last executing test programs: 23.115360816s ago: executing program 3 (id=5967): sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 22.991300671s ago: executing program 3 (id=5968): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 22.510255455s ago: executing program 3 (id=5969): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss, @mss={0x2, 0x1}, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @timestamp], 0x69) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 19.942153949s ago: executing program 3 (id=5975): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r3, r1, r2, 0xa000000, 0x80000001, 0x80000001, 0x0, 0x0, 0x4000000, 0xd, 0x20000}) 18.298150659s ago: executing program 3 (id=5977): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() prlimit64(r2, 0xc, &(0x7f0000000140)={0x40000000000004, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$]*^.}'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 16.528560653s ago: executing program 3 (id=5983): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x5c26, [{0xd, 0x4, 0x1ff}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x4, 0x1}, {0x1, 0x4}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x7, 0x3}, @const={0x3}, @union={0x2, 0x0, 0x0, 0x5, 0x1, 0xe0d}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4c, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x6}}]}, {0x0, [0x61, 0x30]}}, 0x0, 0xc0, 0x0, 0x1, 0x80, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000040), 0x5, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x35000003) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6825, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0xfffff6d4, 0x1, 0x4, 0x5, 0x0, 0x12, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13.171482493s ago: executing program 4 (id=5992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r6, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000000000000001000000140004800800024000000000"], 0x92fc}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.148363918s ago: executing program 4 (id=5996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) fcntl$getflags(r1, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r5, 0xa29, 0x0, 0x2000, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 8.568754873s ago: executing program 2 (id=5999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.566142524s ago: executing program 4 (id=6000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss, @mss={0x2, 0x1}, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @timestamp], 0x69) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.446730766s ago: executing program 0 (id=6001): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x409, 0x0, 0x25df9bff}, 0x20}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "10db3fa0"}, 0x5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x0) 7.095704009s ago: executing program 1 (id=6003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x9, @mcast1}, r4}}, 0x48) fcntl$notify(r2, 0x402, 0x8000003d) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.985737064s ago: executing program 4 (id=6004): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0xfffffffffffffffe, &(0x7f0000000840)=0x47) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x94402, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0xa, 0x101) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x8040ae9f, &(0x7f0000000080)=@arm64) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xffff, 0x3}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xff, 0x3ff, 0x80, 0x1, 0x635, 0x7, 0x3}}, {0xa, 0x2, [0xeb0c, 0x1, 0x8000]}}, {{0x1c, 0x1, {0x5b, 0x1, 0x8000, 0x8119, 0x2, 0x5, 0xe, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0x0, 0x1, 0x0, 0xfffffffb, 0x38, 0x4}}, {0xc, 0x2, [0x2, 0x0, 0xf485, 0x7a38]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x9, 0xc2d, 0x40, 0x1, 0x9, 0x2, 0x6}}, {0x10, 0x2, [0x40, 0x5, 0x83be, 0xe822, 0x8, 0x0]}}, {{0x1c, 0x1, {0x2, 0xc4, 0xffff, 0x6, 0x0, 0xffffff00, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x8, 0x2852]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x10004000}, 0x20000000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) read$hiddev(r12, &(0x7f0000000100)=""/34, 0x22) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61) dup3(r0, r0, 0x0) 6.912167449s ago: executing program 2 (id=6005): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b1800068014000400200100"/168], 0xac}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810006c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f7117", 0xb6) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000005240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x5}, {0x5, 0x24, 0x0, 0xe2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xbd9, 0x401, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3, 0x9, 0xd7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0xff, 0x67}}}}}]}}]}}, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r5, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4040) 6.000121464s ago: executing program 2 (id=6006): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8014) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 5.871960607s ago: executing program 0 (id=6007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0xe8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0x3}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xff, 0x3ff, 0x80, 0x1, 0x635, 0x7, 0x3}}, {0xa, 0x2, [0xeb0c, 0x1, 0x8000]}}, {{0x1c, 0x1, {0x5b, 0x1, 0x8000, 0x8119, 0x2, 0x5, 0xe, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x5, 0x9, 0x0, 0x1, 0x0, 0xfffffffb, 0x38, 0x4}}, {0xc, 0x2, [0x2, 0x0, 0xf485, 0x7a38]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xc4, 0xffff, 0x6, 0x0, 0xffffff00, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10004000}, 0x20000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61) 5.26116615s ago: executing program 0 (id=6008): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x7, 0xfffff010}, {0x28, 0x0, 0x0, 0xbffff024}, {0x6, 0xba, 0x9, 0x40000007}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x100, 0x70bd26, 0x25dfdbf9, {0xa, 0x14, 0x20, 0x1, 0x8, 0x0, 0x0, 0x6, 0xf799ab692c18ca67}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}}, 0x8081) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpgid(0xffffffffffffffff) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0) r5 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={0x14, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4044882) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r7 = getpid() r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) r9 = syz_pidfd_open(r7, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000180), 0x1000, 0x200000) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x8000, 0x1}}) setns(r9, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000600)={0x2c, &(0x7f00000001c0)={0x20, 0x3, 0x90, {0x90, 0x24, "5bd261da3b5abcdaa70a4d2dcced2ef28b2e3548d580cf625a92acc80cdb5e3cbe286fc68b174904138440e81eadcedaa9390ad5ee2c95304a843e0d80f3c37d5e2fc3b66dd1cbf4b72656e1a35fa08f82197b04c5b3f6f532bd4cd0756cf55f51b19e90b365e39ddcffc13a0b90a277f6048b1a460d69f9b5d340a8a8ee7f5e7431b737824ba2d2a7f13da4ce11"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="00036800000068036f8c39b071a55c686f7d14176afc850aea2976f2059f58979e65ee7fbfe2972c248883a68a8ae7c46ff4a1ab13f1d7f7bb8ee8fe825474a0d323e1f08f9feb02588b4c7aafbc6921b7945bd7fcea406a261f37e82b40c9b449eff111177780debc9e4201d14e5bd255e6f11f2c8cbeda3c34ff3d0c1795fdb5018ab9c4bd55"], &(0x7f0000000440)={0x0, 0xf, 0x19a, {0x5, 0xf, 0x19a, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "84ca1a46824b5c626fea04b787065b47"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3a2a99b47e1ee1ecfc833760fa2df529"}, @generic={0xe8, 0x10, 0xb, "3435b9ca11d6073ec2ed992edc5de06cd16daed9c76fa487388ad345db05ab465db0db8075703a87834d5a769d7d4e438a3bd067a3936804f7d1296311ff2dc39a1314409aa07ece1e61c177e2caf343d86183b407d899eddf1753bad7fcf49b2809c2f3b68635c94727a946fa9af5da88ae2c487aed54debf7d9bf2a8e62a9977b600cf6a26d5a4a4d6be4553a0b102e33e66eb65fde21322bede90ddabab08ba33656f8ccb109f165b639461415da17bda4f7e85de6dbfef002c97b1ef18898e2c29d3b7d2cfd353c61a008546325512231410659e056d2471b29c7c756e56de521715c1"}, @generic={0x7e, 0x10, 0x1, "2df60bc003934ae1838662b25f631d30831a58e5efd1b22de0970693a252b0401b4d653647de6ae55bb2b204c01c55242f51c36b479b8ce39246e6a5a7b64106023757e5cda33c28b676d888abe653cf12ec9563146c9f4362349052d3d78a440d9f27988182be2b9cf80afa81b7b820d808ab08f214588db05c75"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x6, 0x5}]}}, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x8, 0x5, 0x9, 0x0, 0xfff}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0x9, 0xab, "93a719376389933703575560a78bb594aa118366dfa5cffd688b5bddb375e1ba28a5b87f70a21c85825419ae5b219939c1a43ff70f86715ff0f241ec9b3867e7ef4b046ee9176645e76f6bb19c1fceb685919a194d42edac91e43074fcaac2361276524f2a56a68dd250524a4d90900996fd122d2b8c72466cbe7ac66a386f88c181193527e75862248a8d87e17278969b911783a2508829d4c775419c365a851faee1c44d473f1142eae4"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x140, 0x10, [0xfff]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xf2}, 0x0, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x601}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @local}, &(0x7f0000000980)={0x40, 0x19, 0x2, "58fc"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x66}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x68}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7e, 0xd}}}}}]}}]}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x80, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000000c0)={0x18, &(0x7f0000000000)={0x40, 0x11, 0x7, {0x7, 0x7, '9\r\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.259252429s ago: executing program 4 (id=6009): sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5.222341655s ago: executing program 4 (id=6010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe) 5.111999233s ago: executing program 1 (id=6011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss, @mss={0x2, 0x1}, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @timestamp], 0x69) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.407668219s ago: executing program 2 (id=6012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) fcntl$getflags(r1, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r5, 0xa29, 0x0, 0x2000, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 3.312571778s ago: executing program 1 (id=6014): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) 3.27151122s ago: executing program 2 (id=6015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.027080002s ago: executing program 1 (id=6016): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000150001002bbd7000fedbdf250a7828c8", @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r4, 0x0, 0x1ff, 0x10001) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x0, "3b3ad6f32e978900d10052d0002000000000000000f3ffff05000000ff00ffe8"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x40, 0x0, 0x181, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}]}, 0x40}}, 0x884) finit_module(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') preadv(r7, 0x0, 0x0, 0x16, 0xfffffff9) 1.538254298s ago: executing program 1 (id=6017): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) migrate_pages(0x0, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x5, r2, 0x80000}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) truncate(&(0x7f0000000100)='./file0\x00', 0x7ff) 1.468419575s ago: executing program 0 (id=6018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)='\x00\x00', 0xfffffffffffffe6d, 0x80, 0x0, 0x0) 457.607363ms ago: executing program 32 (id=5983): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x5c26, [{0xd, 0x4, 0x1ff}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x4, 0x1}, {0x1, 0x4}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x7, 0x3}, @const={0x3}, @union={0x2, 0x0, 0x0, 0x5, 0x1, 0xe0d}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4c, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x6}}]}, {0x0, [0x61, 0x30]}}, 0x0, 0xc0, 0x0, 0x1, 0x80, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) futex(&(0x7f0000000040), 0x5, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x35000003) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6825, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0xfffff6d4, 0x1, 0x4, 0x5, 0x0, 0x12, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 318.520685ms ago: executing program 0 (id=6020): sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 135.043523ms ago: executing program 0 (id=6021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x9, @mcast1}, r4}}, 0x48) fcntl$notify(r2, 0x402, 0x8000003d) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 70.746571ms ago: executing program 2 (id=6022): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) get_mempolicy(&(0x7f0000000000), 0x0, 0x11880, &(0x7f0000fff000/0x1000)=nil, 0x2) 0s ago: executing program 1 (id=6023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @mss, @mss={0x2, 0x1}, @mss={0x2, 0x6}, @sack_perm, @sack_perm, @timestamp], 0x69) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): [ 2221.323151][T26280] Lens B: ================= START STATUS ================= [ 2221.330569][T26280] Lens B: Focus, Absolute: 0 [ 2221.335188][T26280] Lens B: ================== END STATUS ================== [ 2221.344391][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.360793][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.704409][ T24] usb 5-1: Product: syz [ 2221.708683][ T24] usb 5-1: Manufacturer: syz [ 2221.714945][ T24] usb 5-1: SerialNumber: syz [ 2222.007393][T26287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2222.021462][ T24] usb 5-1: config 0 descriptor?? [ 2222.457202][ T24] usb 5-1: can't set config #0, error -71 [ 2222.487437][ T24] usb 5-1: USB disconnect, device number 65 [ 2236.097773][T26422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4823'. [ 2237.643857][T26438] No control pipe specified [ 2241.986164][T26471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4834'. [ 2244.713610][T26494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4844'. [ 2253.149024][ T3074] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2253.460616][T26571] input: syz1 as /devices/virtual/input/input80 [ 2255.087178][ T30] audit: type=1326 audit(1746274653.777:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26560 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2255.294141][ T3074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.369856][ T3074] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2255.444878][ T3074] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2255.574372][ T3074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.829959][ T3074] usb 3-1: config 0 descriptor?? [ 2256.569391][ T5915] usb 3-1: USB disconnect, device number 72 [ 2257.557180][ T3074] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 2257.825505][ T3074] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.048489][ T3074] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2258.058413][ T3074] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2258.068123][ T3074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.078381][ T3074] usb 5-1: config 0 descriptor?? [ 2259.101157][ T3074] usb 5-1: USB disconnect, device number 66 [ 2260.193471][T26628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4875'. [ 2262.611566][T26651] syz.3.4883: attempt to access beyond end of device [ 2262.611566][T26651] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2264.869780][ T30] audit: type=1326 audit(1746274663.577:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26647 comm="syz.2.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2268.703809][T26710] input: syz1 as /devices/virtual/input/input81 [ 2269.853749][ T30] audit: type=1326 audit(1746274668.407:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26704 comm="syz.0.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2271.009106][T20609] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2271.223412][T20609] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2271.369994][T20609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.629175][ T3074] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2271.941592][T20609] usb 3-1: Product: syz [ 2271.953609][T20609] usb 3-1: Manufacturer: syz [ 2271.967505][T20609] usb 3-1: SerialNumber: syz [ 2272.142529][T20609] usb 3-1: config 0 descriptor?? [ 2272.252602][ T3074] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2272.751264][T20609] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2272.766736][ T3074] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2272.855793][ T3074] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2273.279078][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.708385][T20609] usb 3-1: USB disconnect, device number 73 [ 2274.428044][T26751] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4907'. [ 2274.536547][T26750] overlayfs: missing 'lowerdir' [ 2277.097742][ T30] audit: type=1326 audit(1746274675.797:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26743 comm="syz.1.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2277.228832][ T3074] usb 4-1: can't set config #27, error -71 [ 2277.247625][ T3074] usb 4-1: USB disconnect, device number 56 [ 2282.904210][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.914015][ T30] audit: type=1326 audit(1746274681.617:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26797 comm="syz.1.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2284.196492][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2284.975538][ T30] audit: type=1326 audit(1746274683.667:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26824 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2285.038111][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2285.162055][ T9] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2285.261533][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2285.292910][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.747949][ T9] usb 4-1: can't set config #27, error -71 [ 2286.800147][ T9] usb 4-1: USB disconnect, device number 57 [ 2287.775968][T26861] xt_hashlimit: size too large, truncated to 1048576 [ 2289.773920][ T30] audit: type=1326 audit(1746274687.867:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26862 comm="syz.1.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2291.475168][ T30] audit: type=1326 audit(1746274690.167:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26886 comm="syz.4.4940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e378e969 code=0x7fc00000 [ 2292.074649][T26905] fuse: Bad value for 'fd' [ 2293.396981][T26922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4945'. [ 2295.136941][ T30] audit: type=1326 audit(1746274693.837:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26932 comm="syz.2.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2296.243318][T26950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4951'. [ 2296.341332][T26950] overlayfs: missing 'lowerdir' [ 2300.629077][ T47] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2300.748379][T26971] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4960'. [ 2301.960970][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2301.970836][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2302.003734][ T47] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2302.044769][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.096677][ T47] usb 4-1: Product: syz [ 2302.146550][ T47] usb 4-1: Manufacturer: syz [ 2302.325993][ T47] usb 4-1: SerialNumber: syz [ 2302.333359][ T47] usb 4-1: config 0 descriptor?? [ 2302.339252][ T47] usb 4-1: can't set config #0, error -71 [ 2302.353878][ T47] usb 4-1: USB disconnect, device number 58 [ 2303.383082][T26996] xt_hashlimit: size too large, truncated to 1048576 [ 2304.267025][T27009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4969'. [ 2304.327431][T27009] overlayfs: missing 'lowerdir' [ 2308.469005][ T30] audit: type=1326 audit(1746274707.047:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27028 comm="syz.4.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e378e969 code=0x7fc00000 [ 2308.650805][T27043] xt_hashlimit: size too large, truncated to 1048576 [ 2312.230519][ T30] audit: type=1326 audit(1746274710.937:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27065 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2312.253896][ C0] vkms_vblank_simulate: vblank timer overrun [ 2316.929060][ T5911] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2317.525366][ T5911] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2317.680655][ T5911] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2317.784359][ T5911] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2317.806853][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.873596][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2317.884326][ T5911] usb 5-1: invalid MIDI out EP 0 [ 2318.074634][T27115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2318.833599][T27115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2318.874535][T27115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2318.904122][ T5911] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2318.913875][T27115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2319.340178][ T5911] usb 5-1: USB disconnect, device number 67 [ 2319.677495][T27137] udevd[27137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2319.869214][T27148] ip6gretap0: entered promiscuous mode [ 2329.338514][ T30] audit: type=1326 audit(1746274728.037:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27194 comm="syz.4.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e378e969 code=0x7fc00000 [ 2335.704714][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5028'. [ 2335.809058][T27267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2344.055332][T27308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5041'. [ 2344.321803][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2352.689244][T27365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5055'. [ 2354.520577][T27397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5061'. [ 2357.550145][ T30] audit: type=1326 audit(1746274756.217:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27416 comm="syz.0.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2358.643794][T27434] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5069'. [ 2358.895595][T27443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5073'. [ 2363.169007][ T30] audit: type=1326 audit(1746274761.867:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.0.5079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2364.410752][T27495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5081'. [ 2371.043193][T27550] No control pipe specified [ 2371.452743][ T30] audit: type=1326 audit(1746274770.157:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27536 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2375.589302][T27593] fuse: Bad value for 'group_id' [ 2375.594381][T27593] fuse: Bad value for 'group_id' [ 2377.948411][T15372] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2379.080003][T27617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5108'. [ 2382.413056][ T30] audit: type=1326 audit(1746274781.057:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27631 comm="syz.2.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2382.436431][ C0] vkms_vblank_simulate: vblank timer overrun [ 2383.678385][T15372] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2384.199799][T15372] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2384.226839][T15372] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2384.251006][T15372] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2384.269001][T15372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.292093][T15372] usb 5-1: Product: syz [ 2384.296309][T15372] usb 5-1: Manufacturer: syz [ 2384.309944][T15372] usb 5-1: SerialNumber: syz [ 2384.330948][T15372] usb 5-1: config 0 descriptor?? [ 2384.348283][T27645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2384.355670][T27645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2385.719183][T15372] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 2386.209317][T15372] usb 5-1: USB disconnect, device number 68 [ 2387.020807][T27685] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5121'. [ 2388.359039][ T30] audit: type=1326 audit(1746274786.977:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27674 comm="syz.2.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2388.382432][ C0] vkms_vblank_simulate: vblank timer overrun [ 2394.142318][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'. [ 2394.153993][T27738] Lens B: ================= START STATUS ================= [ 2394.161705][T27738] Lens B: Focus, Absolute: 0 [ 2394.167702][T27738] Lens B: ================== END STATUS ================== [ 2394.265364][T27739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2395.317822][T27748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5142'. [ 2398.981136][T27775] syz.2.5147: attempt to access beyond end of device [ 2398.981136][T27775] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2400.427353][T27780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5148'. [ 2403.922561][T27606] udevd[27606]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2404.154849][ T47] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2404.318696][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2404.658989][ T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2404.673932][ T47] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2404.685648][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.694069][ T47] usb 2-1: Product: syz [ 2404.714574][ T47] usb 2-1: Manufacturer: syz [ 2404.733268][ T47] usb 2-1: SerialNumber: syz [ 2404.822443][ T47] usb 2-1: config 0 descriptor?? [ 2404.858987][T27802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2404.869625][T27802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2405.669507][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.152742][ T47] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71 [ 2406.187734][ T47] usb 2-1: USB disconnect, device number 65 [ 2409.018303][ T30] audit: type=1400 audit(1746274807.717:426): avc: denied { create } for pid=27879 comm="syz.2.5169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2409.087358][ T30] audit: type=1400 audit(1746274807.767:427): avc: denied { write } for pid=27879 comm="syz.2.5169" name="file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2409.125202][ T30] audit: type=1400 audit(1746274807.777:428): avc: denied { open } for pid=27879 comm="syz.2.5169" path="/391/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2409.147966][ C0] vkms_vblank_simulate: vblank timer overrun [ 2409.167807][T27880] block device autoloading is deprecated and will be removed. [ 2409.201192][ T30] audit: type=1400 audit(1746274807.907:429): avc: denied { ioctl } for pid=27879 comm="syz.2.5169" path="/391/file0" dev="tmpfs" ino=2158 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2409.473602][ T30] audit: type=1400 audit(1746274807.947:430): avc: denied { unlink } for pid=19349 comm="syz-executor" name="file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2409.496335][ C0] vkms_vblank_simulate: vblank timer overrun [ 2411.514194][T27915] syz.2.5177: attempt to access beyond end of device [ 2411.514194][T27915] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2412.164271][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2412.370458][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 2412.527885][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.539998][ T9] usb 2-1: config 0 descriptor?? [ 2413.562116][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5180'. [ 2414.287624][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 2414.418984][ T30] audit: type=1326 audit(1746274813.107:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27922 comm="syz.3.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2414.448991][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2414.464586][ T9] usb 2-1: USB disconnect, device number 66 [ 2414.859012][ T47] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2415.025934][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2415.128477][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2415.178832][ T47] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2415.189961][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.226475][ T47] usb 3-1: config 0 descriptor?? [ 2415.444485][ T47] usb 3-1: USB disconnect, device number 74 [ 2417.026630][T27961] tipc: Enabling of bearer rejected, failed to enable media [ 2417.631211][ T47] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2417.982300][ T30] audit: type=1326 audit(1746274816.677:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27962 comm="syz.3.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2418.062491][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 2418.101536][ T47] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2418.222218][ T47] usb 3-1: config 0 has no interface number 0 [ 2418.293393][ T47] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2419.057005][ T47] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2419.066492][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.074997][ T47] usb 3-1: Product: syz [ 2419.079505][ T47] usb 3-1: Manufacturer: syz [ 2419.084136][ T47] usb 3-1: SerialNumber: syz [ 2419.097338][ T47] usb 3-1: config 0 descriptor?? [ 2419.282610][T27985] block device autoloading is deprecated and will be removed. [ 2419.437983][ T47] smsc75xx v1.0.0 [ 2420.677463][T28000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5198'. [ 2420.680051][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2420.698396][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2420.708484][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2420.719344][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2420.731807][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2420.742259][ T47] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2420.752794][ T47] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2420.776738][ T47] usb 3-1: USB disconnect, device number 75 [ 2421.512651][T28011] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5201'. [ 2421.601010][T28010] overlayfs: missing 'lowerdir' [ 2426.508752][T28047] block device autoloading is deprecated and will be removed. [ 2427.868951][ T3074] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 2428.089178][ T3074] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.109624][ T3074] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2428.118592][ T3074] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2428.176987][ T3074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.769504][ T3074] usb 5-1: config 0 descriptor?? [ 2429.163169][T27918] usb 5-1: USB disconnect, device number 69 [ 2432.033603][T28090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5220'. [ 2434.765597][T28117] fuse: Bad value for 'fd' [ 2437.662504][ T30] audit: type=1326 audit(1746274835.557:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2437.728596][ T30] audit: type=1326 audit(1746274835.557:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2437.755977][ T30] audit: type=1326 audit(1746274835.557:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2437.779368][ C0] vkms_vblank_simulate: vblank timer overrun [ 2438.737486][ T30] audit: type=1326 audit(1746274835.557:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2438.760973][ C0] vkms_vblank_simulate: vblank timer overrun [ 2438.767370][ T30] audit: type=1326 audit(1746274835.567:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2439.310427][ T30] audit: type=1326 audit(1746274835.567:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2439.685180][ T30] audit: type=1326 audit(1746274835.567:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2439.720808][ T30] audit: type=1326 audit(1746274835.567:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2439.814535][ T30] audit: type=1326 audit(1746274835.567:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2439.992193][ T30] audit: type=1326 audit(1746274835.567:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.3.5229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2440.391133][T28162] Lens B: ================= START STATUS ================= [ 2440.400411][T28162] Lens B: Focus, Absolute: 0 [ 2440.408916][T28162] Lens B: ================== END STATUS ================== [ 2440.930946][T28163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2443.831246][T28182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5238'. [ 2446.269743][T28212] Lens B: ================= START STATUS ================= [ 2446.277293][T28212] Lens B: Focus, Absolute: 0 [ 2446.282602][T28212] Lens B: ================== END STATUS ================== [ 2446.448162][T28195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5235'. [ 2446.610757][T28215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2448.639126][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2448.639142][ T30] audit: type=1326 audit(1746274847.307:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2448.668611][ T30] audit: type=1326 audit(1746274847.307:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2448.692019][ T30] audit: type=1326 audit(1746274847.307:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2448.718211][ T30] audit: type=1326 audit(1746274847.307:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2448.758742][ T30] audit: type=1326 audit(1746274847.307:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.238846][ T30] audit: type=1326 audit(1746274847.307:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.262271][ C0] vkms_vblank_simulate: vblank timer overrun [ 2449.268724][ T30] audit: type=1326 audit(1746274847.307:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.299151][ T30] audit: type=1326 audit(1746274847.307:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.322716][ T30] audit: type=1326 audit(1746274847.307:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.346061][ C0] vkms_vblank_simulate: vblank timer overrun [ 2449.353519][ T30] audit: type=1326 audit(1746274847.307:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28227 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2449.376903][ C0] vkms_vblank_simulate: vblank timer overrun [ 2449.890234][T28246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5251'. [ 2453.909503][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 2453.909544][ T30] audit: type=1326 audit(1746274852.617:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.252532][ T30] audit: type=1326 audit(1746274852.617:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.275853][ C0] vkms_vblank_simulate: vblank timer overrun [ 2454.282435][ T30] audit: type=1326 audit(1746274852.617:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.332881][ T30] audit: type=1326 audit(1746274852.617:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.373783][ T30] audit: type=1326 audit(1746274852.617:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.397150][ C0] vkms_vblank_simulate: vblank timer overrun [ 2454.465481][ T30] audit: type=1326 audit(1746274852.617:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.492363][ T30] audit: type=1326 audit(1746274852.617:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2454.875527][T28314] fuse: Bad value for 'fd' [ 2454.885146][ T30] audit: type=1326 audit(1746274852.617:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2455.219168][ T30] audit: type=1326 audit(1746274852.617:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2455.248950][ T30] audit: type=1326 audit(1746274852.617:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28294 comm="syz.3.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2463.596438][T28412] fuse: Unknown parameter 'grou00000000000000000000' [ 2463.919818][T28414] vhci_hcd vhci_hcd.0: port 0 already used [ 2467.102630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.829052][T20609] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2472.121991][T20609] usb 5-1: Using ep0 maxpacket: 32 [ 2472.141342][T28487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5301'. [ 2472.173972][T20609] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2472.224281][T20609] usb 5-1: config 0 has no interface number 0 [ 2473.168948][T20609] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2473.193189][T20609] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2473.224678][T20609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.951399][T20609] usb 5-1: Product: syz [ 2473.973089][T20609] usb 5-1: Manufacturer: syz [ 2474.058922][T20609] usb 5-1: SerialNumber: syz [ 2474.228775][T20609] usb 5-1: config 0 descriptor?? [ 2475.629025][T20609] usb 5-1: can't set config #0, error -71 [ 2475.671333][T20609] usb 5-1: USB disconnect, device number 70 [ 2480.496947][ T5857] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2481.288797][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2482.365121][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2482.375040][ T5857] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2482.384248][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.394448][ T5857] usb 2-1: config 0 descriptor?? [ 2483.838940][ T5911] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2483.905460][ T5857] usbhid 2-1:0.0: can't add hid device: -71 [ 2484.290596][ T5857] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2484.330922][ T5857] usb 2-1: USB disconnect, device number 67 [ 2485.110616][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 2485.151653][T28575] Lens B: ================= START STATUS ================= [ 2485.160808][T28575] Lens B: Focus, Absolute: 0 [ 2485.166196][T28575] Lens B: ================== END STATUS ================== [ 2485.230581][T28578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2485.418277][ T5911] usb 4-1: device descriptor read/all, error -71 [ 2485.499793][T28582] pim6reg: entered allmulticast mode [ 2486.079953][T28587] input: syz1 as /devices/virtual/input/input88 [ 2492.538839][ T5911] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 2492.707274][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2492.767076][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2492.934642][ T5911] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2492.956423][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.973909][ T5911] usb 5-1: config 0 descriptor?? [ 2493.708690][ T5857] usb 5-1: USB disconnect, device number 71 [ 2494.461345][T28651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5342'. [ 2494.489814][T28651] overlayfs: missing 'lowerdir' [ 2494.772013][T28658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5344'. [ 2498.208380][T28684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2501.699818][T28707] input: syz1 as /devices/virtual/input/input89 [ 2502.007785][ T9] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 2502.200259][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2502.218922][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2503.179906][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2503.189071][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.224803][ T9] usb 5-1: config 0 descriptor?? [ 2503.264476][ T3074] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2504.260416][ T9] usb 5-1: USB disconnect, device number 72 [ 2504.415715][ T3074] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2504.538991][T23173] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2505.283812][ T3074] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2505.318399][ T3074] usb 3-1: string descriptor 0 read error: -71 [ 2505.330141][ T3074] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2505.343402][ T3074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.386810][ T3074] usb 3-1: config 0 descriptor?? [ 2505.772907][T23173] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2505.809182][T23173] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2506.117629][T23173] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2506.161240][ T3074] usb 3-1: can't set config #0, error -71 [ 2506.178443][T23173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.269922][T23173] usb 4-1: Product: syz [ 2506.480347][ T3074] usb 3-1: USB disconnect, device number 76 [ 2506.539198][T23173] usb 4-1: Manufacturer: syz [ 2506.543893][T23173] usb 4-1: SerialNumber: syz [ 2506.631578][T23173] usb 4-1: config 0 descriptor?? [ 2506.637074][T23173] usb 4-1: can't set config #0, error -71 [ 2506.644209][T23173] usb 4-1: USB disconnect, device number 62 [ 2507.528957][T23173] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2507.548952][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2507.548966][ T30] audit: type=1326 audit(1746274906.217:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.1.5366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2507.578413][ C0] vkms_vblank_simulate: vblank timer overrun [ 2507.738924][T23173] usb 4-1: Using ep0 maxpacket: 16 [ 2507.770513][T28767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5372'. [ 2508.830176][T23173] usb 4-1: config index 0 descriptor too short (expected 54066, got 72) [ 2508.841999][T23173] usb 4-1: config 216 has too many interfaces: 60, using maximum allowed: 32 [ 2508.852302][T23173] usb 4-1: config 216 has an invalid descriptor of length 131, skipping remainder of the config [ 2508.863229][T23173] usb 4-1: config 216 has 0 interfaces, different from the descriptor's value: 60 [ 2508.875865][T23173] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2508.904659][T23173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.014937][T23173] usb 4-1: Product: syz [ 2509.026191][T23173] usb 4-1: Manufacturer: syz [ 2509.053849][T23173] usb 4-1: SerialNumber: syz [ 2509.132996][T28777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5374'. [ 2510.075634][T23173] usb 4-1: USB disconnect, device number 63 [ 2510.179365][T28789] tipc: Started in network mode [ 2510.258663][T28789] tipc: Node identity 4, cluster identity 4711 [ 2510.266105][T28789] tipc: Node number set to 4 [ 2510.347231][T28790] tipc: Started in network mode [ 2510.364776][T28790] tipc: Node identity 4, cluster identity 4711 [ 2510.683953][T28790] tipc: Node number set to 4 [ 2513.294423][T28828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5387'. [ 2513.455267][T28835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5390'. [ 2513.910289][T28841] pim6reg: entered allmulticast mode [ 2515.186292][T28849] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2518.481712][ T30] audit: type=1326 audit(1746274917.177:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28866 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2518.505164][ C0] vkms_vblank_simulate: vblank timer overrun [ 2518.551372][T28881] syz.0.5400: attempt to access beyond end of device [ 2518.551372][T28881] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2523.012332][ T30] audit: type=1326 audit(1746274921.717:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28890 comm="syz.0.5406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2525.044020][T28924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2526.408924][T28863] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2526.689370][T28938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5416'. [ 2526.698618][T28938] Lens B: ================= START STATUS ================= [ 2526.706145][T28938] Lens B: Focus, Absolute: 0 [ 2526.710762][T28938] Lens B: ================== END STATUS ================== [ 2526.746377][T28863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2526.783648][T28941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2526.809077][T28863] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2526.830715][T28863] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2526.839872][T28863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.847852][T28863] usb 4-1: Product: syz [ 2527.028496][T28863] usb 4-1: Manufacturer: syz [ 2527.033636][T28863] usb 4-1: SerialNumber: syz [ 2527.456012][T28863] usb 4-1: config 0 descriptor?? [ 2527.465739][T28863] usb 4-1: can't set config #0, error -71 [ 2527.479128][T28863] usb 4-1: USB disconnect, device number 64 [ 2528.541973][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.146191][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'. [ 2532.918963][ T3074] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2534.709111][T23173] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2535.048927][T23173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2535.129389][T28999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2535.211137][T23173] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2535.507498][T23173] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2536.375276][T23173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.399629][T23173] usb 4-1: config 0 descriptor?? [ 2536.405012][T23173] usb 4-1: can't set config #0, error -71 [ 2536.420197][T23173] usb 4-1: USB disconnect, device number 65 [ 2536.844807][T29013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5435'. [ 2537.307733][T29011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5436'. [ 2538.376263][ T30] audit: type=1400 audit(1746274937.077:700): avc: denied { mount } for pid=28995 comm="syz.1.5431" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2538.619165][T28863] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2538.818977][T28863] usb 5-1: Using ep0 maxpacket: 16 [ 2538.820323][T28863] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 2538.820345][T28863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2538.820362][T28863] usb 5-1: config 0 has no interface number 0 [ 2538.820387][T28863] usb 5-1: too many endpoints for config 0 interface 105 altsetting 50: 211, using maximum allowed: 30 [ 2538.820419][T28863] usb 5-1: config 0 interface 105 altsetting 50 endpoint 0x83 has an invalid bInterval 131, changing to 7 [ 2538.820443][T28863] usb 5-1: config 0 interface 105 altsetting 50 endpoint 0x83 has invalid maxpacket 2033, setting to 1024 [ 2538.820464][T28863] usb 5-1: config 0 interface 105 altsetting 50 has 1 endpoint descriptor, different from the interface descriptor's value: 211 [ 2538.820487][T28863] usb 5-1: config 0 interface 105 has no altsetting 0 [ 2538.822407][T28863] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2538.822430][T28863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2538.822448][T28863] usb 5-1: Product: syz [ 2538.822461][T28863] usb 5-1: Manufacturer: syz [ 2538.822474][T28863] usb 5-1: SerialNumber: syz [ 2538.824579][T28863] usb 5-1: config 0 descriptor?? [ 2538.930296][ T30] audit: type=1400 audit(1746274937.607:701): avc: denied { unmount } for pid=17616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2539.250178][T28863] usb 5-1: USB disconnect, device number 73 [ 2541.343136][T29043] blktrace: Concurrent blktraces are not allowed on nbd1 [ 2541.599208][ T30] audit: type=1326 audit(1746274940.297:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29034 comm="syz.3.5441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2542.646346][T23173] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 2542.812097][T23173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2542.836772][T23173] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2542.861740][T23173] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2542.871276][T23173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.889231][T23173] usb 5-1: config 0 descriptor?? [ 2543.094969][T29071] vhci_hcd vhci_hcd.0: port 0 already used [ 2543.588403][ T3074] usb 5-1: USB disconnect, device number 74 [ 2544.468563][T29083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2544.469453][T28863] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2544.690467][T28863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2544.710788][T28863] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 2544.720286][T28863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.736066][T28863] usb 3-1: config 0 descriptor?? [ 2544.804465][T29091] fuse: Bad value for 'fd' [ 2545.290122][T28863] usb 3-1: unsupported MDLM descriptors [ 2545.537024][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5454'. [ 2545.873409][T29101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5457'. [ 2546.344842][T23173] usb 3-1: USB disconnect, device number 77 [ 2548.496343][T29122] Lens B: ================= START STATUS ================= [ 2548.503973][T29122] Lens B: Focus, Absolute: 0 [ 2548.508712][T29122] Lens B: ================== END STATUS ================== [ 2548.658699][T29124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2554.519432][T29155] syz.3.5471: attempt to access beyond end of device [ 2554.519432][T29155] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2557.492175][ T30] audit: type=1400 audit(1746274956.197:703): avc: denied { mounton } for pid=29164 comm="syz.1.5473" path="/535/file1" dev="autofs" ino=106661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 2557.515257][T29165] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2557.967221][T29190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5480'. [ 2561.756922][T29235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5490'. [ 2568.505169][ T30] audit: type=1326 audit(1746274966.587:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.0.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2569.459047][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5501'. [ 2570.938433][T29291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5503'. [ 2572.674229][T29301] tipc: Started in network mode [ 2572.684416][T29301] tipc: Node identity 4, cluster identity 4711 [ 2572.704730][T15372] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2572.726101][T29301] tipc: Node number set to 4 [ 2572.805481][ T30] audit: type=1326 audit(1746274971.497:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29292 comm="syz.2.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2572.932829][T15372] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2573.958028][T15372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2573.967371][T15372] usb 5-1: Product: syz [ 2573.971788][T15372] usb 5-1: Manufacturer: syz [ 2573.976470][T15372] usb 5-1: SerialNumber: syz [ 2573.985306][T15372] usb 5-1: config 0 descriptor?? [ 2574.066420][T29309] Lens B: ================= START STATUS ================= [ 2574.073984][T29309] Lens B: Focus, Absolute: 0 [ 2574.082841][T29309] Lens B: ================== END STATUS ================== [ 2575.007673][T29315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2575.921034][T15372] usb-storage 5-1:0.0: USB Mass Storage device detected [ 2577.001129][T15372] usb 5-1: USB disconnect, device number 75 [ 2577.882875][T28863] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2578.763798][T28863] usb 4-1: device descriptor read/64, error -71 [ 2580.683364][ T5911] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2581.864251][T29374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5519'. [ 2581.888044][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2581.903036][T29373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5517'. [ 2581.912849][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2581.954543][ T5911] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2582.047289][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.119069][ T5911] usb 5-1: config 0 descriptor?? [ 2582.807380][ T5911] kye 0003:0458:0087.0010: unknown main item tag 0x1 [ 2582.856394][ T5911] kye 0003:0458:0087.0010: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 2583.067092][T23173] usb 5-1: USB disconnect, device number 76 [ 2585.482910][T29412] Lens B: ================= START STATUS ================= [ 2585.490983][T29412] Lens B: Focus, Absolute: 0 [ 2585.496485][T29412] Lens B: ================== END STATUS ================== [ 2586.107905][T29416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2587.339358][ T5911] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2587.529927][ T5911] usb 2-1: device descriptor read/64, error -71 [ 2587.869080][ T5911] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2589.115804][ T30] audit: type=1326 audit(1746274987.767:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29421 comm="syz.3.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2589.980578][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.536519][T29452] pim6reg: entered allmulticast mode [ 2592.592738][T29461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5543'. [ 2593.535924][T29479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5549'. [ 2593.798881][ T3074] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2594.990287][T29482] Invalid ELF header magic: != ELF [ 2596.404717][ T30] audit: type=1400 audit(1746274993.697:707): avc: denied { module_load } for pid=29478 comm="syz.0.5549" path=2F6D656D66643AFB2261268F65118CD634F920202864656C6574656429 dev="hugetlbfs" ino=107888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 2596.608930][ T3074] usb 5-1: device not accepting address 77, error -71 [ 2598.437296][T29502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5553'. [ 2601.869147][ T30] audit: type=1326 audit(1746274999.907:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2601.948884][ T30] audit: type=1326 audit(1746274999.907:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2601.972229][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.162357][ T30] audit: type=1326 audit(1746274999.907:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2602.185742][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.197281][ T30] audit: type=1326 audit(1746274999.907:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2602.220646][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.273782][ T30] audit: type=1326 audit(1746274999.917:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2602.424570][ T30] audit: type=1326 audit(1746274999.917:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2602.547324][ T30] audit: type=1326 audit(1746274999.917:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2602.570719][ C0] vkms_vblank_simulate: vblank timer overrun [ 2603.667023][ T30] audit: type=1326 audit(1746274999.917:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2603.691174][ T30] audit: type=1326 audit(1746274999.917:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2604.493340][ T30] audit: type=1326 audit(1746274999.917:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29515 comm="syz.2.5558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2604.795259][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'. [ 2605.048953][T23173] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2605.158419][T29548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5566'. [ 2605.818488][T29554] Invalid ELF header magic: != ELF [ 2605.834283][T23173] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2605.844423][T23173] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2605.858208][T23173] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2605.867503][T23173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.875643][T23173] usb 2-1: Product: syz [ 2605.899673][T23173] usb 2-1: Manufacturer: syz [ 2605.918263][T23173] usb 2-1: SerialNumber: syz [ 2605.967641][T23173] usb 2-1: config 0 descriptor?? [ 2606.399474][T29544] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2606.406756][T29544] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2609.753309][T23173] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71 [ 2610.693000][T23173] usb 2-1: USB disconnect, device number 71 [ 2614.180297][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2614.180311][ T30] audit: type=1326 audit(1746275012.207:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.247492][ T30] audit: type=1326 audit(1746275012.207:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.270853][ C0] vkms_vblank_simulate: vblank timer overrun [ 2614.340679][ T30] audit: type=1326 audit(1746275012.207:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.364429][ T30] audit: type=1326 audit(1746275012.207:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.387765][ C0] vkms_vblank_simulate: vblank timer overrun [ 2614.482176][ T30] audit: type=1326 audit(1746275012.207:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.586479][ T30] audit: type=1326 audit(1746275012.207:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.645301][ T30] audit: type=1326 audit(1746275012.207:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.668673][ C0] vkms_vblank_simulate: vblank timer overrun [ 2614.728452][ T30] audit: type=1326 audit(1746275012.207:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.751927][ C0] vkms_vblank_simulate: vblank timer overrun [ 2614.759074][ T30] audit: type=1326 audit(1746275012.207:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2614.782445][ C0] vkms_vblank_simulate: vblank timer overrun [ 2614.789353][ T30] audit: type=1326 audit(1746275012.207:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29566 comm="syz.0.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2619.695253][T29652] Lens B: ================= START STATUS ================= [ 2619.755996][T29649] syz.0.5590: attempt to access beyond end of device [ 2619.755996][T29649] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2619.821526][T29652] Lens B: Focus, Absolute: 0 [ 2620.021128][T29652] Lens B: ================== END STATUS ================== [ 2620.172620][T29655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2621.957955][T29663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5592'. [ 2624.573088][T29678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5598'. [ 2625.476126][T29678] overlayfs: missing 'lowerdir' [ 2625.603530][T15372] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2626.118899][T15372] usb 3-1: Using ep0 maxpacket: 16 [ 2626.135542][T15372] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 2626.144150][T15372] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 2626.154433][T15372] usb 3-1: config 0 has no interface number 0 [ 2626.160618][T15372] usb 3-1: config 0 interface 105 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2626.175966][T15372] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2626.185510][T15372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.245507][T15372] usb 3-1: Product: syz [ 2626.263330][T15372] usb 3-1: Manufacturer: syz [ 2626.268058][T15372] usb 3-1: SerialNumber: syz [ 2626.278262][T15372] usb 3-1: config 0 descriptor?? [ 2626.462510][T15372] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 2626.472830][T15372] usb 3-1: No valid video chain found. [ 2627.383940][T29711] fuse: Bad value for 'rootmode' [ 2627.422980][T15372] usb 3-1: USB disconnect, device number 78 [ 2627.932251][ T3074] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 2628.104943][ T3074] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2628.912845][ T3074] usb 5-1: can't read configurations, error -61 [ 2628.954320][T29727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5609'. [ 2629.210255][ T3074] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 2630.511369][T29747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5615'. [ 2631.105995][T29751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5617'. [ 2631.384917][T29757] Invalid ELF header magic: != ELF [ 2632.869679][ T3074] usb 5-1: device not accepting address 80, error -71 [ 2632.940597][ T3074] usb usb5-port1: attempt power cycle [ 2634.327659][ T3074] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 2634.594565][ T3074] usb 5-1: device not accepting address 81, error -71 [ 2638.109740][T29810] input: syz1 as /devices/virtual/input/input90 [ 2639.678947][ T47] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2640.481541][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2640.531498][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2641.478891][ T47] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2641.522006][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.691026][ T47] usb 3-1: config 0 descriptor?? [ 2641.813076][T29846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5642'. [ 2642.032342][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 2642.038340][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2642.054683][ T47] usb 3-1: USB disconnect, device number 79 [ 2642.148953][T29853] Invalid ELF header magic: != ELF [ 2643.669082][T27918] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2643.888325][T27918] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2643.965913][T27918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2644.096167][T27918] usb 4-1: Product: syz [ 2644.153922][T27918] usb 4-1: Manufacturer: syz [ 2644.219260][T27918] usb 4-1: SerialNumber: syz [ 2644.359334][T27918] usb 4-1: config 0 descriptor?? [ 2644.669420][T27918] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2645.394450][T20609] usb 4-1: USB disconnect, device number 68 [ 2646.488314][ T5857] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 2647.134048][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.144890][ T5857] usb 3-1: config 0 has no interfaces? [ 2647.154991][ T5857] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2647.173922][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.283907][ T5857] usb 3-1: config 0 descriptor?? [ 2647.794955][T23173] usb 3-1: USB disconnect, device number 80 [ 2649.037058][T29902] input: syz1 as /devices/virtual/input/input93 [ 2649.428914][T23173] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2651.239444][T23173] usb 2-1: Using ep0 maxpacket: 8 [ 2651.288789][T23173] usb 2-1: device descriptor read/all, error -71 [ 2651.424210][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.799397][T29929] pim6reg: entered allmulticast mode [ 2653.715703][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2653.715718][ T30] audit: type=1326 audit(1746275052.417:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29908 comm="syz.0.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2657.681822][T29973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5673'. [ 2657.707744][T29973] 9pnet_fd: Insufficient options for proto=fd [ 2658.631463][T29977] fuse: Unknown parameter 'use00000000000000000000' [ 2661.170304][ T30] audit: type=1326 audit(1746275059.867:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29980 comm="syz.1.5676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2662.728874][ T3074] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 2663.340193][ T3074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2663.368851][ T3074] usb 4-1: config 0 has no interfaces? [ 2663.374459][ T3074] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2663.400739][ T3074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2663.426162][ T3074] usb 4-1: config 0 descriptor?? [ 2663.607111][T30018] team0: Port device bridge1 added [ 2663.681513][T20609] usb 4-1: USB disconnect, device number 69 [ 2664.594115][ T30] audit: type=1326 audit(1746275063.257:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30021 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2664.664413][T30027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 2664.671018][T30027] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2664.679829][T30027] vhci_hcd vhci_hcd.0: Device attached [ 2665.441086][ T5857] vhci_hcd: vhci_device speed not set [ 2665.488970][ T47] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 2665.498918][ T5857] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 2666.054542][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'. [ 2666.069125][T30045] Lens B: ================= START STATUS ================= [ 2666.076576][T30045] Lens B: Focus, Absolute: 0 [ 2666.081411][T30045] Lens B: ================== END STATUS ================== [ 2666.126550][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.165134][T30047] input: syz1 as /devices/virtual/input/input95 [ 2666.602834][T30051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2666.666825][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2666.727042][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2666.907116][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2667.008788][ T47] usb 5-1: SerialNumber: syz [ 2667.628950][ T47] usb 5-1: 0:2 : does not exist [ 2667.662730][ T47] usb 5-1: USB disconnect, device number 83 [ 2667.685996][T30029] vhci_hcd: connection reset by peer [ 2668.618977][T27212] vhci_hcd: stop threads [ 2668.623250][T27212] vhci_hcd: release socket [ 2668.630389][T27212] vhci_hcd: disconnect device [ 2669.311425][ T47] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2669.838852][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2669.849072][ T47] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2669.858018][ T47] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 2669.869072][T15372] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2671.326271][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.348724][ T30] audit: type=1326 audit(1746275069.867:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.373147][ T47] usb 5-1: config 0 descriptor?? [ 2671.428633][ T30] audit: type=1326 audit(1746275069.867:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.458862][ T30] audit: type=1326 audit(1746275069.867:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.459270][ T5857] vhci_hcd: vhci_device speed not set [ 2671.487571][ C0] vkms_vblank_simulate: vblank timer overrun [ 2671.501661][ T30] audit: type=1326 audit(1746275069.867:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.569812][T15372] usb 4-1: Using ep0 maxpacket: 8 [ 2671.666783][T30081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 2671.673374][T30081] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2671.687926][T15372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2671.713773][ T47] usb 5-1: USB disconnect, device number 84 [ 2671.728402][ T30] audit: type=1326 audit(1746275069.867:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.752328][T15372] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2671.752380][T30081] vhci_hcd vhci_hcd.0: Device attached [ 2671.763317][T15372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2671.797759][ T30] audit: type=1326 audit(1746275069.867:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.822396][ T30] audit: type=1326 audit(1746275069.867:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.823760][T15372] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2671.845760][ C0] vkms_vblank_simulate: vblank timer overrun [ 2671.846222][ T30] audit: type=1326 audit(1746275069.867:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.905136][T15372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.905198][ T30] audit: type=1326 audit(1746275069.867:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.946807][ T30] audit: type=1326 audit(1746275069.867:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30075 comm="syz.1.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2671.970593][T20609] vhci_hcd: vhci_device speed not set [ 2672.013069][T15372] usb 4-1: config 0 descriptor?? [ 2672.028907][T20609] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 2672.077136][T15372] usb 4-1: can't set config #0, error -71 [ 2673.026853][T15372] usb 4-1: USB disconnect, device number 70 [ 2674.777625][T30082] vhci_hcd: connection reset by peer [ 2674.784994][ T53] vhci_hcd: stop threads [ 2674.791295][ T53] vhci_hcd: release socket [ 2674.890437][ T53] vhci_hcd: disconnect device [ 2674.929691][T30105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5702'. [ 2675.040711][T30107] fuse: Unknown parameter 'use00000000000000000000' [ 2675.908995][T30119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2677.168936][T20609] vhci_hcd: vhci_device speed not set [ 2677.184429][T30133] Lens B: ================= START STATUS ================= [ 2677.191910][T30133] Lens B: Focus, Absolute: 0 [ 2677.196605][T30133] Lens B: ================== END STATUS ================== [ 2677.269139][T30134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2680.806283][T30152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 2681.388923][T27918] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2681.582571][T27918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2681.617789][T27918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2681.648737][T27918] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2681.659261][T27918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.681441][T27918] usb 5-1: Product: syz [ 2681.687865][T27918] usb 5-1: Manufacturer: syz [ 2681.698573][T27918] usb 5-1: SerialNumber: syz [ 2681.766647][T27918] usb 5-1: config 0 descriptor?? [ 2681.786206][T30152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2681.786541][T30152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2682.436304][T30170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2684.808541][T27918] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 2684.856557][T27918] usb 5-1: USB disconnect, device number 85 [ 2685.554415][T30186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5728'. [ 2685.882781][T30188] Invalid ELF header magic: != ELF [ 2690.728970][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2690.728986][ T30] audit: type=1326 audit(1746275088.587:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.766858][ T30] audit: type=1326 audit(1746275088.587:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.836375][ T30] audit: type=1326 audit(1746275088.587:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.869186][ T30] audit: type=1326 audit(1746275088.587:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.894319][ T30] audit: type=1326 audit(1746275088.587:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.918285][ T30] audit: type=1326 audit(1746275088.587:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.943961][ T30] audit: type=1326 audit(1746275088.587:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2690.967557][ T30] audit: type=1326 audit(1746275088.587:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2691.107256][ T30] audit: type=1326 audit(1746275088.587:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2691.131216][ T30] audit: type=1326 audit(1746275088.587:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30197 comm="syz.1.5731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848d8e969 code=0x7fc00000 [ 2695.203068][T30253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5745'. [ 2695.220906][T30253] Lens B: ================= START STATUS ================= [ 2695.228337][T30253] Lens B: Focus, Absolute: 0 [ 2695.233091][T30253] Lens B: ================== END STATUS ================== [ 2695.329777][T30254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2698.802975][T30275] dvmrp1: entered allmulticast mode [ 2699.819831][T23795] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2699.998946][T23795] usb 3-1: Using ep0 maxpacket: 32 [ 2700.071259][T23795] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2700.116671][T23795] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2700.129041][T23795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2700.138085][T23795] usb 3-1: config 1 has no interface number 0 [ 2700.144351][T23795] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2700.227100][T23795] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2700.248888][T23795] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2700.258085][T23795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2700.284039][T23795] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2700.724070][T23795] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2701.151207][T28863] usb 3-1: USB disconnect, device number 81 [ 2701.187281][T28863] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2703.788923][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2703.788935][ T30] audit: type=1326 audit(1746275102.437:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.2.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2704.342045][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5763'. [ 2704.948864][ T47] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2705.369115][T27918] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2705.587000][T27918] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2705.728551][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2705.730463][T27918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.919804][T27918] usb 3-1: Product: syz [ 2706.351472][ T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2706.365461][T27918] usb 3-1: Manufacturer: syz [ 2706.371619][ T47] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2706.383393][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.391701][ T47] usb 5-1: Product: syz [ 2706.395867][ T47] usb 5-1: Manufacturer: syz [ 2706.408096][ T47] usb 5-1: SerialNumber: syz [ 2706.453029][ T47] usb 5-1: config 0 descriptor?? [ 2706.532193][T30332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2706.550030][T30332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2706.989292][ T47] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 2707.050768][T27918] usb 3-1: SerialNumber: syz [ 2707.066292][T27918] usb 3-1: config 0 descriptor?? [ 2707.084741][ T47] usb 5-1: USB disconnect, device number 86 [ 2708.068317][T27918] usb 3-1: can't set config #0, error -71 [ 2708.076345][T27918] usb 3-1: USB disconnect, device number 82 [ 2711.079775][T30375] pim6reg: entered allmulticast mode [ 2713.015654][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.918870][ T30] audit: type=1326 audit(1746275114.607:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30402 comm="syz.0.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000f38e969 code=0x7fc00000 [ 2715.942307][ C0] vkms_vblank_simulate: vblank timer overrun [ 2716.868457][T30423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 2716.875088][T30423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2716.883810][T30423] vhci_hcd vhci_hcd.0: Device attached [ 2716.923599][T30428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2716.942058][T30428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2716.984131][T30428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2717.005351][T30428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2717.015979][T30428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2717.064650][T28863] vhci_hcd: vhci_device speed not set [ 2717.169030][T28863] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 2717.380154][ T2204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2718.383086][T30441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5790'. [ 2719.422579][T30428] Bluetooth: hci4: command tx timeout [ 2719.530451][ T2204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2719.895105][T30424] vhci_hcd: connection reset by peer [ 2719.914680][T16211] vhci_hcd: stop threads [ 2719.920351][T16211] vhci_hcd: release socket [ 2719.924847][T16211] vhci_hcd: disconnect device [ 2719.994380][T30448] Lens B: ================= START STATUS ================= [ 2720.001859][T30448] Lens B: Focus, Absolute: 0 [ 2720.006539][T30448] Lens B: ================== END STATUS ================== [ 2720.146418][T30450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2722.138439][T30428] Bluetooth: hci4: command tx timeout [ 2722.338395][T30462] Lens B: ================= START STATUS ================= [ 2722.437371][T30462] Lens B: Focus, Absolute: 0 [ 2722.554218][T28863] vhci_hcd: vhci_device speed not set [ 2723.312533][T30462] Lens B: ================== END STATUS ================== [ 2723.893328][T30468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2724.013604][ T2204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2724.218850][T30428] Bluetooth: hci4: command tx timeout [ 2725.118969][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5794'. [ 2726.445383][T30428] Bluetooth: hci4: command tx timeout [ 2726.465039][ T2204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2726.490461][T30479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5800'. [ 2726.648466][T30484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5797'. [ 2727.766095][T30426] chnl_net:caif_netlink_parms(): no params data found [ 2728.858926][T30507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5803'. [ 2729.183176][ T2204] bridge_slave_1: left allmulticast mode [ 2730.062857][ T2204] bridge_slave_1: left promiscuous mode [ 2730.079864][ T2204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.209224][ T2204] bridge_slave_0: left allmulticast mode [ 2730.285548][ T2204] bridge_slave_0: left promiscuous mode [ 2730.309096][ T2204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2732.441911][ T2204] dvmrp1 (unregistering): left allmulticast mode [ 2732.588085][ T2204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2732.599470][ T2204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2732.611899][ T2204] bond0 (unregistering): Released all slaves [ 2732.686058][T30426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.693738][T30426] bridge0: port 1(bridge_slave_0) entered disabled state [ 2732.701345][T30426] bridge_slave_0: entered allmulticast mode [ 2732.708682][T30426] bridge_slave_0: entered promiscuous mode [ 2732.716751][T30426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.735411][T30426] bridge0: port 2(bridge_slave_1) entered disabled state [ 2732.769922][T30426] bridge_slave_1: entered allmulticast mode [ 2732.788663][T30426] bridge_slave_1: entered promiscuous mode [ 2733.209883][T30556] Lens B: ================= START STATUS ================= [ 2733.217395][T30556] Lens B: Focus, Absolute: 0 [ 2733.223429][T30556] Lens B: ================== END STATUS ================== [ 2733.404622][T30558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2734.170046][T30426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2734.184266][T30426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2734.390707][T30426] team0: Port device team_slave_0 added [ 2734.483019][T30426] team0: Port device team_slave_1 added [ 2734.711970][T30426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2734.804877][T30426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2734.862819][T30426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2734.901013][T30426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2734.907959][T30426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2735.018997][T30426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2735.786081][T30592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5815'. [ 2736.797934][T30600] input: syz1 as /devices/virtual/input/input96 [ 2737.812988][T30604] Invalid ELF header magic: != ELF [ 2739.445318][T30426] hsr_slave_0: entered promiscuous mode [ 2739.446040][T30426] hsr_slave_1: entered promiscuous mode [ 2739.446516][T30426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2739.446557][T30426] Cannot create hsr debugfs directory [ 2743.168409][T30629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5823'. [ 2743.746412][T30659] input: syz1 as /devices/virtual/input/input97 [ 2744.872577][ T2204] hsr_slave_0: left promiscuous mode [ 2744.939547][ T2204] hsr_slave_1: left promiscuous mode [ 2745.002672][ T2204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.079755][ T2204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.157818][ T2204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.216194][ T2204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.333733][ T30] audit: type=1326 audit(1746275144.037:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30669 comm="syz.3.5829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2745.357123][ C0] vkms_vblank_simulate: vblank timer overrun [ 2745.367411][ T2204] veth1_macvtap: left promiscuous mode [ 2745.397794][ T2204] veth0_macvtap: left promiscuous mode [ 2745.420245][ T2204] veth1_vlan: left promiscuous mode [ 2745.425539][ T2204] veth0_vlan: left promiscuous mode [ 2745.469883][T30679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5830'. [ 2745.792288][T30684] Invalid ELF header magic: != ELF [ 2747.241917][ T2204] pim6reg (unregistering): left allmulticast mode [ 2749.657481][ T2204] team0 (unregistering): Port device team_slave_1 removed [ 2749.694398][ T2204] team0 (unregistering): Port device team_slave_0 removed [ 2752.039031][T15372] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2753.403091][T15372] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2753.553372][T15372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.048861][T15372] usb 5-1: Product: syz [ 2754.053089][T15372] usb 5-1: Manufacturer: syz [ 2754.057728][T15372] usb 5-1: SerialNumber: syz [ 2754.072428][T15372] usb 5-1: config 0 descriptor?? [ 2754.142062][T15372] usb 5-1: can't set config #0, error -71 [ 2754.167363][T30426] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2754.186055][T15372] usb 5-1: USB disconnect, device number 87 [ 2754.293558][T30426] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2754.344230][T30426] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2754.551675][T30426] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2754.990698][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5847'. [ 2755.820601][T30426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2756.407441][T30426] 8021q: adding VLAN 0 to HW filter on device team0 [ 2756.435483][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 2756.442569][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2756.457193][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 2756.464274][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2756.809180][T15372] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2756.979160][T30426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2756.989472][T15372] usb 3-1: Using ep0 maxpacket: 8 [ 2756.996066][T15372] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2757.038866][T15372] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2757.071394][T15372] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2757.091288][T15372] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2757.127728][T30426] veth0_vlan: entered promiscuous mode [ 2757.128815][T15372] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2757.162137][T15372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2757.182864][T30426] veth1_vlan: entered promiscuous mode [ 2757.381701][T30426] veth0_macvtap: entered promiscuous mode [ 2757.447812][T15372] usb 3-1: GET_CAPABILITIES returned 0 [ 2757.458354][T15372] usbtmc 3-1:16.0: can't read capabilities [ 2757.479562][T30426] veth1_macvtap: entered promiscuous mode [ 2757.530664][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2757.568884][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.598816][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2757.628882][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.638695][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2757.669264][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.690971][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2757.697769][T15372] usb 3-1: USB disconnect, device number 83 [ 2757.729568][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.780141][T30426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2757.840744][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2757.867807][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.909335][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2757.938920][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.948731][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2757.966562][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2757.977065][T30426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2757.987930][T30426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2758.006407][T30426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2758.149023][T30426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.308910][T30426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.317632][T30426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.351128][T30426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.500140][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2758.615911][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2759.561955][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.586043][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2762.339321][T28863] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2762.646837][T28863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2762.730574][T28863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2762.855878][T28863] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2762.968854][T28863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2763.003565][T28863] usb 5-1: config 0 descriptor?? [ 2764.164768][T28863] usbhid 5-1:0.0: can't add hid device: -71 [ 2764.173889][T28863] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2764.192675][T28863] usb 5-1: USB disconnect, device number 88 [ 2764.264357][T30880] input: syz1 as /devices/virtual/input/input98 [ 2764.676616][T30887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2766.138913][T28863] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2766.797258][T28863] usb 5-1: config 0 has no interfaces? [ 2766.805255][T28863] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2766.819713][T28863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.828049][T28863] usb 5-1: Product: syz [ 2766.832423][T28863] usb 5-1: Manufacturer: syz [ 2766.837015][T28863] usb 5-1: SerialNumber: syz [ 2766.844536][T28863] usb 5-1: config 0 descriptor?? [ 2769.143884][T30943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2770.903764][T30968] fuse: Unknown parameter 'group_i00000000000000000000' [ 2772.389251][ T47] usb 5-1: USB disconnect, device number 89 [ 2774.306541][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.623362][T31015] Lens B: ================= START STATUS ================= [ 2774.630879][T31015] Lens B: Focus, Absolute: 0 [ 2774.635591][T31015] Lens B: ================== END STATUS ================== [ 2774.950933][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 2775.061858][T31015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2782.294977][T31102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5905'. [ 2783.660423][ T30] audit: type=1400 audit(1746275182.367:980): avc: denied { name_bind } for pid=31114 comm="syz.1.5911" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2785.339587][T31134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'. [ 2789.048121][ T30] audit: type=1400 audit(1746275187.747:981): avc: denied { bind } for pid=31157 comm="syz.0.5924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2789.334724][T31167] Lens B: ================= START STATUS ================= [ 2789.342435][T31167] Lens B: Focus, Absolute: 0 [ 2789.347073][T31167] Lens B: ================== END STATUS ================== [ 2789.431053][T31169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2794.032832][T31193] vhci_hcd vhci_hcd.0: port 0 already used [ 2795.258949][ T47] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 2796.090719][T31208] fuse: Unknown parameter 'group_id00000000000000000000' [ 2796.329665][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2796.341152][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2796.392504][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2796.401880][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2796.584433][ T47] usb 3-1: SerialNumber: syz [ 2796.613968][ T47] usb 3-1: 0:2 : does not exist [ 2797.062867][T30501] udevd[30501]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2797.077492][T31224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2797.102362][T31193] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 2797.108973][T31193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2797.144325][T31224] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(21) [ 2797.150937][T31224] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2797.182587][T31193] vhci_hcd vhci_hcd.0: Device attached [ 2797.203252][T31224] vhci_hcd vhci_hcd.0: Device attached [ 2797.216397][T31193] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 2797.222999][T31193] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2797.249771][T31193] vhci_hcd vhci_hcd.0: Device attached [ 2797.277928][T31193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2797.311135][T31193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2797.348933][T31193] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(28) [ 2797.355541][T31193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2797.376282][T31193] vhci_hcd vhci_hcd.0: Device attached [ 2797.441005][T31231] vhci_hcd: connection closed [ 2797.441369][ T6559] vhci_hcd: stop threads [ 2797.452734][T31229] vhci_hcd: connection closed [ 2797.460900][T31225] vhci_hcd: connection closed [ 2797.467201][T15372] usb 3-1: USB disconnect, device number 84 [ 2797.480727][T31227] vhci_hcd: connection closed [ 2797.503862][ T6559] vhci_hcd: release socket [ 2797.595778][ T6559] vhci_hcd: disconnect device [ 2797.887893][ T6559] vhci_hcd: stop threads [ 2797.892366][ T6559] vhci_hcd: release socket [ 2797.896863][ T6559] vhci_hcd: disconnect device [ 2797.901919][ T6559] vhci_hcd: stop threads [ 2797.906410][ T6559] vhci_hcd: release socket [ 2797.914063][ T6559] vhci_hcd: disconnect device [ 2797.919213][ T6559] vhci_hcd: stop threads [ 2797.923493][ T6559] vhci_hcd: release socket [ 2797.928493][ T6559] vhci_hcd: disconnect device [ 2802.134353][T31263] netlink: 'syz.0.5949': attribute type 1 has an invalid length. [ 2802.182017][T31263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5949'. [ 2803.723421][T31262] kvm_intel: kvm [31260]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7191 [ 2803.785643][T31262] kvm: kvm [31260]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x718d [ 2804.214352][T15372] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2804.422538][T15372] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2804.431435][T15372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2804.845108][T15372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2804.903371][T15372] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2805.016477][T15372] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2805.047923][T15372] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2805.202547][T15372] usb 3-1: Product: syz [ 2805.293269][T15372] usb 3-1: Manufacturer: syz [ 2805.434747][T15372] cdc_wdm 3-1:1.0: skipping garbage [ 2805.456314][T15372] cdc_wdm 3-1:1.0: skipping garbage [ 2805.490090][T15372] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2805.509369][T15372] cdc_wdm 3-1:1.0: Unknown control protocol [ 2805.625341][T31303] netlink: 'syz.1.5960': attribute type 72 has an invalid length. [ 2806.198979][T28863] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2806.864544][T20609] usb 3-1: USB disconnect, device number 85 [ 2807.028926][T28863] usb 5-1: Using ep0 maxpacket: 16 [ 2807.046079][T28863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2807.128750][T28863] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2807.143567][T28863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2807.187261][T28863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.215934][T28863] usb 5-1: config 0 descriptor?? [ 2807.516060][T31327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5965'. [ 2807.744991][T31329] Invalid ELF header magic: != ELF [ 2810.596429][ T30] audit: type=1326 audit(1746275209.267:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31339 comm="syz.3.5969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddff8e969 code=0x7fc00000 [ 2811.738839][ T30] audit: type=1326 audit(1746275210.427:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31346 comm="syz.2.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2811.803749][T20609] usb 5-1: USB disconnect, device number 90 [ 2816.729889][ T30] audit: type=1326 audit(1746275215.417:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31399 comm="syz.1.5985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2816.753266][ C0] vkms_vblank_simulate: vblank timer overrun [ 2819.327210][T31427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5992'. [ 2820.337605][T31434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 2824.489113][ T30] audit: type=1326 audit(1746275223.147:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31455 comm="syz.4.6000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e378e969 code=0x7fc00000 [ 2824.907715][ T30] audit: type=1326 audit(1746275223.597:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31457 comm="syz.2.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2828.160295][ T30] audit: type=1326 audit(1746275226.857:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.222567][ T30] audit: type=1326 audit(1746275226.857:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.278830][ T30] audit: type=1326 audit(1746275226.857:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.302208][ C0] vkms_vblank_simulate: vblank timer overrun [ 2828.348039][ T30] audit: type=1326 audit(1746275226.857:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.371450][ C0] vkms_vblank_simulate: vblank timer overrun [ 2828.489007][T17617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2828.490357][ T30] audit: type=1326 audit(1746275226.857:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.522998][ T30] audit: type=1326 audit(1746275226.857:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.548216][ T30] audit: type=1326 audit(1746275226.857:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.574323][T17617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2828.576044][ T30] audit: type=1326 audit(1746275226.857:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31496 comm="syz.1.6011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2828.628269][T17617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2828.667880][T17617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2828.690158][T17617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2828.772383][ T73] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.085701][T31520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6016'. [ 2829.250478][ T73] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.332088][T31526] Invalid ELF header magic: != ELF [ 2831.526766][T30428] Bluetooth: hci2: command tx timeout [ 2831.540847][T31512] chnl_net:caif_netlink_parms(): no params data found [ 2831.636402][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 2831.636421][ T30] audit: type=1326 audit(1746275230.317:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31516 comm="syz.2.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bded8e969 code=0x7fc00000 [ 2831.648845][T22958] vhci_hcd: connection reset by peer [ 2831.696147][ T6559] vhci_hcd: stop threads [ 2831.743795][ T6559] vhci_hcd: release socket [ 2831.782836][ T73] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2831.818968][ T6559] vhci_hcd: disconnect device [ 2831.865140][T17617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2831.873758][T17617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2831.881149][T12548] usb 39-1: device descriptor read/64, error -110 [ 2831.888305][T17617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2831.896081][T17617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2831.903930][T17617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2832.061377][T12548] vhci_hcd: vhci_device speed not set [ 2832.709571][ T73] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2832.845912][T31512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.913571][T31512] bridge0: port 1(bridge_slave_0) entered disabled state [ 2833.094905][ T30] audit: type=1326 audit(1746275231.747:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2833.118440][ C0] vkms_vblank_simulate: vblank timer overrun [ 2833.339341][T31512] bridge_slave_0: entered allmulticast mode [ 2833.867246][T17617] Bluetooth: hci2: command tx timeout [ 2834.203878][T31512] bridge_slave_0: entered promiscuous mode [ 2834.238906][ T30] audit: type=1326 audit(1746275231.747:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.263370][T17617] Bluetooth: hci5: command tx timeout [ 2834.278824][ T30] audit: type=1326 audit(1746275231.747:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.331828][T31512] bridge0: port 2(bridge_slave_1) entered blocking state [ 2834.339832][T31512] bridge0: port 2(bridge_slave_1) entered disabled state [ 2834.346944][T31512] bridge_slave_1: entered allmulticast mode [ 2834.364504][ T30] audit: type=1326 audit(1746275231.747:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.378400][T31512] bridge_slave_1: entered promiscuous mode [ 2834.387960][ C0] vkms_vblank_simulate: vblank timer overrun [ 2834.400264][ T30] audit: type=1326 audit(1746275231.747:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.423693][ C0] vkms_vblank_simulate: vblank timer overrun [ 2834.458802][ T30] audit: type=1326 audit(1746275231.747:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.555772][ T30] audit: type=1326 audit(1746275231.747:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.588883][ T30] audit: type=1326 audit(1746275231.747:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.612952][ T30] audit: type=1326 audit(1746275231.747:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31546 comm="syz.1.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb2b8e969 code=0x7fc00000 [ 2834.636427][ C0] vkms_vblank_simulate: vblank timer overrun [ 2834.800210][T31512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2834.822334][T31512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2835.661288][T31512] team0: Port device team_slave_0 added [ 2835.751100][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2835.898827][T17617] Bluetooth: hci2: command tx timeout [ 2836.299709][T17617] Bluetooth: hci5: command tx timeout [ 2836.650262][ T73] bridge_slave_1: left allmulticast mode [ 2836.655923][ T73] bridge_slave_1: left promiscuous mode [ 2836.661761][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 2836.684518][ T73] bridge_slave_0: left allmulticast mode [ 2836.693315][ T73] bridge_slave_0: left promiscuous mode [ 2836.702694][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 2837.988829][T17617] Bluetooth: hci2: command tx timeout [ 2838.378974][T17617] Bluetooth: hci5: command tx timeout [ 2839.331696][T31587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6031'. [ 2839.426621][ T73] team0: Port device bridge1 removed [ 2839.533624][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2839.543848][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2839.558604][ T73] bond0 (unregistering): Released all slaves [ 2839.592197][T31512] team0: Port device team_slave_1 added [ 2839.646306][ T73] tipc: Left network mode [ 2839.681590][T31512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2839.692516][T31512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2839.718594][T31512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2839.742110][T31540] chnl_net:caif_netlink_parms(): no params data found [ 2839.754174][T31512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2839.761516][T31512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2839.787873][T31512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2839.863287][T31512] hsr_slave_0: entered promiscuous mode [ 2839.869390][T31512] hsr_slave_1: entered promiscuous mode [ 2839.875289][T31512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2839.882888][T31512] Cannot create hsr debugfs directory [ 2839.928292][T31540] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.935599][T31540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2839.944216][T31540] bridge_slave_0: entered allmulticast mode [ 2839.951080][T31540] bridge_slave_0: entered promiscuous mode [ 2839.958412][T31540] bridge0: port 2(bridge_slave_1) entered blocking state [ 2839.967015][T31540] bridge0: port 2(bridge_slave_1) entered disabled state [ 2839.974140][T31540] bridge_slave_1: entered allmulticast mode [ 2839.980828][T31540] bridge_slave_1: entered promiscuous mode [ 2840.021925][T31540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2840.045216][T31540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2840.117759][T31540] team0: Port device team_slave_0 added [ 2840.140812][T31540] team0: Port device team_slave_1 added [ 2840.234460][T31540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2840.242139][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.268079][ C0] vkms_vblank_simulate: vblank timer overrun [ 2840.277439][T31540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2840.292177][T31540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2840.304473][T31540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2840.335395][T31540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2840.390681][ T73] hsr_slave_0: left promiscuous mode [ 2840.396330][ T73] hsr_slave_1: left promiscuous mode [ 2840.413280][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2840.421538][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2840.433510][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2840.441511][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2840.463714][ T73] veth1_macvtap: left promiscuous mode [ 2840.469422][T17617] Bluetooth: hci5: command tx timeout [ 2840.470459][ T73] veth0_macvtap: left promiscuous mode [ 2840.481866][ T73] veth1_vlan: left promiscuous mode [ 2840.487106][ T73] veth0_vlan: left promiscuous mode [ 2840.545143][ T73] pim6reg (unregistering): left allmulticast mode [ 2840.761915][ T73] team0 (unregistering): Port device team_slave_1 removed [ 2840.790520][ T73] team0 (unregistering): Port device team_slave_0 removed [ 2841.182370][T31540] hsr_slave_0: entered promiscuous mode [ 2841.188530][T31540] hsr_slave_1: entered promiscuous mode [ 2841.497863][T31540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2841.534784][T31540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2841.559444][T31540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2841.571478][T31540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2841.617389][ T73] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.683230][ T73] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.698514][T31512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2841.708094][T31512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2841.718278][T31512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2841.736035][T31512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2841.762749][ T73] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.825326][T31540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.848146][ T73] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2841.885100][T31540] 8021q: adding VLAN 0 to HW filter on device team0 [ 2841.895499][T31512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.910337][T25585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2841.917453][T25585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2841.934767][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.941873][T16211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2842.001677][T31512] 8021q: adding VLAN 0 to HW filter on device team0 [ 2842.055581][T25585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2842.062755][T25585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2842.136269][T25585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2842.143443][T25585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2842.195702][ T73] bridge_slave_1: left allmulticast mode [ 2842.203634][ T73] bridge_slave_1: left promiscuous mode [ 2842.213219][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.223029][ T73] bridge_slave_0: left allmulticast mode [ 2842.228711][ T73] bridge_slave_0: left promiscuous mode [ 2842.237709][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.614749][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2842.626178][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2842.637287][ T73] bond0 (unregistering): Released all slaves [ 2842.762382][ T73] tipc: Left network mode [ 2842.782120][T31540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2842.939164][T17617] Bluetooth: hci4: command 0x0406 tx timeout [ 2842.974684][T31512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2843.210133][ T73] hsr_slave_0: left promiscuous mode [ 2843.215961][ T73] hsr_slave_1: left promiscuous mode [ 2843.224015][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2843.233397][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2843.241578][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2843.253812][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2843.276639][ T73] veth1_macvtap: left promiscuous mode [ 2843.283082][ T73] veth0_macvtap: left promiscuous mode [ 2843.288627][ T73] veth1_vlan: left promiscuous mode [ 2843.294403][ T73] veth0_vlan: left promiscuous mode [ 2843.353334][ T73] pim6reg (unregistering): left allmulticast mode [ 2843.566336][ T73] team0 (unregistering): Port device team_slave_1 removed [ 2843.596946][ T73] team0 (unregistering): Port device team_slave_0 removed [ 2843.846608][T31540] veth0_vlan: entered promiscuous mode [ 2843.901441][T31540] veth1_vlan: entered promiscuous mode [ 2844.004263][T31540] veth0_macvtap: entered promiscuous mode [ 2844.024766][T31512] veth0_vlan: entered promiscuous mode [ 2844.042765][T31540] veth1_macvtap: entered promiscuous mode [ 2844.068647][T31512] veth1_vlan: entered promiscuous mode [ 2844.098933][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.111931][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.122691][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.133479][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.143526][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.157140][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.168583][T31540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2844.192928][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.206595][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.216664][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.228556][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.238556][T31540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.251498][T31540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.263926][T31540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2844.283816][T31540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.293821][T31540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.305305][T31540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.314187][T31540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.385087][T31512] veth0_macvtap: entered promiscuous mode [ 2844.404904][T31512] veth1_macvtap: entered promiscuous mode [ 2844.426781][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2844.434311][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.449256][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.450258][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2844.459655][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.483171][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.493575][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.504614][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.514741][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2844.525442][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.536934][T31512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2844.565116][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.575991][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.590527][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.604521][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.615139][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.627838][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.643867][T31512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2844.655130][T31512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2844.668651][T31512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2844.705052][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2844.714514][T31512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.728531][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2844.736353][T31512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.748174][T31512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.758596][T31512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2844.999368][T31577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2844.999387][T31577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.157361][T27212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2845.157378][T27212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2845.709157][ T3074] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2845.889108][ T3074] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 2846.111831][ T3074] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 2846.123425][ T3074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.133341][ T3074] usb 5-1: Product: syz [ 2846.144267][ T3074] usb 5-1: Manufacturer: syz [ 2846.152601][ T3074] usb 5-1: SerialNumber: syz [ 2846.161135][ T3074] usb 5-1: config 0 descriptor?? [ 2846.202520][ T3074] go7007-loader 5-1:0.0: can't handle multiple config [ 2846.219774][ T3074] go7007-loader 5-1:0.0: probe failed [ 2847.137190][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2847.137204][ T30] audit: type=1400 audit(1746275245.837:1121): avc: denied { sys_chroot } for pid=31804 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2847.168353][ T30] audit: type=1400 audit(1746275245.837:1122): avc: denied { setgid } for pid=31804 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 2847.191555][ T30] audit: type=1400 audit(1746275245.837:1123): avc: denied { setrlimit } for pid=31804 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 2848.266094][ T3074] usb 5-1: USB disconnect, device number 91 [ 2897.180818][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2955.579999][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 2955.586038][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 2958.634586][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3009.178785][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 3009.186356][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 3009.194008][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3009.202740][ T31] task:kworker/0:1 state:D stack:23432 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 3009.218450][ T31] Workqueue: usb_hub_wq hub_event [ 3009.223554][ T31] Call Trace: [ 3009.226833][ T31] [ 3009.229858][ T31] __schedule+0x116f/0x5de0 [ 3009.234372][ T31] ? __lock_acquire+0x9e1/0x1ba0 [ 3009.239369][ T31] ? __pfx___schedule+0x10/0x10 [ 3009.244229][ T31] ? find_held_lock+0x2b/0x80 [ 3009.248934][ T31] ? schedule+0x2d7/0x3a0 [ 3009.253285][ T31] schedule+0xe7/0x3a0 [ 3009.257333][ T31] usb_kill_urb+0x253/0x320 [ 3009.262606][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 3009.267644][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3009.273793][ T31] usb_start_wait_urb+0x250/0x4b0 [ 3009.278861][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3009.284402][ T31] ? __asan_memset+0x23/0x50 [ 3009.289004][ T31] usb_control_msg+0x326/0x4a0 [ 3009.293783][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 3009.299108][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 3009.305185][ T31] hub_port_init+0x690/0x3a70 [ 3009.309909][ T31] hub_event+0x2c67/0x4fa0 [ 3009.314344][ T31] ? __pfx_hub_event+0x10/0x10 [ 3009.319204][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 3009.324854][ T31] ? rcu_is_watching+0x12/0xc0 [ 3009.329642][ T31] process_one_work+0x9cc/0x1b70 [ 3009.334578][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 3009.339901][ T31] ? __pfx_process_one_work+0x10/0x10 [ 3009.345285][ T31] ? assign_work+0x1a0/0x250 [ 3009.349910][ T31] worker_thread+0x6c8/0xf10 [ 3009.354515][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3009.359665][ T31] kthread+0x3c2/0x780 [ 3009.364299][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.368930][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.373529][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.378095][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.382721][ T31] ? rcu_is_watching+0x12/0xc0 [ 3009.387491][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.392098][ T31] ret_from_fork+0x45/0x80 [ 3009.396512][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.401147][ T31] ret_from_fork_asm+0x1a/0x30 [ 3009.405927][ T31] [ 3009.409108][ T31] [ 3009.409108][ T31] Showing all locks held in the system: [ 3009.416819][ T31] 5 locks held by kworker/0:1/10: [ 3009.421980][ T31] #0: ffff888022293548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3009.432828][ T31] #1: ffffc900000f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3009.444095][ T31] #2: ffff88802a98c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 3009.453000][ T31] #3: ffff88802a98f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 3009.462954][ T31] #4: ffff88802a627068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 3009.473450][ T31] 1 lock held by khungtaskd/31: [ 3009.478292][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 3009.488194][ T31] 2 locks held by getty/5567: [ 3009.492899][ T31] #0: ffff88814d75c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3009.502857][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 3009.513362][ T31] 5 locks held by kworker/u8:2/27212: [ 3009.518814][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 3009.529013][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 3009.540636][ T31] #2: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0x159/0x1030 [ 3009.550365][ T31] #3: ffffffff9adccdc0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 3009.560781][ T31] #4: ffffffff9acfe708 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 3009.571850][ T31] [ 3009.574175][ T31] ============================================= [ 3009.574175][ T31] [ 3009.582669][ T31] NMI backtrace for cpu 1 [ 3009.582682][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 3009.582703][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3009.582713][ T31] Call Trace: [ 3009.582720][ T31] [ 3009.582726][ T31] dump_stack_lvl+0x116/0x1f0 [ 3009.582753][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3009.582771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3009.582788][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3009.582808][ T31] watchdog+0xf70/0x12c0 [ 3009.582829][ T31] ? __pfx_watchdog+0x10/0x10 [ 3009.582843][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3009.582865][ T31] ? __kthread_parkme+0x19e/0x250 [ 3009.582889][ T31] ? __pfx_watchdog+0x10/0x10 [ 3009.582904][ T31] kthread+0x3c2/0x780 [ 3009.582920][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.582933][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.582947][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.582961][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.582975][ T31] ? rcu_is_watching+0x12/0xc0 [ 3009.582996][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.583011][ T31] ret_from_fork+0x45/0x80 [ 3009.583027][ T31] ? __pfx_kthread+0x10/0x10 [ 3009.583042][ T31] ret_from_fork_asm+0x1a/0x30 [ 3009.583077][ T31] [ 3009.583083][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3009.715083][ C0] NMI backtrace for cpu 0 [ 3009.715096][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 3009.715112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3009.715120][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3009.715140][ C0] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3009.715152][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 3009.715163][ C0] RAX: 000000000a4d871d RBX: 0000000000000000 RCX: ffffffff8b6cd419 [ 3009.715171][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe0f79 RDI: ffffffff8bf482e0 [ 3009.715180][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 3009.715188][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 3009.715195][ C0] R13: ffffffff8e097740 R14: ffffffff90850210 R15: 0000000000000000 [ 3009.715208][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 3009.715221][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3009.715230][ C0] CR2: 000055acb07ba600 CR3: 000000000e180000 CR4: 00000000003526f0 [ 3009.715238][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3009.715245][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3009.715253][ C0] Call Trace: [ 3009.715257][ C0] [ 3009.715262][ C0] default_idle+0x13/0x20 [ 3009.715279][ C0] default_idle_call+0x6d/0xb0 [ 3009.715295][ C0] do_idle+0x391/0x510 [ 3009.715310][ C0] ? __pfx_do_idle+0x10/0x10 [ 3009.715325][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 3009.715343][ C0] cpu_startup_entry+0x4f/0x60 [ 3009.715357][ C0] rest_init+0x16b/0x2b0 [ 3009.715374][ C0] ? acpi_subsystem_init+0x133/0x180 [ 3009.715388][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 3009.715405][ C0] start_kernel+0x3e9/0x4d0 [ 3009.715422][ C0] x86_64_start_reservations+0x18/0x30 [ 3009.715437][ C0] x86_64_start_kernel+0xb0/0xc0 [ 3009.715452][ C0] common_startup_64+0x13e/0x148 [ 3009.715472][ C0] [ 3009.716117][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3009.930274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 3009.942055][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3009.952083][ T31] Call Trace: [ 3009.955338][ T31] [ 3009.958251][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3009.962832][ T31] panic+0x71c/0x800 [ 3009.966717][ T31] ? __pfx_panic+0x10/0x10 [ 3009.971122][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3009.976479][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3009.982450][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3009.987807][ T31] ? watchdog+0xdda/0x12c0 [ 3009.992195][ T31] ? watchdog+0xdcd/0x12c0 [ 3009.996591][ T31] watchdog+0xdeb/0x12c0 [ 3010.000807][ T31] ? __pfx_watchdog+0x10/0x10 [ 3010.005456][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3010.010629][ T31] ? __kthread_parkme+0x19e/0x250 [ 3010.015631][ T31] ? __pfx_watchdog+0x10/0x10 [ 3010.020279][ T31] kthread+0x3c2/0x780 [ 3010.024319][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.028883][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.033444][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.038007][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.042567][ T31] ? rcu_is_watching+0x12/0xc0 [ 3010.047307][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.051871][ T31] ret_from_fork+0x45/0x80 [ 3010.056260][ T31] ? __pfx_kthread+0x10/0x10 [ 3010.060824][ T31] ret_from_fork_asm+0x1a/0x30 [ 3010.065571][ T31] [ 3010.068839][ T31] Kernel Offset: disabled [ 3010.073147][ T31] Rebooting in 86400 seconds..