last executing test programs: 5m20.926451409s ago: executing program 0 (id=2193): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)="d0039e16e5d0207ad4d192c128c552dc5cab6d682c37cec2cbea7b9fa8fd1c6d1bff8f367332dd23080c9b4ff0cf018a62fd", 0x32}], 0x1) dup(r1) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224"], 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 5m17.748183657s ago: executing program 0 (id=2202): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892f", 0x13}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m16.347310917s ago: executing program 0 (id=2207): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000fcdbdf254900000008000100ffffffff02000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4004050) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000002c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x8000) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5m15.486713962s ago: executing program 2 (id=2208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) 5m14.836423887s ago: executing program 0 (id=2210): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r4, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5m14.362405337s ago: executing program 2 (id=2211): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) fchdir(r1) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$nl80211(0x0, r1) 5m13.36397053s ago: executing program 0 (id=2212): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m13.251237373s ago: executing program 0 (id=2214): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 5m13.143288932s ago: executing program 2 (id=2215): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5m10.783799056s ago: executing program 3 (id=2220): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000200)='net/llc/socket\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 5m9.988866204s ago: executing program 2 (id=2222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r4 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(0x0, 0xd, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 5m9.123804601s ago: executing program 3 (id=2223): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000500060000000000050002"], 0x3c}}, 0x0) 5m9.066329343s ago: executing program 2 (id=2224): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m8.902897217s ago: executing program 2 (id=2225): r0 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x7f, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21"}}}}, 0xa7) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="f7ffffffffffffff09000000000012000400000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000ff0700"/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28]) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r8, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 5m8.12093685s ago: executing program 3 (id=2228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x20, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) 5m7.18459309s ago: executing program 3 (id=2230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) recvmmsg(r6, 0x0, 0x0, 0x400120a0, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff020000000000000100000000000000000a00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 5m5.025393088s ago: executing program 3 (id=2235): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m4.950991065s ago: executing program 3 (id=2237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23e"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) clock_gettime(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1405, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) 4m57.753218968s ago: executing program 32 (id=2214): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 4m53.740902125s ago: executing program 33 (id=2225): r0 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x7f, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21"}}}}, 0xa7) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="f7ffffffffffffff09000000000012000400000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000ff0700"/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28]) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r8, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 4m49.500259369s ago: executing program 34 (id=2237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23e"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) clock_gettime(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1405, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) 3m33.243697626s ago: executing program 1 (id=2465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="520003000100b8", 0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000a467592f62ced1ad79c0fe06f70c60801b88ac7602ce9c534d4af5ae6e86fe033c72d7be1740b8d7a11c2925186ad0f6f6ff32c83476e57d5754b68ff2e680ca2e77cb5a5d4fa4885dd6775aa46e6b9c0abafb6253cbf85fda455f3fb41d", @ANYRES16, @ANYRES16=r5, @ANYRESOCT, @ANYBLOB='\b\x00&\x00'], 0x24}}, 0x4000) 3m31.038741214s ago: executing program 1 (id=2468): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067f", 0x13}], 0x1) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3m28.053340088s ago: executing program 1 (id=2477): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m25.57565267s ago: executing program 1 (id=2484): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB='/\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="ce407a21601faac29a5832d81cb42eb2e20559b3d51251cd080a889910e1ba5aeae19e2a6fe9d59e2a42efdd42ba111d39aa2f428359bf580183ac9e8ed27f5497", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="2f000000382000007f000000552b23d08233554c575b497e16c61aba33b91daa085d29bae369f2c4a23c8af041c90000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 3m23.781308917s ago: executing program 1 (id=2487): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m22.849864656s ago: executing program 1 (id=2491): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x5}, 0x8) 3m6.873064723s ago: executing program 35 (id=2491): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x5}, 0x8) 16.929822351s ago: executing program 4 (id=2990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x7ff, &(0x7f0000001a00)) timerfd_create(0x8, 0x0) 15.760206928s ago: executing program 4 (id=2992): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000800)=0xa, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 12.951032701s ago: executing program 8 (id=3000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 12.090767755s ago: executing program 7 (id=3002): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) getrlimit(0xd, &(0x7f0000000180)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x402c00, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 11.856826283s ago: executing program 4 (id=3003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4000}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/172, 0xac}], 0x3, &(0x7f0000000340)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7c}, 0xb4653a1f0b1898ae) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x38fff, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xfffffe3e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) getpid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000001010400000000141a00000200000018000280140001800800000017ffed010800164000000004"], 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400017d1400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r10 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETPID(r10, 0x3, 0xb, 0x0) 10.798506007s ago: executing program 7 (id=3006): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0x5}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0)=0x33482a89, 0x8) 10.434149316s ago: executing program 6 (id=3007): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x40}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r7) 10.411078131s ago: executing program 7 (id=3008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) syz_io_uring_setup(0x6657, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) mknod(0x0, 0x8001420, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 10.2584116s ago: executing program 5 (id=3009): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, &(0x7f0000000500)) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 9.455729504s ago: executing program 7 (id=3010): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 8.86106267s ago: executing program 8 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r6, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 8.664064194s ago: executing program 5 (id=3012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x44}, 0x10) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000040)={0x34cc, [0x9, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x0, 0x9}, {}, {}, {0xfffffffd}], 0x20}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.350126598s ago: executing program 5 (id=3013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) 7.312926346s ago: executing program 8 (id=3014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 6.183860673s ago: executing program 6 (id=3015): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) setresuid(r3, 0x0, r3) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000840)={[{@clone_children}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, ':@\\('}}, {@obj_type={'obj_type', 0x3d, 'target\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf'}}, {@fsname}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f00000004c0)='\x7f\xb7\xc1\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01aA$\xf6j\x89\xd9_\xa0\x84\xeaT\x94\xaexuTW\xa7\x93\x8d\xbd\xe6~\xa8\x82\xe7LSw\x8b\x0f<\xe6\xbdh\x97\xd4\xb8\x97\xc0\xd2\x8e\x83#`yx\x96\x10M\xef\xab\xcaR*\xf8a\xdb?\xe0\xd5\xa8\xf1\x9f\\\x17I\x1b\xda$\n\x97\x1d\x8e\xad\xdc\x11\xce\x1e\xe4\xa9\xdb\xfc\xfa\xb5\xcb\xec=\xb2\xb7x\xf6\xa7H\r\xaf\xf4|\x9e\x96?%\x9a\xb0\x00V\xca\xf7b\xc1 \x7f\xb5\x87\x16\xe1?9\xb5\xb8sn\xc8\xa8\xbf7{\x80\x12\xfd\a\x00\xef}\x0484\nU\x14\xfc\xb0mV~\x9d\xa6\x01\f\xef\x8f(.[8\xbd\xdf\x1a\xa6\x80\xa2\x8b,\x11/\x02\"\x10\xf7\xd0l\xbd\xfa\xcd$?I\x82K\v\xcc\x19\xdc\xdb\x87\xbd\xe4\xac\xe2\xac\x06\xc5\x88_\x84K\x8dm\xac\x9b\xe7#\xcb\xa9}\x8f\xe0\x9dYb\x88Z\x9c\xb5\xcbj\n\x1b\xee\x1ev\x01\xaf']}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f800", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6"], 0x58}}, 0x0) 6.084378029s ago: executing program 8 (id=3016): syz_emit_ethernet(0xda, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x1, 0x186) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) fcntl$setstatus(r2, 0x4, 0x5000) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) 5.45139682s ago: executing program 4 (id=3017): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.229902939s ago: executing program 6 (id=3018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.896576106s ago: executing program 8 (id=3019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4018aee3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.881110492s ago: executing program 4 (id=3020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r2, r2, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000200)='PCI:', 0x0) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="746172676574205043493a303a383a31662e3100811faee540d35c1db7d4d634951b838b8122b49435fbd1401a17db03aabcc23e"], 0x14) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000004109022d0001100000000b04000003fe03010009cd0d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001440)=""/202, 0xca}, {&(0x7f00000002c0)=""/10, 0xa}, {0x0}], 0x3) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1405, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x8004) 4.854052865s ago: executing program 5 (id=3021): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, &(0x7f0000000500)) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 4.721187394s ago: executing program 6 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 4.11601184s ago: executing program 7 (id=3023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x9, 0x7, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.899707248s ago: executing program 5 (id=3024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x44}, 0x10) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x17) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000040)={0x34cc, [0x9, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x0, 0x9}, {}, {}, {0xfffffffd}], 0x20}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.879167877s ago: executing program 7 (id=3025): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x40}}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r7) 3.540995942s ago: executing program 6 (id=3026): r0 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="f7ffffffffffffff09000000000012000400000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000ff0700"/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28]) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r8, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 2.799468033s ago: executing program 5 (id=3027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4000}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/172, 0xac}], 0x3, &(0x7f0000000340)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7c}, 0xb4653a1f0b1898ae) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x38fff, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0xfffffe3e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) getpid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x1}) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000001010400000000141a00000200000018000280140001800800000017ffed010800164000000004"], 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400017d1400018008000100e000000108000200e00000010c0002800500010000000000"], 0x38}}, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r10 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETPID(r10, 0x3, 0xb, 0x0) 413.962533ms ago: executing program 4 (id=3028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) syz_io_uring_setup(0x6657, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) r5 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 271.883977ms ago: executing program 6 (id=3029): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) dup3(r2, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) 0s ago: executing program 8 (id=3030): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) kernel console output (not intermixed with test programs): sb_ce6230: usb_control_msg() failed=-71 [ 701.233962][T13786] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 701.242565][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 701.481386][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.506955][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 702.249716][ T5871] usb 1-1: USB disconnect, device number 65 [ 702.261909][ T9] usb 2-1: USB disconnect, device number 48 [ 702.304095][ T10] usb 4-1: USB disconnect, device number 60 [ 702.665001][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 702.945024][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 703.034629][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 703.045220][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.058585][ T9] usb 2-1: config 0 has no interfaces? [ 703.073540][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 703.083034][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.094183][ T9] usb 2-1: Product: syz [ 703.099230][ T10] usb 4-1: no configurations [ 703.107846][ T9] usb 2-1: Manufacturer: syz [ 703.112492][ T9] usb 2-1: SerialNumber: syz [ 703.117259][ T10] usb 4-1: can't read configurations, error -22 [ 703.130120][ T9] usb 2-1: config 0 descriptor?? [ 703.264626][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 703.324845][ T42] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 703.415138][ T10] usb 4-1: no configurations [ 703.420048][ T10] usb 4-1: can't read configurations, error -22 [ 703.428101][ T10] usb usb4-port1: attempt power cycle [ 703.435704][ T5893] usb 2-1: USB disconnect, device number 49 [ 703.684577][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 703.699841][ T42] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 703.712557][ T42] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 703.721793][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.736935][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.845884][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.864431][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 703.894629][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 703.917060][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.936143][ T10] usb 4-1: no configurations [ 703.940745][ T10] usb 4-1: can't read configurations, error -22 [ 703.952384][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 704.024847][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 704.039486][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 704.048687][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 704.057224][ T9] usb 5-1: Product: syz [ 704.061379][ T9] usb 5-1: Manufacturer: syz [ 704.068789][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 704.073986][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 704.082845][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 704.094995][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 704.154731][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 704.843497][T14060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.855497][T14060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.857655][ T10] usb 4-1: no configurations [ 704.868467][ T10] usb 4-1: can't read configurations, error -22 [ 704.886948][T14060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.896806][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.899933][ T10] usb usb4-port1: unable to enumerate USB device [ 704.903460][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.903686][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.922482][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.929155][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.935740][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.941979][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.948574][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.954977][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.961660][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.974610][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 704.981227][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 704.994163][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 705.000772][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 705.007198][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 705.013792][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 705.020548][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 705.027141][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 705.033384][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 705.039955][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 705.114442][T14060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.188183][ T42] usb 5-1: USB disconnect, device number 58 [ 705.194155][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 705.925804][T13786] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 706.378962][ T10] usb 3-1: USB disconnect, device number 62 [ 706.418109][T13786] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 706.459248][T13786] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 706.513180][T13786] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 706.537037][T13786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.571051][T13786] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.578885][T13786] usb 4-1: invalid MIDI out EP 0 [ 706.647577][T13786] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 706.710047][ T8777] udevd[8777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.947338][T14101] tipc: Enabled bearer , priority 0 [ 706.982753][T14101] tipc: Resetting bearer [ 707.035429][T14099] tipc: Disabling bearer [ 707.734680][T13786] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 707.962150][T14119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.253731][T13786] usb 1-1: Using ep0 maxpacket: 16 [ 708.307390][T13786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.324682][T13786] usb 1-1: config 0 has no interfaces? [ 708.332569][T13786] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 708.344683][T13786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.352734][T13786] usb 1-1: Product: syz [ 708.358436][T13786] usb 1-1: Manufacturer: syz [ 708.363074][T13786] usb 1-1: SerialNumber: syz [ 708.371531][T13786] usb 1-1: config 0 descriptor?? [ 708.616649][ T5871] usb 1-1: USB disconnect, device number 66 [ 708.644628][ T9] usb 4-1: USB disconnect, device number 65 [ 708.650628][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 709.775154][ T10] usb 5-1: no configurations [ 709.779799][ T10] usb 5-1: can't read configurations, error -22 [ 709.924591][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 710.105062][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 710.445297][ T10] usb 5-1: no configurations [ 710.452087][ T10] usb 5-1: can't read configurations, error -22 [ 710.485228][ T10] usb usb5-port1: attempt power cycle [ 710.834624][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 711.742100][ T10] usb 5-1: device descriptor read/8, error -71 [ 711.837403][T14148] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 712.186659][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 712.326671][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 712.369557][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.381272][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.438757][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 712.461803][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.492328][ T10] usb 5-1: config 0 descriptor?? [ 713.804601][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 713.977815][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.989902][ T10] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 714.095906][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.108141][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.130412][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.143480][ T10] usb 4-1: invalid MIDI out EP 0 [ 714.632005][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.651241][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 714.851132][T14192] fuse: Bad value for 'fd' [ 714.900946][ T10] usb 5-1: USB disconnect, device number 62 [ 715.344760][ T42] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 715.454817][T13786] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 715.527196][ T42] usb 5-1: config 0 has no interfaces? [ 715.534353][ T42] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 715.543468][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.551489][ T42] usb 5-1: Product: syz [ 715.555679][ T42] usb 5-1: Manufacturer: syz [ 715.560275][ T42] usb 5-1: SerialNumber: syz [ 715.566582][ T42] usb 5-1: config 0 descriptor?? [ 715.606318][T13786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.616603][T13786] usb 3-1: config 0 has no interfaces? [ 715.622193][T13786] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 715.631664][T13786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.641202][T13786] usb 3-1: config 0 descriptor?? [ 715.909658][T14195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 716.347947][T13786] usb 4-1: USB disconnect, device number 66 [ 716.384312][T14205] tipc: Enabling of bearer rejected, failed to enable media [ 716.678873][T14216] program syz.3.2218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.344577][ T42] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 717.497142][ T42] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 717.507763][ T42] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 717.519128][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 717.534116][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.761430][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.776184][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.792705][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.809991][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.081176][ T10] usb 5-1: USB disconnect, device number 63 [ 718.172051][ T5957] usb 3-1: USB disconnect, device number 63 [ 718.303440][T14234] fuse: Bad value for 'fd' [ 719.254182][T14240] fuse: Bad value for 'fd' [ 719.821119][T13786] usb 2-1: USB disconnect, device number 50 [ 719.961797][T14251] program syz.1.2227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.249315][T14251] syz.1.2227 (14251): drop_caches: 2 [ 723.195092][T14280] fuse: Bad value for 'fd' [ 723.360759][T14285] fuse: Bad value for 'fd' [ 725.264903][T14300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.272665][T14300] IPv6: NLM_F_CREATE should be set when creating new route [ 725.279954][T14300] IPv6: NLM_F_CREATE should be set when creating new route [ 729.014701][T14332] fuse: Bad value for 'fd' [ 729.768392][T14338] No control pipe specified [ 730.620318][ T5809] syz_tun (unregistering): left allmulticast mode [ 730.707972][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 730.721296][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.730648][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.739289][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.748731][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.774230][ T30] audit: type=1400 audit(1763740101.506:586): avc: denied { mounton } for pid=14344 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 730.957411][T14344] chnl_net:caif_netlink_parms(): no params data found [ 731.044419][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.052877][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.060357][T14344] bridge_slave_0: entered allmulticast mode [ 731.073815][T14344] bridge_slave_0: entered promiscuous mode [ 731.085567][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.094066][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.101553][T14344] bridge_slave_1: entered allmulticast mode [ 731.108422][T14344] bridge_slave_1: entered promiscuous mode [ 731.163975][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.182344][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.230720][T14344] team0: Port device team_slave_0 added [ 731.244428][T14344] team0: Port device team_slave_1 added [ 731.281595][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.289202][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.316118][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.331064][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.338148][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.365783][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.426958][T14344] hsr_slave_0: entered promiscuous mode [ 731.433032][T14344] hsr_slave_1: entered promiscuous mode [ 731.441254][T14344] debugfs: 'hsr0' already exists in 'hsr' [ 731.447944][T14344] Cannot create hsr debugfs directory [ 731.895829][T14344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 731.905500][T14344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 731.917213][T14344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 731.927623][T14344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 731.985946][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.003268][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.017086][T13169] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.024263][T13169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.037557][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.044742][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.172795][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.391617][T14344] veth0_vlan: entered promiscuous mode [ 732.403268][T14344] veth1_vlan: entered promiscuous mode [ 732.438735][T14344] veth0_macvtap: entered promiscuous mode [ 732.449206][T14344] veth1_macvtap: entered promiscuous mode [ 732.464776][ T5957] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 732.473203][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.574877][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.594351][ T1162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.603864][ T1162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.622821][ T1162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.639137][ T1162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.696532][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.704426][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.723600][ T5957] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 732.743690][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.755704][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.780752][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 732.796172][T13169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.804086][T13169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.805953][ T5825] Bluetooth: hci2: command tx timeout [ 732.821698][ T5957] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 732.833498][ T5957] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 732.843841][ T5957] usb 2-1: Manufacturer: syz [ 732.855734][ T5957] usb 2-1: config 0 descriptor?? [ 732.864396][ T30] audit: type=1400 audit(1763740103.596:587): avc: denied { mount } for pid=14344 comm="syz-executor" name="/" dev="gadgetfs" ino=8210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 733.313964][ T5957] hid_parser_main: 28 callbacks suppressed [ 733.313980][ T5957] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 733.378749][ T5957] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 734.792976][T14397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.800247][T14397] IPv6: NLM_F_CREATE should be set when creating new route [ 734.807501][T14397] IPv6: NLM_F_CREATE should be set when creating new route [ 734.884848][ T5825] Bluetooth: hci2: command tx timeout [ 735.118525][T14399] No control pipe specified [ 735.588492][ T30] audit: type=1400 audit(1763740106.326:588): avc: denied { write } for pid=14400 comm="syz.4.2263" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 735.788733][ T5822] syz_tun (unregistering): left allmulticast mode [ 735.798097][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 735.812496][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 736.032466][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 736.050422][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 736.118351][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 736.197557][ T42] usb 2-1: USB disconnect, device number 51 [ 736.648063][ T5929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.842857][ T5929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.935802][ T5929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.032674][ T5871] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 737.248117][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.331275][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.372074][ T5816] Bluetooth: hci2: command tx timeout [ 737.401439][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.412231][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.426124][ T5871] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 737.461045][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.569728][ T5929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.576373][ T5871] usb 2-1: config 0 descriptor?? [ 737.798203][T14407] chnl_net:caif_netlink_parms(): no params data found [ 738.207163][ T5871] elecom 0003:056E:00FB.0027: report_id 22043 is invalid [ 738.238221][ T5871] elecom 0003:056E:00FB.0027: item 0 2 1 8 parsing failed [ 738.246590][ T5871] elecom 0003:056E:00FB.0027: probe with driver elecom failed with error -22 [ 738.249067][ T5816] Bluetooth: hci4: command tx timeout [ 738.689460][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 738.831073][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.941217][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.953345][T14407] bridge_slave_0: entered allmulticast mode [ 738.985772][T14407] bridge_slave_0: entered promiscuous mode [ 738.993954][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.025103][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.042500][T14407] bridge_slave_1: entered allmulticast mode [ 739.201893][T14407] bridge_slave_1: entered promiscuous mode [ 739.449586][ T5816] Bluetooth: hci2: command tx timeout [ 739.644193][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.676241][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.689248][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.701322][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.709470][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.717409][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.756607][ T5807] syz_tun (unregistering): left allmulticast mode [ 739.777708][ T5929] bridge_slave_1: left allmulticast mode [ 739.783574][ T5929] bridge_slave_1: left promiscuous mode [ 739.791224][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.809666][ T5929] bridge_slave_0: left allmulticast mode [ 739.815499][ T5929] bridge_slave_0: left promiscuous mode [ 739.821252][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.404664][ T5825] Bluetooth: hci4: command tx timeout [ 741.764607][ T5825] Bluetooth: hci0: command tx timeout [ 741.817337][T14463] program syz.5.2275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.484729][ T5825] Bluetooth: hci4: command tx timeout [ 742.755025][ T5871] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 742.811057][ T1206] usb 2-1: USB disconnect, device number 52 [ 742.955503][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 743.001377][ T5871] usb 5-1: config 6 has no interfaces? [ 743.100921][ T5871] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 743.226153][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 743.330984][ T5871] usb 5-1: SerialNumber: syz [ 743.558378][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.579582][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.609685][ T5929] bond0 (unregistering): Released all slaves [ 743.630709][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.651980][ T5871] usb 5-1: USB disconnect, device number 64 [ 743.896503][ T5825] Bluetooth: hci0: command tx timeout [ 744.568520][ T5816] Bluetooth: hci4: command tx timeout [ 745.044596][ T5871] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 745.171208][ T5929] tipc: Left network mode [ 745.174281][T14407] team0: Port device team_slave_0 added [ 745.334962][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.346094][ T5871] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 745.358455][T14407] team0: Port device team_slave_1 added [ 745.532156][T14507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.794575][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 745.803655][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.931025][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 745.948609][ T5871] usb 5-1: invalid MIDI out EP 0 [ 745.978091][ T5871] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 746.094741][ T5816] Bluetooth: hci0: command tx timeout [ 746.107541][ T8777] udevd[8777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.367688][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.379758][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.813565][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.821528][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.378167][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.395048][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.405860][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.432196][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.799715][ T5929] hsr_slave_0: left promiscuous mode [ 747.808637][ T5929] hsr_slave_1: left promiscuous mode [ 747.815317][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.822929][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.832699][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.334100][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.341116][ T5825] Bluetooth: hci0: command tx timeout [ 748.563914][ T10] usb 5-1: USB disconnect, device number 65 [ 748.624772][ T5929] veth1_macvtap: left promiscuous mode [ 748.657004][ T5929] veth0_macvtap: left promiscuous mode [ 751.037820][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 751.320071][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 752.055182][ T5957] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 752.115242][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 752.297974][ T5957] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.320325][ T5957] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 752.354642][ T5957] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.410621][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.470747][ T5957] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 752.510239][ T5957] usb 5-1: invalid MIDI out EP 0 [ 752.625809][T14407] hsr_slave_0: entered promiscuous mode [ 752.679986][T14407] hsr_slave_1: entered promiscuous mode [ 752.746068][T14407] debugfs: 'hsr0' already exists in 'hsr' [ 752.839627][T14407] Cannot create hsr debugfs directory [ 752.849664][ T5957] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 753.901280][ T5929] IPVS: stop unused estimator thread 0... [ 754.082842][T14452] chnl_net:caif_netlink_parms(): no params data found [ 754.306756][T14407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 754.756046][ T5871] usb 5-1: USB disconnect, device number 66 [ 755.398856][T14407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 757.333591][T14407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 757.347585][ T5928] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 757.369304][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.376618][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.383899][T14452] bridge_slave_0: entered allmulticast mode [ 757.391743][T14452] bridge_slave_0: entered promiscuous mode [ 757.400315][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.409537][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.430444][T14452] bridge_slave_1: entered allmulticast mode [ 757.437762][T14452] bridge_slave_1: entered promiscuous mode [ 757.446430][T14407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 757.459602][T14642] program syz.4.2304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.504601][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 757.540925][ T5928] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 757.563405][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.598063][ T5928] usb 2-1: Product: syz [ 757.609048][ T5928] usb 2-1: Manufacturer: syz [ 757.623148][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.637159][ T5928] usb 2-1: SerialNumber: syz [ 757.662010][ T5928] r8152-cfgselector 2-1: Unknown version 0x0000 [ 757.683837][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.703109][ T5928] r8152-cfgselector 2-1: config 0 descriptor?? [ 757.867482][T14452] team0: Port device team_slave_0 added [ 757.885945][T14452] team0: Port device team_slave_1 added [ 757.938928][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.946051][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.971948][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.989535][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.112164][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.120658][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.178208][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.378735][T14452] hsr_slave_0: entered promiscuous mode [ 758.411659][T14452] hsr_slave_1: entered promiscuous mode [ 758.444195][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 758.473975][T14452] Cannot create hsr debugfs directory [ 759.023597][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.530985][ T5928] r8152-cfgselector 2-1: USB disconnect, device number 53 [ 759.545028][ T5957] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 759.612670][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.642403][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.649556][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.856775][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.863900][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.906533][ T5957] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 759.976453][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2308'. [ 759.994837][ T5957] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 760.351212][T14452] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 760.358823][ T5957] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.391992][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.400023][T14407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.554697][T14407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.566673][T14452] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 760.576813][T14452] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 760.610386][T14452] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 761.099234][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.118079][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.139648][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.374709][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.389659][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.399427][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.432114][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.482240][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.489375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.560226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.567469][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.649509][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2310'. [ 761.783789][T14452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.794327][T14452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.584028][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.930468][ T5928] usb 5-1: USB disconnect, device number 67 [ 763.105802][T14734] program syz.4.2314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 763.214064][T14407] veth0_vlan: entered promiscuous mode [ 763.293589][T14407] veth1_vlan: entered promiscuous mode [ 763.314337][T14407] veth0_macvtap: entered promiscuous mode [ 763.350472][T14407] veth1_macvtap: entered promiscuous mode [ 763.473870][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.486833][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.502432][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.034313][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.058096][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.070019][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.419315][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.437992][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.510355][ T264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.535462][ T264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.536523][T14452] veth0_vlan: entered promiscuous mode [ 765.686929][T14452] veth1_vlan: entered promiscuous mode [ 765.762025][T14452] veth0_macvtap: entered promiscuous mode [ 765.826986][T14452] veth1_macvtap: entered promiscuous mode [ 765.967052][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.006494][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.123011][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.285175][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.344585][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.363345][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.525292][ T42] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 767.055760][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.083981][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.143693][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 767.161984][ T42] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.208977][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.227947][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 767.257996][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.339801][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.789688][T14785] hub 2-0:1.0: USB hub found [ 767.795692][T14785] hub 2-0:1.0: 1 port detected [ 768.173243][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.192264][ T42] usb 5-1: invalid MIDI out EP 0 [ 768.321989][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.929112][ T42] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 769.621704][T14807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.102377][ T5957] usb 5-1: USB disconnect, device number 68 [ 770.514045][T14822] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2331'. [ 774.424793][ T5957] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 774.645223][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 774.673858][ T5957] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 774.720444][ T5957] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 774.834625][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 774.884751][ T5957] usb 2-1: SerialNumber: syz [ 774.980301][T14892] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2344'. [ 775.412500][ T5957] usb 2-1: config 0 descriptor?? [ 775.754726][ T5957] usb 2-1: USB disconnect, device number 54 [ 776.540741][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2346'. [ 776.984705][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 777.372589][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 777.951111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.011276][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.059374][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 778.163109][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 778.173354][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 778.182299][ T9] usb 5-1: Manufacturer: syz [ 778.195739][ T9] usb 5-1: config 0 descriptor?? [ 778.648720][ T9] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 778.672419][ T9] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 779.247881][T14444] usb 5-1: USB disconnect, device number 69 [ 779.268074][T14947] tipc: Enabled bearer , priority 0 [ 779.345782][T14948] syzkaller0: entered promiscuous mode [ 779.360325][T14948] syzkaller0: entered allmulticast mode [ 779.663212][T14941] tipc: Resetting bearer [ 779.720468][T14941] tipc: Disabling bearer [ 779.824120][T14975] binder: 14972:14975 ioctl 0 200000000040 returned -22 [ 780.724891][ T30] audit: type=1400 audit(1763740150.566:589): avc: denied { write } for pid=14972 comm="syz.6.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 781.661139][ T30] audit: type=1400 audit(1763740152.386:590): avc: denied { create } for pid=14991 comm="syz.4.2363" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 781.749954][ T30] audit: type=1400 audit(1763740152.456:591): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file2" dev="tmpfs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 783.297983][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 783.794615][ T5928] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 784.103518][ T5928] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 784.445467][ T5928] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 784.506879][ T5928] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 784.520172][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.559743][ T5928] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 784.590799][ T5928] usb 8-1: invalid MIDI out EP 0 [ 784.749877][T15024] syz_tun: entered allmulticast mode [ 784.868744][ T5928] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 784.949946][ T8777] udevd[8777]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.974590][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 785.144932][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 785.158647][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 785.325041][ T10] usb 6-1: config 0 has no interface number 0 [ 785.357516][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 785.627770][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 785.637283][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.658334][ T10] usb 6-1: Product: syz [ 785.679482][ T10] usb 6-1: Manufacturer: syz [ 785.698130][ T10] usb 6-1: SerialNumber: syz [ 785.734151][ T10] usb 6-1: config 0 descriptor?? [ 785.754387][ T10] smsc75xx v1.0.0 [ 786.534928][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 786.546006][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 786.631516][ T9] usb 8-1: USB disconnect, device number 2 [ 786.729285][T15077] syz.1.2377 (15077): drop_caches: 2 [ 786.761438][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 786.869227][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 786.879026][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 786.889237][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 786.941487][ T5893] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 786.977683][ T10] usb 6-1: USB disconnect, device number 2 [ 787.105661][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 787.115285][ T5893] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 787.132034][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.151384][ T5893] usb 7-1: Product: syz [ 787.156385][ T5893] usb 7-1: Manufacturer: syz [ 787.161198][ T5893] usb 7-1: SerialNumber: syz [ 787.260449][ T5893] r8152-cfgselector 7-1: Unknown version 0x0000 [ 787.269302][ T5893] r8152-cfgselector 7-1: config 0 descriptor?? [ 788.382600][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2385'. [ 788.397199][T15109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.236609][T15121] program syz.5.2387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.082653][T15121] syz.5.2387 (15121): drop_caches: 2 [ 790.133252][ T5893] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 791.152336][T15145] hub 2-0:1.0: USB hub found [ 791.158062][T15145] hub 2-0:1.0: 1 port detected [ 793.337452][ T30] audit: type=1400 audit(1763740163.836:592): avc: denied { create } for pid=15157 comm="syz.7.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 793.408182][ T30] audit: type=1400 audit(1763740163.866:593): avc: denied { ioctl } for pid=15157 comm="syz.7.2398" path="socket:[53073]" dev="sockfs" ino=53073 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 793.434305][ T30] audit: type=1400 audit(1763740163.886:594): avc: denied { connect } for pid=15157 comm="syz.7.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 793.501203][T15166] tipc: Enabled bearer , priority 0 [ 793.512415][T15166] tipc: Resetting bearer [ 793.547769][T15164] tipc: Disabling bearer [ 794.805693][ T5928] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 795.455455][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 795.462128][ T5928] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 795.480881][ T5928] usb 2-1: config 0 has no interface number 0 [ 795.862777][ T5928] usb 2-1: config 0 interface 184 has no altsetting 0 [ 795.910166][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 795.995173][ T5928] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 796.004266][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.045990][ T5928] usb 2-1: Product: syz [ 796.050190][ T5928] usb 2-1: Manufacturer: syz [ 796.127911][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 796.215021][ T10] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 796.364612][ T5928] usb 2-1: SerialNumber: syz [ 796.424693][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 796.439719][ T5928] usb 2-1: config 0 descriptor?? [ 796.447923][ T5928] smsc75xx v1.0.0 [ 796.453197][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.489839][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 796.497927][ T10] usb 8-1: invalid MIDI out EP 0 [ 796.521407][ T10] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 796.848125][ T6433] udevd[6433]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.217599][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 797.243917][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 797.597798][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 797.661779][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 797.678856][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 797.882727][T15223] syz.6.2414 (15223): drop_caches: 2 [ 797.899672][ T5928] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 797.918765][ T5928] usb 2-1: USB disconnect, device number 55 [ 798.347352][T14444] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 798.392888][ T5928] usb 8-1: USB disconnect, device number 3 [ 798.807753][T14444] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 798.821293][T14444] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.874744][T14444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.899065][T14444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.927071][T14444] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.949985][T14444] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.974401][T14444] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.991682][T14444] usb 6-1: Product: syz [ 799.000009][T14444] usb 6-1: Manufacturer: syz [ 799.016342][T14444] cdc_wdm 6-1:1.0: skipping garbage [ 799.025055][T14444] cdc_wdm 6-1:1.0: skipping garbage [ 799.053390][T14444] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 799.071534][T14444] cdc_wdm 6-1:1.0: Unknown control protocol [ 799.376646][T15227] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 799.395829][T14444] usb 6-1: USB disconnect, device number 3 [ 800.006990][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 800.723270][ T10] usb 7-1: config 0 has no interfaces? [ 800.885731][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 800.897881][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.906223][ T10] usb 7-1: Product: syz [ 800.911509][ T10] usb 7-1: Manufacturer: syz [ 800.916279][ T10] usb 7-1: SerialNumber: syz [ 801.052741][ T10] usb 7-1: config 0 descriptor?? [ 801.644564][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 801.667037][T15247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2423'. [ 801.844627][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 801.858049][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 801.884274][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.954726][ T9675] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 801.962347][ T10] usb 5-1: Product: syz [ 801.962369][ T10] usb 5-1: Manufacturer: syz [ 801.962384][ T10] usb 5-1: SerialNumber: syz [ 802.015511][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 802.042852][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 802.626849][ T9675] usb 6-1: config 0 has no interfaces? [ 802.637699][ T9675] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 802.650268][ T9675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.678136][ T9675] usb 6-1: Product: syz [ 802.695150][ T9675] usb 6-1: Manufacturer: syz [ 802.726112][ T9675] usb 6-1: SerialNumber: syz [ 802.807937][ T1206] usb 7-1: USB disconnect, device number 3 [ 802.857915][ T9675] usb 6-1: config 0 descriptor?? [ 803.306642][T15271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2428'. [ 803.317613][T15290] program syz.7.2433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.422716][T15290] syz.7.2433 (15290): drop_caches: 2 [ 803.988716][ T1206] r8152-cfgselector 5-1: USB disconnect, device number 70 [ 804.984693][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 805.024562][ T1206] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 805.630072][ T9] usb 6-1: USB disconnect, device number 4 [ 805.665387][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 805.688085][ T10] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 805.709683][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.731788][ T1206] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 805.763369][ T1206] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 805.773822][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.857766][ T1206] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.027291][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.669587][T15298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.678673][T15298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.690581][T15298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.757028][T15298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.508878][ T1206] usb 5-1: USB disconnect, device number 71 [ 808.160336][T15336] syz.7.2444 (15336): drop_caches: 2 [ 808.246647][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.253477][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.428677][ T1206] usb 2-1: USB disconnect, device number 56 [ 810.680839][T15362] syzkaller0: entered promiscuous mode [ 810.686750][T15362] syzkaller0: entered allmulticast mode [ 810.772083][T15362] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 810.862967][T14444] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 811.149760][T14444] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.166987][T14444] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 811.695178][T14444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.801616][T14444] usb 6-1: config 0 descriptor?? [ 811.828666][T14444] pwc: Askey VC010 type 2 USB webcam detected. [ 812.820777][ T30] audit: type=1400 audit(1763740182.776:595): avc: denied { bind } for pid=15372 comm="syz.1.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 812.991195][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2457'. [ 813.073141][T14444] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.080644][T14444] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.090139][T14444] pwc: recv_control_msg error -32 req 02 val 2c00 [ 813.101863][T14444] pwc: recv_control_msg error -32 req 04 val 1000 [ 813.109015][T14444] pwc: recv_control_msg error -32 req 04 val 1300 [ 813.117792][T14444] pwc: recv_control_msg error -32 req 04 val 1400 [ 813.126874][T14444] pwc: recv_control_msg error -32 req 02 val 2000 [ 813.135798][T14444] pwc: recv_control_msg error -32 req 02 val 2100 [ 813.143785][T14444] pwc: recv_control_msg error -32 req 04 val 1500 [ 813.151675][T14444] pwc: recv_control_msg error -32 req 02 val 2500 [ 813.160159][T14444] pwc: recv_control_msg error -32 req 02 val 2400 [ 813.169364][T14444] pwc: recv_control_msg error -32 req 02 val 2600 [ 813.178230][T14444] pwc: recv_control_msg error -32 req 02 val 2900 [ 813.186748][T14444] pwc: recv_control_msg error -32 req 02 val 2800 [ 813.196338][T14444] pwc: recv_control_msg error -32 req 04 val 1100 [ 813.204397][T14444] pwc: Registered as video103. [ 813.211246][T14444] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input81 [ 813.441106][ T1206] usb 6-1: USB disconnect, device number 5 [ 813.514673][T14444] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 813.674593][T14444] usb 2-1: Using ep0 maxpacket: 16 [ 813.685606][T14444] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.948708][T14444] usb 2-1: config 0 has no interfaces? [ 813.964273][T14444] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 813.973840][T14444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.986472][T14444] usb 2-1: Product: syz [ 813.990856][T14444] usb 2-1: Manufacturer: syz [ 814.037003][T14444] usb 2-1: SerialNumber: syz [ 814.061881][T14444] usb 2-1: config 0 descriptor?? [ 814.096132][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 814.308923][ T9] usb 2-1: USB disconnect, device number 57 [ 814.338358][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 814.370579][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.383990][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 814.394565][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 814.409936][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 814.670820][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 814.680360][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.709533][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 814.992052][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 815.621332][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 816.155360][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 816.167943][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 816.174032][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 817.144788][ T10] usb 5-1: USB disconnect, device number 72 [ 820.412720][T15465] hub 2-0:1.0: USB hub found [ 820.425020][T15465] hub 2-0:1.0: 1 port detected [ 821.159360][ T30] audit: type=1400 audit(1763740191.886:596): avc: denied { connect } for pid=15468 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.483007][ T30] audit: type=1400 audit(1763740191.886:597): avc: denied { write } for pid=15468 comm="syz.6.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 821.502351][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.780719][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2480'. [ 821.886474][T15478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 821.893707][T15478] IPv6: NLM_F_CREATE should be set when creating new route [ 821.900952][T15478] IPv6: NLM_F_CREATE should be set when creating new route [ 825.056943][T15501] fuse: Unknown parameter '0x0000000000000005' [ 825.331132][ T5893] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 826.047928][ T5893] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 826.131933][ T5893] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 826.193385][ T5893] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 826.389182][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.307326][T15532] program syz.6.2495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.359765][T15532] syz.6.2495 (15532): drop_caches: 2 [ 827.632529][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.643310][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.659875][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.668845][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.854671][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 828.034542][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 828.041555][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.064050][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 828.073480][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 828.081972][ T10] usb 6-1: SerialNumber: syz [ 828.192923][ T10] usb 6-1: config 0 descriptor?? [ 828.207226][ T10] uvcvideo 6-1:0.0: Found UVC 0.00 device (05ac:8501) [ 828.215280][ T10] uvcvideo 6-1:0.0: No valid video chain found. [ 828.644101][ T10] usb 6-1: USB disconnect, device number 6 [ 828.907691][ T42] usb 5-1: USB disconnect, device number 73 [ 829.794580][ T42] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 831.569385][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 831.724684][ T42] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 831.735761][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 832.233327][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.368054][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 832.387865][ T42] usb 5-1: invalid MIDI out EP 0 [ 832.996844][ T8777] udevd[8777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.034392][T15579] program syz.5.2507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.110654][T15579] syz.5.2507 (15579): drop_caches: 2 [ 833.223417][ T42] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 833.248591][ T1206] usb 5-1: USB disconnect, device number 74 [ 834.184551][ T1206] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 834.624600][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 834.640403][ T1206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.650672][ T1206] usb 7-1: config 0 has no interfaces? [ 834.660149][ T1206] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 834.669269][ T1206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.682465][ T1206] usb 7-1: Product: syz [ 834.693923][ T1206] usb 7-1: Manufacturer: syz [ 834.707977][ T1206] usb 7-1: SerialNumber: syz [ 834.726692][ T1206] usb 7-1: config 0 descriptor?? [ 834.969180][ T10] usb 7-1: USB disconnect, device number 4 [ 836.336465][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 836.772360][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 836.801848][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.834504][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.845380][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 836.875131][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 836.896729][ T10] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 836.990668][ T10] usb 8-1: Manufacturer: syz [ 837.006274][ T10] usb 8-1: config 0 descriptor?? [ 837.034589][ T1206] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 837.211777][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 837.236278][ T1206] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 837.247451][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.258603][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.268665][ T1206] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 837.284414][ T1206] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 837.294431][ T1206] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 837.302682][ T1206] usb 7-1: Manufacturer: syz [ 837.312228][ T1206] usb 7-1: config 0 descriptor?? [ 837.449787][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 837.457738][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 837.463750][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 837.478082][ T10] usb 8-1: USB disconnect, device number 4 [ 837.771758][ T1206] usbhid 7-1:0.0: can't add hid device: -71 [ 837.785590][ T1206] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 837.809459][ T1206] usb 7-1: USB disconnect, device number 5 [ 840.760138][T14444] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 841.724730][T14444] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 841.736513][T14444] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 841.777378][T14444] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.804575][T14444] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.869099][T14444] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 841.898817][T14444] usb 8-1: invalid MIDI out EP 0 [ 842.158306][ T5871] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 842.598818][ T8777] udevd[8777]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.627997][T14444] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 842.678731][ T5871] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 842.710713][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.741080][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.888857][T15677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 842.895511][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 842.906405][T15677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 842.918163][T15677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 842.925712][T15677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 842.933081][T15677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 842.957846][ T5806] syz_tun (unregistering): left allmulticast mode [ 843.050592][ T5871] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 843.113972][ T5871] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 843.142753][ T5871] usb 6-1: Manufacturer: syz [ 843.158354][ T5871] usb 6-1: config 0 descriptor?? [ 843.234774][T14444] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 843.556999][T14743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.616068][T14444] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 843.667919][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 843.676368][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 843.683664][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 843.690785][T14444] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 843.691108][ T5871] usbhid 6-1:0.0: can't add hid device: -32 [ 843.709471][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 843.718059][T14444] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 843.736342][T14743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.751243][T14444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.773993][ T5871] usb 6-1: USB disconnect, device number 7 [ 843.880408][T14743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.916043][T14444] usb 8-1: USB disconnect, device number 5 [ 844.011356][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.021160][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.268092][T14743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.477483][T15675] chnl_net:caif_netlink_parms(): no params data found [ 844.764255][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.772640][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.783028][T15675] bridge_slave_0: entered allmulticast mode [ 844.851511][T15675] bridge_slave_0: entered promiscuous mode [ 844.866062][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.874775][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.883375][T15675] bridge_slave_1: entered allmulticast mode [ 844.891847][T15675] bridge_slave_1: entered promiscuous mode [ 844.965099][T15677] Bluetooth: hci1: command tx timeout [ 845.002892][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.055696][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.081077][T14743] bridge_slave_1: left allmulticast mode [ 845.088175][T14743] bridge_slave_1: left promiscuous mode [ 845.109310][T14743] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.152931][T14743] bridge_slave_0: left allmulticast mode [ 845.173753][T14743] bridge_slave_0: left promiscuous mode [ 845.192658][T14743] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.704608][ T5871] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 845.804619][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 845.865606][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 845.875522][T14743] erspan0 (unregistering): left allmulticast mode [ 845.884408][ T5871] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 845.894483][ T5871] usb 6-1: config 0 has no interface number 0 [ 845.913756][ T5871] usb 6-1: config 0 interface 184 has no altsetting 0 [ 845.925944][ T5871] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 845.952037][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.961643][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.970667][ T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 845.981246][ T5871] usb 6-1: Product: syz [ 845.987689][ T5871] usb 6-1: Manufacturer: syz [ 845.992408][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 846.001669][ T5871] usb 6-1: SerialNumber: syz [ 846.018511][T14444] usb 5-1: USB disconnect, device number 75 [ 846.040239][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 846.052622][ T5871] usb 6-1: config 0 descriptor?? [ 846.065577][ T5871] smsc75xx v1.0.0 [ 846.078754][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 846.089688][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 846.099791][ T10] usb 7-1: Product: syz [ 846.104022][ T10] usb 7-1: Manufacturer: syz [ 846.214563][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 846.219918][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 846.226329][ T10] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 846.425505][T14743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.457328][T14743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.458258][ T5957] usb 7-1: USB disconnect, device number 6 [ 846.496587][T14743] bond0 (unregistering): Released all slaves [ 846.581347][T15675] team0: Port device team_slave_0 added [ 846.597997][T15675] team0: Port device team_slave_1 added [ 846.633121][T14743] tipc: Left network mode [ 846.655833][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.673200][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.699259][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.717698][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.727145][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 846.740615][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 846.768487][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.775768][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.804293][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.044971][T15677] Bluetooth: hci1: command tx timeout [ 847.269174][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 847.280057][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 847.319877][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 847.349995][ T5871] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 847.390328][ T5871] usb 6-1: USB disconnect, device number 8 [ 849.131817][T15677] Bluetooth: hci1: command tx timeout [ 849.942613][T15675] hsr_slave_0: entered promiscuous mode [ 850.064925][T15675] hsr_slave_1: entered promiscuous mode [ 850.073511][T15675] debugfs: 'hsr0' already exists in 'hsr' [ 850.080250][T15675] Cannot create hsr debugfs directory [ 850.390491][ T30] audit: type=1400 audit(1763740221.086:598): avc: denied { getopt } for pid=15770 comm="syz.4.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 850.819990][T14743] hsr_slave_0: left promiscuous mode [ 850.837350][T14743] hsr_slave_1: left promiscuous mode [ 851.212299][T15677] Bluetooth: hci1: command tx timeout [ 851.385382][T14743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.419106][T14743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.453072][T14743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.477137][T14743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.566759][T14743] veth1_macvtap: left promiscuous mode [ 851.584545][T14743] veth0_macvtap: left promiscuous mode [ 853.978558][T14743] team0 (unregistering): Port device team_slave_1 removed [ 854.014947][T14743] team0 (unregistering): Port device team_slave_0 removed [ 855.913198][T14743] IPVS: stop unused estimator thread 0... [ 855.962670][T15675] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 856.078341][T15675] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 856.111926][T15675] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 856.155188][T15675] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 856.321617][T15675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.388497][T15675] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.402667][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.409886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.420748][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 856.453142][T15675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 856.463699][T15675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.518431][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.525589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.778090][T15881] program syz.5.2575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.313461][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.900665][T15675] veth0_vlan: entered promiscuous mode [ 857.989559][T15675] veth1_vlan: entered promiscuous mode [ 858.217065][T15675] veth0_macvtap: entered promiscuous mode [ 858.283832][T15675] veth1_macvtap: entered promiscuous mode [ 858.432866][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.588689][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.767735][ T62] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.789198][ T62] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.884639][ T62] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.922132][ T62] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.540474][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 861.875061][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 861.933452][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.951988][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.073447][T15942] syzkaller0: entered promiscuous mode [ 862.080262][T15942] syzkaller0: entered allmulticast mode [ 862.089878][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.120159][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.241369][ T5858] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 862.330165][ T10] usb 5-1: config 0 has no interfaces? [ 862.346482][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 862.461761][ T5858] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 862.482392][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.697635][ T30] audit: type=1400 audit(1763740234.336:599): avc: denied { mounton } for pid=15951 comm="syz.5.2587" path="/81/file0" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 863.764414][ T10] usb 5-1: Product: syz [ 863.768726][ T10] usb 5-1: Manufacturer: syz [ 863.773370][ T5858] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 863.976133][ T10] usb 5-1: SerialNumber: syz [ 863.994748][ T5858] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 864.135411][ T10] usb 5-1: config 0 descriptor?? [ 864.154867][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.314438][ T30] audit: type=1400 audit(1763740235.046:600): avc: denied { unmount } for pid=14344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 864.431784][T15939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.441634][T15939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.443286][ T10] usb 5-1: USB disconnect, device number 76 [ 865.464581][T15986] syzkaller0: entered promiscuous mode [ 865.522843][T15986] syzkaller0: entered allmulticast mode [ 866.644601][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 867.216057][ T5871] usb 8-1: USB disconnect, device number 6 [ 869.972301][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.126902][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.194394][T16050] hub 2-0:1.0: USB hub found [ 870.201015][T16050] hub 2-0:1.0: 1 port detected [ 872.135759][T16080] fuse: Bad value for 'fd' [ 874.597198][T16106] program syz.4.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.699809][T16106] syz.4.2621 (16106): drop_caches: 2 [ 874.983889][T16110] syz.8.2622 (16110): drop_caches: 2 [ 876.444577][T14444] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 876.465251][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2619'. [ 876.598954][T14444] usb 5-1: device descriptor read/64, error -71 [ 876.864562][T14444] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 877.092008][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2631'. [ 877.176631][T14444] usb 5-1: device descriptor read/64, error -71 [ 877.302129][T14444] usb usb5-port1: attempt power cycle [ 877.714540][T14444] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 877.740046][T14444] usb 5-1: device descriptor read/8, error -71 [ 877.999269][T14444] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 878.025255][T14444] usb 5-1: device descriptor read/8, error -71 [ 878.134770][T14444] usb usb5-port1: unable to enumerate USB device [ 879.419100][T16191] overlayfs: failed to resolve './file0': -2 [ 880.460994][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 880.783249][ T5893] usb 9-1: config 0 has no interfaces? [ 880.843569][ T5893] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 880.925839][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.017882][ T5893] usb 9-1: Product: syz [ 881.066404][ T5893] usb 9-1: Manufacturer: syz [ 881.173118][ T5893] usb 9-1: SerialNumber: syz [ 881.637654][ T5893] usb 9-1: config 0 descriptor?? [ 883.844015][T13786] usb 9-1: USB disconnect, device number 2 [ 884.037878][ T5957] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 884.174642][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 884.221781][ T5957] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 884.319410][ T5957] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 884.340323][ T5957] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 884.350681][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.434848][ T42] usb 7-1: device descriptor read/64, error -71 [ 884.500785][ T5957] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 884.680252][ T5957] usb 6-1: invalid MIDI out EP 0 [ 884.695352][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 884.749921][T16258] syz_tun: entered allmulticast mode [ 884.800800][T16273] syzkaller0: entered promiscuous mode [ 884.841187][ T5957] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 884.859385][ T42] usb 7-1: device descriptor read/64, error -71 [ 884.915965][T16273] syzkaller0: entered allmulticast mode [ 884.975101][ T42] usb usb7-port1: attempt power cycle [ 885.358313][ T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 885.394551][ T5871] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 885.411512][ T42] usb 7-1: device descriptor read/8, error -71 [ 885.544564][ T5871] usb 8-1: Using ep0 maxpacket: 8 [ 885.552290][ T5871] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.654384][ T5871] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 885.715103][ T42] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 885.752825][ T42] usb 7-1: device descriptor read/8, error -71 [ 885.875150][ T42] usb usb7-port1: unable to enumerate USB device [ 885.883785][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 886.107931][ T5871] usb 8-1: SerialNumber: syz [ 886.126850][ T5871] usb 8-1: config 0 descriptor?? [ 886.134918][ T5871] uvcvideo 8-1:0.0: Found UVC 0.00 device (05ac:8501) [ 886.142961][ T5871] uvcvideo 8-1:0.0: No valid video chain found. [ 886.401799][ T42] usb 8-1: USB disconnect, device number 7 [ 886.525787][ T5957] usb 6-1: USB disconnect, device number 9 [ 887.074601][T16313] program syz.5.2661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.344346][T16313] syz.5.2661 (16313): drop_caches: 2 [ 887.608751][T16331] mmap: syz.6.2665 (16331) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 890.545607][T13786] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 890.782856][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2673'. [ 890.954641][ T5957] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 891.163015][T13786] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 891.175549][T13786] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.199047][T13786] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 891.215519][T13786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.264530][ T5957] usb 8-1: device descriptor read/64, error -71 [ 891.342854][T13786] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 891.526680][T13786] usb 6-1: invalid MIDI out EP 0 [ 891.641936][ T5957] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 891.717682][T13786] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 891.777841][ T5957] usb 8-1: device descriptor read/64, error -71 [ 891.896992][ T5957] usb usb8-port1: attempt power cycle [ 892.326887][ T5957] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 892.419986][ T5957] usb 8-1: device descriptor read/8, error -71 [ 892.758200][ T5871] usb 6-1: USB disconnect, device number 10 [ 892.815564][ T5957] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 892.835034][ T5957] usb 8-1: device descriptor read/8, error -71 [ 893.106694][ T5957] usb usb8-port1: unable to enumerate USB device [ 893.602592][ T5871] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 893.934633][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 893.943603][ T5871] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 893.952196][ T5871] usb 6-1: config 0 has no interface number 0 [ 894.009642][ T5871] usb 6-1: config 0 interface 184 has no altsetting 0 [ 894.101160][ T5871] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 894.113759][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.122687][ T5871] usb 6-1: Product: syz [ 894.129746][ T5871] usb 6-1: Manufacturer: syz [ 894.135261][ T5871] usb 6-1: SerialNumber: syz [ 894.157052][ T5871] usb 6-1: config 0 descriptor?? [ 894.168110][ T5871] smsc75xx v1.0.0 [ 895.180839][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 895.406680][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 895.534280][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 895.668471][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 895.703785][ T5871] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 895.733453][ T5871] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 895.771598][ T5871] usb 6-1: USB disconnect, device number 11 [ 895.798609][T16437] program syz.7.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 895.829346][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 896.706719][ T5957] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 897.412713][ T5957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.433405][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.462384][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.509553][ T5957] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 897.697618][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.713687][ T5957] usb 6-1: config 0 descriptor?? [ 897.890939][T13786] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 897.965475][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 898.363477][T13786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.373934][T13786] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 898.383072][T13786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.394143][T13786] usb 9-1: config 0 descriptor?? [ 898.403275][T13786] pwc: Askey VC010 type 2 USB webcam detected. [ 898.514554][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 898.521204][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.531611][ T42] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 898.540585][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 898.552064][ T42] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 898.563374][ T42] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 898.572593][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.579260][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2696'. [ 898.601376][ T42] hub 8-1:1.0: bad descriptor, ignoring hub [ 898.616961][ T42] hub 8-1:1.0: probe with driver hub failed with error -5 [ 898.625525][ T42] cdc_wdm 8-1:1.0: skipping garbage [ 898.661433][ T42] cdc_wdm 8-1:1.0: skipping garbage [ 898.835554][T13786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 899.574202][ T42] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 899.617145][T13786] pwc: recv_control_msg error -32 req 02 val 2700 [ 899.623705][ T42] cdc_wdm 8-1:1.0: Unknown control protocol [ 900.653977][T13786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 901.405133][ T42] usb 8-1: USB disconnect, device number 12 [ 901.455543][ T5957] usbhid 6-1:0.0: can't add hid device: -71 [ 901.461576][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 901.494886][T13786] pwc: recv_control_msg error -32 req 04 val 1300 [ 901.536661][T13786] pwc: recv_control_msg error -32 req 04 val 1400 [ 901.552235][T13786] pwc: recv_control_msg error -32 req 02 val 2000 [ 901.561095][ T5957] usb 6-1: USB disconnect, device number 12 [ 901.567622][T13786] pwc: recv_control_msg error -32 req 02 val 2100 [ 901.580644][T13786] pwc: recv_control_msg error -32 req 04 val 1500 [ 901.603267][T13786] pwc: recv_control_msg error -32 req 02 val 2500 [ 901.619492][T13786] pwc: recv_control_msg error -32 req 02 val 2400 [ 901.632718][T13786] pwc: recv_control_msg error -32 req 02 val 2600 [ 901.641898][T13786] pwc: recv_control_msg error -32 req 02 val 2900 [ 901.649544][T13786] pwc: recv_control_msg error -32 req 02 val 2800 [ 901.657188][T13786] pwc: recv_control_msg error -32 req 04 val 1100 [ 901.665049][T13786] pwc: recv_control_msg error -32 req 04 val 1200 [ 901.676004][T13786] pwc: Registered as video103. [ 901.703302][T13786] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input83 [ 901.739661][T13786] usb 9-1: USB disconnect, device number 3 [ 902.332391][T16481] syzkaller0: entered promiscuous mode [ 902.338818][T16481] syzkaller0: entered allmulticast mode [ 903.285450][T16497] program syz.6.2709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.320015][T16497] syz.6.2709 (16497): drop_caches: 2 [ 903.714550][T14444] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 904.157705][T16509] No control pipe specified [ 904.183268][T14444] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 904.198139][T14444] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 904.207732][T14444] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.216900][T14444] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.234528][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 904.407846][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.477705][T16504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.487926][T16504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.498713][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.522453][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.535668][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 904.883577][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.977124][ T10] usb 6-1: config 0 descriptor?? [ 906.632273][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 910.692747][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 910.757977][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 910.829581][ T10] usb 6-1: USB disconnect, device number 13 [ 911.652257][ T10] usb 9-1: USB disconnect, device number 4 [ 911.761644][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x1 [ 911.777236][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.806110][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.818222][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.916656][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.924097][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.944168][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.951896][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.959511][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 911.967247][ T5858] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 912.425116][ T5858] hid-generic 0000:0000:0000.0029: hidraw0: HID v8.00 Device [syz0] on syz0 [ 912.606019][T16562] fido_id[16562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 914.410040][T16588] hub 2-0:1.0: USB hub found [ 914.415896][T16588] hub 2-0:1.0: 1 port detected [ 915.257352][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2736'. [ 919.024723][ T5858] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 919.220765][T16631] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 919.474541][ T5858] usb 7-1: Using ep0 maxpacket: 16 [ 919.485673][ T5858] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 919.494866][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.526797][ T5858] usb 7-1: Product: syz [ 919.598035][ T5858] usb 7-1: Manufacturer: syz [ 919.834272][ T5858] usb 7-1: SerialNumber: syz [ 919.880381][ T5858] r8152-cfgselector 7-1: Unknown version 0x0000 [ 919.903207][ T5858] r8152-cfgselector 7-1: config 0 descriptor?? [ 920.474581][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 920.683208][ T5858] r8152-cfgselector 7-1: Unknown version 0x0000 [ 920.718929][ T5858] r8152-cfgselector 7-1: bad CDC descriptors [ 920.746993][ T5858] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 920.817847][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 920.843155][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 920.927696][ T5957] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 920.994722][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.155191][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.197335][ T5957] usb 9-1: Using ep0 maxpacket: 8 [ 921.282957][ T5957] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.308738][ T5957] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 921.554225][ T5957] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 921.647588][ T5957] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 921.659715][ T5957] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 921.669116][ T5957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.714176][ T5957] hub 9-1:1.0: bad descriptor, ignoring hub [ 921.726346][ T5957] hub 9-1:1.0: probe with driver hub failed with error -5 [ 922.312177][ T5957] cdc_wdm 9-1:1.0: skipping garbage [ 922.337705][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.346580][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.360042][T16646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.368957][T16646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.536770][ T5957] cdc_wdm 9-1:1.0: skipping garbage [ 922.592273][ T5957] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 922.606163][ T5957] cdc_wdm 9-1:1.0: Unknown control protocol [ 922.690947][ T5957] usb 9-1: USB disconnect, device number 5 [ 922.797944][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 922.955382][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 922.961699][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.980093][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 923.001922][T16679] program syz.5.2758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.282734][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 923.296947][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 923.383429][T16679] syz.5.2758 (16679): drop_caches: 2 [ 923.644540][ T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 923.756774][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.920819][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 923.937226][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 923.957711][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 923.962927][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 923.993052][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 923.999104][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 924.574851][ T9] usb 8-1: USB disconnect, device number 13 [ 924.621270][ T5858] usb 5-1: USB disconnect, device number 81 [ 925.401211][T16698] syz.6.2761 (16698): drop_caches: 2 [ 931.126623][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.132935][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.940154][T16785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 932.997158][T16789] overlayfs: overlapping lowerdir path [ 933.724529][ T1206] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 933.884618][ T1206] usb 8-1: Using ep0 maxpacket: 16 [ 933.901800][T16804] hub 2-0:1.0: USB hub found [ 933.906724][T16804] hub 2-0:1.0: 1 port detected [ 934.074935][ T5892] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 934.105845][ T1206] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 934.117830][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.220552][ T1206] usb 8-1: Product: syz [ 934.225153][ T1206] usb 8-1: Manufacturer: syz [ 934.229773][ T1206] usb 8-1: SerialNumber: syz [ 934.255496][ T1206] r8152-cfgselector 8-1: Unknown version 0x0000 [ 934.261907][ T1206] r8152-cfgselector 8-1: config 0 descriptor?? [ 934.274501][ T5892] usb 9-1: Using ep0 maxpacket: 16 [ 934.296744][ T5892] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 934.726174][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.734215][ T5892] usb 9-1: Product: syz [ 934.738820][ T5892] usb 9-1: Manufacturer: syz [ 934.743444][ T5892] usb 9-1: SerialNumber: syz [ 934.774294][ T5892] r8152-cfgselector 9-1: Unknown version 0x0000 [ 934.787180][ T5892] r8152-cfgselector 9-1: config 0 descriptor?? [ 934.813221][ T1206] r8152-cfgselector 8-1: Unknown version 0x0000 [ 934.825265][ T1206] r8152-cfgselector 8-1: bad CDC descriptors [ 934.836616][ T1206] r8152-cfgselector 8-1: USB disconnect, device number 14 [ 935.072030][ T5892] r8152-cfgselector 9-1: Unknown version 0x0000 [ 935.084973][ T5892] r8152-cfgselector 9-1: bad CDC descriptors [ 935.113677][ T5892] r8152-cfgselector 9-1: USB disconnect, device number 6 [ 937.152371][T16840] syzkaller0: entered promiscuous mode [ 937.158212][T16840] syzkaller0: entered allmulticast mode [ 937.538777][T16844] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2803'. [ 941.116556][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2809'. [ 941.652230][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'. [ 941.864646][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 942.027622][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 942.147833][ T10] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.450977][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 942.538177][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.735808][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 942.748126][ T10] usb 5-1: invalid MIDI out EP 0 [ 942.822625][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 942.843641][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.339725][T16913] netlink: 'syz.7.2818': attribute type 4 has an invalid length. [ 944.417251][ T1206] usb 5-1: USB disconnect, device number 82 [ 946.728217][T16944] ip6t_rpfilter: unknown options [ 947.109222][ T30] audit: type=1400 audit(1763740317.846:601): avc: denied { append } for pid=16950 comm="syz.7.2828" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 947.148639][T16956] loop6: detected capacity change from 0 to 7 [ 948.044600][T16956] Dev loop6: unable to read RDB block 7 [ 948.052609][T16956] loop6: unable to read partition table [ 948.063922][T16956] loop6: partition table beyond EOD, truncated [ 948.084622][T16956] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 951.894908][T16986] ip6t_rpfilter: unknown options [ 953.059559][ T5892] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 953.454499][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 953.582278][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.595863][ T5892] usb 6-1: config 0 has no interfaces? [ 953.623993][ T5892] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 953.633348][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.644601][ T5892] usb 6-1: Product: syz [ 953.648886][ T5892] usb 6-1: Manufacturer: syz [ 953.661968][ T5892] usb 6-1: SerialNumber: syz [ 953.683739][ T5892] usb 6-1: config 0 descriptor?? [ 954.400971][ T9] usb 6-1: USB disconnect, device number 14 [ 955.464830][T13786] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 955.714712][T13786] usb 9-1: Using ep0 maxpacket: 16 [ 955.762505][T13786] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 955.773358][T13786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.902762][ T30] audit: type=1400 audit(1763740326.416:602): avc: denied { setopt } for pid=17029 comm="syz.7.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 955.909279][T13786] usb 9-1: Product: syz [ 955.983466][T13786] usb 9-1: Manufacturer: syz [ 955.988479][T13786] usb 9-1: SerialNumber: syz [ 956.049085][T13786] r8152-cfgselector 9-1: Unknown version 0x0000 [ 956.077703][T13786] r8152-cfgselector 9-1: config 0 descriptor?? [ 956.727268][T13786] r8152-cfgselector 9-1: Unknown version 0x0000 [ 956.742168][T13786] r8152-cfgselector 9-1: bad CDC descriptors [ 956.932602][T13786] r8152-cfgselector 9-1: USB disconnect, device number 7 [ 957.844611][T17058] program syz.7.2853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 959.502710][T13786] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 959.734599][T13786] usb 9-1: Using ep0 maxpacket: 16 [ 959.829355][T13786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.865872][T13786] usb 9-1: config 0 has no interfaces? [ 959.880308][T13786] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 959.898089][T13786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.914932][T13786] usb 9-1: Product: syz [ 959.923106][T13786] usb 9-1: Manufacturer: syz [ 959.992523][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2860'. [ 960.206489][T13786] usb 9-1: SerialNumber: syz [ 960.265897][T13786] usb 9-1: config 0 descriptor?? [ 960.593022][T13786] usb 9-1: USB disconnect, device number 8 [ 962.087076][ T30] audit: type=1400 audit(1763740332.826:603): avc: denied { append } for pid=17099 comm="syz.8.2863" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 962.113970][T17102] random: crng reseeded on system resumption [ 963.045523][ T30] audit: type=1400 audit(1763740332.846:604): avc: denied { open } for pid=17099 comm="syz.8.2863" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 963.345670][T17111] loop6: detected capacity change from 0 to 7 [ 963.352440][T17111] Dev loop6: unable to read RDB block 7 [ 963.358162][T17111] loop6: unable to read partition table [ 963.365028][T17111] loop6: partition table beyond EOD, truncated [ 963.371275][T17111] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 966.093733][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 966.254591][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 966.291372][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.358187][ T9] usb 7-1: config 0 has no interfaces? [ 966.570110][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 966.596908][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.627329][ T9] usb 7-1: Product: syz [ 966.631534][ T9] usb 7-1: Manufacturer: syz [ 966.636584][ T9] usb 7-1: SerialNumber: syz [ 966.643341][ T9] usb 7-1: config 0 descriptor?? [ 966.794494][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 967.138770][ T5858] usb 7-1: USB disconnect, device number 12 [ 967.195090][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 967.207634][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 967.353320][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.377364][ T10] usb 6-1: Product: syz [ 967.390513][ T10] usb 6-1: Manufacturer: syz [ 967.405123][ T10] usb 6-1: SerialNumber: syz [ 967.462459][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 967.474693][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 968.255013][ T30] audit: type=1400 audit(1763740338.546:605): avc: denied { wake_alarm } for pid=17146 comm="syz.4.2877" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 968.276168][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.980108][ T30] audit: type=1400 audit(1763740339.076:606): avc: denied { create } for pid=17151 comm="syz.8.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 969.025497][ T30] audit: type=1400 audit(1763740339.186:607): avc: denied { connect } for pid=17151 comm="syz.8.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 969.124527][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 969.378435][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 969.414709][ T10] r8152-cfgselector 6-1: bad CDC descriptors [ 969.462757][ T10] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 972.110102][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 972.734498][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 972.766385][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.822246][ T9] usb 8-1: config 0 has no interfaces? [ 972.867513][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 972.884473][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.902850][ T9] usb 8-1: Product: syz [ 972.907353][ T9] usb 8-1: Manufacturer: syz [ 972.911950][ T9] usb 8-1: SerialNumber: syz [ 972.963814][ T9] usb 8-1: config 0 descriptor?? [ 973.713187][ T5858] usb 8-1: USB disconnect, device number 15 [ 975.990438][T17230] mkiss: ax0: crc mode is auto. [ 976.717837][T17252] ip6t_rpfilter: unknown options [ 976.734720][ T5957] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 976.967700][ T5858] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 977.865147][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 977.875872][ T5957] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 977.907302][ T5957] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 977.991082][ T5957] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.023855][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.025457][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.966439][ T5858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 978.990696][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 979.073394][ T5858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 979.256465][ T5858] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 979.711175][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.835453][T17269] random: crng reseeded on system resumption [ 980.154127][ T9] usb 7-1: USB disconnect, device number 13 [ 980.378841][ T5858] usb 6-1: can't set config #1, error -71 [ 980.512932][T17276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 980.820463][ T5858] usb 6-1: USB disconnect, device number 16 [ 981.064800][T17287] random: crng reseeded on system resumption [ 981.451870][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 982.021371][T17292] syzkaller0: entered promiscuous mode [ 982.472070][ T9] usb 8-1: config 0 has no interfaces? [ 982.487151][ T9] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 982.496460][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.508907][T17292] syzkaller0: entered allmulticast mode [ 982.527020][ T9] usb 8-1: Product: syz [ 982.544620][ T9] usb 8-1: Manufacturer: syz [ 982.549499][ T9] usb 8-1: SerialNumber: syz [ 982.561077][ T9] usb 8-1: config 0 descriptor?? [ 983.148910][T17304] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2917'. [ 984.772305][T13786] usb 8-1: USB disconnect, device number 16 [ 985.994615][ T5957] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 986.934756][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 987.277051][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.290371][ T5957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 987.300850][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 987.317640][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 987.329282][ T5957] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 987.339263][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.045571][ T5957] usb 5-1: can't set config #1, error -71 [ 988.185920][T17347] ip6t_rpfilter: unknown options [ 988.668677][ T5957] usb 5-1: USB disconnect, device number 83 [ 990.614514][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 990.835611][ T10] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 991.137079][ T10] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 991.165711][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 991.254763][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.649154][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.659124][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.684072][T17364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.694294][T17364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.570714][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.577202][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.041524][ T9] usb 9-1: USB disconnect, device number 9 [ 993.124582][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 993.534521][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 993.845120][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 993.883991][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.896861][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 993.956872][ T10] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 993.967806][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 993.989188][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 994.001965][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.088547][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 995.101520][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.128078][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 995.153020][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 995.173245][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.197436][ T10] usb 8-1: invalid MIDI out EP 0 [ 995.296468][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 995.346849][T17415] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.355295][T17415] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.531773][ T10] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 995.542770][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 995.607193][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 995.612461][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 995.882923][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 995.928852][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 996.080628][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.191878][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.632870][ T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.642662][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.674130][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.789372][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.619302][T17452] usb 8-1: USB disconnect, device number 17 [ 997.762813][ T9675] usb 9-1: USB disconnect, device number 10 [ 999.040600][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2954'. [ 1000.161620][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2961'. [ 1000.432278][T17446] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1001.045101][T17446] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1001.056610][T17446] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1001.072956][T17446] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.113883][T17446] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.153724][T17446] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.161414][T17446] usb 9-1: invalid MIDI out EP 0 [ 1001.306689][T17446] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1001.441372][T17489] syz_tun: entered allmulticast mode [ 1002.746466][T17446] usb 9-1: USB disconnect, device number 11 [ 1002.790943][T17522] overlayfs: overlapping lowerdir path [ 1003.046161][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1003.654478][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1003.667136][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.700158][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1003.857900][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1003.944354][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1004.323703][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1004.351331][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.640505][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 1004.667876][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1004.895137][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1004.900446][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1004.913851][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1004.929202][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 1006.037050][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1006.504266][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.614981][T17449] usb 7-1: USB disconnect, device number 14 [ 1006.848073][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1006.974585][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1007.854494][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.791068][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2988'. [ 1011.233813][ T9675] usb 5-1: USB disconnect, device number 84 [ 1012.397039][T17449] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1013.214643][T17449] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1013.226986][T17449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.236805][T17449] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1013.699306][T17449] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1013.710325][T17449] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1013.719414][T17449] usb 9-1: Manufacturer: syz [ 1013.727388][T17449] usb 9-1: config 0 descriptor?? [ 1013.737124][T17449] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1014.046497][ T30] audit: type=1400 audit(1763740384.786:608): avc: denied { map } for pid=17633 comm="syz.6.2997" path="socket:[62376]" dev="sockfs" ino=62376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1014.092016][ T30] audit: type=1400 audit(1763740384.786:609): avc: denied { read } for pid=17633 comm="syz.6.2997" path="socket:[62376]" dev="sockfs" ino=62376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1015.240736][T17449] usb 9-1: USB disconnect, device number 12 [ 1018.350662][T17426] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1018.902601][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1019.141057][T17426] usb 5-1: config 0 has no interfaces? [ 1019.202636][T17426] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1019.222013][T17426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.231236][T17426] usb 5-1: Product: syz [ 1019.236766][T17426] usb 5-1: Manufacturer: syz [ 1019.245145][T17426] usb 5-1: SerialNumber: syz [ 1019.258925][T17426] usb 5-1: config 0 descriptor?? [ 1019.574687][T17452] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1019.830708][T17452] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1019.916030][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.934535][T17452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.944372][ T9] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1020.030864][T17452] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1020.048497][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.077010][T17452] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1020.851301][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.868490][T17452] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1020.910836][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.918013][T17452] usb 8-1: Manufacturer: syz [ 1020.941007][T17452] usb 8-1: config 0 descriptor?? [ 1020.955928][T17666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1020.982138][ T9] usb 7-1: invalid MIDI out EP 0 [ 1021.246815][T17452] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1021.827169][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1021.922782][ T9] usb 7-1: USB disconnect, device number 15 [ 1022.063342][ T9675] usb 5-1: USB disconnect, device number 85 [ 1022.355743][T17707] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3015'. [ 1022.497679][ T30] audit: type=1400 audit(1763740393.236:610): avc: denied { setopt } for pid=17704 comm="syz.8.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1022.826346][T17713] overlayfs: overlapping lowerdir path [ 1024.007901][ T9675] usb 8-1: USB disconnect, device number 18 [ 1024.274616][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1025.790464][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.801795][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1025.821550][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.831017][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.186373][T17446] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1026.254523][T17452] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1026.298790][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.315928][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.337072][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.347794][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.456297][T17452] usb 6-1: config 0 has no interfaces? [ 1026.467313][T17452] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1027.138406][T17452] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.160999][T17446] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1027.184995][T17446] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1027.209277][T17452] usb 6-1: Product: syz [ 1027.213452][T17452] usb 6-1: Manufacturer: syz [ 1027.262155][T17452] usb 6-1: SerialNumber: syz [ 1027.266875][T17446] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1027.297960][T17452] usb 6-1: config 0 descriptor?? [ 1027.332270][T17446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.393561][T17446] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1027.423236][T17446] usb 8-1: invalid MIDI out EP 0 [ 1027.520537][T17446] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1027.700769][T17754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3027'. [ 1027.730818][T17446] usb 5-1: USB disconnect, device number 86 [ 1028.406873][ C1] ================================================================== [ 1028.414963][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x80/0x90 [ 1028.423115][ C1] Read of size 8 at addr ffff888062f02c98 by task syz.8.3030/17774 [ 1028.431010][ C1] [ 1028.433337][ C1] CPU: 1 UID: 0 PID: 17774 Comm: syz.8.3030 Not tainted syzkaller #0 PREEMPT(full) [ 1028.433353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1028.433359][ C1] Call Trace: [ 1028.433366][ C1] [ 1028.433372][ C1] dump_stack_lvl+0x116/0x1f0 [ 1028.433386][ C1] print_report+0xcd/0x630 [ 1028.433401][ C1] ? __virt_addr_valid+0x81/0x610 [ 1028.433416][ C1] ? __phys_addr+0xe8/0x180 [ 1028.433430][ C1] ? timer_is_static_object+0x80/0x90 [ 1028.433443][ C1] kasan_report+0xe0/0x110 [ 1028.433454][ C1] ? timer_is_static_object+0x80/0x90 [ 1028.433468][ C1] timer_is_static_object+0x80/0x90 [ 1028.433480][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 1028.433499][ C1] debug_object_activate+0x326/0x4c0 [ 1028.433516][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1028.433531][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1028.433548][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1028.433562][ C1] ? lock_timer_base+0x127/0x1d0 [ 1028.433573][ C1] ? lock_timer_base+0x16c/0x1d0 [ 1028.433586][ C1] __mod_timer+0x814/0xd30 [ 1028.433596][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1028.433608][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1028.433616][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1028.433629][ C1] ? __timer_delete+0xf5/0x1c0 [ 1028.433643][ C1] ? __pfx___timer_delete+0x10/0x10 [ 1028.433659][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1028.433674][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1028.433686][ C1] add_timer+0x62/0x90 [ 1028.433695][ C1] call_timer_fn+0x19a/0x620 [ 1028.433704][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1028.433715][ C1] ? mark_held_locks+0x49/0x80 [ 1028.433725][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1028.433736][ C1] __run_timers+0x6ef/0x960 [ 1028.433747][ C1] ? __pfx___run_timers+0x10/0x10 [ 1028.433760][ C1] run_timer_base+0x114/0x190 [ 1028.433769][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1028.433779][ C1] run_timer_softirq+0x1a/0x40 [ 1028.433788][ C1] handle_softirqs+0x219/0x8e0 [ 1028.433803][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1028.433817][ C1] __irq_exit_rcu+0x109/0x170 [ 1028.433829][ C1] irq_exit_rcu+0x9/0x30 [ 1028.433841][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1028.433858][ C1] [ 1028.433861][ C1] [ 1028.433865][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1028.433877][ C1] RIP: 0010:lock_release+0x24/0x2f0 [ 1028.433887][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 39 ed 08 12 48 89 44 24 10 <31> c0 0f 1f 44 00 00 65 8b 05 52 ed 08 12 83 f8 07 0f 87 38 02 00 [ 1028.433898][ C1] RSP: 0018:ffffc9000c2ff438 EFLAGS: 00000292 [ 1028.433908][ C1] RAX: 38cbe6c9fcc61900 RBX: ffff8880413ed430 RCX: ffffc9000d9dd000 [ 1028.433915][ C1] RDX: 0000000000080000 RSI: ffffffff81ffd842 RDI: ffff8880413ed430 [ 1028.433922][ C1] RBP: 0000000000000342 R08: 0000000000000007 R09: 0000000000000000 [ 1028.433929][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81ffd842 [ 1028.433935][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880413ed418 [ 1028.433942][ C1] ? shmem_recalc_inode+0x172/0x1a0 [ 1028.433957][ C1] ? shmem_recalc_inode+0x172/0x1a0 [ 1028.433972][ C1] _raw_spin_unlock+0x16/0x50 [ 1028.433986][ C1] shmem_recalc_inode+0x172/0x1a0 [ 1028.434000][ C1] shmem_alloc_and_add_folio+0x82d/0xc20 [ 1028.434017][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1028.434032][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1028.434048][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 1028.434064][ C1] ? filemap_map_pages+0x11a2/0x1d50 [ 1028.434079][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1028.434094][ C1] ? filemap_map_pages+0x121f/0x1d50 [ 1028.434110][ C1] shmem_fault+0x1fe/0xa30 [ 1028.434125][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1028.434140][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1028.434210][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1028.434225][ C1] __do_fault+0x10d/0x490 [ 1028.434242][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1028.434256][ C1] do_pte_missing+0xf4a/0x3ba0 [ 1028.434270][ C1] ? find_held_lock+0x2b/0x80 [ 1028.434283][ C1] ? __handle_mm_fault+0x1529/0x2aa0 [ 1028.434298][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 1028.434313][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1028.434327][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1028.434339][ C1] ? find_held_lock+0x2b/0x80 [ 1028.434353][ C1] ? follow_page_pte+0x5cf/0x1390 [ 1028.434367][ C1] handle_mm_fault+0x589/0xd10 [ 1028.434384][ C1] __get_user_pages+0x54e/0x3530 [ 1028.434403][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1028.434426][ C1] populate_vma_page_range+0x267/0x3f0 [ 1028.434447][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1028.434465][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1028.434476][ C1] ? do_mmap+0x69c/0x1210 [ 1028.434488][ C1] __mm_populate+0x1d8/0x380 [ 1028.434501][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1028.434514][ C1] ? up_write+0x1b2/0x520 [ 1028.434525][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1028.434537][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1028.434550][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1028.434560][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1028.434571][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1028.434582][ C1] ? xfd_validate_state+0x61/0x180 [ 1028.434599][ C1] __x64_sys_mmap+0x125/0x190 [ 1028.434610][ C1] do_syscall_64+0xcd/0xfa0 [ 1028.434622][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.434633][ C1] RIP: 0033:0x7fc16db8f749 [ 1028.434643][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.434661][ C1] RSP: 002b:00007fc16eae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1028.434673][ C1] RAX: ffffffffffffffda RBX: 00007fc16dde5fa0 RCX: 00007fc16db8f749 [ 1028.434680][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1028.434687][ C1] RBP: 00007fc16dc13f91 R08: ffffffffffffffff R09: 0000000000003000 [ 1028.434694][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1028.434701][ C1] R13: 00007fc16dde6038 R14: 00007fc16dde5fa0 R15: 00007ffd726741f8 [ 1028.434711][ C1] [ 1028.434715][ C1] [ 1029.032350][ C1] Allocated by task 15642: [ 1029.036743][ C1] kasan_save_stack+0x33/0x60 [ 1029.041397][ C1] kasan_save_track+0x14/0x30 [ 1029.046048][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1029.050618][ C1] rose_rt_ioctl+0x880/0x2580 [ 1029.055267][ C1] rose_ioctl+0x64d/0x7c0 [ 1029.059578][ C1] sock_do_ioctl+0x118/0x280 [ 1029.064139][ C1] sock_ioctl+0x227/0x6b0 [ 1029.068440][ C1] __x64_sys_ioctl+0x18e/0x210 [ 1029.073190][ C1] do_syscall_64+0xcd/0xfa0 [ 1029.077680][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.083561][ C1] [ 1029.085861][ C1] Freed by task 0: [ 1029.089548][ C1] kasan_save_stack+0x33/0x60 [ 1029.094195][ C1] kasan_save_track+0x14/0x30 [ 1029.099450][ C1] __kasan_save_free_info+0x3b/0x60 [ 1029.104622][ C1] __kasan_slab_free+0x5f/0x80 [ 1029.109355][ C1] kfree+0x2b8/0x6d0 [ 1029.113232][ C1] rose_timer_expiry+0x53f/0x630 [ 1029.118159][ C1] call_timer_fn+0x19a/0x620 [ 1029.122716][ C1] __run_timers+0x6ef/0x960 [ 1029.127200][ C1] run_timer_base+0x114/0x190 [ 1029.131934][ C1] run_timer_softirq+0x1a/0x40 [ 1029.136673][ C1] handle_softirqs+0x219/0x8e0 [ 1029.141409][ C1] __irq_exit_rcu+0x109/0x170 [ 1029.146060][ C1] irq_exit_rcu+0x9/0x30 [ 1029.150275][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1029.155882][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1029.161846][ C1] [ 1029.164144][ C1] The buggy address belongs to the object at ffff888062f02c00 [ 1029.164144][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1029.178193][ C1] The buggy address is located 152 bytes inside of [ 1029.178193][ C1] freed 512-byte region [ffff888062f02c00, ffff888062f02e00) [ 1029.191973][ C1] [ 1029.194272][ C1] The buggy address belongs to the physical page: [ 1029.200651][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62f00 [ 1029.209381][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1029.217848][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1029.225369][ C1] page_type: f5(slab) [ 1029.229331][ C1] raw: 00fff00000000040 ffff88813ffa6c80 ffffea0001628c00 dead000000000002 [ 1029.237884][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1029.246439][ C1] head: 00fff00000000040 ffff88813ffa6c80 ffffea0001628c00 dead000000000002 [ 1029.255081][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1029.263721][ C1] head: 00fff00000000002 ffffea00018bc001 00000000ffffffff 00000000ffffffff [ 1029.272365][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1029.281005][ C1] page dumped because: kasan: bad access detected [ 1029.287387][ C1] page_owner tracks the page as allocated [ 1029.293071][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 755089056955, free_ts 754699270222 [ 1029.312138][ C1] post_alloc_hook+0x1af/0x220 [ 1029.316887][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 1029.322405][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1029.328272][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1029.333094][ C1] new_slab+0x24a/0x360 [ 1029.337229][ C1] ___slab_alloc+0xd79/0x1a50 [ 1029.341878][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 1029.347308][ C1] __kmalloc_cache_noprof+0x477/0x780 [ 1029.352670][ C1] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 1029.358192][ C1] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 1029.363972][ C1] batadv_iv_ogm_schedule_buff+0x9c2/0x14c0 [ 1029.369838][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1029.376836][ C1] process_one_work+0x9cf/0x1b70 [ 1029.381761][ C1] worker_thread+0x6c8/0xf10 [ 1029.386325][ C1] kthread+0x3c5/0x780 [ 1029.390364][ C1] ret_from_fork+0x675/0x7d0 [ 1029.394932][ C1] page last free pid 5871 tgid 5871 stack trace: [ 1029.401241][ C1] __free_frozen_pages+0x7df/0x1160 [ 1029.406444][ C1] vfree+0x1fd/0xb50 [ 1029.410328][ C1] delayed_vfree_work+0x56/0x70 [ 1029.415158][ C1] process_one_work+0x9cf/0x1b70 [ 1029.420066][ C1] worker_thread+0x6c8/0xf10 [ 1029.424634][ C1] kthread+0x3c5/0x780 [ 1029.428683][ C1] ret_from_fork+0x675/0x7d0 [ 1029.433245][ C1] ret_from_fork_asm+0x1a/0x30 [ 1029.437986][ C1] [ 1029.440285][ C1] Memory state around the buggy address: [ 1029.445892][ C1] ffff888062f02b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.453924][ C1] ffff888062f02c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.461969][ C1] >ffff888062f02c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.470008][ C1] ^ [ 1029.474849][ C1] ffff888062f02d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.482886][ C1] ffff888062f02d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.490937][ C1] ================================================================== [ 1029.498983][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1029.506158][ C1] CPU: 1 UID: 0 PID: 17774 Comm: syz.8.3030 Not tainted syzkaller #0 PREEMPT(full) [ 1029.515505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1029.525534][ C1] Call Trace: [ 1029.528788][ C1] [ 1029.531614][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1029.536180][ C1] vpanic+0x640/0x6f0 [ 1029.540144][ C1] panic+0xca/0xd0 [ 1029.543844][ C1] ? __pfx_panic+0x10/0x10 [ 1029.548238][ C1] ? end_report+0x4c/0x170 [ 1029.552628][ C1] ? rcu_is_watching+0x12/0xc0 [ 1029.557381][ C1] ? lock_release+0x201/0x2f0 [ 1029.562052][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1029.567211][ C1] check_panic_on_warn+0xab/0xb0 [ 1029.572150][ C1] end_report+0x107/0x170 [ 1029.576477][ C1] kasan_report+0xee/0x110 [ 1029.580872][ C1] ? timer_is_static_object+0x80/0x90 [ 1029.586234][ C1] timer_is_static_object+0x80/0x90 [ 1029.591460][ C1] lookup_object_or_alloc.part.0+0x420/0x590 [ 1029.597433][ C1] debug_object_activate+0x326/0x4c0 [ 1029.602706][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1029.608509][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1029.614305][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1029.619664][ C1] ? lock_timer_base+0x127/0x1d0 [ 1029.624587][ C1] ? lock_timer_base+0x16c/0x1d0 [ 1029.629508][ C1] __mod_timer+0x814/0xd30 [ 1029.633906][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1029.638553][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1029.643463][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1029.649069][ C1] ? __timer_delete+0xf5/0x1c0 [ 1029.653826][ C1] ? __pfx___timer_delete+0x10/0x10 [ 1029.659022][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1029.664204][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1029.669814][ C1] add_timer+0x62/0x90 [ 1029.673858][ C1] call_timer_fn+0x19a/0x620 [ 1029.678434][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1029.683534][ C1] ? mark_held_locks+0x49/0x80 [ 1029.688287][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1029.694018][ C1] __run_timers+0x6ef/0x960 [ 1029.698502][ C1] ? __pfx___run_timers+0x10/0x10 [ 1029.703502][ C1] run_timer_base+0x114/0x190 [ 1029.708168][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1029.713341][ C1] run_timer_softirq+0x1a/0x40 [ 1029.718076][ C1] handle_softirqs+0x219/0x8e0 [ 1029.722821][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1029.728095][ C1] __irq_exit_rcu+0x109/0x170 [ 1029.732748][ C1] irq_exit_rcu+0x9/0x30 [ 1029.736975][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1029.742613][ C1] [ 1029.745531][ C1] [ 1029.748446][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1029.754405][ C1] RIP: 0010:lock_release+0x24/0x2f0 [ 1029.759588][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 39 ed 08 12 48 89 44 24 10 <31> c0 0f 1f 44 00 00 65 8b 05 52 ed 08 12 83 f8 07 0f 87 38 02 00 [ 1029.779170][ C1] RSP: 0018:ffffc9000c2ff438 EFLAGS: 00000292 [ 1029.785210][ C1] RAX: 38cbe6c9fcc61900 RBX: ffff8880413ed430 RCX: ffffc9000d9dd000 [ 1029.793176][ C1] RDX: 0000000000080000 RSI: ffffffff81ffd842 RDI: ffff8880413ed430 [ 1029.801121][ C1] RBP: 0000000000000342 R08: 0000000000000007 R09: 0000000000000000 [ 1029.809077][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81ffd842 [ 1029.817020][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880413ed418 [ 1029.824965][ C1] ? shmem_recalc_inode+0x172/0x1a0 [ 1029.830158][ C1] ? shmem_recalc_inode+0x172/0x1a0 [ 1029.835333][ C1] _raw_spin_unlock+0x16/0x50 [ 1029.840000][ C1] shmem_recalc_inode+0x172/0x1a0 [ 1029.845014][ C1] shmem_alloc_and_add_folio+0x82d/0xc20 [ 1029.850629][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1029.856771][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1029.862642][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 1029.867823][ C1] ? filemap_map_pages+0x11a2/0x1d50 [ 1029.873103][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1029.878717][ C1] ? filemap_map_pages+0x121f/0x1d50 [ 1029.883984][ C1] shmem_fault+0x1fe/0xa30 [ 1029.888378][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1029.893302][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1029.898777][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1029.904221][ C1] __do_fault+0x10d/0x490 [ 1029.908545][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1029.913993][ C1] do_pte_missing+0xf4a/0x3ba0 [ 1029.918733][ C1] ? find_held_lock+0x2b/0x80 [ 1029.923384][ C1] ? __handle_mm_fault+0x1529/0x2aa0 [ 1029.928643][ C1] __handle_mm_fault+0x1556/0x2aa0 [ 1029.933734][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1029.939170][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 1029.944613][ C1] ? find_held_lock+0x2b/0x80 [ 1029.949265][ C1] ? follow_page_pte+0x5cf/0x1390 [ 1029.954263][ C1] handle_mm_fault+0x589/0xd10 [ 1029.959030][ C1] __get_user_pages+0x54e/0x3530 [ 1029.963957][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1029.969302][ C1] populate_vma_page_range+0x267/0x3f0 [ 1029.974735][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1029.980688][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1029.986468][ C1] ? do_mmap+0x69c/0x1210 [ 1029.990772][ C1] __mm_populate+0x1d8/0x380 [ 1029.995346][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1030.000460][ C1] ? up_write+0x1b2/0x520 [ 1030.004770][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1030.009336][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1030.014442][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1030.019363][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1030.024276][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 1030.028944][ C1] ? xfd_validate_state+0x61/0x180 [ 1030.034046][ C1] __x64_sys_mmap+0x125/0x190 [ 1030.038694][ C1] do_syscall_64+0xcd/0xfa0 [ 1030.043174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.049075][ C1] RIP: 0033:0x7fc16db8f749 [ 1030.053462][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.073046][ C1] RSP: 002b:00007fc16eae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1030.081433][ C1] RAX: ffffffffffffffda RBX: 00007fc16dde5fa0 RCX: 00007fc16db8f749 [ 1030.089379][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1030.097327][ C1] RBP: 00007fc16dc13f91 R08: ffffffffffffffff R09: 0000000000003000 [ 1030.105286][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1030.113231][ C1] R13: 00007fc16dde6038 R14: 00007fc16dde5fa0 R15: 00007ffd726741f8 [ 1030.121195][ C1] [ 1030.124421][ C1] Kernel Offset: disabled [ 1030.128733][ C1] Rebooting in 86400 seconds..