry+0x4f/0x60 [ 511.241020][ C0] rest_init+0x16b/0x2b0 [ 511.241037][ C0] ? acpi_subsystem_init+0x133/0x180 [ 511.241058][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 511.241073][ C0] start_kernel+0x3ee/0x4d0 [ 511.241087][ C0] x86_64_start_reservations+0x18/0x30 [ 511.241100][ C0] x86_64_start_kernel+0x130/0x190 [ 511.241114][ C0] common_startup_64+0x13e/0x148 [ 511.241133][ C0] [ 511.241138][ C0] [ 511.537438][ C0] Allocated by task 10845: [ 511.541841][ C0] kasan_save_stack+0x33/0x60 [ 511.546500][ C0] kasan_save_track+0x14/0x30 [ 511.551154][ C0] __kasan_kmalloc+0xaa/0xb0 [ 511.555734][ C0] kernfs_fop_open+0x244/0xda0 [ 511.560476][ C0] do_dentry_open+0x97f/0x1530 [ 511.565215][ C0] vfs_open+0x82/0x3f0 [ 511.569263][ C0] path_openat+0x1de4/0x2cb0 [ 511.573830][ C0] do_filp_open+0x20b/0x470 [ 511.578308][ C0] do_sys_openat2+0x11b/0x1d0 [ 511.582965][ C0] __x64_sys_openat+0x174/0x210 [ 511.587796][ C0] do_syscall_64+0xcd/0x4c0 [ 511.592279][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.598147][ C0] [ 511.600447][ C0] Freed by task 10845: [ 511.604487][ C0] kasan_save_stack+0x33/0x60 [ 511.609139][ C0] kasan_save_track+0x14/0x30 [ 511.613791][ C0] kasan_save_free_info+0x3b/0x60 [ 511.618799][ C0] __kasan_slab_free+0x60/0x70 [ 511.623539][ C0] kfree+0x2b4/0x4d0 [ 511.627415][ C0] kernfs_fop_release+0x12c/0x1e0 [ 511.632414][ C0] __fput+0x402/0xb70 [ 511.636375][ C0] fput_close_sync+0x118/0x210 [ 511.641119][ C0] __x64_sys_close+0x8b/0x120 [ 511.645775][ C0] do_syscall_64+0xcd/0x4c0 [ 511.650257][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.656125][ C0] [ 511.658425][ C0] The buggy address belongs to the object at ffff88805c1f3800 [ 511.658425][ C0] which belongs to the cache kmalloc-512 of size 512 [ 511.672452][ C0] The buggy address is located 42 bytes inside of [ 511.672452][ C0] freed 512-byte region [ffff88805c1f3800, ffff88805c1f3a00) [ 511.686134][ C0] [ 511.688435][ C0] The buggy address belongs to the physical page: [ 511.694819][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c1f0 [ 511.703552][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 511.712026][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 511.719544][ C0] page_type: f5(slab) [ 511.723506][ C0] raw: 00fff00000000040 ffff88801b841c80 ffffea000172c300 dead000000000002 [ 511.732064][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 511.740630][ C0] head: 00fff00000000040 ffff88801b841c80 ffffea000172c300 dead000000000002 [ 511.749289][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 511.757935][ C0] head: 00fff00000000002 ffffea0001707c01 00000000ffffffff 00000000ffffffff [ 511.766583][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 511.775224][ C0] page dumped because: kasan: bad access detected [ 511.781609][ C0] page_owner tracks the page as allocated [ 511.787296][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1320, tgid 1320 (kworker/u8:6), ts 71027848285, free_ts 15764038180 [ 511.806544][ C0] post_alloc_hook+0x1c0/0x230 [ 511.811295][ C0] get_page_from_freelist+0x132b/0x38e0 [ 511.816816][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 511.822685][ C0] alloc_pages_mpol+0x1fb/0x550 [ 511.827518][ C0] new_slab+0x247/0x330 [ 511.831659][ C0] ___slab_alloc+0xcf2/0x1740 [ 511.836319][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 511.841671][ C0] __kmalloc_noprof+0x2f2/0x510 [ 511.846499][ C0] fib6_info_alloc+0x40/0x160 [ 511.851159][ C0] ip6_route_info_create+0x14c/0x870 [ 511.856425][ C0] ip6_route_add.part.0+0x22/0x1d0 [ 511.861513][ C0] ip6_route_add+0x45/0x60 [ 511.865905][ C0] addrconf_prefix_route+0x2fd/0x510 [ 511.871166][ C0] addrconf_add_linklocal+0x329/0x500 [ 511.876532][ C0] addrconf_addr_gen+0x364/0x3b0 [ 511.881451][ C0] addrconf_init_auto_addrs+0x2ba/0x810 [ 511.886976][ C0] page last free pid 1 tgid 1 stack trace: [ 511.892750][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 511.897930][ C0] free_contig_range+0x183/0x4b0 [ 511.902849][ C0] destroy_args+0x794/0xc10 [ 511.907333][ C0] debug_vm_pgtable+0x1a32/0x3640 [ 511.912340][ C0] do_one_initcall+0x120/0x6e0 [ 511.917081][ C0] kernel_init_freeable+0x5c2/0x910 [ 511.922261][ C0] kernel_init+0x1c/0x2b0 [ 511.926586][ C0] ret_from_fork+0x5d7/0x6f0 [ 511.931153][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.935896][ C0] [ 511.938199][ C0] Memory state around the buggy address: [ 511.943799][ C0] ffff88805c1f3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 511.951835][ C0] ffff88805c1f3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 511.959872][ C0] >ffff88805c1f3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 511.967904][ C0] ^ [ 511.973247][ C0] ffff88805c1f3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 511.981283][ C0] ffff88805c1f3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 511.989318][ C0] ================================================================== [ 511.997441][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 512.004627][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 512.013532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.023556][ C0] Call Trace: [ 512.026805][ C0] [ 512.029687][ C0] dump_stack_lvl+0x3d/0x1f0 [ 512.034285][ C0] vpanic+0x6e8/0x7a0 [ 512.038257][ C0] ? __pfx_vpanic+0x10/0x10 [ 512.042770][ C0] ? rose_timer_expiry+0x45a/0x4d0 [ 512.047871][ C0] panic+0xca/0xd0 [ 512.051582][ C0] ? __pfx_panic+0x10/0x10 [ 512.056003][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 512.061098][ C0] check_panic_on_warn+0xab/0xb0 [ 512.066019][ C0] end_report+0x107/0x170 [ 512.070321][ C0] kasan_report+0xee/0x110 [ 512.074707][ C0] ? rose_timer_expiry+0x45a/0x4d0 [ 512.079795][ C0] rose_timer_expiry+0x45a/0x4d0 [ 512.084706][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.090143][ C0] call_timer_fn+0x197/0x620 [ 512.094717][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 512.099802][ C0] ? rcu_is_watching+0x12/0xc0 [ 512.104537][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.109983][ C0] __run_timers+0x6ef/0x960 [ 512.114477][ C0] ? __pfx___run_timers+0x10/0x10 [ 512.119493][ C0] run_timer_base+0x114/0x190 [ 512.124144][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 512.129315][ C0] ? rcu_is_watching+0x12/0xc0 [ 512.134051][ C0] run_timer_softirq+0x1a/0x40 [ 512.138788][ C0] handle_softirqs+0x216/0x8e0 [ 512.143523][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 512.148779][ C0] __irq_exit_rcu+0x109/0x170 [ 512.153425][ C0] irq_exit_rcu+0x9/0x30 [ 512.157639][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 512.163243][ C0] [ 512.166156][ C0] [ 512.169060][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.175030][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 512.180655][ C0] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 512.200240][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 512.206282][ C0] RAX: 0000000001fa16db RBX: 0000000000000000 RCX: ffffffff8b93bc29 [ 512.214222][ C0] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 512.222176][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 512.230127][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 512.238078][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4c90 R15: 0000000000000000 [ 512.246027][ C0] ? ct_kernel_exit+0x139/0x190 [ 512.250854][ C0] default_idle+0x13/0x20 [ 512.255154][ C0] default_idle_call+0x6d/0xb0 [ 512.259890][ C0] do_idle+0x391/0x510 [ 512.263931][ C0] ? __pfx_do_idle+0x10/0x10 [ 512.268503][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 512.273672][ C0] cpu_startup_entry+0x4f/0x60 [ 512.278506][ C0] rest_init+0x16b/0x2b0 [ 512.282722][ C0] ? acpi_subsystem_init+0x133/0x180 [ 512.287981][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 512.293495][ C0] start_kernel+0x3ee/0x4d0 [ 512.297966][ C0] x86_64_start_reservations+0x18/0x30 [ 512.303395][ C0] x86_64_start_kernel+0x130/0x190 [ 512.308475][ C0] common_startup_64+0x13e/0x148 [ 512.313385][ C0] [ 512.316575][ C0] Kernel Offset: disabled [ 512.320880][ C0] Rebooting in 86400 seconds..