last executing test programs: 13m57.247728547s ago: executing program 1 (id=167): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x1f, 0xffffffff, 0x2, 0xb, 0x63, 0x5, 0x2, 0x1}) 13m57.142000359s ago: executing program 1 (id=168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c000280080001400000000820000180"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 13m57.064568957s ago: executing program 1 (id=169): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) pipe(&(0x7f00000000c0)) 13m56.424977465s ago: executing program 1 (id=170): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 13m54.759107459s ago: executing program 1 (id=175): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040000}}, {{&(0x7f0000005500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x3, 0x20008800) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000050) unshare(0x4000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a000000000000611188000000000018000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 13m52.237784881s ago: executing program 1 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 13m37.092321347s ago: executing program 32 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 9m20.342865959s ago: executing program 5 (id=834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:7-', @ANYRESOCT=r1]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) write(r2, &(0x7f0000000140)="41000200010001", 0x7) socket$kcm(0x10, 0x2, 0x0) 9m14.998394958s ago: executing program 5 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb7c, 0x6d, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 9m14.593633301s ago: executing program 5 (id=849): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) 9m12.050821613s ago: executing program 5 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=""/4096) 9m8.48607269s ago: executing program 5 (id=856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x83, 0x5}, 0x8) 9m8.371657188s ago: executing program 5 (id=859): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) syz_open_dev$sg(0x0, 0x489, 0x600002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f00000010c0)="84", 0x1}], 0x1, 0x2, 0x934, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202c) ptrace$setregs(0xd, r3, 0x7, 0x0) r4 = io_uring_setup(0x6b4b, &(0x7f0000000000)={0x0, 0x60a7, 0x20, 0xfffffffc, 0x2a6}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8m53.222418828s ago: executing program 33 (id=859): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) syz_open_dev$sg(0x0, 0x489, 0x600002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f00000010c0)="84", 0x1}], 0x1, 0x2, 0x934, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202c) ptrace$setregs(0xd, r3, 0x7, 0x0) r4 = io_uring_setup(0x6b4b, &(0x7f0000000000)={0x0, 0x60a7, 0x20, 0xfffffffc, 0x2a6}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4m18.865985228s ago: executing program 0 (id=1795): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000300), 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000002240)='net/igmp\x00') read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000200)=""/210, 0xd2, 0x8) 4m18.33425998s ago: executing program 0 (id=1799): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="184a00000200000000000000000000001831000003000000000000000000000018270000", @ANYRES32, @ANYBLOB="000000000100000018010000756c6c2500ffffffff2020207b1af8ff00000000bfa10000000000000701ffffb702000008000000b7"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c2000003080600010800"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4m17.743769863s ago: executing program 0 (id=1801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200088f9}, 0x4008000) 4m16.942769922s ago: executing program 0 (id=1809): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x1000, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 4m16.783441858s ago: executing program 0 (id=1810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 4m16.527244185s ago: executing program 0 (id=1813): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) syz_open_dev$sg(0x0, 0x489, 0x600002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f00000010c0)="84", 0x1}], 0x1, 0x2, 0x934, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202c) ptrace$setregs(0xd, r3, 0x7, 0x0) r4 = io_uring_setup(0x6b4b, &(0x7f0000000000)={0x0, 0x60a7, 0x20, 0xfffffffc, 0x2a6}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) unshare(0x1e9c70bae2058e63) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4m1.277140146s ago: executing program 34 (id=1813): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) syz_open_dev$sg(0x0, 0x489, 0x600002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f00000010c0)="84", 0x1}], 0x1, 0x2, 0x934, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202c) ptrace$setregs(0xd, r3, 0x7, 0x0) r4 = io_uring_setup(0x6b4b, &(0x7f0000000000)={0x0, 0x60a7, 0x20, 0xfffffffc, 0x2a6}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) unshare(0x1e9c70bae2058e63) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.755419037s ago: executing program 4 (id=2691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0x60e7, &(0x7f00000002c0)={0x0, 0x4200002f, 0x20000, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000091441"], 0x18}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000240)={0x78, 0x3, 0xfffffffc, 0xffffffff}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x300fff2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x8008550e, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000002200)=0xf1eb) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x519943, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000140)=""/178, &(0x7f0000000200)=0xb2) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40002100, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) 6.011748471s ago: executing program 2 (id=2693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) 5.894524505s ago: executing program 2 (id=2695): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) renameat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00') 5.719591887s ago: executing program 2 (id=2697): fsopen(&(0x7f0000000000)='ext2\x00', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r3 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="080004006401010208000100ac14143d080002007f00000108000200e000000208"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r9 = socket$packet(0x11, 0x3, 0x300) fsetxattr(r9, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.553230216s ago: executing program 4 (id=2700): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 5.309334083s ago: executing program 4 (id=2701): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.872161879s ago: executing program 4 (id=2704): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x20, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1000000c, 0x21, 0x3, 0x0}) socket$alg(0x26, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69) close(r1) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_clone(0x9100080, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 4.547706359s ago: executing program 4 (id=2706): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.46452931s ago: executing program 6 (id=2708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x44000000) 4.183229856s ago: executing program 6 (id=2709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 4.00509911s ago: executing program 6 (id=2710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a000000000000000800010001"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 3.925624981s ago: executing program 6 (id=2711): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 3.890908527s ago: executing program 2 (id=2713): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.760814765s ago: executing program 7 (id=2715): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x21, 0x3d, 0x2, 0x0, 0x0, 0xffffffffff7ffffe, 0xfffffffa, 0xb01}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c00000400428011cb768006000600800a000012444b588d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'pimreg0\x00', 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x90}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) tkill(r7, 0x12) r8 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r8, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_extract_tcp_res(&(0x7f00000003c0), 0x8, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.040358599s ago: executing program 6 (id=2716): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000840)={0x40, 0xb, 0x2, "31b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000004c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x20, 0x3, 0x2, "6095"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.859790961s ago: executing program 7 (id=2717): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.759390991s ago: executing program 7 (id=2719): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x320) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) r5 = syz_io_uring_setup(0x3b, &(0x7f0000000240)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101, 0x0, {0xfffe}}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="5985d20392a438a1", 0x8}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x44804) recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}], 0x1}, 0x20012101) close_range(r0, 0xffffffffffffffff, 0x0) 1.580636884s ago: executing program 3 (id=2720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x6000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 1.27427392s ago: executing program 7 (id=2721): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x208040) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) 1.239887726s ago: executing program 3 (id=2722): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0xa, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ef7cf4cf00d3bc4171"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041015}, 0x0) 1.118921018s ago: executing program 3 (id=2723): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/130, 0x82}, {0x0}], 0x4, &(0x7f0000000780)=""/199, 0xc7}, 0x120) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={0x0}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 359.867725ms ago: executing program 7 (id=2724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) 300.465069ms ago: executing program 3 (id=2725): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, [0x100000001, 0x3, 0x8, 0x419, 0x40, 0x10, 0x6, 0x5, 0x0, 0x8, 0x6, 0x200, 0xf929b5, 0x40000, 0x591a]}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x4c, &(0x7f0000000540)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast2}]}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x96, 0x8001, 0x4, @private0, @mcast2, 0x7, 0x80, 0x4, 0x9}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={r2, 0x3, 0x0, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x4040000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x4008000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x4c015) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 276.769693ms ago: executing program 4 (id=2726): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 206.091291ms ago: executing program 7 (id=2727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 180.486813ms ago: executing program 2 (id=2728): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x0, 0x20}, &(0x7f0000000140)=0xc) 149.53594ms ago: executing program 2 (id=2729): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="20161a"], 0x0, 0x0}) 87.806183ms ago: executing program 3 (id=2730): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x2) pwrite64(r0, 0x0, 0xfffffffffffffe97, 0x0) 87.633306ms ago: executing program 3 (id=2731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988ca", 0xe}], 0x1) 0s ago: executing program 6 (id=2732): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000190001a948f32e047bdbdf250a010900100092800400f88008001e00000000000c0009800800ce8004003e80"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @loopback, 0x23}, 0x1c) dup(r7) kernel console output (not intermixed with test programs): vice found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 695.099748][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.111199][ T5927] usb 4-1: Product: syz [ 695.125313][ T5927] usb 4-1: Manufacturer: syz [ 695.135919][ T5927] usb 4-1: SerialNumber: syz [ 695.151982][ T5927] usb 4-1: config 0 descriptor?? [ 695.379054][ T5927] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 695.387912][ T5927] imon 4-1:0.0: unable to initialize intf0, err -19 [ 695.394884][ T5927] imon:imon_probe: failed to initialize context! [ 695.402573][ T5927] imon 4-1:0.0: unable to register, err -19 [ 695.470716][ T5927] usb 4-1: USB disconnect, device number 20 [ 695.837254][T12899] IPVS: ip_vs_add_dest(): server weight less than zero [ 695.861772][ T30] audit: type=1400 audit(1769268651.190:470): avc: denied { setopt } for pid=12898 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 695.911140][ T5874] IPVS: starting estimator thread 0... [ 696.021695][T12901] IPVS: using max 41 ests per chain, 98400 per kthread [ 696.199165][T12903] tipc: Enabled bearer , priority 0 [ 696.211101][T12903] syzkaller0: entered promiscuous mode [ 696.221696][T12903] syzkaller0: entered allmulticast mode [ 696.268636][T12902] tipc: Resetting bearer [ 696.291335][ T5927] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 696.309635][T12902] tipc: Disabling bearer [ 696.511228][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 696.519032][ T5927] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 696.841028][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 696.866743][ T5927] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 696.883005][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.021001][ T5927] usb 4-1: Product: syz [ 697.025173][ T5927] usb 4-1: Manufacturer: syz [ 697.029732][ T5927] usb 4-1: SerialNumber: syz [ 697.047580][ T5927] usb 4-1: config 0 descriptor?? [ 697.582662][ T5927] usb 4-1: can't set config #0, error -71 [ 697.595569][ T5927] usb 4-1: USB disconnect, device number 21 [ 697.761731][T12934] IPVS: ip_vs_add_dest(): server weight less than zero [ 697.771965][T12929] tipc: Enabled bearer , priority 0 [ 697.844300][T12929] syzkaller0: entered promiscuous mode [ 697.902176][T12929] syzkaller0: entered allmulticast mode [ 697.936906][T12924] tipc: Resetting bearer [ 698.006695][T12924] tipc: Disabling bearer [ 698.119565][ T5927] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 698.282382][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 698.310015][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.323940][ T5927] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 698.340763][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.394573][ T5927] usb 7-1: config 0 descriptor?? [ 698.899352][ T5927] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 698.918101][ T5927] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 698.929929][ T5927] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 699.012846][T12961] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 699.019871][T12961] overlayfs: failed to set xattr on upper [ 699.025658][T12961] overlayfs: ...falling back to redirect_dir=nofollow. [ 699.032547][T12961] overlayfs: ...falling back to index=off. [ 699.038365][T12961] overlayfs: ...falling back to uuid=null. [ 699.044262][T12961] overlayfs: maximum fs stacking depth exceeded [ 699.916561][ T5927] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 699.933791][ T5927] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 700.262575][ T5927] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 700.294803][T12968] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 700.302621][T12968] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1815'. [ 700.369346][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 700.430767][ T5927] usb 7-1: USB disconnect, device number 16 [ 700.529209][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 700.630295][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 700.651127][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 700.670285][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.704724][ T24] usb 3-1: Product: syz [ 700.718742][ T24] usb 3-1: Manufacturer: syz [ 700.744485][ T24] usb 3-1: SerialNumber: syz [ 700.780782][ T24] usb 3-1: config 0 descriptor?? [ 701.273843][ T24] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 701.333175][ T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 702.248627][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 703.156343][ T24] usb 3-1: USB disconnect, device number 20 [ 707.542882][T13076] netlink: 'syz.6.1835': attribute type 10 has an invalid length. [ 707.647812][T13079] Bluetooth: MGMT ver 1.23 [ 707.675639][ T6318] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 707.885570][ T6318] usb 3-1: device descriptor read/64, error -71 [ 708.139410][T13090] ptrace attach of "./syz-executor exec"[9586] was attempted by " [ 708.803527][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 709.013438][ T6318] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 709.865684][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 709.956477][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 709.975377][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 710.114514][ T24] usb 7-1: device descriptor read/64, error -71 [ 710.176469][ T6318] usb 3-1: device descriptor read/64, error -71 [ 710.321979][ T6318] usb usb3-port1: attempt power cycle [ 710.364347][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 710.517801][ T24] usb 7-1: device descriptor read/64, error -71 [ 711.237609][ T5820] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 711.263877][ T24] usb usb7-port1: attempt power cycle [ 711.413755][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 711.451662][ T5820] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 711.460607][ T5820] usb 5-1: config 4 has no interface number 0 [ 711.479856][ T5820] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.505751][ T5820] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.532187][ T5820] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.553680][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.576412][ T5820] hub 5-1:4.128: USB hub found [ 711.633805][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 711.682111][ T24] usb 7-1: device descriptor read/8, error -71 [ 711.793119][ T5820] hub 5-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 711.933583][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 711.991851][ T24] usb 7-1: device descriptor read/8, error -71 [ 712.123901][ T24] usb usb7-port1: unable to enumerate USB device [ 712.137603][ T5820] usb 5-1: USB disconnect, device number 29 [ 712.384112][T13123] syzkaller0: entered promiscuous mode [ 712.392105][T13123] syzkaller0: entered allmulticast mode [ 712.479935][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'. [ 712.513511][T13129] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 713.294892][T12965] Set syz1 is full, maxelem 65536 reached [ 713.318350][T13140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.079718][T13151] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 714.086692][T13151] overlayfs: failed to set xattr on upper [ 714.092431][T13151] overlayfs: ...falling back to redirect_dir=nofollow. [ 714.099372][T13151] overlayfs: ...falling back to index=off. [ 714.105173][T13151] overlayfs: ...falling back to uuid=null. [ 714.110950][T13151] overlayfs: maximum fs stacking depth exceeded [ 714.172635][ T9835] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 714.289883][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.298838][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.307086][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.322513][ T9835] usb 7-1: Using ep0 maxpacket: 16 [ 714.330234][ T9835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.341792][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.349202][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.366063][ T9835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 714.376358][ T9835] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 714.385586][ T9835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.393730][ T9835] usb 7-1: Product: syz [ 714.397988][ T9835] usb 7-1: Manufacturer: syz [ 714.403272][ T9835] usb 7-1: SerialNumber: syz [ 714.412988][ T9835] usb 7-1: config 0 descriptor?? [ 714.653030][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 714.680238][ T9835] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 714.702480][ T5927] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 714.717462][ T9835] imon:send_packet: packet tx failed (-71) [ 714.753325][ T9835] imon 7-1:0.0: panel buttons/knobs setup failed [ 714.865281][ T9835] rc_core: IR keymap rc-imon-pad not found [ 714.884393][ T5927] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 714.902956][ T9835] Registered IR keymap rc-empty [ 714.913145][ T9835] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 714.934083][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.935203][ T9835] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 714.973549][ T5927] usb 4-1: config 0 descriptor?? [ 714.983418][ T5927] cp210x 4-1:0.0: cp210x converter detected [ 715.033378][ T9835] imon:send_packet: packet tx failed (-71) [ 715.061965][ T9835] imon 7-1:0.0: remote input dev register failed [ 715.068403][ T9835] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 715.180288][ T9835] imon 7-1:0.0: unable to initialize intf0, err 0 [ 715.205960][ T9835] imon:imon_probe: failed to initialize context! [ 715.222005][ T5927] usb 4-1: cp210x converter now attached to ttyUSB0 [ 715.222722][ T9835] imon 7-1:0.0: unable to register, err -19 [ 715.244094][ T9835] usb 7-1: USB disconnect, device number 21 [ 715.249864][T13152] chnl_net:caif_netlink_parms(): no params data found [ 715.593712][ T9835] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 715.729599][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.738316][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.752055][ T9835] usb 7-1: Using ep0 maxpacket: 16 [ 715.761928][T13152] bridge_slave_0: entered allmulticast mode [ 715.768800][ T9835] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.780039][ T9835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 715.788044][T13152] bridge_slave_0: entered promiscuous mode [ 715.796544][ T9835] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 715.806578][ T9835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.831911][ T9835] usb 7-1: Product: syz [ 715.836195][ T9835] usb 7-1: Manufacturer: syz [ 715.841652][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.848737][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.856017][ T9835] usb 7-1: SerialNumber: syz [ 715.863699][ T9835] usb 7-1: config 0 descriptor?? [ 715.869007][T13152] bridge_slave_1: entered allmulticast mode [ 715.882312][T13152] bridge_slave_1: entered promiscuous mode [ 715.939920][T13152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.961192][T13152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.060462][T13152] team0: Port device team_slave_0 added [ 716.081235][T13152] team0: Port device team_slave_1 added [ 716.171053][T13152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.193268][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.231454][T13152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.252936][T13152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.259888][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.285991][T13152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.371310][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 716.378340][ T52] Bluetooth: hci5: command tx timeout [ 716.396611][ T9835] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input19 [ 716.416232][T13152] hsr_slave_0: entered promiscuous mode [ 716.428808][T13152] hsr_slave_1: entered promiscuous mode [ 716.429641][ T9835] imon:send_packet: packet tx failed (-71) [ 716.441984][T13152] debugfs: 'hsr0' already exists in 'hsr' [ 716.448037][T13152] Cannot create hsr debugfs directory [ 716.461431][ T9835] imon 7-1:0.0: panel buttons/knobs setup failed [ 716.514387][T12755] bridge_slave_0: left allmulticast mode [ 716.520041][T12755] bridge_slave_0: left promiscuous mode [ 716.528288][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.531231][ T9835] rc_core: IR keymap rc-imon-pad not found [ 716.541197][ T9835] Registered IR keymap rc-empty [ 716.546455][ T9835] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 716.558060][ T9835] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 716.569705][ T9835] imon:send_packet: packet tx failed (-71) [ 716.591218][ T9835] imon 7-1:0.0: remote input dev register failed [ 716.601310][ T9835] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 716.623542][ T9835] imon 7-1:0.0: unable to initialize intf0, err 0 [ 716.629948][ T9835] imon:imon_probe: failed to initialize context! [ 716.642561][ T9835] imon 7-1:0.0: unable to register, err -19 [ 716.661004][ T9835] usb 7-1: USB disconnect, device number 22 [ 716.821386][T12755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.831354][T12755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.840770][T12755] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 716.852424][T12755] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 716.862782][T12755] bond0 (unregistering): Released all slaves [ 716.937395][T12755] tipc: Left network mode [ 717.105539][T13191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1871'. [ 717.552114][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1872'. [ 718.450272][ T52] Bluetooth: hci5: command tx timeout [ 718.700757][ T6083] usb 4-1: USB disconnect, device number 22 [ 718.714876][T13152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 718.856913][T13152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.973031][T13152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.995354][T13152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 719.024612][ T6083] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 719.075695][T13152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.142505][T13152] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.154174][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.161288][ T6873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.190052][ T6083] cp210x 4-1:0.0: device disconnected [ 719.233971][T12755] hsr_slave_0: left promiscuous mode [ 719.258344][T12755] hsr_slave_1: left promiscuous mode [ 719.270332][T12755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.287527][T12755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.309964][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 719.497624][ T24] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 719.520802][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.537537][ T6083] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 719.554446][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 719.570598][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 719.602637][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 719.621901][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 719.632322][ T24] usb 7-1: SerialNumber: syz [ 719.693597][ T6083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.705701][ T6083] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 719.718818][ T6083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.729158][ T6083] usb 4-1: config 0 descriptor?? [ 719.864073][ T24] usb 7-1: 0:2 : does not exist [ 719.880907][ T24] usb 7-1: unit 5 not found! [ 719.909040][ T24] usb 7-1: USB disconnect, device number 23 [ 719.961360][ T6083] usbhid 4-1:0.0: can't add hid device: -71 [ 719.968071][T12803] udevd[12803]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.996759][ T6083] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 720.024149][ T6083] usb 4-1: USB disconnect, device number 23 [ 720.168791][T13240] ptrace attach of "./syz-executor exec"[5823] was attempted by " [ 720.529234][ T5830] Bluetooth: hci5: command tx timeout [ 720.685437][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.692575][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.879275][ T6083] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 720.887112][ T9835] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 720.944642][T13246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1882'. [ 721.077334][ T6083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 721.100146][ T9835] usb 7-1: Using ep0 maxpacket: 16 [ 721.120473][T12755] IPVS: stop unused estimator thread 0... [ 721.122167][ T9835] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 721.139025][ T6083] usb 4-1: New USB device found, idVendor=0920, idProduct=3333, bcdDevice= 0.40 [ 721.148066][ T6083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.179751][ T9835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.241463][ T9835] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.245776][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.257731][ T6083] usb 4-1: config 0 descriptor?? [ 721.284613][ T9835] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.308949][ T9835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.322092][ T9835] usb 7-1: Product: syz [ 721.359418][ T9835] usb 7-1: Manufacturer: syz [ 721.364301][ T9835] usb 7-1: SerialNumber: syz [ 721.687261][ T6083] usbhid 4-1:0.0: can't add hid device: -71 [ 721.717695][ T6083] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 721.743924][ T6083] usb 4-1: USB disconnect, device number 24 [ 721.825477][T13152] veth0_vlan: entered promiscuous mode [ 721.838725][ T9835] usb 7-1: 0:2 : does not exist [ 721.859141][ T9835] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 721.868125][T13152] veth1_vlan: entered promiscuous mode [ 721.903006][ T9835] usb 7-1: USB disconnect, device number 24 [ 721.925869][T12803] udevd[12803]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.042554][T13152] veth0_macvtap: entered promiscuous mode [ 722.080067][T13152] veth1_macvtap: entered promiscuous mode [ 722.100958][T13152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.115306][T13152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.133496][ T3911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.152918][ T3911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.240882][ T3911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.279574][ T3911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.498628][ T6866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.506461][ T6866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.690128][ T5830] Bluetooth: hci5: command 0x0419 tx timeout [ 722.702467][ T6872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.722121][ T6872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.798063][ T9835] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 722.943801][ T9835] usb 7-1: device descriptor read/64, error -71 [ 723.257995][ T9835] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 723.719861][ T9835] usb 7-1: device descriptor read/64, error -71 [ 723.944790][T13326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'. [ 723.954983][ T9835] usb usb7-port1: attempt power cycle [ 724.025172][T13326] geneve2: entered promiscuous mode [ 724.045987][ T3911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.075711][ T3911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.108010][ T3911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.159992][ T3911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.307390][ T9835] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 724.329791][ T9835] usb 7-1: device descriptor read/8, error -71 [ 724.578413][ T9835] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 724.627951][ T9835] usb 7-1: device descriptor read/8, error -71 [ 724.747555][ T9835] usb usb7-port1: unable to enumerate USB device [ 724.780475][ T52] Bluetooth: hci5: command 0x0419 tx timeout [ 726.856045][ T5927] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 726.925679][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1905'. [ 726.961743][T13378] geneve2: entered promiscuous mode [ 727.017962][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.049398][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.066483][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.681096][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.690419][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.718006][ T5927] usb 5-1: config 0 descriptor?? [ 727.835721][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 727.995552][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 728.006771][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.029057][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.049227][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.076913][ T5874] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.088707][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.105844][ T5874] usb 3-1: config 0 descriptor?? [ 728.177741][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.202824][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.247784][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 728.270879][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 728.310288][ T24] usb 4-1: SerialNumber: syz [ 728.325127][ T9835] IPVS: starting estimator thread 0... [ 728.331069][T13397] IPVS: sh: FWM 3 0x00000003 - no destination available [ 728.340833][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 728.353992][T13397] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1909'. [ 728.433414][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1911'. [ 728.462816][T13400] IPVS: using max 45 ests per chain, 108000 per kthread [ 728.813019][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 728.813938][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.826940][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.834016][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 728.837451][ T24] usb 4-1: 0:2 : does not exist [ 728.859718][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.875071][ T24] usb 4-1: unit 5 not found! [ 728.876482][ T5927] usb 5-1: USB disconnect, device number 30 [ 728.890095][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.921543][ T24] usb 4-1: USB disconnect, device number 25 [ 728.927716][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.954997][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 728.993249][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 729.023239][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 729.048207][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1912'. [ 729.068275][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 729.092444][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 729.128025][ T5874] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 729.172565][ T5874] usb 3-1: USB disconnect, device number 24 [ 729.205018][T13410] syzkaller0: entered promiscuous mode [ 729.230383][T13410] syzkaller0: entered allmulticast mode [ 729.232647][T13411] fido_id[13411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 729.614677][ T5874] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 729.668692][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1918'. [ 729.712437][ T30] audit: type=1400 audit(1769268685.117:471): avc: denied { connect } for pid=13424 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 729.777211][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.791902][ T5874] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 729.802495][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.814084][ T5874] usb 7-1: config 0 descriptor?? [ 729.904555][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 730.061426][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.075063][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 730.081052][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 730.090187][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.203642][ T5874] usb 7-1: USB disconnect, device number 29 [ 730.219961][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 731.155769][ T24] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 731.191773][ T24] usb 4-1: Manufacturer: syz [ 731.717712][ T24] usb 4-1: config 0 descriptor?? [ 731.854071][ T5874] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 732.170911][T13449] IPVS: sh: FWM 3 0x00000003 - no destination available [ 732.180927][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 732.246786][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.269138][ T5874] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 732.288567][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.323561][ T5874] usb 7-1: config 0 descriptor?? [ 732.371609][ T5874] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 732.378538][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1930'. [ 732.414737][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.422062][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.429413][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.436728][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.444273][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.451800][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.459342][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.467074][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.475267][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.476124][T13457] geneve2: entered promiscuous mode [ 732.483205][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.495469][ T5172] usb 7-1: control msg error: -71 [ 732.501305][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.508848][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.516169][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.523465][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.530678][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.537808][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.544944][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.552058][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.559588][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.566794][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.573966][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.581136][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.588324][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.595545][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.602719][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.609936][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.617163][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.624363][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.631542][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.638720][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.645906][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.653068][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.662358][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.669694][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.677031][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.684520][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.691801][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.701884][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.709149][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.716512][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.723789][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.725909][ T6872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.731063][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.747170][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.754425][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.761945][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.769207][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.777190][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.785871][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.793128][ C1] usb 7-1: pegasus_irq - urb shutting down with status: -2 [ 732.822777][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.830097][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.837283][ T5172] usb 7-1: control msg error: -71 [ 732.843689][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.853038][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.861181][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.873311][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.883032][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.893072][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.903011][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.910988][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.923102][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.930425][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.937822][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.945118][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.952431][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.959686][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.967157][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.974395][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.981621][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.988849][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 732.996080][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.003551][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.010783][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.018015][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.025247][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.032644][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.039807][ T24] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 733.048727][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.055918][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.063090][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.070644][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.077880][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.090504][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.097763][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.105033][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.112277][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.119536][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.126803][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.134107][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.141393][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.148633][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.155873][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.163121][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.170622][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.177910][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.185161][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.192395][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.199722][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.206980][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.214245][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.221570][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.228860][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.236113][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.243537][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.250775][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.258022][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.265461][ C1] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.273741][ C1] usb 7-1: pegasus_irq - usb_submit_urb failed with result -1 [ 733.278554][ T6872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.282812][ T24] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 733.299682][ C0] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.307314][ C0] usb 7-1: pegasus_irq - nonzero urb status received: -71 [ 733.308303][ T5874] usb 7-1: USB disconnect, device number 30 [ 733.314425][ C0] usb 7-1: pegasus_irq - usb_submit_urb failed with result -19 [ 733.339506][T12831] usb 7-1: control msg error: -19 [ 733.361475][ T6872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.372196][ T6872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.386741][T13468] syzkaller0: entered promiscuous mode [ 733.400816][ T24] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 733.413536][T13468] syzkaller0: entered allmulticast mode [ 733.464068][ T24] usb 4-1: USB disconnect, device number 26 [ 733.822813][ T5874] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 734.767183][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.778902][ T5874] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 735.131887][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.174623][ T5874] usb 7-1: config 0 descriptor?? [ 735.509226][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 735.551813][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 735.571708][ T5820] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 735.591406][ T5874] usb 7-1: USB disconnect, device number 31 [ 735.753069][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.802932][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.839498][ T5820] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 735.852118][ T5820] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 735.862555][ T5820] usb 4-1: Manufacturer: syz [ 735.872174][ T5820] usb 4-1: config 0 descriptor?? [ 735.940077][T13494] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 735.948258][T13494] overlayfs: failed to set xattr on upper [ 735.955076][T13494] overlayfs: ...falling back to redirect_dir=nofollow. [ 735.963912][T13494] overlayfs: ...falling back to index=off. [ 735.969747][T13494] overlayfs: ...falling back to uuid=null. [ 735.977863][T13494] overlayfs: maximum fs stacking depth exceeded [ 736.021815][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 736.161447][ T5927] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 736.182902][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 736.190807][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.206919][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 736.216890][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.238752][ T9] usb 5-1: Product: syz [ 736.247422][ T9] usb 5-1: Manufacturer: syz [ 736.261308][ T9] usb 5-1: SerialNumber: syz [ 736.269945][ T9] usb 5-1: config 0 descriptor?? [ 736.335643][ T5927] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.362235][ T5927] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 736.383857][ T5927] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 736.393216][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 736.401626][ T5927] usb 8-1: SerialNumber: syz [ 736.630108][ T5927] usb 8-1: USB disconnect, device number 2 [ 736.712086][ T9] gs_usb 5-1:0.0: Configuring for 156 interfaces [ 736.725091][ T5820] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 736.740646][ T5820] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 736.748543][ T5820] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 736.771315][ T5820] usb 4-1: USB disconnect, device number 27 [ 736.861059][ T5874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 736.919466][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 736.928986][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 737.023354][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.050929][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.071739][ T5874] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 737.080783][ T5874] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 737.088961][ T5874] usb 3-1: Manufacturer: syz [ 737.095573][ T5874] usb 3-1: config 0 descriptor?? [ 737.830667][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 737.929999][ T5874] uclogic 0003:256C:006D.0009: interface is invalid, ignoring [ 737.958207][ T5874] usb 3-1: USB disconnect, device number 25 [ 737.980575][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 737.991743][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 738.019554][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 738.053546][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.086180][ T24] usb 4-1: config 0 descriptor?? [ 738.108236][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 738.410278][ T5874] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 738.572168][ T5874] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 738.585053][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.598544][ T5874] usb 8-1: config 0 descriptor?? [ 738.799305][ T24] usb 5-1: USB disconnect, device number 31 [ 739.628477][ T5874] usb 8-1: Cannot set autoneg [ 739.638373][ T5874] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 739.673880][ T5874] usb 8-1: USB disconnect, device number 3 [ 740.325849][T13599] syzkaller0: entered promiscuous mode [ 740.349331][T13599] syzkaller0: entered allmulticast mode [ 740.659280][T13606] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 740.670126][T13606] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1964'. [ 740.781477][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 741.048730][ T5874] usb 4-1: USB disconnect, device number 28 [ 742.879159][ T5874] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 742.977994][ T5820] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 743.044702][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.067952][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.079509][ T5874] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 743.088900][ T5874] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 743.102382][ T5874] usb 5-1: Manufacturer: syz [ 743.111598][ T5874] usb 5-1: config 0 descriptor?? [ 743.141626][ T5820] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.154424][ T5820] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.169056][ T5820] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 743.186611][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 743.194959][ T5820] usb 7-1: SerialNumber: syz [ 743.225498][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 743.283744][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1977'. [ 743.335471][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1977'. [ 743.424506][ T5820] usb 7-1: 0:2 : does not exist [ 743.447778][ T5820] usb 7-1: unit 5 not found! [ 743.475188][T13663] syzkaller0: entered promiscuous mode [ 743.476686][ T5820] usb 7-1: USB disconnect, device number 32 [ 743.488807][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1977'. [ 743.501331][T13663] syzkaller0: entered allmulticast mode [ 743.512756][T12831] udevd[12831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.877607][ T9835] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 743.943999][ T5874] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 743.953403][ T5874] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 743.961008][ T5874] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 743.973009][ T5874] usb 5-1: USB disconnect, device number 32 [ 744.029384][ T9835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.041217][ T9835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.052261][ T9835] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 744.061829][ T9835] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 744.075019][ T9835] usb 3-1: Manufacturer: syz [ 744.087923][ T9835] usb 3-1: config 0 descriptor?? [ 744.948095][ T9835] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 745.261295][ T9835] usb 3-1: USB disconnect, device number 26 [ 745.998134][T13700] syzkaller0: entered promiscuous mode [ 746.011289][T13700] syzkaller0: entered allmulticast mode [ 746.186014][T13700] tipc: Started in network mode [ 746.198685][T13700] tipc: Node identity 1a744cf556e1, cluster identity 4711 [ 746.236319][T13700] tipc: Enabled bearer , priority 0 [ 746.816668][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.206981][T13699] tipc: Resetting bearer [ 747.344917][T13699] tipc: Disabling bearer [ 747.425262][ T9] tipc: Node number set to 1284852981 [ 747.525560][T13711] syzkaller0: entered promiscuous mode [ 747.569111][T13711] syzkaller0: entered allmulticast mode [ 751.684217][ T9835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 751.855631][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.880829][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.915161][ T9835] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 751.933516][ T9835] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 751.949498][ T9835] usb 8-1: Manufacturer: syz [ 751.961564][ T9835] usb 8-1: config 0 descriptor?? [ 752.253393][ T6083] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 752.435719][ T6083] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 752.445527][ T6083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.465087][ T6083] usb 7-1: config 0 descriptor?? [ 752.790098][ T9835] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 752.804398][ T9835] usb 8-1: USB disconnect, device number 4 [ 752.836824][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'. [ 753.072270][T13748] netlink: 'syz.2.2002': attribute type 1 has an invalid length. [ 753.083795][T13748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2002'. [ 754.195922][ T6083] usb 7-1: Cannot set autoneg [ 754.201228][ T6083] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 754.241083][ T6083] usb 7-1: USB disconnect, device number 33 [ 754.306834][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 755.470473][ T5820] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 755.673068][ T5820] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 755.696780][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.714638][ T5820] usb 4-1: config 0 descriptor?? [ 755.729413][ T5820] cp210x 4-1:0.0: cp210x converter detected [ 756.929960][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2007'. [ 757.901154][ T5820] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 757.970563][ T5820] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 757.988901][ T5820] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 758.461926][ T5820] usb 4-1: cp210x converter now attached to ttyUSB0 [ 758.512026][ T5820] usb 4-1: USB disconnect, device number 29 [ 758.542060][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 758.562582][ T5820] cp210x 4-1:0.0: device disconnected [ 759.838520][T13808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 759.845627][T13808] overlayfs: failed to set xattr on upper [ 759.851424][T13808] overlayfs: ...falling back to redirect_dir=nofollow. [ 759.858284][T13808] overlayfs: ...falling back to index=off. [ 759.864134][T13808] overlayfs: ...falling back to uuid=null. [ 759.870067][T13808] overlayfs: maximum fs stacking depth exceeded [ 761.486695][ T30] audit: type=1400 audit(1769268716.713:472): avc: denied { listen } for pid=13821 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 761.534249][ T30] audit: type=1400 audit(1769268716.713:473): avc: denied { accept } for pid=13821 comm="syz.2.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 761.635273][T13831] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 761.642377][T13831] overlayfs: failed to set xattr on upper [ 761.648111][T13831] overlayfs: ...falling back to redirect_dir=nofollow. [ 761.655022][T13831] overlayfs: ...falling back to index=off. [ 761.660849][T13831] overlayfs: ...falling back to uuid=null. [ 761.666719][T13831] overlayfs: maximum fs stacking depth exceeded [ 763.172448][T13838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2028'. [ 763.211809][ T30] audit: type=1400 audit(1769268718.644:474): avc: denied { bind } for pid=13844 comm="syz.7.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 763.360290][ T30] audit: type=1400 audit(1769268718.674:475): avc: denied { setopt } for pid=13844 comm="syz.7.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 763.813575][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 763.859074][T13846] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.874847][ T9] hid-generic 0005:0006:5508.000D: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 763.978383][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 764.002127][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 764.026100][T13858] fido_id[13858]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 764.047091][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.077401][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.088418][T13846] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.116524][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.175357][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.217153][ T24] usb 5-1: Product: syz [ 764.227332][ T24] usb 5-1: Manufacturer: syz [ 764.231942][ T24] usb 5-1: SerialNumber: syz [ 764.310947][T13846] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.492803][T13846] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.527269][ T6083] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 764.535994][T13874] tipc: Enabled bearer , priority 0 [ 764.549836][T13874] tipc: Resetting bearer [ 764.608684][T13873] tipc: Disabling bearer [ 764.689619][ T24] usb 5-1: 0:2 : does not exist [ 764.699048][ T6083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.718309][ T6083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.740364][ T6083] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 764.757308][ T6083] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 764.765428][ T74] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.785832][ T6083] usb 3-1: Manufacturer: syz [ 764.807212][ T6083] usb 3-1: config 0 descriptor?? [ 764.812646][ T74] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.878815][ T74] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.896423][ T24] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 764.962592][T12755] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.963088][ T24] usb 5-1: USB disconnect, device number 33 [ 765.645248][T13895] syzkaller0: entered promiscuous mode [ 765.667977][T13895] syzkaller0: entered allmulticast mode [ 765.808635][ T6083] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 765.985883][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 767.626813][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.640190][ T5927] usb 3-1: USB disconnect, device number 27 [ 767.696898][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.718081][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 767.735566][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 767.753732][ T9] usb 5-1: Manufacturer: syz [ 767.760797][ T9] usb 5-1: config 0 descriptor?? [ 767.763913][T13909] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2048'. [ 768.081262][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2049'. [ 768.984480][ T9] uclogic 0003:256C:006D.000F: interface is invalid, ignoring [ 769.027560][ T9] usb 5-1: USB disconnect, device number 34 [ 769.652928][T13942] tipc: Enabled bearer , priority 0 [ 769.674340][T13942] syzkaller0: entered promiscuous mode [ 769.686555][T13942] syzkaller0: entered allmulticast mode [ 769.731075][T13942] tipc: Resetting bearer [ 769.759762][T13941] tipc: Resetting bearer [ 769.814125][ T30] audit: type=1400 audit(1769268725.237:476): avc: denied { bind } for pid=13944 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 769.857832][T13941] tipc: Disabling bearer [ 769.897268][T13946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.026977][T13946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.300254][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 771.224682][T13959] syzkaller0: entered promiscuous mode [ 771.230323][T13959] syzkaller0: entered allmulticast mode [ 771.327969][T13946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.653761][T13946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.595143][ T6872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.638865][ T6872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.657117][ T4086] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.707308][ T4086] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.673997][T14002] syzkaller0: entered promiscuous mode [ 774.679621][T14002] syzkaller0: entered allmulticast mode [ 774.833188][ T30] audit: type=1400 audit(1769268730.270:477): avc: denied { create } for pid=14005 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 774.861569][ T30] audit: type=1400 audit(1769268730.290:478): avc: denied { ioctl } for pid=14005 comm="syz.3.2078" path="socket:[48407]" dev="sockfs" ino=48407 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 774.914596][ T30] audit: type=1400 audit(1769268730.290:479): avc: denied { ioctl } for pid=14005 comm="syz.3.2078" path="socket:[48409]" dev="sockfs" ino=48409 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 774.956169][ T30] audit: type=1400 audit(1769268730.290:480): avc: denied { write } for pid=14005 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 775.012184][ T30] audit: type=1400 audit(1769268730.290:481): avc: denied { read } for pid=14005 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 775.107012][T14021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22 [ 775.145416][T14024] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 777.430477][T14046] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2090'. [ 779.669631][ T5820] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 779.844134][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.879684][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.891618][ T9835] hid-generic 0005:0006:5508.0010: item fetching failed at offset 3/6 [ 779.901408][ T9835] hid-generic 0005:0006:5508.0010: probe with driver hid-generic failed with error -22 [ 779.914219][ T5820] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 779.928849][ T5820] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 779.943477][ T5820] usb 3-1: Manufacturer: syz [ 779.957562][ T5820] usb 3-1: config 0 descriptor?? [ 780.057429][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 780.808537][ T5820] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 780.971750][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2097'. [ 781.026098][ T5820] usb 3-1: USB disconnect, device number 28 [ 781.222700][T14104] syzkaller0: entered promiscuous mode [ 781.228229][T14104] syzkaller0: entered allmulticast mode [ 781.236208][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 781.250669][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 781.273765][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 781.275195][ T6190] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.293143][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 781.301134][ T6190] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.322121][ T6190] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.354408][ T6190] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.546429][T14115] syzkaller0: entered promiscuous mode [ 781.918286][T14115] syzkaller0: entered allmulticast mode [ 782.288425][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 784.275542][T14178] fuse: Bad value for 'user_id' [ 784.282075][T14178] fuse: Bad value for 'user_id' [ 784.634062][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2137'. [ 784.689328][T14206] syzkaller0: entered promiscuous mode [ 784.694871][T14206] syzkaller0: entered allmulticast mode [ 784.874411][T14213] fuse: Bad value for 'user_id' [ 784.879753][T14213] fuse: Bad value for 'user_id' [ 785.784786][T14228] syzkaller0: entered promiscuous mode [ 785.792513][T14228] syzkaller0: entered allmulticast mode [ 785.883366][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 785.951523][T14238] kvm: apic: phys broadcast and lowest prio [ 789.610015][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 789.763629][T14283] syzkaller0: entered promiscuous mode [ 789.769901][T14283] syzkaller0: entered allmulticast mode [ 789.784686][ T5874] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 790.230683][T14287] netlink: 'syz.7.2160': attribute type 4 has an invalid length. [ 790.293969][T14287] netlink: 'syz.7.2160': attribute type 4 has an invalid length. [ 790.305635][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.317834][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.342039][ T5874] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 790.364112][ T5874] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 790.378629][ T5874] usb 7-1: Manufacturer: syz [ 790.392318][ T5874] usb 7-1: config 0 descriptor?? [ 790.630235][T14298] kvm: apic: phys broadcast and lowest prio [ 791.098413][ T5874] usbhid 7-1:0.0: can't add hid device: -71 [ 791.168517][ T5874] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 791.446916][ T5874] usb 7-1: USB disconnect, device number 34 [ 794.083319][T14311] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 794.090374][T14311] overlayfs: failed to set xattr on upper [ 794.096306][T14311] overlayfs: ...falling back to redirect_dir=nofollow. [ 794.103259][T14311] overlayfs: ...falling back to index=off. [ 794.109071][T14311] overlayfs: ...falling back to uuid=null. [ 794.114950][T14311] overlayfs: maximum fs stacking depth exceeded [ 795.405577][T14314] syzkaller0: entered promiscuous mode [ 796.357907][T14314] syzkaller0: entered allmulticast mode [ 796.380448][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 796.866810][T14349] fuse: Bad value for 'fd' [ 796.881071][ T6318] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 796.900255][T14347] kvm: apic: phys broadcast and lowest prio [ 797.076069][ T6318] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 797.127949][ T6318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.224346][ T6318] usb 3-1: config 0 has no interface number 0 [ 797.284497][ T6318] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.476093][ T6318] usb 3-1: config 0 interface 41 has no altsetting 0 [ 797.575518][ T6318] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 797.675344][ T6318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.788896][ T6318] usb 3-1: Product: syz [ 797.805413][ T6318] usb 3-1: Manufacturer: syz [ 797.813425][ T6318] usb 3-1: SerialNumber: syz [ 797.819381][ T6318] usb 3-1: config 0 descriptor?? [ 797.852342][ T6318] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 798.494763][ T30] audit: type=1400 audit(1769268753.941:482): avc: denied { read append } for pid=14371 comm="syz.4.2191" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 798.578294][T14374] syzkaller0: entered promiscuous mode [ 798.584188][T14374] syzkaller0: entered allmulticast mode [ 799.406369][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2199'. [ 799.439778][ T9835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 799.619711][ T9835] usb 8-1: Using ep0 maxpacket: 32 [ 799.683304][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.698209][ T6318] usb 3-1: USB disconnect, device number 29 [ 799.721559][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.734943][ T9835] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 799.745028][ T9835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.770296][T14406] syzkaller0: entered promiscuous mode [ 799.780908][ T9835] usb 8-1: config 0 descriptor?? [ 799.786199][T14406] syzkaller0: entered allmulticast mode [ 799.803322][T14408] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2205'. [ 799.983455][ T30] audit: type=1400 audit(1769268755.432:483): avc: denied { write } for pid=14414 comm="syz.2.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 800.157452][T14428] netlink: 'syz.4.2214': attribute type 4 has an invalid length. [ 800.181750][T14428] netlink: 'syz.4.2214': attribute type 4 has an invalid length. [ 800.226869][ T9835] hid_parser_main: 5 callbacks suppressed [ 800.226888][ T9835] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 800.249464][ T9835] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 800.269624][ T6098] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 800.289352][ T6318] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 800.346626][ T30] audit: type=1400 audit(1769268755.792:484): avc: denied { write } for pid=14435 comm="syz.2.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 800.372639][ T30] audit: type=1400 audit(1769268755.822:485): avc: denied { read } for pid=14435 comm="syz.2.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 800.392234][ T30] audit: type=1400 audit(1769268755.822:486): avc: denied { create } for pid=14435 comm="syz.2.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 800.419349][ T6318] usb 4-1: device descriptor read/64, error -71 [ 800.427057][ T9835] ft260 0003:0403:6030.0012: failed to retrieve chip version [ 800.440981][ T6098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.449479][ T9835] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -5 [ 800.452389][ T6098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.471416][ T6098] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 800.481351][ T6098] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 800.489987][ T6098] usb 7-1: Manufacturer: syz [ 800.497176][ T6098] usb 7-1: config 0 descriptor?? [ 800.558098][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2218'. [ 800.659121][ T6318] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 801.289442][ T6318] usb 4-1: device descriptor read/64, error -71 [ 801.300015][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 801.308158][ T6098] usbhid 7-1:0.0: can't add hid device: -71 [ 801.314722][ T6098] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 801.328171][ T6098] usb 7-1: USB disconnect, device number 35 [ 801.399230][ T6318] usb usb4-port1: attempt power cycle [ 801.784384][T14456] syzkaller0: entered promiscuous mode [ 801.814407][ T9835] usb 8-1: USB disconnect, device number 5 [ 801.823338][ T6318] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 801.831099][T14456] syzkaller0: entered allmulticast mode [ 801.864165][ T6318] usb 4-1: device descriptor read/8, error -71 [ 802.118480][ T6318] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 802.199254][T14463] Unknown status report in ack skb [ 802.261827][ T6318] usb 4-1: device descriptor read/8, error -71 [ 802.468654][ T6318] usb usb4-port1: unable to enumerate USB device [ 804.394150][T14528] IPVS: sh: FWM 3 0x00000003 - no destination available [ 804.484797][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 804.532429][T14526] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2230'. [ 805.064994][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2236'. [ 806.499389][ T6083] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 806.606289][T14558] overlayfs: failed to resolve './bus': -2 [ 806.746078][ T6083] usb 7-1: device descriptor read/64, error -71 [ 807.745579][ T6083] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 807.849817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.035455][ T6083] usb 7-1: device descriptor read/64, error -71 [ 808.063990][T14567] vlan2: entered promiscuous mode [ 808.105420][T14567] team0: entered promiscuous mode [ 808.110810][T14567] team_slave_0: entered promiscuous mode [ 808.131163][T14567] team_slave_1: entered promiscuous mode [ 808.157689][ T6083] usb usb7-port1: attempt power cycle [ 808.685520][ T6083] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 808.715730][ T6083] usb 7-1: device descriptor read/8, error -71 [ 808.865071][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 809.065735][T14577] netlink: 'syz.4.2248': attribute type 4 has an invalid length. [ 809.159418][T14578] netlink: 'syz.4.2248': attribute type 4 has an invalid length. [ 809.356397][ T6083] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 809.386256][ T6083] usb 7-1: device descriptor read/8, error -71 [ 809.434771][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 809.441373][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.464849][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.474609][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 809.483739][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.518972][ T24] usb 4-1: config 0 descriptor?? [ 809.525362][ T6083] usb usb7-port1: unable to enumerate USB device [ 810.054702][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2253'. [ 811.654033][ T24] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 811.660895][ T24] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 811.755044][ T24] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 811.772881][ T24] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 811.896329][ T24] usb 4-1: USB disconnect, device number 34 [ 812.351658][T14621] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 812.359839][T14621] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2255'. [ 812.834610][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 812.973015][ T24] usb 8-1: device descriptor read/64, error -71 [ 813.224099][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 813.246613][T14625] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 813.259811][T14625] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2261'. [ 814.268582][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2263'. [ 815.549038][ T24] usb 8-1: device descriptor read/64, error -71 [ 815.666175][ T24] usb usb8-port1: attempt power cycle [ 815.776721][T14644] syzkaller0: entered promiscuous mode [ 815.806632][T14644] syzkaller0: entered allmulticast mode [ 815.999146][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2267'. [ 820.772013][T14692] syzkaller0: entered promiscuous mode [ 820.789295][T14692] syzkaller0: entered allmulticast mode [ 820.798324][T14696] tipc: Enabling of bearer rejected, failed to enable media [ 820.909002][T14698] syzkaller0: entered promiscuous mode [ 820.918280][T14698] syzkaller0: entered allmulticast mode [ 821.389141][T14724] syzkaller0: entered promiscuous mode [ 821.394761][T14724] syzkaller0: entered allmulticast mode [ 821.438930][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 822.040565][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 822.062299][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.088975][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.113258][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 822.128606][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.147560][ T24] usb 3-1: config 0 descriptor?? [ 822.586249][ T24] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 822.600960][ T24] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 822.788902][ T24] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 822.799182][ T24] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -5 [ 823.606504][T14797] syzkaller0: entered promiscuous mode [ 823.614699][T14797] syzkaller0: entered allmulticast mode [ 823.803025][T14809] syzkaller1: entered promiscuous mode [ 823.808757][T14809] syzkaller1: entered allmulticast mode [ 824.289033][ T6083] usb 3-1: USB disconnect, device number 30 [ 824.434206][T14817] syzkaller0: entered promiscuous mode [ 824.443026][T14816] kvm: apic: phys broadcast and lowest prio [ 824.455230][T14817] syzkaller0: entered allmulticast mode [ 828.046520][T14852] overlayfs: missing 'workdir' [ 829.293047][T14858] syzkaller0: entered promiscuous mode [ 829.299923][T14858] syzkaller0: entered allmulticast mode [ 829.486734][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2314'. [ 830.550429][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2314'. [ 830.599889][ T1136] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.619445][ T1136] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.654529][ T1136] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.676665][ T1136] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.785115][T14885] kvm: apic: phys broadcast and lowest prio [ 831.056732][T14896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 831.065711][T14896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 834.847165][T14908] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.2327'. [ 835.198198][T14921] syzkaller0: entered promiscuous mode [ 835.225659][T14921] syzkaller0: entered allmulticast mode [ 838.220373][T14943] kvm: apic: phys broadcast and lowest prio [ 840.685728][ T30] audit: type=1400 audit(1769268796.132:487): avc: denied { name_bind } for pid=14950 comm="syz.7.2340" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 840.970518][T14977] kvm: apic: phys broadcast and lowest prio [ 844.835107][ T30] audit: type=1400 audit(1769268800.285:488): avc: denied { create } for pid=15022 comm="syz.4.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 844.867723][T15025] netlink: 'syz.4.2362': attribute type 4 has an invalid length. [ 845.019791][T15029] kvm: apic: phys broadcast and lowest prio [ 846.087369][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.126335][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.388748][T15080] syzkaller0: entered promiscuous mode [ 849.394238][T15080] syzkaller0: entered allmulticast mode [ 852.097136][ T5927] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 853.126531][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 853.155445][ T5927] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 853.172973][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.199819][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 853.230761][ T5927] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 853.250606][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.276645][ T5927] usb 5-1: config 0 descriptor?? [ 853.493975][ T5927] usb 5-1: string descriptor 0 read error: -71 [ 853.526769][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 853.538107][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 853.556065][ T5927] usb 5-1: USB disconnect, device number 35 [ 856.344142][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 856.361269][ T6098] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 856.497872][T15142] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2398'. [ 856.521346][ T6098] usb 8-1: Using ep0 maxpacket: 32 [ 856.527774][ T6098] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.563618][ T6098] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.593531][ T6098] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 856.621271][ T6098] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.652976][ T6098] usb 8-1: config 0 descriptor?? [ 857.607602][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 857.760586][ T24] usb 7-1: device descriptor read/64, error -71 [ 858.003505][ T6098] usbhid 8-1:0.0: can't add hid device: -71 [ 858.009593][ T6098] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 858.010457][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 858.033401][ T6098] usb 8-1: USB disconnect, device number 9 [ 858.190647][ T24] usb 7-1: device descriptor read/64, error -71 [ 858.300750][ T24] usb usb7-port1: attempt power cycle [ 859.539145][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 859.655194][ T24] usb 7-1: device descriptor read/8, error -71 [ 860.836128][T15177] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2409'. [ 861.956180][ T30] audit: type=1326 audit(1769268816.893:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.038513][ T30] audit: type=1326 audit(1769268816.893:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.119203][ T30] audit: type=1326 audit(1769268816.923:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.190203][ T30] audit: type=1326 audit(1769268816.933:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.240292][ T30] audit: type=1326 audit(1769268816.933:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.388259][ T30] audit: type=1326 audit(1769268816.953:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 862.673797][ T30] audit: type=1326 audit(1769268816.953:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 863.842186][ T30] audit: type=1326 audit(1769268816.953:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.3.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 866.813597][T15234] syzkaller0: entered promiscuous mode [ 866.819207][T15234] syzkaller0: entered allmulticast mode [ 867.616643][T15253] netlink: 'syz.4.2426': attribute type 39 has an invalid length. [ 869.259206][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.353817][T15263] syzkaller0: entered promiscuous mode [ 869.359350][T15263] syzkaller0: entered allmulticast mode [ 875.670019][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.678652][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.820082][T15355] syzkaller0: entered promiscuous mode [ 875.827192][T15355] syzkaller0: entered allmulticast mode [ 877.572093][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2466'. [ 877.601538][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2466'. [ 880.549290][ T9835] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 880.749081][ T9835] usb 4-1: Using ep0 maxpacket: 16 [ 880.781839][ T9835] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 880.791689][T15412] syzkaller0: entered promiscuous mode [ 880.794349][ T9835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.808661][T15412] syzkaller0: entered allmulticast mode [ 880.821436][ T9835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.902603][ T9835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 880.917279][ T9835] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 880.927481][ T9835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.044721][ T9835] usb 4-1: config 0 descriptor?? [ 883.731368][ T9835] usbhid 4-1:0.0: can't add hid device: -71 [ 883.758824][ T9835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 884.778869][ T9835] usb 4-1: USB disconnect, device number 35 [ 886.476802][ T30] audit: type=1326 audit(1769268841.915:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.578936][ T30] audit: type=1326 audit(1769268841.915:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.602530][ T30] audit: type=1326 audit(1769268841.915:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.626517][ T30] audit: type=1326 audit(1769268841.915:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.676260][ T30] audit: type=1326 audit(1769268841.915:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.745845][ T30] audit: type=1326 audit(1769268841.915:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.836409][ T30] audit: type=1326 audit(1769268841.915:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 886.932332][ T30] audit: type=1326 audit(1769268841.915:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.4.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 887.195826][ T9835] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 887.737995][T15479] blktrace: Concurrent blktraces are not allowed on loop5 [ 889.165667][ T9835] usb 8-1: Using ep0 maxpacket: 32 [ 889.183233][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.200578][ T9835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.211517][ T9835] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 889.221139][ T9835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.231520][ T9835] usb 8-1: config 0 descriptor?? [ 889.302690][T15487] syzkaller0: entered promiscuous mode [ 889.315408][T15487] syzkaller0: entered allmulticast mode [ 889.658926][ T9835] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 889.680722][ T9835] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 889.854308][ T9835] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 889.944652][T14560] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 890.074492][ T9835] ft260 0003:0403:6030.0015: failed to retrieve system status [ 890.090687][ T9835] ft260 0003:0403:6030.0015: probe with driver ft260 failed with error -5 [ 890.164471][T14560] usb 5-1: Using ep0 maxpacket: 32 [ 890.239192][T14560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.308399][T14560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.321465][T14560] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 890.332721][T14560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.488522][T14560] usb 5-1: config 0 descriptor?? [ 891.366511][T14560] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 891.378663][T14560] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 891.559414][T14560] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 891.623439][ T9835] usb 8-1: USB disconnect, device number 10 [ 893.062428][T14560] ft260 0003:0403:6030.0016: failed to retrieve system status [ 893.080705][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'. [ 893.100363][T14560] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -71 [ 893.211774][T14560] usb 5-1: USB disconnect, device number 36 [ 893.789834][T15537] syzkaller0: entered promiscuous mode [ 893.800040][T15537] syzkaller0: entered allmulticast mode [ 894.317799][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 897.947855][T15581] syzkaller0: entered promiscuous mode [ 897.973813][T15581] syzkaller0: entered allmulticast mode [ 900.849140][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 901.097968][ T24] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 901.137843][T15620] fuse: Unknown parameter 'grou00000000000000000000' [ 901.199160][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.220051][ T24] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 901.324779][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 901.377413][ T24] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 901.451598][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 901.462954][ T24] usb 8-1: SerialNumber: syz [ 902.681452][ T24] usb 8-1: 0:2 : does not exist [ 902.686381][ T24] usb 8-1: unit 5 not found! [ 902.719572][ T24] usb 8-1: USB disconnect, device number 11 [ 902.797721][T15630] udevd[15630]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.014905][T15638] syzkaller0: entered promiscuous mode [ 903.026421][T15638] syzkaller0: entered allmulticast mode [ 903.360635][T15642] syzkaller0: entered promiscuous mode [ 903.380426][T15642] syzkaller0: entered allmulticast mode [ 904.029525][T15647] blktrace: Concurrent blktraces are not allowed on loop5 [ 905.996038][T15668] syzkaller0: entered promiscuous mode [ 906.007787][T15668] syzkaller0: entered allmulticast mode [ 906.071292][T15671] fuse: Unknown parameter 'grou00000000000000000000' [ 906.236806][ T6083] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 907.337252][ T6083] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 907.348341][ T6083] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.385569][ T6083] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 907.396904][ T6083] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.411865][ T6083] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 907.421397][ T6083] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 907.435449][ T6083] usb 8-1: SerialNumber: syz [ 907.445397][T15690] syzkaller0: entered promiscuous mode [ 907.450945][T15690] syzkaller0: entered allmulticast mode [ 907.682164][ T6083] usb 8-1: 0:2 : does not exist [ 907.702676][ T6083] usb 8-1: unit 5 not found! [ 907.745047][ T6083] usb 8-1: USB disconnect, device number 12 [ 907.807352][T15693] udevd[15693]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.827088][ T9835] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 907.993295][ T9835] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 908.002482][ T9835] usb 7-1: config 0 has no interface number 0 [ 908.026153][ T9835] usb 7-1: config 0 interface 41 has no altsetting 0 [ 908.065383][ T9835] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 908.087057][ T9835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.098405][ T9835] usb 7-1: Product: syz [ 908.118614][ T9835] usb 7-1: Manufacturer: syz [ 908.135331][ T9835] usb 7-1: SerialNumber: syz [ 908.206195][ T9835] usb 7-1: config 0 descriptor?? [ 908.467844][T15710] syzkaller0: entered promiscuous mode [ 908.473484][T15710] syzkaller0: entered allmulticast mode [ 910.007985][ T9835] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 910.234028][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 910.357256][T15730] fuse: Unknown parameter 'grou00000000000000000000' [ 910.971338][T15733] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 911.454053][ T6318] usb 7-1: USB disconnect, device number 44 [ 912.431749][ T5830] Bluetooth: hci5: command 0x0419 tx timeout [ 914.157924][T15762] syzkaller0: entered promiscuous mode [ 914.170130][T15762] syzkaller0: entered allmulticast mode [ 914.341017][T15765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.472403][ T9835] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 914.637310][ T9835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.701642][ T9835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.786692][ T9835] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 915.139205][ T9835] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 915.163607][ T9835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 916.127898][ T9835] usb 4-1: SerialNumber: syz [ 916.133384][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2582'. [ 917.181805][ T9835] usb 4-1: can't set config #1, error -71 [ 917.209726][ T9835] usb 4-1: USB disconnect, device number 36 [ 917.325391][T15784] bond_slave_0: entered promiscuous mode [ 917.331635][T15784] bond_slave_1: entered promiscuous mode [ 917.359914][T15784] vlan2: entered promiscuous mode [ 917.365026][T15784] bond0: entered promiscuous mode [ 917.372763][T15784] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 917.779382][T15798] fuse: Unknown parameter 'group_i00000000000000000000' [ 917.881002][ T9835] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 918.136648][ T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 918.169723][ T30] audit: type=1400 audit(1769268873.671:505): avc: denied { setopt } for pid=15799 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.190352][ T30] audit: type=1400 audit(1769268873.671:506): avc: denied { ioctl } for pid=15799 comm="syz.6.2595" path="socket:[56728]" dev="sockfs" ino=56728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.210760][ T9835] usb 4-1: Using ep0 maxpacket: 32 [ 918.227536][ T9835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.232222][ T30] audit: type=1400 audit(1769268873.681:507): avc: denied { write } for pid=15799 comm="syz.6.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.243804][ T9835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.283923][ T9835] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 918.301187][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 918.314262][ T24] usb 3-1: config 0 has no interface number 0 [ 918.324420][ T9835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.801504][T15806] blktrace: Concurrent blktraces are not allowed on loop15 [ 919.279773][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 919.298255][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 919.310488][ T9835] usb 4-1: config 0 descriptor?? [ 919.326875][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.352535][ T24] usb 3-1: Product: syz [ 919.366882][ T24] usb 3-1: Manufacturer: syz [ 919.376907][ T24] usb 3-1: SerialNumber: syz [ 919.400801][ T24] usb 3-1: config 0 descriptor?? [ 919.975763][T15814] blktrace: Concurrent blktraces are not allowed on loop9 [ 920.651468][ T9835] usbhid 4-1:0.0: can't add hid device: -71 [ 920.664110][ T9835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 920.677704][ T9835] usb 4-1: USB disconnect, device number 37 [ 921.963232][ T30] audit: type=1326 audit(1769268876.553:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 922.048963][ T24] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 922.058646][ T30] audit: type=1326 audit(1769268876.553:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 922.082612][ T5922] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 922.098703][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 922.142135][ T24] usb 3-1: USB disconnect, device number 31 [ 922.148063][ T30] audit: type=1326 audit(1769268876.563:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 922.208334][ T30] audit: type=1326 audit(1769268876.563:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 922.262614][ T30] audit: type=1326 audit(1769268876.563:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 923.399212][ T5922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.422064][ T30] audit: type=1326 audit(1769268876.563:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 923.431677][ T5922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.487830][ T30] audit: type=1326 audit(1769268876.573:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 923.497712][ T5922] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 923.567672][ T30] audit: type=1326 audit(1769268876.573:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.3.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 923.598338][ T5922] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.607395][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.657581][ T5922] usb 7-1: SerialNumber: syz [ 923.679355][ T5922] usb 7-1: can't set config #1, error -71 [ 923.696703][ T5922] usb 7-1: USB disconnect, device number 45 [ 925.037086][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2602'. [ 926.068795][T15844] netlink: 'syz.7.2610': attribute type 4 has an invalid length. [ 926.291313][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2611'. [ 926.326269][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2611'. [ 926.344374][ T1136] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.365345][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2611'. [ 926.384119][ T1136] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.405559][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2611'. [ 926.416471][ T1136] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.447127][ T1136] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.380180][T15861] 9pnet_fd: Insufficient options for proto=fd [ 927.396061][T15858] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2608'. [ 927.655588][ T5820] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 927.856873][ T5820] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 927.865097][ T5820] usb 8-1: config 0 has no interface number 0 [ 927.871398][ T5820] usb 8-1: config 0 interface 41 has no altsetting 0 [ 927.879799][ T5820] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 927.889075][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.897276][ T5820] usb 8-1: Product: syz [ 927.901439][ T5820] usb 8-1: Manufacturer: syz [ 927.906161][ T5820] usb 8-1: SerialNumber: syz [ 927.912814][ T5820] usb 8-1: config 0 descriptor?? [ 927.947827][T15877] syzkaller0: entered promiscuous mode [ 927.953405][T15877] syzkaller0: entered allmulticast mode [ 929.567164][ T5820] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 929.587633][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2623'. [ 930.772743][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.753327][ T6098] usb 8-1: USB disconnect, device number 13 [ 935.224976][ T30] audit: type=1326 audit(1769268890.700:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.170829][ T30] audit: type=1326 audit(1769268890.700:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.202503][T15929] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2628'. [ 937.314127][ T30] audit: type=1326 audit(1769268890.700:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.400902][ T30] audit: type=1326 audit(1769268890.700:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.599757][ T30] audit: type=1326 audit(1769268890.700:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.623915][ T30] audit: type=1326 audit(1769268890.700:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.648046][ T30] audit: type=1326 audit(1769268890.700:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.676946][ T30] audit: type=1326 audit(1769268890.700:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.3.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47d59acb9 code=0x7ffc0000 [ 937.703607][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2638'. [ 938.516709][ T30] audit: type=1326 audit(1769268892.090:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 938.540741][ T30] audit: type=1326 audit(1769268892.090:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.4.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d59acb9 code=0x7ffc0000 [ 938.840025][ T5820] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 939.014064][ T5820] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 939.035274][ T5820] usb 8-1: config 0 has no interface number 0 [ 939.053446][ T5820] usb 8-1: config 0 interface 41 has no altsetting 0 [ 939.086566][ T5820] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 939.161714][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.178617][ T5820] usb 8-1: Product: syz [ 939.191728][ T5820] usb 8-1: Manufacturer: syz [ 939.201520][ T5820] usb 8-1: SerialNumber: syz [ 939.214480][ T5820] usb 8-1: config 0 descriptor?? [ 940.077320][ T5820] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 940.539140][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 940.539158][ T30] audit: type=1400 audit(1769268896.032:532): avc: denied { map } for pid=15985 comm="syz.6.2649" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 940.828553][ T30] audit: type=1400 audit(1769268896.343:533): avc: denied { getopt } for pid=15982 comm="syz.4.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 940.961444][ T30] audit: type=1400 audit(1769268896.483:534): avc: denied { ioctl } for pid=15999 comm="syz.2.2652" path="socket:[57501]" dev="sockfs" ino=57501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 941.106557][T16004] netlink: 'syz.2.2652': attribute type 9 has an invalid length. [ 941.114414][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 941.133235][T16004] macvlan2: entered promiscuous mode [ 941.139026][T16004] hsr0: entered promiscuous mode [ 941.144409][T16004] macvlan2: entered allmulticast mode [ 941.149888][T16004] hsr0: entered allmulticast mode [ 941.154996][T16004] hsr_slave_0: entered allmulticast mode [ 941.160997][T16004] hsr_slave_1: entered allmulticast mode [ 941.180445][ T30] audit: type=1400 audit(1769268896.703:535): avc: denied { setopt } for pid=16003 comm="syz.6.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 941.238854][ T6083] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 941.409055][ T6083] usb 5-1: device descriptor read/64, error -71 [ 941.612849][ T24] usb 8-1: USB disconnect, device number 14 [ 941.658730][ T6083] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 941.809707][ T6083] usb 5-1: device descriptor read/64, error -71 [ 941.936527][ T6083] usb usb5-port1: attempt power cycle [ 942.278422][ T30] audit: type=1400 audit(1769268897.773:536): avc: denied { getopt } for pid=16022 comm="syz.6.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 942.418323][ T6083] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 942.470716][ T6083] usb 5-1: device descriptor read/8, error -71 [ 942.758821][ T6083] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 942.788814][ T6083] usb 5-1: device descriptor read/8, error -71 [ 942.828029][T14560] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 942.899409][ T6083] usb usb5-port1: unable to enumerate USB device [ 942.909309][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 943.001776][T14560] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 943.011691][T14560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.027944][T14560] usb 4-1: Product: syz [ 943.033056][T14560] usb 4-1: Manufacturer: syz [ 943.037697][T14560] usb 4-1: SerialNumber: syz [ 943.105199][T14560] usb 4-1: config 0 descriptor?? [ 943.265724][T14560] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 943.719039][ T30] audit: type=1400 audit(1769268899.244:537): avc: denied { open } for pid=16050 comm="syz.2.2667" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 943.750778][ T30] audit: type=1400 audit(1769268899.274:538): avc: denied { ioctl } for pid=16050 comm="syz.2.2667" path="/dev/ttyq9" dev="devtmpfs" ino=384 ioctlcmd=0x5417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 943.857224][ T30] audit: type=1400 audit(1769268899.374:539): avc: denied { mounton } for pid=16051 comm="syz.7.2666" path="/145/file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 943.957548][ T30] audit: type=1326 audit(1769268899.474:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16061 comm="syz.6.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c99acb9 code=0x7ffc0000 [ 944.011078][ T30] audit: type=1326 audit(1769268899.474:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16061 comm="syz.6.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f101c93c0d9 code=0x7ffc0000 [ 944.384256][T14560] gspca_stk1135: reg_w 0xd err -71 [ 944.394374][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.401390][T14560] gspca_stk1135: Sensor write failed [ 944.408110][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.421986][T14560] gspca_stk1135: Sensor write failed [ 944.430321][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.440585][T14560] gspca_stk1135: Sensor read failed [ 944.448525][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.461205][T14560] gspca_stk1135: Sensor read failed [ 944.475827][T14560] gspca_stk1135: Detected sensor type unknown (0x0) [ 944.492205][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.503298][T14560] gspca_stk1135: Sensor read failed [ 944.512290][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.517133][ T5820] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 944.526481][T14560] gspca_stk1135: Sensor read failed [ 944.533724][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.544164][T14560] gspca_stk1135: Sensor write failed [ 944.565144][T14560] gspca_stk1135: serial bus timeout: status=0x00 [ 944.580814][T14560] gspca_stk1135: Sensor write failed [ 944.591544][T14560] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 944.624233][T14560] usb 4-1: USB disconnect, device number 38 [ 944.732530][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 944.748787][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 944.781419][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 944.800892][ T5820] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 944.824020][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.842109][ T5820] usb 5-1: Product: syz [ 945.089623][ T5820] usb 5-1: Manufacturer: syz [ 945.128389][ T5820] usb 5-1: SerialNumber: syz [ 945.285679][ T5820] usb 5-1: config 0 descriptor?? [ 945.420703][T16078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 945.436323][T16078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 945.466955][ T5820] usb 5-1: ucan: probing device on interface #0 [ 945.536692][T14560] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 945.603798][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 945.603815][ T30] audit: type=1400 audit(1769268901.125:627): avc: denied { read } for pid=16095 comm="syz.2.2682" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 945.635468][T16097] program syz.2.2682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.653816][ T30] audit: type=1400 audit(1769268901.155:628): avc: denied { open } for pid=16095 comm="syz.2.2682" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 945.687859][T14560] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 945.716594][T14560] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 945.735368][T14560] usb 4-1: config 0 interface 0 has no altsetting 0 [ 945.751498][T14560] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 945.779763][T14560] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 945.788349][T14560] usb 4-1: Product: syz [ 945.792643][T14560] usb 4-1: Manufacturer: syz [ 945.797317][T14560] usb 4-1: SerialNumber: syz [ 945.805552][T14560] usb 4-1: config 0 descriptor?? [ 945.814873][T14560] usb 4-1: selecting invalid altsetting 0 [ 946.629904][T16103] pimreg: entered allmulticast mode [ 946.648710][ T30] audit: type=1400 audit(1769268901.435:629): avc: denied { watch } for pid=16099 comm="syz.6.2683" path="/354" dev="tmpfs" ino=1850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 946.698393][ T5820] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 946.836404][ T5820] usb 5-1: USB disconnect, device number 41 [ 947.085857][T14560] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 947.157589][T16095] pimreg: left allmulticast mode [ 947.255892][T14560] usb 8-1: Using ep0 maxpacket: 8 [ 947.284441][T14560] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 947.402096][T14560] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.427603][T14560] usb 8-1: Product: syz [ 947.586642][T14560] usb 8-1: Manufacturer: syz [ 947.600378][T14560] usb 8-1: SerialNumber: syz [ 947.620684][T14560] usb 8-1: config 0 descriptor?? [ 947.638546][T14560] gspca_main: se401-2.14.0 probing 047d:5003 [ 948.180639][ T6872] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.189346][ T6872] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.198132][ T6872] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.208611][T14560] usb 8-1: reset high-speed USB device number 15 using dummy_hcd [ 948.225004][ T6872] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.242347][ T6872] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.386481][ T6872] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.396948][ T6872] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.418486][ T6872] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.729836][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 948.860514][T14560] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 948.867956][T14560] se401 8-1:0.0: probe with driver se401 failed with error -71 [ 948.879737][T14560] usb 8-1: USB disconnect, device number 15 [ 949.061588][ T5820] usb 4-1: USB disconnect, device number 39 [ 949.172058][ T30] audit: type=1400 audit(1769268904.687:630): avc: denied { read } for pid=16140 comm="syz.3.2692" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 949.283704][ T30] audit: type=1400 audit(1769268904.687:631): avc: denied { open } for pid=16140 comm="syz.3.2692" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 949.394306][ T30] audit: type=1400 audit(1769268904.727:632): avc: denied { ioctl } for pid=16140 comm="syz.3.2692" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 949.422919][ T30] audit: type=1326 audit(1769268904.897:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0f9acb9 code=0x7ffc0000 [ 949.511120][ T30] audit: type=1326 audit(1769268904.897:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0f9acb9 code=0x7ffc0000 [ 949.773334][ T30] audit: type=1326 audit(1769268904.907:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fb9a0f9acb9 code=0x7ffc0000 [ 949.896662][ T30] audit: type=1326 audit(1769268904.917:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.2.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a0f9acb9 code=0x7ffc0000 [ 950.923977][ T5927] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 950.976714][ T5820] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 951.092579][T16198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2709'. [ 951.102094][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 951.113469][ T5927] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 951.123798][ T5927] usb 5-1: config 0 has no interface number 0 [ 951.129887][ T5927] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 951.140314][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 951.157379][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.173321][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 951.185335][ T5927] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 951.196070][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.206168][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.227960][ T5927] usb 5-1: Product: syz [ 951.232151][ T5927] usb 5-1: Manufacturer: syz [ 951.244621][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.262278][ T5927] usb 5-1: SerialNumber: syz [ 951.278349][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.293593][ T5927] usb 5-1: config 0 descriptor?? [ 951.308823][T16183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 951.325702][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.548842][T16183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 951.572091][ T5820] usb 4-1: GET_CAPABILITIES returned 0 [ 951.584632][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 951.624170][ T6083] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 951.705435][T16229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2715'. [ 951.793596][ T6083] usb 3-1: Using ep0 maxpacket: 32 [ 951.800191][ T6083] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 951.816629][ T6083] usb 3-1: config 0 has no interface number 0 [ 951.842847][ T6083] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 951.856661][T14560] usb 4-1: USB disconnect, device number 40 [ 951.881208][ T6083] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 951.893094][ T6083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.902562][ T6083] usb 3-1: Product: syz [ 951.907967][ T6083] usb 3-1: Manufacturer: syz [ 951.914911][ T6083] usb 3-1: SerialNumber: syz [ 951.926401][ T6083] usb 3-1: config 0 descriptor?? [ 951.932528][T16209] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 952.159604][T16209] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 952.453237][T14560] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 952.727575][T14560] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 952.736736][T14560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.745175][T14560] usb 7-1: Product: syz [ 952.752864][T14560] usb 7-1: Manufacturer: syz [ 952.757853][T14560] usb 7-1: SerialNumber: syz [ 952.767327][T14560] usb 7-1: config 0 descriptor?? [ 952.775216][T14560] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 953.765468][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'. [ 954.134686][T16264] block device autoloading is deprecated and will be removed. [ 954.285519][ T5927] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 954.306291][ T5927] asix 5-1:0.188: probe with driver asix failed with error -71 [ 954.330274][ T5927] usb 5-1: USB disconnect, device number 42 [ 954.485502][ T6083] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 954.500416][ T6083] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 954.530376][ T6083] asix 3-1:0.188: probe with driver asix failed with error -71 [ 954.560229][ T6083] usb 3-1: USB disconnect, device number 32 [ 954.684082][ T5927] usb 7-1: USB disconnect, device number 46 [ 955.251856][ T6083] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 955.373647][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 955.373658][ T30] audit: type=1400 audit(1769268910.900:642): avc: denied { setopt } for pid=16289 comm="syz.6.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 955.441238][T16286] tipc: Enabled bearer , priority 0 [ 955.551610][T14560] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 955.634293][ T6083] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 956.023434][ T6083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.031730][ T6083] usb 5-1: Product: syz [ 956.035889][ T6083] usb 5-1: Manufacturer: syz [ 956.040860][ T6083] usb 5-1: SerialNumber: syz [ 956.042075][T16285] tipc: Resetting bearer [ 956.251658][ C0] ------------[ cut here ]------------ [ 956.257773][ C0] ODEBUG: free active (active state 0) object: ffff8880558e0490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 956.270754][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz.7.2727/16278 [ 956.280956][ C0] Modules linked in: [ 956.282477][T14560] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 956.285400][ C0] CPU: 0 UID: 0 PID: 16278 Comm: syz.7.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.285436][ C0] Tainted: [L]=SOFTLOCKUP [ 956.285444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 956.285454][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 956.285478][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 07 d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c ee c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 956.285496][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 956.285513][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 956.285525][ C0] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c18100 [ 956.285537][ C0] RBP: 0000000000000001 R08: ffff8880558e0490 R09: ffffffff8b92b900 [ 956.285549][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 956.285561][ C0] R13: ffffffff8b92b940 R14: ffffffff8a661300 R15: ffffc90000007b18 [ 956.285574][ C0] FS: 00007f9b95e816c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 956.285597][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 956.285610][ C0] CR2: 0000200000239030 CR3: 0000000062988000 CR4: 00000000003526f0 [ 956.285622][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 956.285634][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 956.285647][ C0] Call Trace: [ 956.285654][ C0] [ 956.285661][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 956.285688][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 956.369663][T14560] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 956.376240][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 956.376276][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 956.376309][ C0] kfree+0x34c/0x690 [ 956.476028][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 956.481422][ C0] ? rose_timer_expiry+0x53f/0x630 [ 956.486545][ C0] ? rose_timer_expiry+0x53f/0x630 [ 956.491689][ C0] rose_timer_expiry+0x53f/0x630 [ 956.496619][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 956.502107][ C0] call_timer_fn+0x19a/0x590 [ 956.506705][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 956.511154][T14560] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 956.511862][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 956.527164][ C0] ? mark_held_locks+0x40/0x70 [ 956.531954][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 956.537408][ C0] __run_timers+0x757/0xac0 [ 956.537995][T14560] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 956.541968][ C0] ? __pfx___run_timers+0x10/0x10 [ 956.542006][ C0] run_timer_base+0x114/0x190 [ 956.542025][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 956.542047][ C0] run_timer_softirq+0x1a/0x50 [ 956.542064][ C0] handle_softirqs+0x1ea/0x910 [ 956.542095][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 956.542124][ C0] __irq_exit_rcu+0xef/0x150 [ 956.542149][ C0] irq_exit_rcu+0x9/0x30 [ 956.542172][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 956.542192][ C0] [ 956.542200][ C0] [ 956.542208][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 956.542230][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 956.613415][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 a2 69 f6 48 89 df e8 8e f0 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 39 5a f6 65 8b 05 3e ba 6a 08 85 c0 74 16 5b [ 956.624164][ T6083] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 956.633055][ C0] RSP: 0018:ffffc90005127750 EFLAGS: 00000246 [ 956.633077][ C0] RAX: 0000000000000006 RBX: ffff888030cde780 RCX: 0000000000000040 [ 956.633089][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45440 RDI: ffffffff8bfa35a0 [ 956.633099][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 956.633110][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030cde780 [ 956.633122][ C0] R13: 0000000000000202 R14: 0000000000000001 R15: ffffffff81dfb8cd [ 956.633134][ C0] ? prepare_to_wait_exclusive+0x9d/0x2c0 [ 956.633173][ C0] prepare_to_wait_exclusive+0xdc/0x2c0 [ 956.702382][ C0] unix_wait_for_peer+0xca/0x2a0 [ 956.707303][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 956.712856][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 956.718913][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 956.724282][ C0] unix_dgram_sendmsg+0x171b/0x1820 [ 956.729457][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 956.734989][ C0] ? __might_fault+0x30/0x140 [ 956.739646][ C0] ____sys_sendmsg+0xa54/0xc30 [ 956.744422][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.749700][ C0] ? find_held_lock+0x2b/0x80 [ 956.754375][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 956.760768][ C0] ___sys_sendmsg+0x190/0x1e0 [ 956.765444][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.770623][ C0] ? do_user_addr_fault+0x7de/0x12f0 [ 956.775913][ C0] ? irqentry_exit+0x180/0x670 [ 956.780658][ C0] ? __pfx___might_resched+0x10/0x10 [ 956.785936][ C0] __sys_sendmmsg+0x205/0x430 [ 956.790592][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 956.795784][ C0] ? __pfx_do_futex+0x10/0x10 [ 956.800442][ C0] ? xfd_validate_state+0x129/0x190 [ 956.805637][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 956.810562][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 956.815774][ C0] do_syscall_64+0xc9/0xf80 [ 956.820253][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.826135][ C0] RIP: 0033:0x7f9b94f9acb9 [ 956.830528][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.850152][ C0] RSP: 002b:00007f9b95e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 956.858557][ C0] RAX: ffffffffffffffda RBX: 00007f9b95215fa0 RCX: 00007f9b94f9acb9 [ 956.866514][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 956.874467][ C0] RBP: 00007f9b95008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 956.882421][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.890363][ C0] R13: 00007f9b95216038 R14: 00007f9b95215fa0 R15: 00007ffda7017d08 [ 956.898325][ C0] [ 956.901334][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 956.908585][ C0] CPU: 0 UID: 0 PID: 16278 Comm: syz.7.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.919487][ C0] Tainted: [L]=SOFTLOCKUP [ 956.923791][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 956.933816][ C0] Call Trace: [ 956.937068][ C0] [ 956.939884][ C0] dump_stack_lvl+0x100/0x190 [ 956.944538][ C0] vpanic+0x20d/0x630 [ 956.948494][ C0] panic+0xd1/0xd1 [ 956.952185][ C0] ? __pfx_panic+0x10/0x10 [ 956.956580][ C0] ? check_panic_on_warn+0x1f/0x90 [ 956.961673][ C0] check_panic_on_warn.cold+0x19/0x34 [ 956.967048][ C0] ? debug_print_object+0x18e/0x2a0 [ 956.972246][ C0] __warn.cold+0x191/0x2f8 [ 956.976653][ C0] __report_bug+0x296/0x3d0 [ 956.981140][ C0] ? debug_print_object+0x18e/0x2a0 [ 956.986319][ C0] ? __pfx___report_bug+0x10/0x10 [ 956.991321][ C0] ? __lock_acquire+0x4a5/0x2630 [ 956.996249][ C0] report_bug_entry+0xe1/0x290 [ 957.000993][ C0] ? debug_print_object+0x19b/0x2a0 [ 957.006170][ C0] handle_bug+0x1c9/0x2a0 [ 957.010505][ C0] exc_invalid_op+0x17/0x50 [ 957.014994][ C0] asm_exc_invalid_op+0x1a/0x20 [ 957.019836][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 957.025636][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 07 d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 7c ee c7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 957.045327][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 957.051382][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 957.059338][ C0] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c18100 [ 957.067288][ C0] RBP: 0000000000000001 R08: ffff8880558e0490 R09: ffffffff8b92b900 [ 957.075239][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 957.083189][ C0] R13: ffffffff8b92b940 R14: ffffffff8a661300 R15: ffffc90000007b18 [ 957.091157][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 957.096786][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 957.102404][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 957.108200][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 957.113735][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 957.119794][ C0] kfree+0x34c/0x690 [ 957.123667][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 957.129025][ C0] ? rose_timer_expiry+0x53f/0x630 [ 957.134119][ C0] ? rose_timer_expiry+0x53f/0x630 [ 957.139208][ C0] rose_timer_expiry+0x53f/0x630 [ 957.144128][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 957.149565][ C0] call_timer_fn+0x19a/0x590 [ 957.154148][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 957.159252][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 957.164690][ C0] ? mark_held_locks+0x40/0x70 [ 957.169436][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 957.174875][ C0] __run_timers+0x757/0xac0 [ 957.179363][ C0] ? __pfx___run_timers+0x10/0x10 [ 957.184379][ C0] run_timer_base+0x114/0x190 [ 957.189037][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 957.194215][ C0] run_timer_softirq+0x1a/0x50 [ 957.198957][ C0] handle_softirqs+0x1ea/0x910 [ 957.203709][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 957.208981][ C0] __irq_exit_rcu+0xef/0x150 [ 957.213555][ C0] irq_exit_rcu+0x9/0x30 [ 957.217788][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 957.223402][ C0] [ 957.226314][ C0] [ 957.229224][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.235183][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 957.241588][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 a2 69 f6 48 89 df e8 8e f0 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 39 5a f6 65 8b 05 3e ba 6a 08 85 c0 74 16 5b [ 957.261177][ C0] RSP: 0018:ffffc90005127750 EFLAGS: 00000246 [ 957.267226][ C0] RAX: 0000000000000006 RBX: ffff888030cde780 RCX: 0000000000000040 [ 957.275190][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45440 RDI: ffffffff8bfa35a0 [ 957.283154][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 957.291114][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030cde780 [ 957.299071][ C0] R13: 0000000000000202 R14: 0000000000000001 R15: ffffffff81dfb8cd [ 957.307025][ C0] ? prepare_to_wait_exclusive+0x9d/0x2c0 [ 957.312747][ C0] prepare_to_wait_exclusive+0xdc/0x2c0 [ 957.318286][ C0] unix_wait_for_peer+0xca/0x2a0 [ 957.323212][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 957.328747][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 957.334807][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 957.340164][ C0] unix_dgram_sendmsg+0x171b/0x1820 [ 957.345364][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 957.350890][ C0] ? __might_fault+0x30/0x140 [ 957.355555][ C0] ____sys_sendmsg+0xa54/0xc30 [ 957.360300][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.365578][ C0] ? find_held_lock+0x2b/0x80 [ 957.370238][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 957.376637][ C0] ___sys_sendmsg+0x190/0x1e0 [ 957.381295][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.386470][ C0] ? do_user_addr_fault+0x7de/0x12f0 [ 957.391747][ C0] ? irqentry_exit+0x180/0x670 [ 957.396499][ C0] ? __pfx___might_resched+0x10/0x10 [ 957.401769][ C0] __sys_sendmmsg+0x205/0x430 [ 957.406430][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 957.411615][ C0] ? __pfx_do_futex+0x10/0x10 [ 957.416283][ C0] ? xfd_validate_state+0x129/0x190 [ 957.421470][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 957.426394][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 957.431572][ C0] do_syscall_64+0xc9/0xf80 [ 957.436062][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.441933][ C0] RIP: 0033:0x7f9b94f9acb9 [ 957.446327][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.465913][ C0] RSP: 002b:00007f9b95e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 957.474306][ C0] RAX: ffffffffffffffda RBX: 00007f9b95215fa0 RCX: 00007f9b94f9acb9 [ 957.482257][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 957.490206][ C0] RBP: 00007f9b95008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 957.498154][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.506102][ C0] R13: 00007f9b95216038 R14: 00007f9b95215fa0 R15: 00007ffda7017d08 [ 957.514061][ C0] [ 957.517350][ C0] Kernel Offset: disabled [ 957.521653][ C0] Rebooting in 86400 seconds..