last executing test programs: 15.852484358s ago: executing program 2 (id=2269): syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) 13.308743825s ago: executing program 2 (id=2276): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x80000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x920000002404c0c1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) getpeername(r1, &(0x7f0000000200)=@hci, &(0x7f0000000300)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) recvfrom$inet(r5, &(0x7f0000000340)=""/148, 0x94, 0x2001, &(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 12.127056778s ago: executing program 4 (id=2278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x10, 0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 10.818333171s ago: executing program 4 (id=2280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (fail_nth: 2) 10.350188999s ago: executing program 0 (id=2282): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000a40)={&(0x7f0000000400)=[{0x9f1, 0x6810, 0x0, 0x0}], 0x1}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 10.204280579s ago: executing program 4 (id=2283): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd2, &(0x7f00000008c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00'], 0x48) r3 = socket(0x10, 0x400000000080803, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000200000fe80000000000000000000000000002cfe8000000000000000000000000000bb2f0200000000000004017f040100050204"], 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_pts(0xffffffffffffffff, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4000001) r5 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r5, 0x20000005) socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x4) kexec_load(0xf5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000700)=@newtaction={0x128, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x114, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x0, 0x0, 0x3}, 0x208}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x6c, 0x3ffe, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4}}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0xf, 0x0, 0x101, 0xfffffff8}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x3, 0xea3, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x128}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) 9.283928126s ago: executing program 4 (id=2284): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x3, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x5, 0x2f, &(0x7f00000022c0)=""/47, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x880, 0x9) finit_module(r2, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88), 0x0) pipe(&(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xad}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 9.203929726s ago: executing program 0 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000080ffffff00000a0000000000000000000000080001"], 0x24}}, 0x0) 8.594755349s ago: executing program 0 (id=2288): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103000000000009050203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x80, @tick=0x1, 0x6, {0xfb, 0x6}, 0x1, 0x2, 0x40}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x6e9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x20) 8.53201361s ago: executing program 4 (id=2289): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103000000000009050203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x80, @tick=0x1, 0x6, {0xfb, 0x6}, 0x1, 0x2, 0x40}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x6e9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x20) 8.383907517s ago: executing program 1 (id=2290): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000202da2da08dcf32f950000f31e8a572d046497e0c9b595d5e1c870c444e7609eb4b2082ba0d10fc45a998f21e8de88bf836b1c393ce9bd103381945b74943d252e87471ff796413de1166d03d02aab2336e443b96f52fd8efb9e280dd30435f3b2ec2773eef0ed0392098cf1bea6c81c91edeb3816ea497afbee66d7"]) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe0806000108"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES8=r1], 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x485d}, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8c0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "b8c1e6"}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 8.040440937s ago: executing program 1 (id=2291): r0 = open(&(0x7f0000000000)='.\x00', 0xc202, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}}, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r4, 0x9, "1c5665", "33aa6e74aefcc8f6f955e24804e83062186954b9267d4e6271c3ea4c32bcef2493fb49978f106275967735fedcb8dfd1bf019f15a64938d9c9c6b17f41097c276d55c23876f93aa2df816ebcf2c8d42c6eec432d226f912fd923bbc5951ebd2e2053787a594f7e0f1b94d06b72164385269dc87788691c3248b7fc160d9de9f68b9016a6b4dd84d39b193ed1c23447f485ae8a8b020fc904f5fe3a0e85eaad314ed18cfe0935186d859709e6ce8c65858d30a4015a9b9bc21f370f0c2eae01bfde5978402a23c9ec00d397db93b010d7186953e5539ebfe4a568212233ab4403da43510a1dd5f4059b7dedcaa87d774c795f5e05118dc8ac8d1f37986d06d1e4"}}, 0x110) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="1b", 0x1}], 0x1, 0x0) r8 = socket$inet(0x2, 0x803, 0x8) splice(r1, 0x0, r8, 0x0, 0x8000, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) pread64(r0, &(0x7f0000000040)=""/84, 0x54, 0x401) r9 = socket(0x840000000002, 0x3, 0xf8) sendmmsg$inet(r9, &(0x7f0000004b40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x3}}], 0x18}}], 0x1, 0x0) 7.701576713s ago: executing program 1 (id=2293): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x5d8, 0x1, 0x3, 0x7, 0x9, 0x8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x9, 0xff, 0x0, @private2, @mcast2, {[], "223427d5c9a46b9fa1"}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00'], 0x24}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x1fe) close(r5) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@noop, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)}], 0x0, 0x0, 0x8, 0x4008008}, 0x4000) close(0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, &(0x7f00000001c0)={0x20000000}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0xd, 0x3, 0x2c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0x2, {0x2, 0x9}}, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x3, 0xfd, "3fe7866f", "c7294941"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x3, 0x0, 0x7, 0x9, 0x3, 0xeb1}}}, &(0x7f00000007c0)={0x84, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x40}, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x800, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x81}, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="1b91a8dd769f"}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "fd49"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$printer(r8, &(0x7f0000000a80)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="2023b5000000b50f7279fe0f18d47d0879cf4664c7d7eda50a4f1fb3fc3da4a5adbf619f5f77742b9e2608644389c6a8134993516d8d3d248935a5e1d4d446bc9cd6cfa1486b37b31d8cf2acc20c2ad53b3048c922ca6f82d704ff138a1c7735a2b3035eaae3c0bb30c18a0cd7e9786f1718f3380a50a76eae55757aaf0400000000000000885f1cec451a8a51d72b16e51825a978a97527db40e5e9791857d7d608cb19f6bc8361a7b50a1ccf3d3393a3d42754a43695ce1b775d"], &(0x7f0000000980)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "89fd598ce73c3ad7b425102707c1aa1090787d78bedb3f15854729b19acf7b7d9376c677034d74572ba6af4622d5877b7bdcd9fb37ccd4934f75200ef287841376087b8c088396f564ccb8a1e516b97ec8a3bd359276b8ed2625493f8f4eef3240a8e8ea93496906732b758c67432eecea640019e29921d82b42e06bab1d0218b309a8726450890eb0a0a2c60fb4c7ebf831fa7a2bb8f131d74b1e69123e"}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x40, 0x15}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x63}, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x7}}) r9 = io_uring_setup(0x79bc, &(0x7f0000000140)={0x0, 0x4, 0x40c0, 0x4, 0x376}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 4.820294456s ago: executing program 0 (id=2295): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000a40)={&(0x7f0000000400)=[{0x9f1, 0x6810, 0x0, 0x0}], 0x1}) mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{'ac,'}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 3.997847897s ago: executing program 3 (id=2296): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x43) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000973708005000010", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x5, 0x1c902) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) close(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.976014709s ago: executing program 2 (id=2297): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x121400) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000040)=[{0x9, 0x2200, 0x0, 0x0}, {0x26f, 0x1, 0x0, 0x0}], 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]]}, 0x2c}}, 0x0) poll(0x0, 0x0, 0x100) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/275, 0x113}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/99, 0x63}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xffffd000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, 0xb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000040)={0x2, 0x8000}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0x3, 0x4, 0x2, 0x8, 0x5, 0x57d7, 0x2]}, 0x12) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x7, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) sendmsg$inet(r10, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.239580427s ago: executing program 4 (id=2298): sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '$)/)\xab/-*'}, {0x20, '^\xce\x8f\x99\xd6\xc3\x1d\x16\xd2\xe2\x1d\n\x7f\x99$\xa5\xf6\xc3\xb6W_\xae\xff\x1d\x13\x9c\x1a\xf3\a\x00\x00\x00\x00\x00\x00\x00\'F\xd5\x9d\x11\x93\'{\x99\x9b\xdeg\x9f\xcc|\x9f<\xf2\b}\xc4cX\x8cX\x7f\xe6\x8f\xeb\x19\x8f\x1c\xbbO\xc3\x0fI \xbe\x85b7\x81{a\x1b\xa6\xbb\xe0o\xed\x94\xf5'}], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0xa8) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x8, 0x7f, 0x9}}, 0xa) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100000000"], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044082, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000b14000826bd7000ffdbdf254900010001000000080003000400000008ff0100000000458e710001000000000000020000000800030000000000080001000000000008003f000400000033b208beb2f75ee7792dd6c5be7b44e2e6a5c9c975c322c60c427593a48256f64482300e029ae99c1f1326dfea56996bf2f7389e931f7f81f772527891466eb6da1dce314bf3b173a04eddd99cedc02316a384f15847b1c69f1389ac6d16c2717d4642e89dba68db4ec2a066e59702dcfd231dc055cfb48abd9fd535a6b0c855c444c29a1117373b6fa5c6f1965cb53ac4fc0cb8d613a9192785f8223c40e2021c5bd5cf7b91ca88002521563906ef827bbd28d037d94358504b0150773baacca2beddf71382"], 0x48}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010) read$msr(r3, &(0x7f0000000980)=""/98, 0x62) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) 3.175514651s ago: executing program 3 (id=2299): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x56, 0x201, 0xfffffffd, 0x0, {0xa}}, 0x14}}, 0x40044c4) (fail_nth: 1) 2.64387041s ago: executing program 3 (id=2300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/50, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(0x4) shmctl$SHM_INFO(0x0, 0xe, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x2, @short={0x2, 0x1, 0xaaa3}}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 2.627729982s ago: executing program 2 (id=2301): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) setresuid(0x0, 0xee00, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 2.531332554s ago: executing program 1 (id=2302): gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000202da2da08dcf32f950000f31e8a572d046497e0c9b595d5e1c870c444e7609eb4b2082ba0d10fc45a998f21e8de88bf836b1c393ce9bd103381945b74943d252e87471ff796413de1166d03d02aab2336e443b96f52fd8efb9e280dd30435f3b2ec2773eef0ed0392098cf1bea6c81c91edeb3816ea497afbee66d7"]) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe0806000108"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES8=r1], 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x485d}, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8c0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "b8c1e6"}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) 1.843428939s ago: executing program 2 (id=2303): epoll_create(0x207ffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3e, 0x229, 0x1000000, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000000100000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x4080000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), {0xf}, &(0x7f0000000180)=""/30, 0x1e, &(0x7f0000000240)=""/22, &(0x7f0000000280)=[0x0], 0x1}, 0x58) pidfd_send_signal(r6, 0xf, &(0x7f00000003c0)={0x23, 0xf, 0x8}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) readv(r7, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) r8 = socket(0x1e, 0x1, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x3000000, 0x10, 0xffffffffffffffff, 0x83000000) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000400), 0x2000011a) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000580)) recvmmsg$unix(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20012140, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) 1.679267763s ago: executing program 3 (id=2304): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0x8, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0x935, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1fb, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) userfaultfd(0x80001) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1.597699105s ago: executing program 0 (id=2305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0xd931d3864d39dcca) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x351}, 0x0, &(0x7f0000000080)) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x0) 1.526201353s ago: executing program 1 (id=2306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = dup(r1) mmap$xdp(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x8, 0x8030, r2, 0x180000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="baa10066ed660fc7310f01d4b804008ec0ba4100ec0fc71c0fae240f01c82e0f0f8234f28aba4100b80c9cef", 0x2c}], 0x1, 0x1d, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f20a7c744240097000000c744240212a10000c7442406000000000f01142466baf80cb85e688a87ef66bafc0cb0aaee640f090fc73f0f22d6440f20c03505000000440f22c066b816010f00d00f011a8fc9b801a46c02000000", 0x5a}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000540)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x65, 0x0, 0xffffffffffff47c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x63ca8286, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffbfffffffffc, 0x10006, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfeb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000001, 0x73fb, 0x0, 0x0, 0x0, 0x2, 0xb7a5, 0xff, 0x3, 0xfffffffffffffffc]}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.46009425s ago: executing program 2 (id=2307): sched_setscheduler(0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '$)/)\xab/-*'}, {0x20, '^\xce\x8f\x99\xd6\xc3\x1d\x16\xd2\xe2\x1d\n\x7f\x99$\xa5\xf6\xc3\xb6W_\xae\xff\x1d\x13\x9c\x1a\xf3\a\x00\x00\x00\x00\x00\x00\x00\'F\xd5\x9d\x11\x93\'{\x99\x9b\xdeg\x9f\xcc|\x9f<\xf2\b}\xc4cX\x8cX\x7f\xe6\x8f\xeb\x19\x8f\x1c\xbbO\xc3\x0fI \xbe\x85b7\x81{a\x1b\xa6\xbb\xe0o\xed\x94\xf5'}], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0xa8) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x8, 0x7f, 0x9}}, 0xa) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff8100000000"], 0x30}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044082, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000b14000826bd7000ffdbdf254900010001000000080003000400000008ff0100000000458e710001000000000000020000000800030000000000080001000000000008003f000400000033b208beb2f75ee7792dd6c5be7b44e2e6a5c9c975c322c60c427593a48256f64482300e029ae99c1f1326dfea56996bf2f7389e931f7f81f772527891466eb6da1dce314bf3b173a04eddd99cedc02316a384f15847b1c69f1389ac6d16c2717d4642e89dba68db4ec2a066e59702dcfd231dc055cfb48abd9fd535a6b0c855c444c29a1117373b6fa5c6f1965cb53ac4fc0cb8d613a9192785f8223c40e2021c5bd5cf7b91ca88002521563906ef827bbd28d037d94358504b0150773baacca2beddf71382"], 0x48}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010) read$msr(r3, &(0x7f0000000980)=""/98, 0x62) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) 825.932052ms ago: executing program 3 (id=2308): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x80042, 0x7, 0x1}, 0x10) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000100)=0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0x5101, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000180)={0x4}) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="140000001e007f039e", 0x9}, {&(0x7f0000000140)="78cafb73fc020107000000", 0xb}], 0x2}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 527.524988ms ago: executing program 1 (id=2309): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000000)=0x7ffd, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db00000000aa37a0ef8da65697e4298d1e02dce0eb8c6b105d9600fdff0000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000010000000000008000", [0x800]}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000280)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1) mlockall(0x6) brk(0x689d80000000) 332.08703ms ago: executing program 0 (id=2310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'bridge0\x00', 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) r10 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@access_client}, {@access_user}, {@aname={'aname', 0x3d, '{*k@#,'}}, {@cache_none}, {@posixacl}, {@loose}, {@dfltuid={'dfltuid', 0x3d, r9}}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'trans=fd,'}}]}}) setsockopt$ax25_int(r6, 0x101, 0x6, &(0x7f0000000280), 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0xe348, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x36}}, 0x78e, 0x800, 0x8, 0x40, 0x2}, &(0x7f00000009c0)=0x98) 0s ago: executing program 3 (id=2311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4}], {0x95, 0x0, 0x0, 0x7000000}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): strings: Mfr=0, Product=0, SerialNumber=0 [ 712.912827][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 712.912847][ T30] audit: type=1326 audit(1744648858.276:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 713.268405][ T24] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 713.366944][ T30] audit: type=1326 audit(1744648858.276:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 713.450572][ T30] audit: type=1326 audit(1744648858.276:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 713.616664][ T30] audit: type=1326 audit(1744648858.285:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 713.638679][ T30] audit: type=1326 audit(1744648858.285:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 713.660681][ T30] audit: type=1326 audit(1744648858.285:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8f087 code=0x7ffc0000 [ 713.690247][ T30] audit: type=1326 audit(1744648858.285:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f00f7f8effc code=0x7ffc0000 [ 714.744105][ T30] audit: type=1326 audit(1744648858.285:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 714.782832][ T30] audit: type=1326 audit(1744648858.285:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 714.876896][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.253420][ T24] usb 4-1: config 0 has no interface number 0 [ 715.480226][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 715.612976][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.830789][ T24] usb 4-1: config 0 descriptor?? [ 715.896632][ T30] audit: type=1326 audit(1744648858.285:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11812 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f7f8bdca code=0x7ffc0000 [ 715.943500][ T24] usb 4-1: selecting invalid altsetting 1 [ 715.984144][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 715.998912][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 716.147246][ T10] usbhid 3-1:7.0: can't add hid device: -71 [ 716.154879][ T10] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 716.179967][ T10] usb 3-1: USB disconnect, device number 32 [ 716.289087][ T24] DVB: Unable to find symbol cx22700_attach() [ 716.472034][T11829] IPVS: persistence engine module ip_vs_pe_ not found [ 717.783853][ T24] DVB: Unable to find symbol tda10046_attach() [ 717.791412][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 718.435073][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 718.435095][ T30] audit: type=1326 audit(1744648862.953:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 718.668957][ T24] usb 4-1: USB disconnect, device number 27 [ 718.720937][ T30] audit: type=1326 audit(1744648862.953:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 718.742656][ T30] audit: type=1326 audit(1744648862.953:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 718.764595][ T30] audit: type=1326 audit(1744648862.953:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 718.786443][ T30] audit: type=1326 audit(1744648862.953:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 718.809592][ T30] audit: type=1326 audit(1744648862.962:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578f087 code=0x7ffc0000 [ 719.014529][ T30] audit: type=1326 audit(1744648862.962:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3db578effc code=0x7ffc0000 [ 719.040920][ T30] audit: type=1326 audit(1744648862.962:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 719.068226][ T30] audit: type=1326 audit(1744648862.962:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 719.363726][ T30] audit: type=1326 audit(1744648862.962:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11838 comm="syz.4.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3db578bdca code=0x7ffc0000 [ 723.934772][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 723.977015][T11878] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 724.055051][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 724.278553][T11882] tmpfs: Unknown parameter '/tKg(' [ 725.159124][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 725.661591][ T5916] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 725.676931][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 725.687575][ T5916] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.700668][ T5916] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.719158][ T5916] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 725.815596][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.322673][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 727.492037][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.758719][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.779590][ T10] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 727.882493][ T5916] usb 2-1: usb_control_msg returned -71 [ 727.888163][ T5916] usbtmc 2-1:16.0: can't read capabilities [ 727.894436][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.902467][ T10] usb 5-1: Product: syz [ 727.912200][ T10] usb 5-1: Manufacturer: syz [ 727.923407][ T10] usb 5-1: SerialNumber: syz [ 727.928715][ T5916] usb 2-1: USB disconnect, device number 33 [ 727.940044][ T10] usb 5-1: config 0 descriptor?? [ 728.352377][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 728.352398][ T30] audit: type=1326 audit(1744648872.690:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 728.993580][ T30] audit: type=1326 audit(1744648872.690:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 729.182850][ T30] audit: type=1326 audit(1744648872.690:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 729.212680][ T30] audit: type=1326 audit(1744648872.690:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 729.281962][ T5841] usb 5-1: USB disconnect, device number 39 [ 729.428729][ T30] audit: type=1326 audit(1744648872.690:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 729.631028][ T30] audit: type=1326 audit(1744648872.690:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38f087 code=0x7ffc0000 [ 729.706920][ T30] audit: type=1326 audit(1744648872.690:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff14e38effc code=0x7ffc0000 [ 729.907388][ T30] audit: type=1326 audit(1744648872.699:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 730.053685][ T30] audit: type=1326 audit(1744648872.699:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 731.045307][ T30] audit: type=1326 audit(1744648872.699:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11908 comm="syz.2.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff14e38bdca code=0x7ffc0000 [ 731.135559][T11928] blktrace: Concurrent blktraces are not allowed on nullb0 [ 731.218358][T11929] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 732.113882][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'. [ 732.175595][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'. [ 732.189794][T11932] dummy0: entered promiscuous mode [ 732.195990][T11932] team0: entered promiscuous mode [ 732.202389][T11932] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 732.210101][T11932] Cannot create hsr debugfs directory [ 732.215878][T11932] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 732.657052][T11930] delete_channel: no stack [ 734.062426][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 734.190745][T11954] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 735.460551][T11958] tmpfs: Unknown parameter '/tKg(' [ 735.751497][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 735.952139][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.975079][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 735.997018][T10571] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 736.010805][ T24] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 736.027130][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.049222][ T24] usb 4-1: Product: syz [ 736.065957][ T24] usb 4-1: Manufacturer: syz [ 736.081565][ T24] usb 4-1: SerialNumber: syz [ 736.093580][ T24] usb 4-1: config 0 descriptor?? [ 736.183044][T10571] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 736.203630][T10571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.240259][T10571] usb 5-1: config 0 descriptor?? [ 736.263170][T10571] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 736.481177][T10571] gp8psk: usb in 128 operation failed. [ 736.785911][T10571] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 737.054620][T10571] gp8psk: usb in 149 operation failed. [ 737.173091][T10571] gp8psk: failed to get FPGA version [ 737.251179][ T5916] usb 4-1: USB disconnect, device number 28 [ 737.303188][T10571] gp8psk: usb in 138 operation failed. [ 737.488423][T10571] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 737.508203][T10571] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 737.693220][T10571] usb 5-1: USB disconnect, device number 40 [ 738.615798][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 738.615820][ T30] audit: type=1326 audit(1744648882.278:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 738.910108][ T30] audit: type=1326 audit(1744648882.278:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 739.174729][ T30] audit: type=1326 audit(1744648882.278:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 739.206231][ T30] audit: type=1326 audit(1744648882.278:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 739.335715][ T30] audit: type=1326 audit(1744648882.278:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 739.471088][ T30] audit: type=1326 audit(1744648882.278:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158f087 code=0x7ffc0000 [ 739.525972][ T30] audit: type=1326 audit(1744648882.278:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6af158effc code=0x7ffc0000 [ 739.655106][ T30] audit: type=1326 audit(1744648882.287:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 740.415509][ T30] audit: type=1326 audit(1744648882.287:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 740.441359][ T30] audit: type=1326 audit(1744648882.287:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6af158bdca code=0x7ffc0000 [ 740.551753][ T5916] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 740.777664][T12032] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 740.785562][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1755'. [ 740.852551][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.880957][ T5916] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.918778][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 740.928929][T12038] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 740.941829][ T5916] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 741.153368][T12040] kAFS: No cell specified [ 741.159114][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 741.367935][T12043] tmpfs: Unknown parameter '/tKg(' [ 741.937153][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.946699][T12032] team0: Port device geneve0 added [ 741.952532][ T5916] usb 1-1: Product: syz [ 741.961522][ T5916] usb 1-1: Manufacturer: syz [ 741.966417][ T5916] usb 1-1: SerialNumber: syz [ 742.231117][ T5916] usb 1-1: config 0 descriptor?? [ 743.394114][T12067] netlink: 'syz.2.1763': attribute type 4 has an invalid length. [ 743.402569][T12067] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1763'. [ 744.272190][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 744.272214][ T30] audit: type=1326 audit(1744648887.460:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 745.136988][ T30] audit: type=1326 audit(1744648887.460:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 745.174347][ T30] audit: type=1326 audit(1744648887.600:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 745.397564][ T30] audit: type=1326 audit(1744648887.600:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 745.427630][ T10] usb 1-1: USB disconnect, device number 25 [ 745.575302][ T30] audit: type=1326 audit(1744648887.600:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 745.680115][ T30] audit: type=1326 audit(1744648887.713:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578f087 code=0x7ffc0000 [ 745.699909][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 745.730989][T12087] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 745.736687][ T30] audit: type=1326 audit(1744648887.713:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3db578effc code=0x7ffc0000 [ 745.777694][ T30] audit: type=1326 audit(1744648887.713:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 745.818229][ T30] audit: type=1326 audit(1744648887.713:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 746.076338][T12096] tmpfs: Unknown parameter '/tKg(' [ 746.879959][ T30] audit: type=1326 audit(1744648887.713:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3db578bdca code=0x7ffc0000 [ 748.183753][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 748.191592][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 748.357735][T12119] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1781'. [ 748.368638][ T5876] usb 2-1: device descriptor read/64, error -32 [ 749.639143][ T5876] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 749.658428][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 749.695819][T12135] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 749.800356][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.818584][ T5876] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 749.841690][ T5876] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 749.851204][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.864068][ T5876] usb 2-1: Product: syz [ 749.900116][ T5876] usb 2-1: Manufacturer: syz [ 749.925531][ T5876] usb 2-1: SerialNumber: syz [ 749.963636][ T5876] usb 2-1: config 0 descriptor?? [ 750.071714][T12140] tmpfs: Unknown parameter '/tKg(' [ 751.018553][ T24] usb 2-1: USB disconnect, device number 35 [ 751.444586][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 751.450735][T12130] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 757.077908][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 757.077932][ T30] audit: type=1326 audit(1744648897.048:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 757.107002][ T30] audit: type=1326 audit(1744648897.048:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 757.534564][ T30] audit: type=1326 audit(1744648897.226:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 757.724467][ T30] audit: type=1326 audit(1744648897.226:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 757.823600][ T30] audit: type=1326 audit(1744648897.226:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 757.915463][ T30] audit: type=1326 audit(1744648897.338:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382f98f087 code=0x7ffc0000 [ 757.934210][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 757.989046][ T30] audit: type=1326 audit(1744648897.338:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f382f98effc code=0x7ffc0000 [ 757.997872][T12189] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 758.040255][ T30] audit: type=1326 audit(1744648897.338:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f382f98ef34 code=0x7ffc0000 [ 758.104793][ T30] audit: type=1326 audit(1744648897.338:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f382f98ef34 code=0x7ffc0000 [ 758.145428][ T30] audit: type=1326 audit(1744648897.338:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f382f98bdca code=0x7ffc0000 [ 758.361862][T12189] tmpfs: Unknown parameter '/tKg(' [ 759.419624][ T5876] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 759.520277][T12220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1814'. [ 759.571880][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 761.565080][ T5876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.587044][ T5876] usb 4-1: config 0 has no interface number 0 [ 761.593386][ T5876] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 762.047057][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 762.562674][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 762.562697][ T30] audit: type=1326 audit(1744648904.391:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 762.639711][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.697718][ T5876] usb 4-1: config 0 descriptor?? [ 762.720790][ T30] audit: type=1326 audit(1744648904.391:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 762.763933][ T5876] usb 4-1: can't set config #0, error -71 [ 762.804829][ T5876] usb 4-1: USB disconnect, device number 29 [ 762.925766][ T30] audit: type=1326 audit(1744648904.391:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.018448][ T30] audit: type=1326 audit(1744648904.475:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.041543][ T30] audit: type=1326 audit(1744648904.475:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.065052][ T30] audit: type=1326 audit(1744648904.475:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.087836][ T30] audit: type=1326 audit(1744648904.494:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.219714][ T30] audit: type=1326 audit(1744648904.494:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.316693][ T30] audit: type=1326 audit(1744648904.503:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.360336][ T30] audit: type=1326 audit(1744648904.503:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 763.571811][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 763.580911][T12252] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 763.923647][T12256] tmpfs: Unknown parameter '/tKg(' [ 764.574324][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.580717][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.304767][ T976] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 766.378379][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1804'. [ 766.478571][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.535500][ T976] usb 4-1: config 0 has no interface number 0 [ 766.563649][ T976] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 766.577950][T12280] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 766.592770][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.609198][T12280] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 766.617331][T12280] netlink: 'syz.4.1804': attribute type 3 has an invalid length. [ 766.629266][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 766.655207][ T976] usb 4-1: config 0 descriptor?? [ 767.663603][ T976] usb 4-1: selecting invalid altsetting 1 [ 767.695070][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 767.701668][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 768.210781][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 768.210796][ T30] audit: type=1326 audit(1744648910.041:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 768.275542][ T30] audit: type=1326 audit(1744648910.041:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 768.275575][ T976] DVB: Unable to find symbol cx22700_attach() [ 768.340515][ T30] audit: type=1326 audit(1744648910.041:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 768.409448][ T976] DVB: Unable to find symbol tda10046_attach() [ 768.417715][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 768.427418][ T30] audit: type=1326 audit(1744648910.041:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158f087 code=0x7ffc0000 [ 768.469567][ T976] usb 4-1: USB disconnect, device number 30 [ 769.064656][ T30] audit: type=1326 audit(1744648910.041:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6af158effc code=0x7ffc0000 [ 769.226253][ T30] audit: type=1326 audit(1744648910.041:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 769.396821][ T30] audit: type=1326 audit(1744648910.041:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 769.419783][ T30] audit: type=1326 audit(1744648910.041:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6af158bdca code=0x7ffc0000 [ 769.473781][ T30] audit: type=1326 audit(1744648910.041:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 769.507088][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 769.518816][T12304] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 769.530625][ T30] audit: type=1326 audit(1744648910.041:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12267 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 769.845959][T12311] tmpfs: Unknown parameter '/tKg(' [ 772.118918][T12329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1845'. [ 772.137191][T12329] netlink: 'syz.0.1845': attribute type 1 has an invalid length. [ 772.169444][T12329] netlink: 'syz.0.1845': attribute type 2 has an invalid length. [ 772.185572][T12329] netlink: 'syz.0.1845': attribute type 3 has an invalid length. [ 772.193587][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 772.504358][T12333] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1848'. [ 774.068347][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 774.083631][T12348] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 774.087451][T10571] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 774.734438][T12355] tmpfs: Unknown parameter '/tKg(' [ 774.934295][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 774.934315][ T30] audit: type=1326 audit(1744648915.747:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 775.273269][ T30] audit: type=1326 audit(1744648915.747:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 775.355863][ T30] audit: type=1326 audit(1744648915.756:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 775.378477][ T30] audit: type=1326 audit(1744648915.756:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 775.400836][ T30] audit: type=1326 audit(1744648915.756:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 775.616658][T10571] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 775.624788][ T30] audit: type=1326 audit(1744648915.756:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8f087 code=0x7ffc0000 [ 775.624918][ T30] audit: type=1326 audit(1744648915.765:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f00f7f8effc code=0x7ffc0000 [ 775.625140][ T30] audit: type=1326 audit(1744648915.765:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 775.625331][ T30] audit: type=1326 audit(1744648915.765:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 775.625550][ T30] audit: type=1326 audit(1744648915.765:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12345 comm="syz.1.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f7f8bdca code=0x7ffc0000 [ 776.149829][T10571] usb 5-1: config 0 has no interface number 0 [ 776.163121][T10571] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 776.177250][T10571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.202327][T10571] usb 5-1: config 0 descriptor?? [ 776.218335][T10571] usb 5-1: selecting invalid altsetting 1 [ 776.230315][T10571] dvb_ttusb_budget: ttusb_init_controller: error [ 776.240902][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1857'. [ 776.250740][T12365] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 776.258936][T12365] netlink: 'syz.3.1857': attribute type 2 has an invalid length. [ 776.274476][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1856'. [ 776.285356][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1856'. [ 776.295651][T12365] netlink: 'syz.3.1857': attribute type 3 has an invalid length. [ 776.304002][T10571] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 776.313441][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 776.375058][T12369] syz_tun: entered allmulticast mode [ 776.420999][T12367] syz_tun: left allmulticast mode [ 776.440218][T10571] DVB: Unable to find symbol cx22700_attach() [ 776.515824][T12374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1859'. [ 777.053750][T12362] delete_channel: no stack [ 777.487934][T10571] DVB: Unable to find symbol tda10046_attach() [ 777.494135][T10571] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 777.504394][T10571] usb 5-1: USB disconnect, device number 41 [ 780.353017][T12401] tmpfs: Unknown parameter '/tKg(' [ 780.752831][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1869'. [ 780.761977][T12406] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 780.787323][T12406] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 780.798509][T12406] netlink: 'syz.4.1869': attribute type 3 has an invalid length. [ 780.810525][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 781.102207][T12415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1871'. [ 783.354940][ T5916] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 783.568989][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 783.578711][ T5916] usb 4-1: config 0 has no interface number 0 [ 783.625984][ T5916] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 783.733562][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.759020][ T5916] usb 4-1: config 0 descriptor?? [ 784.109522][ T5916] usb 4-1: selecting invalid altsetting 1 [ 784.316207][ T5916] dvb_ttusb_budget: ttusb_init_controller: error [ 784.450249][ T5916] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 784.608935][ T5916] DVB: Unable to find symbol cx22700_attach() [ 785.025979][ T5916] DVB: Unable to find symbol tda10046_attach() [ 785.032280][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 785.735245][ T5916] usb 4-1: USB disconnect, device number 31 [ 785.844234][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 785.868586][T12459] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 786.101297][T10571] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 786.244726][T12468] tmpfs: Unknown parameter '/tKg(' [ 786.409728][T10571] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.998153][T10571] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.019047][T10571] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 787.047109][T10571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.058104][T10571] usb 5-1: Product: syz [ 787.062802][T10571] usb 5-1: Manufacturer: syz [ 787.068110][T10571] usb 5-1: SerialNumber: syz [ 787.539310][T12472] Invalid ELF header magic: != ELF [ 787.555605][T10571] usb 5-1: config 0 descriptor?? [ 788.919577][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 788.919600][ T30] audit: type=1326 audit(1744648928.945:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 789.112931][ T976] usb 5-1: USB disconnect, device number 42 [ 789.137850][ T30] audit: type=1326 audit(1744648928.945:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 789.252984][ T30] audit: type=1326 audit(1744648928.945:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 789.274596][ T30] audit: type=1326 audit(1744648928.945:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 789.354253][ T30] audit: type=1326 audit(1744648928.945:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382f98d169 code=0x7ffc0000 [ 789.672419][ T30] audit: type=1326 audit(1744648928.964:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f382f98f087 code=0x7ffc0000 [ 789.778388][T12483] Invalid ELF header magic: != ELF [ 789.803463][ T30] audit: type=1326 audit(1744648928.964:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f382f98effc code=0x7ffc0000 [ 790.069539][ T30] audit: type=1326 audit(1744648928.964:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f382f98ef34 code=0x7ffc0000 [ 790.132430][ T30] audit: type=1326 audit(1744648928.964:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f382f98ef34 code=0x7ffc0000 [ 790.165450][ T30] audit: type=1326 audit(1744648928.964:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12473 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f382f98bdca code=0x7ffc0000 [ 790.531974][ T976] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 791.897973][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 791.927819][ T976] usb 4-1: config 0 has no interface number 0 [ 791.971182][ T976] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 791.990779][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.003355][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 792.021880][ T976] usb 4-1: config 0 descriptor?? [ 792.034371][T12507] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 792.056482][ T976] usb 4-1: selecting invalid altsetting 1 [ 792.280489][ T976] dvb_ttusb_budget: ttusb_init_controller: error [ 792.287151][ T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 792.416831][T12525] tmpfs: Unknown parameter '/tKg(' [ 793.298796][ T5841] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 793.874294][ T5841] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 793.940225][ T976] DVB: Unable to find symbol cx22700_attach() [ 793.946378][ T5841] usb 2-1: config 16 interface 0 has no altsetting 0 [ 793.957213][ T5841] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 793.989877][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.039727][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 794.260075][ T5841] usb 2-1: string descriptor 0 read error: -71 [ 794.261081][ T976] DVB: Unable to find symbol tda10046_attach() [ 794.270406][ T5841] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 794.274844][T12534] netlink: 'syz.3.1904': attribute type 5 has an invalid length. [ 794.286043][ T5841] imon 2-1:16.0: unable to initialize intf0, err -19 [ 794.296401][ T5841] imon:imon_probe: failed to initialize context! [ 794.369489][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 794.369506][ T30] audit: type=1326 audit(1744648934.501:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 794.450255][ T5841] imon 2-1:16.0: unable to register, err -19 [ 794.567801][ T5841] usb 2-1: USB disconnect, device number 36 [ 794.842774][ T30] audit: type=1326 audit(1744648934.501:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 795.017701][ T30] audit: type=1326 audit(1744648934.501:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 795.151436][ T30] audit: type=1326 audit(1744648934.501:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 795.257635][ T30] audit: type=1326 audit(1744648934.501:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 795.267335][ T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 795.308739][ T976] usb 4-1: USB disconnect, device number 32 [ 795.481927][ T30] audit: type=1326 audit(1744648934.501:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38f087 code=0x7ffc0000 [ 795.510651][ T30] audit: type=1326 audit(1744648934.501:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff14e38effc code=0x7ffc0000 [ 795.544408][ T30] audit: type=1326 audit(1744648934.501:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 795.711269][ T30] audit: type=1326 audit(1744648934.511:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 795.762561][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 795.872286][T12556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1911'. [ 796.420879][ T30] audit: type=1326 audit(1744648934.511:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12530 comm="syz.2.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff14e38bdca code=0x7ffc0000 [ 796.534633][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 796.544553][T12563] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 797.016089][T12566] tmpfs: Unknown parameter '/tKg(' [ 798.237467][ T5876] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 798.413141][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.434264][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.448975][ T5876] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 798.474038][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.492598][ T5876] usb 3-1: Product: syz [ 798.503337][ T5876] usb 3-1: Manufacturer: syz [ 798.519444][ T5876] usb 3-1: SerialNumber: syz [ 798.536687][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 798.581090][ T5876] usb 3-1: config 0 descriptor?? [ 798.712838][ T24] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 798.732506][ T24] usb 5-1: config 0 has no interface number 0 [ 798.749584][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 798.777436][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 798.792810][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.815058][ T24] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 798.826310][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.834955][ T24] usb 5-1: Product: syz [ 798.839567][ T24] usb 5-1: Manufacturer: syz [ 798.844203][ T24] usb 5-1: SerialNumber: syz [ 798.857910][ T24] usb 5-1: config 0 descriptor?? [ 798.866901][T12579] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 798.884430][ T24] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 799.032801][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 799.777432][ T24] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 800.008662][ T24] usb 5-1: USB disconnect, device number 43 [ 800.333570][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 800.360000][ T24] cyberjack 5-1:0.69: device disconnected [ 801.571061][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 801.711090][T12605] netlink: 'syz.4.1926': attribute type 1 has an invalid length. [ 802.201028][T12614] tmpfs: Unknown parameter '/tKg(' [ 803.384497][ T5876] usb 3-1: USB disconnect, device number 33 [ 804.522181][T12630] blktrace: Concurrent blktraces are not allowed on nullb0 [ 804.858424][T12630] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 807.549468][ T5876] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 808.297257][ T5916] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 808.432062][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.464106][ T5876] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.509491][ T5876] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 808.750284][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.768825][ T5876] usb 3-1: Product: syz [ 808.773079][ T5876] usb 3-1: Manufacturer: syz [ 808.789738][ T5876] usb 3-1: SerialNumber: syz [ 808.802330][ T5876] usb 3-1: config 0 descriptor?? [ 809.743938][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 809.776827][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.907404][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.920370][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 809.957140][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 809.979590][ T5916] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 810.001211][ T5916] usb 2-1: config 7 interface 0 has no altsetting 0 [ 810.015101][ T5916] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 810.040334][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.050680][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 810.097705][T12679] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 810.838393][T12682] tmpfs: Unknown parameter '/tKg(' [ 810.867072][ T5916] usbhid 2-1:7.0: can't add hid device: -71 [ 810.875724][ T5916] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 810.888891][ T5916] usb 2-1: USB disconnect, device number 37 [ 811.274058][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 811.274079][ T30] audit: type=1326 audit(1744648950.291:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 811.454697][ T30] audit: type=1326 audit(1744648950.291:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 811.556382][ T5876] usb 3-1: USB disconnect, device number 34 [ 811.666574][ T30] audit: type=1326 audit(1744648950.291:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 811.801937][ T30] audit: type=1326 audit(1744648950.300:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 811.920820][ T30] audit: type=1326 audit(1744648950.300:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 811.987333][ T30] audit: type=1326 audit(1744648950.300:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8f087 code=0x7ffc0000 [ 812.060116][ T30] audit: type=1326 audit(1744648950.300:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f00f7f8effc code=0x7ffc0000 [ 812.334121][ T30] audit: type=1326 audit(1744648950.300:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 812.356496][ T30] audit: type=1326 audit(1744648950.300:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 812.378448][ T30] audit: type=1326 audit(1744648950.300:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12693 comm="syz.1.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f7f8bdca code=0x7ffc0000 [ 815.717812][ T5916] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 816.604499][T12711] netlink: 'syz.0.1957': attribute type 6 has an invalid length. [ 816.956778][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 816.956801][ T30] audit: type=1326 audit(1744648954.622:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 816.984758][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 817.000712][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.202602][ T30] audit: type=1326 audit(1744648954.622:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 817.631401][ T30] audit: type=1326 audit(1744648954.622:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 817.644802][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.683399][ T30] audit: type=1326 audit(1744648954.846:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14e38f087 code=0x7ffc0000 [ 817.714326][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 817.765936][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 817.821799][ T30] audit: type=1326 audit(1744648954.846:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff14e38effc code=0x7ffc0000 [ 817.861640][ T5916] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 817.905438][ T5916] usb 2-1: config 7 interface 0 has no altsetting 0 [ 817.932627][ T5916] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 818.050900][ T30] audit: type=1326 audit(1744648954.846:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 818.121596][T12727] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 818.129431][T12727] netlink: 'syz.1.1961': attribute type 3 has an invalid length. [ 818.137431][T12727] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1961'. [ 818.459089][ T30] audit: type=1326 audit(1744648954.846:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff14e38ef34 code=0x7ffc0000 [ 818.514151][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.588523][ T5916] usb 2-1: can't set config #7, error -71 [ 818.596169][ T30] audit: type=1326 audit(1744648954.846:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff14e38bdca code=0x7ffc0000 [ 818.640946][ T5916] usb 2-1: USB disconnect, device number 38 [ 818.671983][ T30] audit: type=1326 audit(1744648954.846:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 818.764103][ T5841] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 818.772399][ T30] audit: type=1326 audit(1744648954.846:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12712 comm="syz.2.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14e38d169 code=0x7ffc0000 [ 819.032057][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 819.054813][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.063767][T12734] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 819.079897][ T5841] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 819.284149][ T5841] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 819.294710][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.378190][T12740] tmpfs: Unknown parameter '/tKg(' [ 820.046084][ T5841] usb 1-1: Product: syz [ 820.053769][ T5841] usb 1-1: Manufacturer: syz [ 820.060567][ T5841] usb 1-1: SerialNumber: syz [ 820.115774][ T5841] usb 1-1: config 0 descriptor?? [ 820.279811][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1966'. [ 820.301674][T12743] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 820.316807][T12743] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 820.325687][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 821.832088][ T5841] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 822.355118][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 822.370211][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.392017][ T24] usb 1-1: USB disconnect, device number 26 [ 822.487321][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 822.542453][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 822.553299][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 822.555690][ T976] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.579848][ T976] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.608522][ T976] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 822.623127][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 822.632234][ T976] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 822.632264][ T976] usb 4-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 822.647770][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.667362][ T5841] usb 3-1: Product: syz [ 822.671567][ T5841] usb 3-1: Manufacturer: syz [ 822.678752][ T5841] usb 3-1: SerialNumber: syz [ 822.691538][T12761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 822.698724][ T976] usb 4-1: config 7 interface 0 has no altsetting 0 [ 822.705410][ T976] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 822.725969][ T5841] usb 3-1: selecting invalid altsetting 1 [ 822.738319][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.811360][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 822.821295][T12782] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 822.949063][ T5841] cdc_ncm 3-1:1.0: bind() failure [ 822.974797][ T5841] cdc_ncm 3-1:1.1: skipping garbage [ 823.037424][ T5841] cdc_ncm 3-1:1.1: invalid descriptor buffer length [ 823.068108][ T5841] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 823.085464][ T5841] cdc_ncm 3-1:1.1: bind() failure [ 823.101958][ T5841] usb 3-1: USB disconnect, device number 35 [ 823.233437][T12788] tmpfs: Unknown parameter '/tKg(' [ 824.012410][ T5889] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 825.519664][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 825.709762][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.780347][T12795] 9pnet: Could not find request transport: f$ [ 825.838057][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.838614][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 825.839193][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.923593][ T5889] usb 2-1: config 0 descriptor?? [ 826.061680][ T5889] hub 2-1:0.0: USB hub found [ 826.132162][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1981'. [ 826.163032][T12801] netlink: 'syz.2.1981': attribute type 1 has an invalid length. [ 826.170853][T12801] netlink: 'syz.2.1981': attribute type 2 has an invalid length. [ 826.331604][ T5889] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 826.458481][ T976] usbhid 4-1:7.0: can't add hid device: -71 [ 826.465787][ T976] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 826.480271][ T976] usb 4-1: USB disconnect, device number 33 [ 827.221810][ T5889] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 827.455119][T12811] blktrace: Concurrent blktraces are not allowed on nullb0 [ 827.501466][T12811] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 829.678521][ T5889] usb 2-1: USB disconnect, device number 39 [ 829.872418][T12841] gtp0: entered allmulticast mode [ 830.219527][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.226053][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 830.522794][ T5889] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 830.790949][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.818141][ T5889] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 830.832841][ T5841] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 830.855943][ T5889] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 830.872703][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.894270][ T5889] usb 4-1: Product: syz [ 830.905083][ T5889] usb 4-1: Manufacturer: syz [ 830.915895][ T5889] usb 4-1: SerialNumber: syz [ 830.946306][ T5889] usb 4-1: config 0 descriptor?? [ 831.014638][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 831.023109][ T5841] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.048086][ T5841] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.063012][ T5841] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 831.084630][ T5841] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 831.106211][ T5841] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 831.121261][ T5841] usb 5-1: config 7 interface 0 has no altsetting 0 [ 831.130655][ T5841] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 831.141604][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.728060][T12867] blktrace: Concurrent blktraces are not allowed on nullb0 [ 832.738490][T12867] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 832.885800][ T55] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 833.212684][ T5841] usbhid 5-1:7.0: can't add hid device: -71 [ 833.338508][ T5841] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 833.384157][ T5841] usb 5-1: USB disconnect, device number 44 [ 833.454283][T12869] nfs: Unexpected value for 'acl' [ 833.496120][T12869] netlink: 'syz.2.1999': attribute type 4 has an invalid length. [ 833.508933][T10571] usb 4-1: USB disconnect, device number 34 [ 833.820609][T12883] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 835.612930][T12907] blktrace: Concurrent blktraces are not allowed on nullb0 [ 835.625777][T12907] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 836.563597][ T976] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 836.746726][ T976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.781080][ T976] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.805104][ T976] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 836.824966][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.833654][ T976] usb 2-1: Product: syz [ 836.838583][ T976] usb 2-1: Manufacturer: syz [ 836.849825][ T976] usb 2-1: SerialNumber: syz [ 837.064535][ T5841] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 837.081428][ T976] usb 2-1: config 0 descriptor?? [ 837.279317][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 837.363937][ T5841] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.540260][ T5841] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.700568][ T5841] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 837.842796][ T5889] usb 2-1: USB disconnect, device number 40 [ 838.089074][T12934] netlink: 'syz.3.2020': attribute type 5 has an invalid length. [ 838.101549][ T5841] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 838.126246][T12934] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2020'. [ 838.167129][ T5841] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 838.297696][ T5841] usb 1-1: config 7 interface 0 has no altsetting 0 [ 838.306186][ T5841] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 838.315602][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.657339][T12938] Invalid ELF header magic: != ELF [ 840.632065][ T5841] usbhid 1-1:7.0: can't add hid device: -71 [ 840.689727][ T5841] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 840.745107][ T5841] usb 1-1: USB disconnect, device number 27 [ 841.083420][T12953] blktrace: Concurrent blktraces are not allowed on nullb0 [ 841.452847][T12951] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 842.005682][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 842.058201][T12956] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 842.079529][T12956] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 842.115227][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2027'. [ 842.466369][T12973] blktrace: Concurrent blktraces are not allowed on nullb0 [ 842.916383][T12971] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 844.472828][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 844.472853][ T30] audit: type=1326 audit(1744648980.551:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.613045][ T30] audit: type=1326 audit(1744648980.551:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.709352][ T30] audit: type=1326 audit(1744648980.551:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.773424][ T30] audit: type=1326 audit(1744648980.551:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.818424][ T30] audit: type=1326 audit(1744648980.551:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.846690][ T30] audit: type=1326 audit(1744648980.551:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.875072][ T30] audit: type=1326 audit(1744648980.551:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.904831][ T30] audit: type=1326 audit(1744648980.551:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.933832][ T30] audit: type=1326 audit(1744648980.551:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 844.955883][ T5841] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 844.966149][ T30] audit: type=1326 audit(1744648980.551:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12970 comm="syz.4.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 845.007664][T12991] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 845.019270][ T5889] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 845.024262][T12993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2035'. [ 845.037446][T12993] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2035'. [ 845.055019][T12993] netlink: 'syz.1.2035': attribute type 6 has an invalid length. [ 845.069016][T12993] netlink: 'syz.1.2035': attribute type 5 has an invalid length. [ 845.079021][T12993] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2035'. [ 845.139530][ T5841] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.151562][ T5841] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.174059][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 845.189305][ T5841] usb 5-1: New USB device found, idVendor=0404, idProduct=97c1, bcdDevice= 0.00 [ 845.198705][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 845.208165][T12996] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2039'. [ 845.210152][ T5889] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.229654][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.237797][ T5889] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.251922][ T5841] usb 5-1: config 0 descriptor?? [ 845.258889][ T5889] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 845.270376][ T5889] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 845.281413][ T5889] usb 3-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 845.299776][ T5889] usb 3-1: config 7 interface 0 has no altsetting 0 [ 845.302998][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2028'. [ 845.306661][ T5889] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 845.324966][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.334356][T12998] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 845.343144][T12998] netlink: 'syz.0.2028': attribute type 2 has an invalid length. [ 845.356774][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2028'. [ 845.608189][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 845.614437][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 845.647354][ T5841] usb 5-1: USB disconnect, device number 45 [ 847.560613][T13012] blktrace: Concurrent blktraces are not allowed on nullb0 [ 847.669856][T13013] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 848.620188][ T5889] usbhid 3-1:7.0: can't add hid device: -71 [ 848.642869][ T5889] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 848.882962][ T5889] usb 3-1: USB disconnect, device number 36 [ 850.460877][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 850.460899][ T30] audit: type=1326 audit(1744648986.790:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 850.641921][ T30] audit: type=1326 audit(1744648986.790:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 850.770890][ T30] audit: type=1326 audit(1744648986.790:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f7f8f087 code=0x7ffc0000 [ 851.144009][ T30] audit: type=1326 audit(1744648986.790:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f00f7f8effc code=0x7ffc0000 [ 851.258374][ T30] audit: type=1326 audit(1744648986.790:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 851.281587][ T30] audit: type=1326 audit(1744648986.790:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f00f7f8ef34 code=0x7ffc0000 [ 851.325297][ T30] audit: type=1326 audit(1744648986.790:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00f7f8bdca code=0x7ffc0000 [ 851.808625][ T30] audit: type=1326 audit(1744648986.790:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 851.890818][T13043] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.926878][ T30] audit: type=1326 audit(1744648986.790:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 852.075019][ T30] audit: type=1326 audit(1744648986.790:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13020 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00f7f8d169 code=0x7ffc0000 [ 852.345370][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 853.208288][ T5916] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 853.334751][T13066] block device autoloading is deprecated and will be removed. [ 853.401572][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 853.617974][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.775592][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.765109][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 854.811096][ T5916] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 854.874157][ T5916] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 854.957204][ T5916] usb 2-1: config 7 interface 0 has no altsetting 0 [ 855.013100][ T5916] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 855.057747][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.177527][T10571] IPVS: starting estimator thread 0... [ 855.253856][T13082] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 855.272448][T13086] IPVS: using max 28 ests per chain, 67200 per kthread [ 855.378728][ T5876] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 857.188693][T13092] input: syz0 as /devices/virtual/input/input15 [ 857.564015][ T5916] usbhid 2-1:7.0: can't add hid device: -71 [ 857.576879][ T5916] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 857.623843][ T5916] usb 2-1: USB disconnect, device number 41 [ 857.645364][ T5876] usb 5-1: device descriptor read/64, error -71 [ 857.941950][T13098] netlink: 'syz.3.2066': attribute type 6 has an invalid length. [ 858.041533][ T5876] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 858.062821][T13105] fuse: Bad value for 'fd' [ 858.190185][ T5876] usb 5-1: device descriptor read/64, error -71 [ 858.319206][ T5876] usb usb5-port1: attempt power cycle [ 859.192833][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 859.192856][ T30] audit: type=1326 audit(1744648994.956:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 859.633890][ T30] audit: type=1326 audit(1744648994.956:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 859.751021][ T30] audit: type=1326 audit(1744648994.956:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3db578f087 code=0x7ffc0000 [ 860.102706][ T30] audit: type=1326 audit(1744648994.956:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3db578effc code=0x7ffc0000 [ 860.372237][ T30] audit: type=1326 audit(1744648994.956:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 860.583327][ T30] audit: type=1326 audit(1744648994.956:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3db578ef34 code=0x7ffc0000 [ 860.742451][ T30] audit: type=1326 audit(1744648994.956:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3db578bdca code=0x7ffc0000 [ 860.770038][ T30] audit: type=1326 audit(1744648994.956:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 860.792215][ T30] audit: type=1326 audit(1744648994.956:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 860.930014][T13125] sg_write: process 1293 (syz.4.2075) changed security contexts after opening file descriptor, this is not allowed. [ 861.068289][ T30] audit: type=1326 audit(1744648994.966:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13113 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3db578d169 code=0x7ffc0000 [ 862.316087][T13143] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 862.448166][T13145] blktrace: Concurrent blktraces are not allowed on nullb0 [ 863.668971][T13143] bond2: entered promiscuous mode [ 863.802301][T13143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.604706][T13147] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 864.661105][T13139] netlink: 'syz.3.2081': attribute type 6 has an invalid length. [ 869.664157][T13196] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2092'. [ 869.673281][T13196] nbd: must specify at least one socket [ 870.167071][T13194] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 870.752750][T13199] netlink: 'syz.0.2095': attribute type 6 has an invalid length. [ 871.041076][ T5916] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 871.258735][ T5916] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 871.293177][ T5916] usb 2-1: config 0 has no interface number 0 [ 872.000419][ T5916] usb 2-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 872.296794][ T5916] usb 2-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 872.393940][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.485920][ T5916] usb 2-1: config 0 descriptor?? [ 872.492932][T13202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.011986][T13228] Invalid ELF header magic: != ELF [ 873.335366][ T5916] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 873.353522][ T5916] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 873.375043][ T5916] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 873.446717][ T5916] usb 2-1: USB disconnect, device number 42 [ 874.041431][T13238] sch_tbf: peakrate 4 is lower than or equals to rate 11294731968500527568 ! [ 874.502741][T13245] netlink: 'syz.2.2110': attribute type 6 has an invalid length. [ 874.692222][T13252] loop2: detected capacity change from 0 to 7 [ 874.692767][T13248] openvswitch: netlink: Message has 3 unknown bytes. [ 874.706460][T13248] openvswitch: netlink: Actions may not be safe on all matching packets [ 874.715837][T13252] Dev loop2: unable to read RDB block 7 [ 874.738030][T13252] loop2: unable to read partition table [ 874.764422][T13252] loop2: partition table beyond EOD, truncated [ 874.858157][T13252] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 875.001560][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 875.022756][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 875.060747][T13251] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 875.517196][T13252] vxcan1: Master is either lo or non-ether device [ 876.596329][T13280] input: syz0 as /devices/virtual/input/input17 [ 877.379850][ T976] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 877.563604][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.580197][ T976] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 877.603778][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.784829][ T976] usb 4-1: config 0 descriptor?? [ 878.337828][ T976] petalynx 0003:18B1:0037.000B: reserved main item tag 0xd [ 878.388730][ T976] petalynx 0003:18B1:0037.000B: unexpected long global item [ 878.441532][ T976] petalynx 0003:18B1:0037.000B: parse failed [ 878.489150][ T976] petalynx 0003:18B1:0037.000B: probe with driver petalynx failed with error -22 [ 878.549777][T13311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.705996][T13311] batadv_slave_0: entered promiscuous mode [ 878.712053][T13311] batadv_slave_0: entered allmulticast mode [ 878.815372][ T976] usb 4-1: USB disconnect, device number 35 [ 881.299393][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 881.703157][T13340] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 882.024497][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 882.040497][T13326] ceph: No mds server is up or the cluster is laggy [ 882.320777][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 882.327540][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 886.429246][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 886.527833][T13388] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2151'. [ 886.826978][T13384] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 888.145379][ T5841] IPVS: starting estimator thread 0... [ 888.206109][T13402] tc_dump_action: action bad kind [ 888.241661][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2156'. [ 888.253247][T13400] IPVS: using max 28 ests per chain, 67200 per kthread [ 888.317112][T10571] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 888.470479][T13408] tmpfs: Unknown parameter '/tKg(' [ 889.232629][ T5889] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 889.299954][T10571] usb 3-1: Using ep0 maxpacket: 16 [ 889.455452][T10571] usb 3-1: unable to get BOS descriptor or descriptor too short [ 889.463483][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 889.463706][T10571] usb 3-1: no configurations [ 889.478544][T10571] usb 3-1: can't read configurations, error -22 [ 889.493504][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.562618][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 889.577694][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.602831][ T5889] usb 2-1: Product: syz [ 889.625526][ T5889] usb 2-1: Manufacturer: syz [ 889.833418][ T5889] usb 2-1: SerialNumber: syz [ 890.951395][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input18 [ 892.008342][ T5188] bcm5974 2-1:1.0: could not read from device [ 892.093812][ T5188] bcm5974 2-1:1.0: could not read from device [ 892.114012][ T5889] usb 2-1: USB disconnect, device number 43 [ 892.259960][T10571] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 893.053141][T10571] usb 3-1: no configurations [ 893.074886][T10571] usb 3-1: can't read configurations, error -22 [ 893.421750][T10571] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 893.422211][T13452] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 893.588210][T10571] usb 3-1: no configurations [ 893.592893][T10571] usb 3-1: can't read configurations, error -22 [ 893.623525][T10571] usb usb3-port1: attempt power cycle [ 893.823629][ T5916] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 893.922732][T13473] IPv6: NLM_F_REPLACE set, but no existing node found! [ 893.956239][T13474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'. [ 894.004710][T10571] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 894.012617][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 894.096019][ T5916] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 894.104658][T10571] usb 3-1: no configurations [ 894.109310][T10571] usb 3-1: can't read configurations, error -22 [ 894.115974][ T5916] usb 2-1: config 0 has no interface number 0 [ 894.142209][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 894.157471][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.273537][T10571] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 894.344602][ T5916] usb 2-1: Product: syz [ 894.367190][ T5916] usb 2-1: Manufacturer: syz [ 894.373870][T10571] usb 3-1: no configurations [ 894.385047][T10571] usb 3-1: can't read configurations, error -22 [ 894.391543][ T5916] usb 2-1: SerialNumber: syz [ 894.404526][T10571] usb usb3-port1: unable to enumerate USB device [ 894.435816][ T5916] usb 2-1: config 0 descriptor?? [ 894.702061][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.734942][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.769415][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.783109][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.800091][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.826471][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.863875][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.340473][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.349719][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.540607][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.748833][ T5916] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 895.755273][ T5916] usb 2-1: No valid video chain found. [ 895.791750][T13486] tipc: Enabling of bearer rejected, failed to enable media [ 895.802664][ T5916] usb 2-1: USB disconnect, device number 44 [ 895.902468][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 895.909608][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 896.486888][T13502] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 898.271966][T13512] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 900.168480][T13526] FAULT_INJECTION: forcing a failure. [ 900.168480][T13526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.237029][T13526] CPU: 0 UID: 0 PID: 13526 Comm: syz.1.2190 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 900.237063][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 900.237076][T13526] Call Trace: [ 900.237085][T13526] [ 900.237094][T13526] dump_stack_lvl+0x241/0x360 [ 900.237133][T13526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.237162][T13526] ? __pfx__printk+0x10/0x10 [ 900.237212][T13526] should_fail_ex+0x424/0x570 [ 900.237242][T13526] _copy_from_user+0x2d/0xb0 [ 900.237275][T13526] copy_msghdr_from_user+0xb3/0x580 [ 900.237312][T13526] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 900.237338][T13526] ? __fget_files+0x2a/0x420 [ 900.237367][T13526] ? __fget_files+0x2a/0x420 [ 900.237402][T13526] __sys_sendmsg+0x20a/0x360 [ 900.237431][T13526] ? __pfx___sys_sendmsg+0x10/0x10 [ 900.237514][T13526] ? do_syscall_64+0xb6/0x230 [ 900.237545][T13526] do_syscall_64+0xf3/0x230 [ 900.237572][T13526] ? clear_bhb_loop+0x45/0xa0 [ 900.237598][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.237620][T13526] RIP: 0033:0x7f00f7f8d169 [ 900.237638][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.237657][T13526] RSP: 002b:00007f00f8d1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.237680][T13526] RAX: ffffffffffffffda RBX: 00007f00f81a5fa0 RCX: 00007f00f7f8d169 [ 900.237696][T13526] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 900.237709][T13526] RBP: 00007f00f8d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 900.237723][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.237735][T13526] R13: 0000000000000000 R14: 00007f00f81a5fa0 R15: 00007ffe278e37b8 [ 900.237768][T13526] [ 902.747324][T13549] overlayfs: failed to resolve './file0': -2 [ 904.615568][T13566] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 905.314750][T12793] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 905.519216][T12793] usb 5-1: Using ep0 maxpacket: 32 [ 905.766843][T12793] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.802565][T12793] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.864136][T12793] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 905.892413][T12793] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 905.921920][T12793] usb 5-1: Product: syz [ 905.950790][T12793] usb 5-1: Manufacturer: syz [ 906.045221][T13577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2209'. [ 906.297866][T10571] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 906.983088][T12793] hub 5-1:4.0: USB hub found [ 907.288772][T12793] hub 5-1:4.0: 6 ports detected [ 907.299841][T12793] hub 5-1:4.0: insufficient power available to use all downstream ports [ 907.388307][T10571] usb 4-1: Using ep0 maxpacket: 16 [ 907.411241][T10571] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.497280][T10571] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.561063][T12793] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 907.564081][T10571] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 907.569967][T12793] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 907.588539][T10571] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 907.602609][T10571] usb 4-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 907.836617][T10571] usb 4-1: config 7 interface 0 has no altsetting 0 [ 907.843444][T10571] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 907.852990][T10571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.191356][T12793] usb 5-1: USB disconnect, device number 49 [ 908.595420][T13593] x_tables: duplicate underflow at hook 1 [ 909.862663][T10571] usbhid 4-1:7.0: can't add hid device: -71 [ 909.868955][T10571] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 909.885935][T10571] usb 4-1: USB disconnect, device number 36 [ 910.040140][T13601] overlayfs: failed to resolve './file0': -2 [ 910.463201][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2217'. [ 910.476628][T13608] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 910.505353][T13608] netlink: 'syz.2.2217': attribute type 2 has an invalid length. [ 910.522612][T13608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 911.017783][T13615] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 911.083203][T13615] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 911.863991][T13617] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2221'. [ 913.137465][T13626] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 914.526809][T13633] FAULT_INJECTION: forcing a failure. [ 914.526809][T13633] name failslab, interval 1, probability 0, space 0, times 0 [ 914.539529][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.0.2226 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 914.539557][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 914.539571][T13633] Call Trace: [ 914.539581][T13633] [ 914.539587][T13633] dump_stack_lvl+0x241/0x360 [ 914.539614][T13633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.539634][T13633] ? __pfx__printk+0x10/0x10 [ 914.539658][T13633] ? __pfx___might_resched+0x10/0x10 [ 914.539678][T13633] should_fail_ex+0x424/0x570 [ 914.539698][T13633] should_failslab+0xac/0x100 [ 914.539715][T13633] __kmalloc_noprof+0xdf/0x4d0 [ 914.539730][T13633] ? tomoyo_encode+0x26f/0x540 [ 914.539749][T13633] tomoyo_encode+0x26f/0x540 [ 914.539766][T13633] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 914.539786][T13633] tomoyo_realpath_from_path+0x59e/0x5e0 [ 914.539811][T13633] tomoyo_path_number_perm+0x245/0x790 [ 914.539835][T13633] ? tomoyo_path_number_perm+0x215/0x790 [ 914.539857][T13633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 914.539884][T13633] ? ksys_write+0x24e/0x2d0 [ 914.539910][T13633] ? __lock_acquire+0xad5/0xd80 [ 914.539939][T13633] ? __fget_files+0x2a/0x420 [ 914.539956][T13633] ? __fget_files+0x2a/0x420 [ 914.539975][T13633] ? __fget_files+0x2a/0x420 [ 914.539996][T13633] security_file_ioctl+0xc6/0x2a0 [ 914.540020][T13633] __se_sys_ioctl+0x46/0x160 [ 914.540044][T13633] do_syscall_64+0xf3/0x230 [ 914.540063][T13633] ? clear_bhb_loop+0x45/0xa0 [ 914.540081][T13633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.540095][T13633] RIP: 0033:0x7f6af158d169 [ 914.540109][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.540130][T13633] RSP: 002b:00007f6af240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.540153][T13633] RAX: ffffffffffffffda RBX: 00007f6af17a5fa0 RCX: 00007f6af158d169 [ 914.540172][T13633] RDX: 0000200000001340 RSI: 000000004040ae79 RDI: 0000000000000006 [ 914.540185][T13633] RBP: 00007f6af240e090 R08: 0000000000000000 R09: 0000000000000000 [ 914.540198][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.540210][T13633] R13: 0000000000000000 R14: 00007f6af17a5fa0 R15: 00007fffedcea5b8 [ 914.540241][T13633] [ 914.761755][T13633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 915.151014][T13638] overlayfs: failed to resolve './file0': -2 [ 915.242187][T13640] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 915.596542][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2232'. [ 915.798795][T13647] netlink: 'syz.4.2232': attribute type 1 has an invalid length. [ 915.823517][T13647] netlink: 'syz.4.2232': attribute type 2 has an invalid length. [ 915.831347][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2232'. [ 915.923344][ T5841] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 916.122742][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 916.122769][ T30] audit: type=1326 audit(1744649048.209:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 916.257738][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.323004][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 916.336753][ T30] audit: type=1326 audit(1744649048.209:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 916.362881][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12654, setting to 64 [ 916.378143][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 916.663150][ T5841] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 916.672762][ T5841] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 916.715599][ T5841] usb 2-1: Manufacturer: syz [ 916.722025][ T30] audit: type=1326 audit(1744649048.209:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 916.772501][ T5841] usb 2-1: config 0 descriptor?? [ 916.855056][ T30] audit: type=1326 audit(1744649048.209:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 916.914301][ T5916] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 916.940303][ T30] audit: type=1326 audit(1744649048.209:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 916.969538][ T30] audit: type=1326 audit(1744649048.218:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158f087 code=0x7ffc0000 [ 916.992874][ T30] audit: type=1326 audit(1744649048.218:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6af158effc code=0x7ffc0000 [ 917.094141][T13666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2234'. [ 917.833006][ T5841] rc_core: IR keymap rc-hauppauge not found [ 917.841635][ T5841] Registered IR keymap rc-empty [ 917.862871][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 917.904343][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 917.941205][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 917.986633][ T30] audit: type=1326 audit(1744649048.442:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 917.997343][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 918.008724][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 918.010641][ T5916] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.041758][ T30] audit: type=1326 audit(1744649048.442:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 918.076567][ T30] audit: type=1326 audit(1744649048.442:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13649 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6af158bdca code=0x7ffc0000 [ 918.103448][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.174846][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.225575][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.255158][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.282255][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.304592][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.346459][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.380962][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.413599][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.438563][ T5841] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 918.490963][ T5841] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 918.519486][ T5841] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 918.565544][ T5841] usb 2-1: USB disconnect, device number 45 [ 918.874504][ T5916] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.884425][ T5916] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 918.896083][ T5916] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.908770][ T5916] usb 3-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 918.921923][ T5916] usb 3-1: config 7 interface 0 has no altsetting 0 [ 918.930327][ T5916] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 918.940364][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 918.966355][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.012926][ T5916] usb 3-1: can't set config #7, error -71 [ 919.026944][ T5916] usb 3-1: USB disconnect, device number 43 [ 919.175873][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.212094][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 919.221071][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 919.275150][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.303498][ T10] usb 5-1: config 0 descriptor?? [ 919.329275][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 919.343917][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 919.357426][T13692] overlayfs: failed to resolve './file0': -2 [ 919.406141][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 919.448498][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 919.455646][ T10] usb 5-1: media controller created [ 919.503021][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 920.583841][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 920.590898][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 920.616568][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 921.566012][T13699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.581192][T13699] dvb-usb: bulk message failed: -22 (2/0) [ 922.530469][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2244'. [ 922.585882][T13707] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 922.620382][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 922.630580][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 922.646111][T13707] netlink: 'syz.3.2244': attribute type 2 has an invalid length. [ 922.671611][ T10] usb 5-1: USB disconnect, device number 50 [ 922.697313][T13707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2244'. [ 922.816354][T13709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2246'. [ 923.317365][ T5896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 923.531784][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 923.543820][ T5896] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.595727][ T5896] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.652746][ T5896] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 923.707367][ T5896] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 923.748282][ T5896] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 923.808207][ T5896] usb 1-1: config 7 interface 0 has no altsetting 0 [ 923.847160][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 923.884086][ T5896] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 923.942872][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.158092][T13738] overlayfs: failed to resolve './file0': -2 [ 925.327125][ T5841] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 925.498326][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 925.525756][ T5841] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.569514][ T5841] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.625464][ T5841] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 925.682134][ T5841] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.735886][ T5841] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 925.806596][ T5841] usb 2-1: config 7 interface 0 has no altsetting 0 [ 925.854612][ T5841] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 925.905736][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.441263][ T5896] usbhid 1-1:7.0: can't add hid device: -71 [ 926.449014][ T5896] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 926.462987][ T5896] usb 1-1: USB disconnect, device number 28 [ 928.897946][ T5841] usbhid 2-1:7.0: can't add hid device: -71 [ 928.904985][ T5841] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 929.518604][ T5841] usb 2-1: USB disconnect, device number 46 [ 930.511126][T13768] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2262'. [ 930.955143][T13773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 931.495178][T13777] overlayfs: failed to resolve './file0': -2 [ 932.062327][T12793] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 932.065663][T13795] netlink: 'syz.4.2272': attribute type 12 has an invalid length. [ 932.086339][T13795] netlink: 'syz.4.2272': attribute type 29 has an invalid length. [ 932.095287][T13795] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2272'. [ 932.104571][T13795] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 932.117810][T13795] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2272'. [ 932.148098][ T5841] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 932.233357][T12793] usb 3-1: Using ep0 maxpacket: 16 [ 932.312459][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 932.411873][ T5841] usb 1-1: not running at top speed; connect to a high speed hub [ 932.427262][T12793] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 932.453500][T12793] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 932.464046][ T5841] usb 1-1: config 8 interface 0 has no altsetting 0 [ 932.510167][T12793] usb 3-1: config 8 has no interface number 0 [ 932.536145][ T5841] usb 1-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=5b.9e [ 932.552328][T12793] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 932.574563][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.600588][T12793] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.616675][ T5841] usb 1-1: Product: syz [ 932.675734][ T5841] usb 1-1: Manufacturer: syz [ 932.680468][ T5841] usb 1-1: SerialNumber: syz [ 932.685716][T12793] usb 3-1: config 8 interface 206 has no altsetting 0 [ 932.705786][T12793] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 932.730847][T12793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.739223][T12793] usb 3-1: Product: syz [ 932.743503][T12793] usb 3-1: Manufacturer: syz [ 932.749473][T12793] usb 3-1: SerialNumber: syz [ 932.981254][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.142514][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.376222][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.385626][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.398338][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.422463][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.437893][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.451216][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.491903][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.534042][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.723917][T12793] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 933.777598][T12793] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 933.800576][T12793] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 933.877475][T12793] usb 3-1: USB disconnect, device number 44 [ 933.900000][T12793] garmin_gps 3-1:8.206: device disconnected [ 934.705436][ T5896] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 935.553481][ T5841] gspca_main: sonixj-2.14.0 probing 06f8:3004 [ 935.580847][ T5841] gspca_sonixj: reg_w1 err -71 [ 935.585772][ T5841] sonixj 1-1:8.0: probe with driver sonixj failed with error -71 [ 935.603407][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.655706][ T5841] usb 1-1: USB disconnect, device number 29 [ 935.669804][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.846344][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 935.860118][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 935.869323][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.890281][ T5896] usb 2-1: config 0 descriptor?? [ 935.989554][T13823] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 936.937502][T13827] FAULT_INJECTION: forcing a failure. [ 936.937502][T13827] name failslab, interval 1, probability 0, space 0, times 0 [ 936.964293][T13827] CPU: 1 UID: 0 PID: 13827 Comm: syz.4.2280 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 936.964322][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 936.964336][T13827] Call Trace: [ 936.964344][T13827] [ 936.964352][T13827] dump_stack_lvl+0x241/0x360 [ 936.964390][T13827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.964419][T13827] ? __pfx__printk+0x10/0x10 [ 936.964451][T13827] ? __pfx___might_resched+0x10/0x10 [ 936.964482][T13827] should_fail_ex+0x424/0x570 [ 936.964508][T13827] should_failslab+0xac/0x100 [ 936.964534][T13827] __kmalloc_noprof+0xdf/0x4d0 [ 936.964556][T13827] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 936.964587][T13827] ? sock_kmalloc+0xd7/0x160 [ 936.964616][T13827] sock_kmalloc+0xd7/0x160 [ 936.964644][T13827] hash_recvmsg+0x1bd/0x7f0 [ 936.964676][T13827] ? __pfx_hash_recvmsg+0x10/0x10 [ 936.964706][T13827] sock_recvmsg+0x22f/0x280 [ 936.964740][T13827] ____sys_recvmsg+0x1c8/0x480 [ 936.964774][T13827] ? __pfx_____sys_recvmsg+0x10/0x10 [ 936.964832][T13827] do_recvmmsg+0x428/0xab0 [ 936.964871][T13827] ? __pfx_do_recvmmsg+0x10/0x10 [ 936.964914][T13827] ? rcu_read_lock_any_held+0xbb/0x160 [ 936.964942][T13827] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 936.964973][T13827] ? vfs_write+0xb29/0xd10 [ 936.965015][T13827] ? ksys_write+0x24e/0x2d0 [ 936.965049][T13827] ? __mutex_unlock_slowpath+0x229/0x800 [ 936.965088][T13827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.965114][T13827] ? __fget_files+0x2a/0x420 [ 936.965157][T13827] __x64_sys_recvmmsg+0x1ab/0x260 [ 936.965186][T13827] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 936.965218][T13827] ? do_syscall_64+0xb6/0x230 [ 936.965248][T13827] do_syscall_64+0xf3/0x230 [ 936.965275][T13827] ? clear_bhb_loop+0x45/0xa0 [ 936.965302][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.965323][T13827] RIP: 0033:0x7f3db578d169 [ 936.965342][T13827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.965361][T13827] RSP: 002b:00007f3db66b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 936.965389][T13827] RAX: ffffffffffffffda RBX: 00007f3db59a5fa0 RCX: 00007f3db578d169 [ 936.965404][T13827] RDX: 0000000000000001 RSI: 0000200000001f40 RDI: 0000000000000004 [ 936.965416][T13827] RBP: 00007f3db66b7090 R08: 0000000000000000 R09: 0000000000000000 [ 936.965429][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.965441][T13827] R13: 0000000000000000 R14: 00007f3db59a5fa0 R15: 00007ffcf1f0fbe8 [ 936.965475][T13827] [ 937.343772][ T5896] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 937.467470][ T5896] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 938.041366][T13837] xt_nfacct: accounting object `syz0' does not exists [ 938.268710][ T5896] usb 2-1: USB disconnect, device number 47 [ 938.508044][T13843] Invalid ELF header magic: != ELF [ 939.139603][T13848] netlink: 'syz.3.2286': attribute type 39 has an invalid length. [ 939.397651][T10571] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 939.476565][ T5916] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 939.578160][T10571] usb 1-1: Using ep0 maxpacket: 16 [ 939.596769][T10571] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.621916][T10571] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.638370][T10571] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 939.649673][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 939.663513][ T5916] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.674895][ T5916] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.685361][T10571] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 939.695761][ T5916] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 939.711390][T10571] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 939.729741][ T5916] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 939.742571][T10571] usb 1-1: config 7 interface 0 has no altsetting 0 [ 939.750254][ T5916] usb 5-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 939.763802][T10571] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 939.780255][ T5916] usb 5-1: config 7 interface 0 has no altsetting 0 [ 939.787051][T10571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.795947][ T5916] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 939.821173][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.159130][T13867] Invalid ELF header magic: != ELF [ 941.272080][ T5896] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 941.441528][ T5896] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 941.463186][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.471371][ T5896] usb 2-1: Product: syz [ 941.476464][ T5896] usb 2-1: Manufacturer: syz [ 941.481352][ T5896] usb 2-1: SerialNumber: syz [ 941.680639][T10571] usbhid 1-1:7.0: can't add hid device: -71 [ 941.706690][ T5896] usb 2-1: config 0 descriptor?? [ 941.711957][T10571] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 942.703178][T10571] usb 1-1: USB disconnect, device number 30 [ 943.428114][ T5896] usb 2-1: ignoring: probably an ADSL modem [ 943.564529][ T5916] usbhid 5-1:7.0: can't add hid device: -71 [ 943.585989][ T5916] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 943.624068][ T5916] usb 5-1: USB disconnect, device number 51 [ 943.933911][ T5896] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 944.238797][T10571] usb 2-1: USB disconnect, device number 48 [ 944.508074][T13887] FAULT_INJECTION: forcing a failure. [ 944.508074][T13887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.549104][T13887] CPU: 1 UID: 0 PID: 13887 Comm: syz.3.2299 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 944.549139][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 944.549152][T13887] Call Trace: [ 944.549159][T13887] [ 944.549168][T13887] dump_stack_lvl+0x241/0x360 [ 944.549206][T13887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.549233][T13887] ? __pfx__printk+0x10/0x10 [ 944.549274][T13887] should_fail_ex+0x424/0x570 [ 944.549301][T13887] _copy_from_user+0x2d/0xb0 [ 944.549331][T13887] copy_msghdr_from_user+0xb3/0x580 [ 944.549366][T13887] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 944.549391][T13887] ? __fget_files+0x2a/0x420 [ 944.549417][T13887] ? __fget_files+0x2a/0x420 [ 944.549450][T13887] __sys_sendmsg+0x20a/0x360 [ 944.549478][T13887] ? __pfx___sys_sendmsg+0x10/0x10 [ 944.549557][T13887] ? do_syscall_64+0xb6/0x230 [ 944.549587][T13887] do_syscall_64+0xf3/0x230 [ 944.549612][T13887] ? clear_bhb_loop+0x45/0xa0 [ 944.549637][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.549656][T13887] RIP: 0033:0x7f382f98d169 [ 944.549675][T13887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.549692][T13887] RSP: 002b:00007f383081d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.549715][T13887] RAX: ffffffffffffffda RBX: 00007f382fba5fa0 RCX: 00007f382f98d169 [ 944.549730][T13887] RDX: 00000000040044c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 944.549744][T13887] RBP: 00007f383081d090 R08: 0000000000000000 R09: 0000000000000000 [ 944.549756][T13887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.549768][T13887] R13: 0000000000000000 R14: 00007f382fba5fa0 R15: 00007ffdda6d1838 [ 944.549800][T13887] [ 944.734604][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.009454][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 946.396898][T13914] syz.1.2306: attempt to access beyond end of device [ 946.396898][T13914] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 946.420382][T13914] syz.1.2306: attempt to access beyond end of device [ 946.420382][T13914] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 946.708625][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 946.708647][ T30] audit: type=1326 audit(1744649076.785:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 946.740611][T13914] Mount JFS Failure: -5 [ 946.828192][ T30] audit: type=1326 audit(1744649076.785:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 946.948844][ T30] audit: type=1326 audit(1744649076.785:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 947.019253][ T30] audit: type=1326 audit(1744649076.785:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 947.059428][ T30] audit: type=1326 audit(1744649076.785:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af158d169 code=0x7ffc0000 [ 947.271969][ T30] audit: type=1326 audit(1744649076.785:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6af158f087 code=0x7ffc0000 [ 947.298257][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2308'. [ 947.310990][ T30] audit: type=1326 audit(1744649076.785:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6af158effc code=0x7ffc0000 [ 947.333594][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2308'. [ 947.825848][ T30] audit: type=1326 audit(1744649076.785:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 947.914530][ T30] audit: type=1326 audit(1744649076.785:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6af158ef34 code=0x7ffc0000 [ 948.083198][ T30] audit: type=1326 audit(1744649076.785:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13916 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6af158bdca code=0x7ffc0000 [ 948.139925][T13940] netlink: 'syz.0.2310': attribute type 11 has an invalid length. [ 950.129042][T13940] [ 950.131404][T13940] ====================================================== [ 950.138413][T13940] WARNING: possible circular locking dependency detected [ 950.145452][T13940] 6.15.0-rc2-syzkaller #0 Not tainted [ 950.150815][T13940] ------------------------------------------------------ [ 950.157823][T13940] syz.0.2310/13940 is trying to acquire lock: [ 950.163879][T13940] ffffffff900eb1c8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 950.172954][T13940] [ 950.172954][T13940] but task is already holding lock: [ 950.180343][T13940] ffff888024ec2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 950.190496][T13940] [ 950.190496][T13940] which lock already depends on the new lock. [ 950.190496][T13940] [ 950.200906][T13940] [ 950.200906][T13940] the existing dependency chain (in reverse order) is: [ 950.209920][T13940] [ 950.209920][T13940] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 950.218535][T13940] lock_acquire+0x116/0x2f0 [ 950.223566][T13940] __mutex_lock+0x1a5/0x10c0 [ 950.228701][T13940] smc_switch_to_fallback+0x35/0xda0 [ 950.234520][T13940] smc_sendmsg+0x11f/0x530 [ 950.239468][T13940] __sock_sendmsg+0x221/0x270 [ 950.244674][T13940] __sys_sendto+0x365/0x4c0 [ 950.249699][T13940] __x64_sys_sendto+0xde/0x100 [ 950.254985][T13940] do_syscall_64+0xf3/0x230 [ 950.260029][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.266447][T13940] [ 950.266447][T13940] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 950.274109][T13940] lock_acquire+0x116/0x2f0 [ 950.279135][T13940] lock_sock_nested+0x48/0x100 [ 950.284427][T13940] do_ip_setsockopt+0x17e9/0x39c0 [ 950.289979][T13940] ip_setsockopt+0x63/0x100 [ 950.295005][T13940] do_sock_setsockopt+0x3b1/0x710 [ 950.300553][T13940] __x64_sys_setsockopt+0x1ee/0x280 [ 950.306272][T13940] do_syscall_64+0xf3/0x230 [ 950.311322][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.317739][T13940] [ 950.317739][T13940] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 950.324961][T13940] validate_chain+0xa69/0x24e0 [ 950.330252][T13940] __lock_acquire+0xad5/0xd80 [ 950.335463][T13940] lock_acquire+0x116/0x2f0 [ 950.340494][T13940] __mutex_lock+0x1a5/0x10c0 [ 950.345619][T13940] start_sync_thread+0xde/0x2d60 [ 950.351088][T13940] do_ip_vs_set_ctl+0x48e/0xe50 [ 950.356482][T13940] nf_setsockopt+0x295/0x2c0 [ 950.361631][T13940] smc_setsockopt+0x25c/0xd50 [ 950.366844][T13940] do_sock_setsockopt+0x3b1/0x710 [ 950.372396][T13940] __x64_sys_setsockopt+0x1ee/0x280 [ 950.378128][T13940] do_syscall_64+0xf3/0x230 [ 950.383167][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.389591][T13940] [ 950.389591][T13940] other info that might help us debug this: [ 950.389591][T13940] [ 950.399820][T13940] Chain exists of: [ 950.399820][T13940] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 950.399820][T13940] [ 950.413391][T13940] Possible unsafe locking scenario: [ 950.413391][T13940] [ 950.420838][T13940] CPU0 CPU1 [ 950.426200][T13940] ---- ---- [ 950.431567][T13940] lock(&smc->clcsock_release_lock); [ 950.436946][T13940] lock(sk_lock-AF_INET); [ 950.443885][T13940] lock(&smc->clcsock_release_lock); [ 950.451791][T13940] lock(rtnl_mutex); [ 950.455786][T13940] [ 950.455786][T13940] *** DEADLOCK *** [ 950.455786][T13940] [ 950.463934][T13940] 1 lock held by syz.0.2310/13940: [ 950.469045][T13940] #0: ffff888024ec2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 950.479593][T13940] [ 950.479593][T13940] stack backtrace: [ 950.485485][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.0.2310 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 950.485507][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 950.485518][T13940] Call Trace: [ 950.485526][T13940] [ 950.485534][T13940] dump_stack_lvl+0x241/0x360 [ 950.485563][T13940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.485586][T13940] ? __pfx__printk+0x10/0x10 [ 950.485609][T13940] ? print_lock+0x171/0x1a0 [ 950.485629][T13940] print_circular_bug+0x2e1/0x300 [ 950.485652][T13940] check_noncircular+0x142/0x160 [ 950.485676][T13940] validate_chain+0xa69/0x24e0 [ 950.485707][T13940] __lock_acquire+0xad5/0xd80 [ 950.485726][T13940] lock_acquire+0x116/0x2f0 [ 950.485741][T13940] ? start_sync_thread+0xde/0x2d60 [ 950.485769][T13940] __mutex_lock+0x1a5/0x10c0 [ 950.485790][T13940] ? start_sync_thread+0xde/0x2d60 [ 950.485815][T13940] ? sched_clock_cpu+0x77/0x4d0 [ 950.485836][T13940] ? start_sync_thread+0xde/0x2d60 [ 950.485858][T13940] ? __pfx___mutex_lock+0x10/0x10 [ 950.485888][T13940] start_sync_thread+0xde/0x2d60 [ 950.485914][T13940] ? __lock_acquire+0xad5/0xd80 [ 950.485939][T13940] ? __pfx_start_sync_thread+0x10/0x10 [ 950.485973][T13940] ? read_word_at_a_time+0xe/0x20 [ 950.485995][T13940] ? sized_strscpy+0x9a/0x2b0 [ 950.486019][T13940] do_ip_vs_set_ctl+0x48e/0xe50 [ 950.486037][T13940] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 950.486060][T13940] ? __mutex_unlock_slowpath+0x229/0x800 [ 950.486085][T13940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 950.486108][T13940] ? __pfx___mutex_lock+0x10/0x10 [ 950.486133][T13940] nf_setsockopt+0x295/0x2c0 [ 950.486161][T13940] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 950.486190][T13940] smc_setsockopt+0x25c/0xd50 [ 950.486219][T13940] ? __pfx_smc_setsockopt+0x10/0x10 [ 950.486238][T13940] ? __lock_acquire+0xad5/0xd80 [ 950.486257][T13940] ? __pfx_smc_setsockopt+0x10/0x10 [ 950.486276][T13940] do_sock_setsockopt+0x3b1/0x710 [ 950.486296][T13940] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 950.486312][T13940] ? __fget_files+0x2a/0x420 [ 950.486334][T13940] ? __fget_files+0x39d/0x420 [ 950.486352][T13940] ? __fget_files+0x2a/0x420 [ 950.486374][T13940] __x64_sys_setsockopt+0x1ee/0x280 [ 950.486394][T13940] do_syscall_64+0xf3/0x230 [ 950.486416][T13940] ? clear_bhb_loop+0x45/0xa0 [ 950.486436][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.486453][T13940] RIP: 0033:0x7f6af158d169 [ 950.486473][T13940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.486490][T13940] RSP: 002b:00007f6af23cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 950.486508][T13940] RAX: ffffffffffffffda RBX: 00007f6af17a6160 RCX: 00007f6af158d169 [ 950.486521][T13940] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000009 [ 950.486532][T13940] RBP: 00007f6af160e990 R08: 0000000000000018 R09: 0000000000000000 [ 950.486543][T13940] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 950.486554][T13940] R13: 0000000000000000 R14: 00007f6af17a6160 R15: 00007fffedcea5b8 [ 950.486573][T13940] [ 951.497966][T13945] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0