last executing test programs: 4m8.932201363s ago: executing program 0 (id=1202): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3ff, {0x1, 0x5, 0x0, '\x00', {0x800, 0xad4, 0x8, 0x8, r2, r3, 0x8000, '\x00', 0x3, 0x8, 0x100000000, 0x8, {0x6, 0xe}, {0x20000000000004}, {0x100000000, 0x2}, {0xffffffffffff7ffd, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) 4m8.582222514s ago: executing program 0 (id=1204): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{@none}]}) 4m7.576945703s ago: executing program 0 (id=1209): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4m6.3560317s ago: executing program 0 (id=1217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m6.243869728s ago: executing program 0 (id=1219): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x2, 0x29, &(0x7f0000000340)=""/41}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 4m5.928642421s ago: executing program 0 (id=1225): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 4m5.732349349s ago: executing program 32 (id=1225): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 2m41.303982308s ago: executing program 3 (id=1684): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x40, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m40.822366547s ago: executing program 3 (id=1690): ioperm(0x0, 0x1, 0x1) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a7, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m40.690463702s ago: executing program 3 (id=1692): syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r0 = syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/206, 0xce) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 2m37.821512534s ago: executing program 3 (id=1706): getpid() fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x3, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, r2}) 2m37.714228431s ago: executing program 3 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m37.525428075s ago: executing program 3 (id=1709): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000009010403000000000000000a00000008000540000000160900010073797a3000000000240002000c00028005000100000000001400018008000100ffffffff08000200e00000020c000480f2380377ddec133bed"], 0x58}}, 0x0) 2m27.851812595s ago: executing program 2 (id=1763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() close_range(r1, 0xffffffffffffffff, 0x0) 2m27.377823413s ago: executing program 2 (id=1764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0x2, 0x0, 0x2d6c00000000000, 0x61e3b6b6, 0xfffffffffffffffc, 0xb3, 0x4, 0x80000000000b1d, 0x5, 0x8, 0x81, 0x3, 0x7, 0xe5, 0x3], 0x3000, 0x3877c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m27.08960402s ago: executing program 2 (id=1766): r0 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2m27.044319167s ago: executing program 1 (id=1769): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x1c6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) close(r0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m26.840508185s ago: executing program 1 (id=1770): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000e00)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x12, 0x3, "d5211e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xb, 0x2, '\f('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m26.793315512s ago: executing program 2 (id=1771): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x58, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f0000000940)=""/199, 0xc7}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800adf771bf5e55", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b0000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000295"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000180)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x2}) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 2m25.213478099s ago: executing program 2 (id=1773): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m25.063776224s ago: executing program 2 (id=1774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) iopl(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x89727a31546dcc48, 0xeb}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m22.906819782s ago: executing program 1 (id=1786): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x41624800ab11328a, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 2m22.805468849s ago: executing program 1 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m22.777943723s ago: executing program 1 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.042906889s ago: executing program 33 (id=1709): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000009010403000000000000000a00000008000540000000160900010073797a3000000000240002000c00028005000100000000001400018008000100ffffffff08000200e00000020c000480f2380377ddec133bed"], 0x58}}, 0x0) 2m20.249464005s ago: executing program 1 (id=1796): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79cc, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m19.833175436s ago: executing program 34 (id=1796): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79cc, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m8.998584806s ago: executing program 35 (id=1774): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) iopl(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x89727a31546dcc48, 0xeb}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13.633830667s ago: executing program 5 (id=2300): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x94) chdir(0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000"], 0xe0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0xffffffffffffffc7}}], 0x1, 0x20008000) recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/92, 0x5c}], 0x1}, 0x2}], 0x1, 0x0, 0x0) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 13.365498616s ago: executing program 6 (id=2303): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000010000000000000003000000850000007b000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 13.27717822s ago: executing program 6 (id=2304): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 9.461484104s ago: executing program 5 (id=2311): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x10, 0x1, 0x0, 0x1, 0x1, 0x400}, 0xa8, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) 9.346508172s ago: executing program 6 (id=2312): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f0000000940)=""/199, 0xc7}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800adf771bf5e55", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b0000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000295"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000180)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x2}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 8.384549289s ago: executing program 5 (id=2315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a06622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x9, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x2, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 8.31343043s ago: executing program 4 (id=2316): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x82d00, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) 7.325340324s ago: executing program 5 (id=2318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 7.243722142s ago: executing program 4 (id=2319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a63b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600052fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 7.241443111s ago: executing program 7 (id=2320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r10, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 7.105089292s ago: executing program 6 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r4 = open(0x0, 0x0, 0x0) getdents(r4, &(0x7f0000000400)=""/194, 0xc2) 6.865251356s ago: executing program 4 (id=2322): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8aa7e62bf9ef9071"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.089523548s ago: executing program 6 (id=2324): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x58, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f0000000940)=""/199, 0xc7}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800adf771bf5e55", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b0000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000295"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000180)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x2}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 5.393232263s ago: executing program 4 (id=2325): r0 = socket$netlink(0x10, 0x3, 0xb) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x800000000009, 0x9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0xfffffffb}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') sendto$inet_nvme_of_msg(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setns(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.142897074s ago: executing program 5 (id=2326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r2, 0x0, 0x0) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.123114964s ago: executing program 4 (id=2327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xa019, 0x2, 0x0, 0x259}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) unshare(0x62040200) syz_usb_connect(0x5, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d000000000004b112e888c5cb295bb4c98c65f03ebaf9b6b4ab89bf1e6a491e7e9ac7b132dfb43f8c5ac1076d004f27be3db41e4be65347e2a5e83a574bdd95345adb5a3348c936ca8ae3304b2a1fcef1079e94e9d4a25c05721b47539e41651fc136cdf327651ad1"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 3.955853256s ago: executing program 8 (id=2329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xeb, 0x1, 0x62}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.274560291s ago: executing program 7 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.272728517s ago: executing program 5 (id=2331): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) 3.033480519s ago: executing program 8 (id=2332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$phonet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f0000000140)) 3.021782969s ago: executing program 6 (id=2333): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x80000) syz_fuse_handle_req(r3, &(0x7f00000017c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.539385642s ago: executing program 7 (id=2334): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.05681159s ago: executing program 8 (id=2335): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.050719507s ago: executing program 7 (id=2336): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bd2) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040014) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.442130907s ago: executing program 7 (id=2337): prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) 1.245569457s ago: executing program 8 (id=2338): socket$packet(0x11, 0x3, 0x300) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x31, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 665.545105ms ago: executing program 8 (id=2339): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket(0x1e, 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x23, 0x80000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3f, 0x8, 0x5, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 596.940688ms ago: executing program 4 (id=2340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x5c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r10, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) 436.551226ms ago: executing program 7 (id=2341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000010000000000000000000000000000000000000000984fd884e861b46521c19bfe47592e9c78bbbbaae7bf71e502e94a69592b9675924760382834"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x25, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0xc, 0x5, 0x3, 0x2, 0xfffffffffffffffc}, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x7, 0x9, 0x6, 0x80, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2ee3b, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r2, r3, r3], &(0x7f00000008c0), 0x10, 0x46}, 0x94) sched_setaffinity(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 0s ago: executing program 8 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x2, 0xb}, {0x9, 0xfffa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): led: -22 [ 388.410456][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.424310][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058374800: rx timeout, send abort [ 388.432795][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058374800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 389.386296][ T79] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 389.493223][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 389.642904][ T79] usb 4-1: Using ep0 maxpacket: 16 [ 389.649680][ T79] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 389.661085][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.675598][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 389.684168][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.705725][ T79] usb 4-1: config 0 descriptor?? [ 389.716635][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 389.874860][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.894741][ T9] usb 2-1: Product: syz [ 389.903364][ T9] usb 2-1: Manufacturer: syz [ 389.931660][ T9] usb 2-1: SerialNumber: syz [ 389.985072][ T9] usb 2-1: config 0 descriptor?? [ 390.802991][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 391.374128][T11115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.470351][ T79] pegasus 4-1:0.0: can't locate MII phy, using default [ 391.493386][ T79] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, ce:01:24:9e:f7:c1 [ 391.503355][ T79] usb 4-1: USB disconnect, device number 40 [ 391.591088][ T30] audit: type=1326 audit(1762565175.751:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.665377][ T30] audit: type=1326 audit(1762565175.751:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.711340][ T30] audit: type=1326 audit(1762565175.751:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.738386][ T30] audit: type=1326 audit(1762565175.751:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.772305][ T30] audit: type=1326 audit(1762565175.751:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.796754][ T30] audit: type=1326 audit(1762565175.751:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.820141][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.841426][ T10] usb 2-1: USB disconnect, device number 36 [ 391.852956][ T30] audit: type=1326 audit(1762565175.751:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.886412][ T30] audit: type=1326 audit(1762565175.751:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 391.910908][ T30] audit: type=1326 audit(1762565175.751:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 391.937661][ T30] audit: type=1326 audit(1762565175.751:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cb98f6c9 code=0x7ffc0000 [ 393.406140][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 393.593300][ T10] usb 3-1: config 0 has no interfaces? [ 393.609116][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 393.628536][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.641912][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.650284][ T10] usb 3-1: Manufacturer: syz [ 393.659252][ T10] usb 3-1: config 0 descriptor?? [ 393.798035][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.820416][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 393.842991][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 393.863987][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.898504][ T5891] usb 3-1: USB disconnect, device number 32 [ 393.907184][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.927166][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.950762][ T9] usb 5-1: config 0 descriptor?? [ 394.016986][T11181] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 394.425209][ T9] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 394.810133][ T9] usb 5-1: USB disconnect, device number 34 [ 394.931663][T11202] fido_id[11202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 395.223386][ T5891] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 395.522757][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 395.537448][ T5891] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 395.552345][ T5891] usb 6-1: config 179 has no interface number 0 [ 395.558901][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 395.570700][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 395.596352][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.654353][ T5891] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 395.672353][ T5891] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.686458][ T5891] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 395.695729][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.707407][T11207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 396.221023][ T5891] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input39 [ 396.401119][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.452418][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.753854][ T9] usb 6-1: USB disconnect, device number 6 [ 396.759699][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 396.759728][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 397.864018][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 397.870519][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 398.142288][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 398.313192][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 398.322187][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 398.322218][ T30] audit: type=1400 audit(1762565182.037:624): avc: denied { watch watch_reads } for pid=11273 comm="syz.1.1697" path="/proc/1020" dev="proc" ino=36543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 398.367870][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.424599][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.435924][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.446813][ T9] usb 4-1: Product: syz [ 398.450986][ T9] usb 4-1: Manufacturer: syz [ 398.468390][ T9] usb 4-1: SerialNumber: syz [ 398.524755][ T9] usb 4-1: config 0 descriptor?? [ 398.545464][T11258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.890357][ T977] usb 4-1: USB disconnect, device number 41 [ 399.285795][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 400.091245][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 400.106900][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.137572][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 400.183915][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 400.203081][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 400.216059][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.231946][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 400.248003][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 400.256132][ T9] usb 2-1: Product: syz [ 400.260393][ T9] usb 2-1: Manufacturer: syz [ 400.264978][ T9] usb 2-1: SerialNumber: syz [ 400.291458][ T9] usb 2-1: config 0 descriptor?? [ 400.355548][ T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 400.515357][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 400.524526][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 400.537659][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.547961][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 400.561189][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.561230][ T977] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 400.561250][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.593503][ T30] audit: type=1400 audit(1762565184.151:625): avc: denied { mounton } for pid=11308 comm="syz.3.1708" path="/311/file1/file0" dev="autofs" ino=38147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 400.594164][ T977] usb 6-1: config 0 descriptor?? [ 400.648037][ T30] audit: type=1400 audit(1762565184.207:626): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 400.739386][ T9] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 400.749111][ T9] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 400.785303][ T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 400.963470][ T9] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 401.106785][ T977] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 401.145970][ T79] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 401.314963][ T977] ft260 0003:0403:6030.0028: chip code: 6424 8183 [ 401.323369][ T79] usb 5-1: unable to get BOS descriptor or descriptor too short [ 401.331729][ T79] usb 5-1: not running at top speed; connect to a high speed hub [ 401.340561][ T79] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.351111][ T79] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.365075][ T79] usb 5-1: string descriptor 0 read error: -22 [ 401.371521][ T79] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.380613][ T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.408022][ T79] usb 5-1: 0:2 : does not exist [ 401.529735][ T977] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 401.761933][ T977] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 402.039761][T11300] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0002, size 0, read) [ 402.100605][ T5891] usb 6-1: USB disconnect, device number 7 [ 402.259567][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 402.270176][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 402.285051][ T9] usb 2-1: USB disconnect, device number 37 [ 402.754671][T11325] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 402.762577][ T79] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 402.790377][ T79] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 402.804219][ T79] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 402.857276][ T79] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 402.887342][ T79] usb 5-1: USB disconnect, device number 35 [ 404.635037][T11370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 404.909056][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 405.070984][ T9] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 405.079618][ T9] usb 6-1: config 0 has no interface number 0 [ 405.087884][ T9] usb 6-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 405.097229][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.105937][ T9] usb 6-1: Product: syz [ 405.110189][ T9] usb 6-1: Manufacturer: syz [ 405.115243][ T9] usb 6-1: SerialNumber: syz [ 405.128122][ T9] usb 6-1: config 0 descriptor?? [ 405.371214][ T9] kaweth 6-1:0.82: Firmware present in device. [ 405.377753][ T9] kaweth 6-1:0.82: Error reading configuration (-71), no net device created [ 405.387350][ T9] kaweth 6-1:0.82: probe with driver kaweth failed with error -5 [ 405.399753][ T9] usb 6-1: USB disconnect, device number 8 [ 405.775192][T11392] syzkaller1: entered promiscuous mode [ 405.780794][T11392] syzkaller1: entered allmulticast mode [ 406.035220][T11404] syz.1.1739 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 406.160616][ T869] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 406.384568][ T869] usb 5-1: Using ep0 maxpacket: 16 [ 406.392427][ T869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.401738][ T869] usb 5-1: config 0 has no interface number 0 [ 406.408287][ T869] usb 5-1: too many endpoints for config 0 interface 1 altsetting 97: 97, using maximum allowed: 30 [ 406.419503][ T869] usb 5-1: config 0 interface 1 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 406.432984][ T869] usb 5-1: config 0 interface 1 has no altsetting 0 [ 406.442800][ T869] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.453365][ T869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.461566][ T869] usb 5-1: Product: syz [ 406.465968][ T869] usb 5-1: Manufacturer: syz [ 406.469856][ T977] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 406.472968][ T869] usb 5-1: SerialNumber: syz [ 406.529346][ T869] usb 5-1: config 0 descriptor?? [ 406.683957][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 406.693262][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.706952][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.721118][ T977] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 406.730256][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.742328][ T977] usb 3-1: config 0 descriptor?? [ 406.757054][ T869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 406.983789][ T869] gspca_spca1528: reg_w err -71 [ 407.011010][ T30] audit: type=1400 audit(1762565190.175:627): avc: denied { setopt } for pid=11423 comm="syz.5.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.013667][T11425] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 407.039734][ T869] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 407.063080][ T869] usb 5-1: USB disconnect, device number 36 [ 407.192164][ T30] audit: type=1400 audit(1762565190.343:628): avc: denied { connect } for pid=11428 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.216256][ T977] ft260 0003:0403:6030.0029: unknown main item tag 0x7 [ 407.430634][ T977] ft260 0003:0403:6030.0029: chip code: 6424 8183 [ 407.645337][ T977] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 407.793914][T11445] binder: 11444:11445 ioctl c0306201 0 returned -14 [ 407.866588][ T977] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 408.127385][T11410] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0081, size 0, write) [ 408.137590][ T869] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 408.159473][ T977] usb 3-1: USB disconnect, device number 33 [ 408.309188][ T869] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 408.319882][ T869] usb 5-1: config 0 has no interfaces? [ 408.326245][ T869] usb 5-1: config 0 has no interfaces? [ 408.332765][ T869] usb 5-1: config 0 has no interfaces? [ 408.339117][ T869] usb 5-1: config 0 has no interfaces? [ 408.345723][ T869] usb 5-1: config 0 has no interfaces? [ 408.356083][ T869] usb 5-1: config 0 has no interfaces? [ 408.362480][ T869] usb 5-1: config 0 has no interfaces? [ 408.370291][ T869] usb 5-1: config 0 has no interfaces? [ 408.377615][ T869] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 408.386810][ T869] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 408.395230][ T869] usb 5-1: Product: syz [ 408.416152][ T869] usb 5-1: Manufacturer: syz [ 408.433571][ T869] usb 5-1: SerialNumber: syz [ 408.443432][ T869] usb 5-1: config 0 descriptor?? [ 408.772807][ T869] usb 5-1: USB disconnect, device number 37 [ 409.185280][ T5817] Bluetooth: hci0: command tx timeout [ 410.500272][ T5824] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.583226][T11480] random: crng reseeded on system resumption [ 410.684423][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.792264][ T5824] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 410.888096][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.940209][ T5824] usb 6-1: Product: syz [ 410.944500][ T5824] usb 6-1: Manufacturer: syz [ 410.949107][ T5824] usb 6-1: SerialNumber: syz [ 410.988635][ T5824] usb 6-1: config 0 descriptor?? [ 411.002181][ T5824] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 411.259914][ T5891] usb 6-1: USB disconnect, device number 9 [ 411.700791][ T869] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 411.899322][ T869] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 411.910605][ T869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.927468][ T869] usb 2-1: Product: syz [ 412.147031][ T869] usb 2-1: Manufacturer: syz [ 412.153121][ T869] usb 2-1: SerialNumber: syz [ 412.896824][ T869] net_ratelimit: 22 callbacks suppressed [ 412.896848][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 412.937875][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 414.643787][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 414.658592][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 414.671382][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 414.683744][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 414.697889][ T869] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 414.712184][ T869] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 414.737286][ T869] usb 2-1: USB disconnect, device number 38 [ 415.435403][ T5808] overlayfs: failed lookup in lower (newroot/365, name='bus', err=-40): overlapping layers [ 415.540260][ T5808] overlayfs: failed lookup in lower (newroot/365, name='bus', err=-40): overlapping layers [ 415.630077][ T4303] smc: removing ib device syz1 [ 415.641623][ T869] syz1: Port: 1 Link DOWN [ 416.548475][ T869] libceph: connect (1)[c::]:6789 error -101 [ 416.555466][ T869] libceph: mon0 (1)[c::]:6789 connect error [ 416.753764][ T977] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 416.841010][ T869] libceph: connect (1)[c::]:6789 error -101 [ 416.848274][ T869] libceph: mon0 (1)[c::]:6789 connect error [ 416.957319][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 416.964278][ T977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 416.973271][ T977] usb 6-1: config 128 has an invalid interface number: 101 but max is 1 [ 416.982023][ T977] usb 6-1: config 128 has an invalid interface number: 162 but max is 1 [ 416.990699][ T977] usb 6-1: config 128 has no interface number 0 [ 416.997047][ T977] usb 6-1: config 128 has no interface number 1 [ 417.003647][ T977] usb 6-1: config 128 interface 101 has no altsetting 0 [ 417.010666][ T977] usb 6-1: config 128 interface 162 has no altsetting 0 [ 417.020657][ T977] usb 6-1: string descriptor 0 read error: -22 [ 417.027342][ T977] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 417.036692][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.060530][ T977] usb-storage 6-1:128.101: USB Mass Storage device detected [ 417.091255][ T977] usb-storage 6-1:128.101: Quirks match for vid 0451 pid 5416: 2 [ 417.113672][ T4303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.125441][ T4303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.186463][ T977] usb-storage 6-1:128.162: USB Mass Storage device detected [ 417.216223][ T977] usb-storage 6-1:128.162: Quirks match for vid 0451 pid 5416: 2 [ 417.339471][ T977] usb 6-1: USB disconnect, device number 10 [ 417.357979][ T4303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.412823][T11565] ceph: No mds server is up or the cluster is laggy [ 417.418056][ T4303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.421816][ T869] libceph: connect (1)[c::]:6789 error -101 [ 417.440680][ T869] libceph: mon0 (1)[c::]:6789 connect error [ 417.643760][ T4303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.684298][ T4303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.697766][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.707947][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.717130][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.729785][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.738375][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.754851][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.762416][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.772832][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.783043][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.790574][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.882565][ T4303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.908972][ T869] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 417.940142][ T4303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.098592][ T869] usb 5-1: Using ep0 maxpacket: 32 [ 418.112404][ T869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.175625][ T869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.196027][ T869] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 418.282445][ T869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.318691][ T4303] bridge_slave_1: left allmulticast mode [ 418.330436][ T4303] bridge_slave_1: left promiscuous mode [ 418.342219][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.342759][ T869] usb 5-1: config 0 descriptor?? [ 418.367601][ T4303] bridge_slave_0: left allmulticast mode [ 418.379646][ T4303] bridge_slave_0: left promiscuous mode [ 418.391282][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.815538][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.826419][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.827524][ T869] kone 0003:1E7D:2CED.002A: item fetching failed at offset 0/5 [ 418.842303][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.851073][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.858853][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.905377][ T869] kone 0003:1E7D:2CED.002A: parse failed [ 418.926665][ T869] kone 0003:1E7D:2CED.002A: probe with driver kone failed with error -22 [ 419.057878][ T869] usb 5-1: USB disconnect, device number 38 [ 419.139087][T11589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 419.174558][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.184377][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.194422][ T4303] bond0 (unregistering): Released all slaves [ 419.358948][T11578] chnl_net:caif_netlink_parms(): no params data found [ 419.546447][ T4303] hsr_slave_0: left promiscuous mode [ 419.552391][ T4303] hsr_slave_1: left promiscuous mode [ 419.558368][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.565745][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.573810][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.581519][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.596295][ T4303] veth1_macvtap: left promiscuous mode [ 419.602102][ T4303] veth0_macvtap: left promiscuous mode [ 419.940134][ T79] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 419.951535][ T5822] Bluetooth: hci1: command tx timeout [ 420.175674][ T79] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 420.185543][ T79] usb 6-1: config 0 interface 0 has no altsetting 0 [ 420.197490][ T79] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.207271][ T79] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.215431][ T79] usb 6-1: Product: syz [ 420.220186][ T79] usb 6-1: Manufacturer: syz [ 420.224780][ T79] usb 6-1: SerialNumber: syz [ 420.232704][ T79] usb 6-1: config 0 descriptor?? [ 420.242126][ T79] usb 6-1: selecting invalid altsetting 0 [ 420.504204][ T79] usb 6-1: USB disconnect, device number 11 [ 420.714056][T11586] chnl_net:caif_netlink_parms(): no params data found [ 420.748192][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.755745][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.762907][T11578] bridge_slave_0: entered allmulticast mode [ 420.770286][T11578] bridge_slave_0: entered promiscuous mode [ 420.793870][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.807409][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.814695][T11578] bridge_slave_1: entered allmulticast mode [ 420.828277][T11578] bridge_slave_1: entered promiscuous mode [ 420.943474][T11578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.957632][T11578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.046723][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.058304][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.065503][ T5822] Bluetooth: hci5: command tx timeout [ 421.076418][T11586] bridge_slave_0: entered allmulticast mode [ 421.086705][T11586] bridge_slave_0: entered promiscuous mode [ 421.096269][T11578] team0: Port device team_slave_0 added [ 421.113126][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.127326][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.134578][T11586] bridge_slave_1: entered allmulticast mode [ 421.143069][T11586] bridge_slave_1: entered promiscuous mode [ 421.152102][T11578] team0: Port device team_slave_1 added [ 421.189377][T11578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.196568][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.225085][T11578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.251749][T11578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.259531][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.285820][T11578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.298173][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 421.308461][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.346310][ T4303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.388227][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.440052][T11578] hsr_slave_0: entered promiscuous mode [ 421.446417][T11578] hsr_slave_1: entered promiscuous mode [ 421.479521][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 421.502295][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 421.511366][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.558253][ T4303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.577800][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 421.700537][T11586] team0: Port device team_slave_0 added [ 421.790472][ T4303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.846995][T11586] team0: Port device team_slave_1 added [ 421.946644][ T4303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.968877][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.975967][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.005940][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.033677][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.041200][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.067534][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.185445][ T5822] Bluetooth: hci1: command tx timeout [ 422.278619][ T9] gspca_nw80x: reg_w err -71 [ 422.283714][ T9] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 422.361413][ T9] usb 5-1: USB disconnect, device number 39 [ 422.402606][T11586] hsr_slave_0: entered promiscuous mode [ 422.422369][T11586] hsr_slave_1: entered promiscuous mode [ 422.434170][T11586] debugfs: 'hsr0' already exists in 'hsr' [ 422.445483][T11586] Cannot create hsr debugfs directory [ 422.539939][ T4303] bridge_slave_1: left allmulticast mode [ 422.560357][ T4303] bridge_slave_1: left promiscuous mode [ 422.580200][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.626951][ T4303] bridge_slave_0: left allmulticast mode [ 422.647014][ T4303] bridge_slave_0: left promiscuous mode [ 422.662361][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.152438][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.164043][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.173868][ T4303] bond0 (unregistering): Released all slaves [ 423.215819][ T30] audit: type=1326 audit(1762565205.328:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.286178][ T30] audit: type=1326 audit(1762565205.328:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.335728][ T5822] Bluetooth: hci5: command tx timeout [ 423.341299][ T30] audit: type=1326 audit(1762565205.328:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.371883][ T30] audit: type=1326 audit(1762565205.328:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.400972][ T30] audit: type=1326 audit(1762565205.328:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.430784][ T30] audit: type=1326 audit(1762565205.328:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.454463][ T30] audit: type=1326 audit(1762565205.328:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.477967][ T30] audit: type=1326 audit(1762565205.328:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.510581][ T30] audit: type=1326 audit(1762565205.328:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.574402][ T30] audit: type=1326 audit(1762565205.328:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11648 comm="syz.4.1812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3d4db8f6c9 code=0x7ffc0000 [ 423.824828][T11578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.850146][ T4303] hsr_slave_0: left promiscuous mode [ 423.859893][ T4303] hsr_slave_1: left promiscuous mode [ 423.865945][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.873317][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.889808][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.897806][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.938627][ T4303] veth1_macvtap: left promiscuous mode [ 423.944176][ T4303] veth0_macvtap: left promiscuous mode [ 423.950062][ T4303] veth1_vlan: left promiscuous mode [ 423.955378][ T4303] veth0_vlan: left promiscuous mode [ 424.408860][ T5822] Bluetooth: hci1: command tx timeout [ 424.473123][ T5888] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 424.667246][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 424.675463][ T5888] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 424.684634][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.692957][ T5888] usb 6-1: Product: syz [ 424.697179][ T5888] usb 6-1: Manufacturer: syz [ 424.702758][ T5888] usb 6-1: SerialNumber: syz [ 424.709654][ T5888] usb 6-1: config 0 descriptor?? [ 424.722839][ T5888] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 424.730838][ T5888] pctv452e: pctv452e_power_ctrl: 1 [ 424.730838][ T5888] [ 424.738173][ T5888] usb 6-1: selecting invalid altsetting 3 [ 424.744057][ T5888] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 424.744057][ T5888] [ 424.754613][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 424.763709][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 424.763960][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.780957][ T5888] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 424.789864][ T5888] usb 6-1: media controller created [ 424.796457][ T5888] dvb-usb: bulk message failed: -22 (8/0) [ 424.805454][ T5888] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 424.819241][ T5888] dvb-usb: MAC address reading failed. [ 424.828908][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 424.840497][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.885901][ T5888] DVB: Unable to find symbol stb0899_attach() [ 424.892157][ T5888] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 424.945975][T11673] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 424.956516][ T5888] rc_core: IR keymap rc-tt-1500 not found [ 424.964615][ T5888] Registered IR keymap rc-empty [ 424.973178][ T5888] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 424.985070][ T5888] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input40 [ 424.997923][ T5888] dvb-usb: schedule remote query interval to 100 msecs. [ 425.004881][ T5888] pctv452e: pctv452e_power_ctrl: 0 [ 425.004881][ T5888] [ 425.012865][ T5888] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 425.028973][ T5888] usb 6-1: USB disconnect, device number 12 [ 425.098580][ T5888] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 425.271005][T11578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.281874][T11578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.294348][T11578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.420429][T11586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.431599][T11586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.453569][T11586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.468383][T11586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 425.510217][ T5822] Bluetooth: hci5: command tx timeout [ 425.541252][T11578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.569805][T11578] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.580622][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.590259][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.597395][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.613684][ T4303] IPVS: stop unused estimator thread 0... [ 425.617475][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.626703][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.662392][T11578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.674505][T11578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.717858][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.739004][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.746170][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.759812][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.766980][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.877297][T11578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.978452][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.982683][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 426.122869][T11578] veth0_vlan: entered promiscuous mode [ 426.138750][T11578] veth1_vlan: entered promiscuous mode [ 426.163713][ T5891] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 426.171985][ T5891] usb 6-1: config 0 has no interface number 0 [ 426.182298][T11578] veth0_macvtap: entered promiscuous mode [ 426.188138][ T5891] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.204409][T11578] veth1_macvtap: entered promiscuous mode [ 426.212562][ T5891] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 426.221994][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.230092][ T5891] usb 6-1: Product: syz [ 426.234315][ T5891] usb 6-1: Manufacturer: syz [ 426.239145][ T5891] usb 6-1: SerialNumber: syz [ 426.242733][T11586] veth0_vlan: entered promiscuous mode [ 426.250649][ T5891] usb 6-1: config 0 descriptor?? [ 426.265738][T11578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.270532][ T5891] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 426.276612][T11586] veth1_vlan: entered promiscuous mode [ 426.296175][T11578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.314429][ T6198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.335933][ T6198] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.345293][ T6198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.356659][ T6198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.382212][T11586] veth0_macvtap: entered promiscuous mode [ 426.411445][T11586] veth1_macvtap: entered promiscuous mode [ 426.436381][ T7361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.448482][ T7361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.463241][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.485907][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.502062][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.513674][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.622801][ T5822] Bluetooth: hci1: command tx timeout [ 426.671714][ T6198] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.682085][ T6198] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.695207][ T6198] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.704768][ T6198] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.280352][ T7361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.293068][ T7361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.355840][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.363804][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.573213][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 427.855745][ T5822] Bluetooth: hci5: command tx timeout [ 427.864748][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 427.875822][ T9] usb 7-1: config 0 has no interface number 0 [ 427.892763][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.907266][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 427.916643][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.924888][ T9] usb 7-1: Product: syz [ 427.932835][ T9] usb 7-1: Manufacturer: syz [ 427.938342][ T9] usb 7-1: SerialNumber: syz [ 427.955525][ T9] usb 7-1: config 0 descriptor?? [ 427.963942][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #1 [ 428.584073][ C0] hrtimer: interrupt took 24535 ns [ 428.992731][ T5824] usb 6-1: USB disconnect, device number 13 [ 429.003520][ T5824] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 429.604444][ T5824] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 429.780981][ T5824] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 429.812619][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.822747][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 429.935991][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 429.984996][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.995480][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.007114][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.015800][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.031438][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.060363][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.060363][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.086347][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.094865][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.105516][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.113522][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.138177][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.150402][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.372903][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.405657][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.432824][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 430.482502][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.516594][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 430.857033][ T5813] usb 7-1: USB disconnect, device number 2 [ 431.091593][ T5813] yurex 7-1:0.50: USB YUREX #1 now disconnected [ 431.111464][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.156067][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 431.188014][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.241786][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.406316][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 431.449578][ T5824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 431.462069][ T5824] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 431.493318][ T5824] usb 8-1: config 0 interface 0 has no altsetting 0 [ 431.503892][T11759] syzkaller0: entered promiscuous mode [ 431.509473][ T5824] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 431.509488][T11759] syzkaller0: entered allmulticast mode [ 431.533688][ T5824] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 431.684917][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 432.093043][ T5824] usb 8-1: Product: syz [ 432.356290][ T5817] Bluetooth: hci0: command tx timeout [ 432.752943][ T869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 432.952623][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880594fdc00: rx timeout, send abort [ 432.961029][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880594fdc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 432.977427][ T5824] usb 8-1: Manufacturer: syz [ 432.982043][ T5824] usb 8-1: SerialNumber: syz [ 432.992982][ T5824] usb 8-1: config 0 descriptor?? [ 433.005049][ T5824] usb 8-1: can't set config #0, error -71 [ 433.007364][ T869] usb 7-1: Using ep0 maxpacket: 32 [ 433.013170][ T5824] usb 8-1: USB disconnect, device number 2 [ 433.044260][ T869] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 433.063618][ T869] usb 7-1: config 0 has no interface number 0 [ 433.090916][ T869] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 433.115888][ T869] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 433.139729][ T869] usb 7-1: config 0 interface 255 has no altsetting 0 [ 433.159776][ T869] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 433.168886][ T869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.177157][ T869] usb 7-1: Product: syz [ 433.181468][ T869] usb 7-1: Manufacturer: syz [ 433.186228][ T869] usb 7-1: SerialNumber: syz [ 433.204003][ T869] usb 7-1: config 0 descriptor?? [ 433.443686][ T869] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 434.487478][T11745] chnl_net:caif_netlink_parms(): no params data found [ 434.580017][ T5817] Bluetooth: hci0: command tx timeout [ 434.780884][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.787973][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.003997][T11745] bridge_slave_0: entered allmulticast mode [ 435.041525][T11745] bridge_slave_0: entered promiscuous mode [ 435.085676][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.098354][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.117786][T11745] bridge_slave_1: entered allmulticast mode [ 435.127213][T11745] bridge_slave_1: entered promiscuous mode [ 435.175820][T11745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.241636][T11745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.440604][ T869] gspca_stk1135: reg_w 0x200 err -71 [ 435.448312][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.464047][ T869] gspca_stk1135: Sensor write failed [ 435.469347][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.516203][ T869] gspca_stk1135: Sensor write failed [ 435.522907][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.543325][ T869] gspca_stk1135: Sensor read failed [ 435.544874][T11745] team0: Port device team_slave_0 added [ 435.558977][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.574582][ T869] gspca_stk1135: Sensor read failed [ 435.577447][T11745] team0: Port device team_slave_1 added [ 435.579921][ T869] gspca_stk1135: Detected sensor type unknown (0x0) [ 435.602427][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.610536][ T869] gspca_stk1135: Sensor read failed [ 435.619700][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.633873][ T869] gspca_stk1135: Sensor read failed [ 435.643575][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.650487][ T869] gspca_stk1135: Sensor write failed [ 435.656977][ T869] gspca_stk1135: serial bus timeout: status=0x00 [ 435.658686][T11745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.663538][ T869] gspca_stk1135: Sensor write failed [ 435.676263][ T869] stk1135 7-1:0.255: probe with driver stk1135 failed with error -71 [ 435.698247][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.727925][ T869] usb 7-1: USB disconnect, device number 3 [ 435.748710][T11745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.786578][T11745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.799191][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.825758][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 435.857139][T11745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.911071][T11745] hsr_slave_0: entered promiscuous mode [ 435.918070][T11745] hsr_slave_1: entered promiscuous mode [ 435.928429][T11745] debugfs: 'hsr0' already exists in 'hsr' [ 435.934404][T11745] Cannot create hsr debugfs directory [ 436.155706][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 436.178034][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.190816][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.315199][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.469646][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.495262][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.503561][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 436.503575][ T30] audit: type=1326 audit(1762565217.741:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.534858][ T30] audit: type=1326 audit(1762565217.741:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.540483][ T9] usb 8-1: config 0 descriptor?? [ 436.583629][ T30] audit: type=1326 audit(1762565217.760:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.611195][ T30] audit: type=1326 audit(1762565217.760:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.642971][ T30] audit: type=1326 audit(1762565217.760:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.666823][ T30] audit: type=1326 audit(1762565217.760:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.772650][T11813] syz.5.1844: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.777041][ T30] audit: type=1326 audit(1762565217.760:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.812294][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.5.1844 Not tainted syzkaller #0 PREEMPT(full) [ 436.812321][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.812331][T11813] Call Trace: [ 436.812338][T11813] [ 436.812345][T11813] dump_stack_lvl+0x16c/0x1f0 [ 436.812379][T11813] warn_alloc+0x248/0x3a0 [ 436.812415][T11813] ? __pfx_warn_alloc+0x10/0x10 [ 436.812443][T11813] ? irqentry_exit+0x3b/0x90 [ 436.812466][T11813] ? xskq_create+0xfb/0x1d0 [ 436.812496][T11813] ? xskq_create+0xfb/0x1d0 [ 436.812520][T11813] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 436.812553][T11813] ? xskq_create+0xfb/0x1d0 [ 436.812583][T11813] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.812615][T11813] ? xskq_create+0xfb/0x1d0 [ 436.812639][T11813] vmalloc_user_noprof+0x9e/0xe0 [ 436.812661][T11813] ? xskq_create+0xfb/0x1d0 [ 436.812701][T11813] xskq_create+0xfb/0x1d0 [ 436.812727][T11813] xsk_setsockopt+0x74e/0x9a0 [ 436.812751][T11813] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.812775][T11813] ? find_held_lock+0x2b/0x80 [ 436.812804][T11813] ? selinux_socket_setsockopt+0x6a/0x80 [ 436.812842][T11813] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.812867][T11813] do_sock_setsockopt+0xf3/0x1d0 [ 436.812902][T11813] __sys_setsockopt+0x1a0/0x230 [ 436.812931][T11813] __x64_sys_setsockopt+0xbd/0x160 [ 436.812952][T11813] ? do_syscall_64+0x91/0xfa0 [ 436.812967][T11813] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.812994][T11813] do_syscall_64+0xcd/0xfa0 [ 436.813012][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.813031][T11813] RIP: 0033:0x7f2f3e58f6c9 [ 436.813046][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.813063][T11813] RSP: 002b:00007f2f3f4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.813080][T11813] RAX: ffffffffffffffda RBX: 00007f2f3e7e6090 RCX: 00007f2f3e58f6c9 [ 436.813091][T11813] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 436.813102][T11813] RBP: 00007f2f3e611f91 R08: 0000000000000004 R09: 0000000000000000 [ 436.813112][T11813] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 436.813123][T11813] R13: 00007f2f3e7e6128 R14: 00007f2f3e7e6090 R15: 00007ffd48276138 [ 436.813149][T11813] [ 436.813702][T11813] Mem-Info: [ 436.823363][ T30] audit: type=1326 audit(1762565217.760:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.841500][ T5817] Bluetooth: hci0: command tx timeout [ 436.846193][ T30] audit: type=1326 audit(1762565217.760:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.877979][T11813] active_anon:28708 inactive_anon:0 isolated_anon:0 [ 436.877979][T11813] active_file:19719 inactive_file:40759 isolated_file:0 [ 436.877979][T11813] unevictable:768 dirty:365 writeback:0 [ 436.877979][T11813] slab_reclaimable:12545 slab_unreclaimable:101623 [ 436.877979][T11813] mapped:32561 shmem:18277 pagetables:1254 [ 436.877979][T11813] sec_pagetables:0 bounce:0 [ 436.877979][T11813] kernel_misc_reclaimable:0 [ 436.877979][T11813] free:1265448 free_pcp:17891 free_cma:0 [ 436.888014][ T30] audit: type=1326 audit(1762565217.760:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.6.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 436.891802][T11813] Node 0 active_anon:114932kB inactive_anon:0kB active_file:78876kB inactive_file:162836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130244kB dirty:1456kB writeback:0kB shmem:71572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12068kB pagetables:4848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.220359][T11813] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.251103][T11813] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.283791][T11813] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 437.290087][T11813] Node 0 DMA32 free:1156752kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110632kB inactive_anon:0kB active_file:78876kB inactive_file:162836kB unevictable:1536kB writepending:1456kB zspages:0kB present:3129332kB managed:2544852kB mlocked:0kB bounce:0kB free_pcp:54152kB local_pcp:37316kB free_cma:0kB [ 437.316129][T11745] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 437.329921][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.338850][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.341540][T11813] lowmem_reserve[]: 0 0 1 1 1 [ 437.350992][T11813] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.380742][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 437.385744][T11813] Node 1 Normal free:3895840kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16160kB local_pcp:9280kB free_cma:0kB [ 437.400766][T11745] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 437.425855][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 437.431129][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.431204][T11813] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 437.438788][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.442972][T11745] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 437.444051][T11813] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.467933][T11813] Node 0 DMA32: 1288*4kB (UME) 467*8kB (UME) 436*16kB (UME) 485*32kB (UME) 285*64kB (UME) 570*128kB (UME) 367*256kB (UME) 170*512kB (UME) 63*1024kB (UME) 19*2048kB (UM) 183*4096kB (UM) = 1156568kB [ 437.487920][T11813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.499989][T11813] Node 1 Normal: 186*4kB (UE) 55*8kB (UME) 38*16kB (UME) 151*32kB (UME) 51*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3895840kB [ 437.519108][T11813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.529217][T11813] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.538738][T11813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.548455][T11813] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.557850][T11813] 78752 total pagecache pages [ 437.562732][T11813] 0 pages in swap cache [ 437.566929][T11813] Free swap = 124996kB [ 437.573234][T11813] Total swap = 124996kB [ 437.577493][T11813] 2097051 pages RAM [ 437.581441][T11813] 0 pages HighMem/MovableOnly [ 437.586142][T11813] 428748 pages reserved [ 437.590336][T11813] 0 pages cma reserved [ 437.799635][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.809529][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.817389][T11745] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 437.817826][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.834924][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.843937][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.853360][ T9] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 437.876172][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002B/input/input41 [ 437.965979][ T9] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 438.083270][ T9] usb 8-1: USB disconnect, device number 3 [ 438.145262][T11745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.412503][T11831] fido_id[11831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 438.421231][T11745] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.502828][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.510007][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.522961][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.530126][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.734349][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'. [ 439.033470][ T5817] Bluetooth: hci0: command tx timeout [ 439.773152][T11745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.994132][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b11b000: rx timeout, send abort [ 440.002694][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807b11b000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 440.036426][T11745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.514152][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1859'. [ 440.525220][T11874] bridge_slave_1: left allmulticast mode [ 440.534874][T11874] bridge_slave_1: left promiscuous mode [ 440.548132][T11874] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.588009][T11874] bridge_slave_0: left allmulticast mode [ 440.598528][T11874] bridge_slave_0: left promiscuous mode [ 440.608318][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.840437][T11745] veth0_vlan: entered promiscuous mode [ 440.927194][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1863'. [ 441.736464][T11745] veth1_vlan: entered promiscuous mode [ 441.772904][T11745] veth0_macvtap: entered promiscuous mode [ 441.795427][T11745] veth1_macvtap: entered promiscuous mode [ 441.943853][T11745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.957017][T11745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.976449][ T1014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.991592][ T1014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.043276][ T1014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.076568][ T1014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.192576][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880586fd800: rx timeout, send abort [ 442.201068][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880586fd800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 442.398768][T11905] Bluetooth: MGMT ver 1.23 [ 442.518738][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 442.518749][ T30] audit: type=1400 audit(1762565223.381:667): avc: denied { call } for pid=11906 comm="syz.6.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 442.635893][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.657640][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.752592][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.767396][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.039760][ T30] audit: type=1400 audit(1762565223.868:668): avc: denied { mounton } for pid=11927 comm="syz.8.1829" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 443.716763][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1876'. [ 444.979865][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888058436400: rx timeout, send abort [ 444.988429][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058436400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 446.128828][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 446.348130][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.375771][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.394288][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 446.403505][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 446.411809][ T9] usb 6-1: Manufacturer: syz [ 446.418261][ T9] usb 6-1: config 0 descriptor?? [ 447.167364][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1889'. [ 447.540174][ T9] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002C/input/input42 [ 448.203967][ T9] uclogic 0003:256C:006D.002C: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 448.282311][ T9] usb 6-1: USB disconnect, device number 14 [ 448.382311][T10862] udevd[10862]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 448.396305][T10862] udevd[10862]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 448.432086][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888142f16000: rx timeout, send abort [ 448.440621][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888142f16000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 448.507354][T11995] fido_id[11995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 448.558780][ T5888] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 448.566868][ T30] audit: type=1326 audit(1762565229.040:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d4db8f6c9 code=0x0 [ 448.772097][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 448.801021][ T5888] usb 7-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 448.822353][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.842137][ T5888] usb 7-1: config 0 descriptor?? [ 448.852648][ T5888] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 448.863037][ T5888] ftdi_sio ttyUSB0: unknown device type: 0x256 [ 449.081726][ T5888] usb 7-1: USB disconnect, device number 4 [ 449.163872][ T5888] ftdi_sio 7-1:0.0: device disconnected [ 450.410492][T12050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1906'. [ 450.423677][T12050] ip6gre1: entered promiscuous mode [ 450.428958][T12050] ip6gre1: entered allmulticast mode [ 451.947419][ T30] audit: type=1800 audit(1762565232.099:670): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1908" name="/" dev="fuse" ino=9 res=0 errno=0 [ 452.001383][ T869] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 452.161498][ T869] usb 7-1: Using ep0 maxpacket: 32 [ 452.229106][ T869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.237209][ T869] usb 7-1: config 0 has no interface number 0 [ 452.248604][ T869] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 452.303257][ T869] usb 7-1: config 0 interface 1 has no altsetting 0 [ 452.311444][ T30] audit: type=1400 audit(1762565232.539:671): avc: denied { ioctl } for pid=12079 comm="syz.4.1916" path="socket:[44733]" dev="sockfs" ino=44733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 452.356577][ T869] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 452.373520][ T869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.386083][ T869] usb 7-1: Product: syz [ 452.394013][ T869] usb 7-1: Manufacturer: syz [ 452.398957][ T869] usb 7-1: SerialNumber: syz [ 452.550577][ T869] usb 7-1: config 0 descriptor?? [ 452.816456][ T869] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 452.877957][ T869] cx231xx 7-1:0.1: Failed to read PCB config [ 452.916558][ T869] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 453.305738][ T869] usb 7-1: USB disconnect, device number 5 [ 453.691498][T12106] binder: 12105:12106 ioctl 40049366 200000000040 returned -22 [ 453.745355][ T869] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 454.011512][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.017827][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.024160][ T869] usb 7-1: Using ep0 maxpacket: 32 [ 454.047878][ T869] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.070899][ T869] usb 7-1: config 0 has no interface number 0 [ 454.077329][ T869] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 454.092049][ T869] usb 7-1: config 0 interface 1 has no altsetting 0 [ 454.102005][ T869] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 454.111294][ T869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.119440][ T869] usb 7-1: Product: syz [ 454.123578][ T869] usb 7-1: Manufacturer: syz [ 454.208624][ T869] usb 7-1: SerialNumber: syz [ 454.264213][ T869] usb 7-1: config 0 descriptor?? [ 454.672846][ T869] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 454.691099][ T869] cx231xx 7-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 454.828265][ T869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 454.875761][ T869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 454.885170][ T869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 454.897815][ T869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 454.915110][ T869] cx231xx 7-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 454.932419][ T869] cx231xx 7-1:0.1: Failed to set devmode to analog: error: -71 [ 454.972850][ T869] i2c i2c-2: Added multiplexed i2c bus 4 [ 454.985520][ T869] i2c i2c-2: Added multiplexed i2c bus 5 [ 455.015527][ T869] cx231xx 7-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 455.030699][ T869] cx231xx 7-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 455.164173][ T869] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71 [ 455.190398][ T869] usb 7-1: USB disconnect, device number 6 [ 455.679521][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 456.064533][ T9] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 456.072701][ T9] usb 8-1: config 0 has no interface number 0 [ 456.085147][ T9] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.106120][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 456.124858][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.180664][ T9] usb 8-1: Product: syz [ 456.255314][ T9] usb 8-1: Manufacturer: syz [ 456.277159][ T9] usb 8-1: SerialNumber: syz [ 456.305261][ T9] usb 8-1: config 0 descriptor?? [ 456.341904][ T9] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 458.013784][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1940'. [ 458.038130][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1940'. [ 458.211634][ T30] audit: type=1400 audit(1762565238.048:672): avc: denied { ioctl } for pid=12173 comm="syz.5.1941" path="socket:[43908]" dev="sockfs" ino=43908 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.629728][ T9] usb 8-1: USB disconnect, device number 4 [ 458.653406][ T9] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 458.702830][ T5817] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 458.840506][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1952'. [ 459.167793][T12215] fuse: Bad value for 'fd' [ 463.232400][ T5888] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 463.279810][ T30] audit: type=1326 audit(1762565242.800:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.402120][ T30] audit: type=1326 audit(1762565242.800:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.419020][ T5888] usb 9-1: Using ep0 maxpacket: 16 [ 463.426523][ T30] audit: type=1326 audit(1762565242.800:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.511693][ T30] audit: type=1326 audit(1762565242.800:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.546507][ T5888] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.595702][ T30] audit: type=1326 audit(1762565242.800:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.643021][ T30] audit: type=1326 audit(1762565242.800:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.727989][ T5888] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.759505][ T30] audit: type=1326 audit(1762565242.838:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.783918][ T30] audit: type=1326 audit(1762565242.838:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.807818][ T30] audit: type=1326 audit(1762565242.838:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.835122][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.843441][ T30] audit: type=1326 audit(1762565242.838:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.867002][ T30] audit: type=1326 audit(1762565242.838:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.873398][ T5888] usb 9-1: Product: syz [ 463.907033][ T30] audit: type=1326 audit(1762565242.838:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 463.960287][ T5888] usb 9-1: Manufacturer: syz [ 464.046288][ T5888] usb 9-1: SerialNumber: syz [ 464.536224][ T30] audit: type=1326 audit(1762565242.838:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 464.536979][ T5888] usb 9-1: config 0 descriptor?? [ 464.724577][ T30] audit: type=1326 audit(1762565242.838:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.6.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874b18f6c9 code=0x7ffc0000 [ 464.976152][T12295] netlink: 'syz.7.1974': attribute type 9 has an invalid length. [ 464.983971][T12295] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1974'. [ 466.086947][ T869] usb 9-1: USB disconnect, device number 2 [ 466.705715][T12335] orangefs_devreq_write_iter: total:40: must be at least:8240: [ 467.892645][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 468.185670][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.207499][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.721373][ T5824] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 468.829754][ T5888] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 468.851905][ T5888] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.859932][ T5888] usb 7-1: Manufacturer: syz [ 468.871413][ T5888] usb 7-1: config 0 descriptor?? [ 468.950210][ T5824] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 468.965128][ T5824] usb 5-1: config 0 has no interface number 0 [ 468.991193][ T5813] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 469.010278][ T5824] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.036410][ T5824] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 469.053483][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.061626][ T5824] usb 5-1: Product: syz [ 469.066410][ T5824] usb 5-1: Manufacturer: syz [ 469.071020][ T5824] usb 5-1: SerialNumber: syz [ 469.087220][ T5824] usb 5-1: config 0 descriptor?? [ 469.125402][ T5824] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 469.191688][ T5813] usb 9-1: Using ep0 maxpacket: 16 [ 469.198286][ T5813] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.222434][ T5813] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.251624][ T5813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.286934][ T5813] usb 9-1: Product: syz [ 469.291397][ T5813] usb 9-1: Manufacturer: syz [ 469.297734][ T5813] usb 9-1: SerialNumber: syz [ 469.316357][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 469.359594][ T5813] usb 9-1: config 0 descriptor?? [ 469.364937][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.009180][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.020668][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.030158][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.037497][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.074836][ T5888] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 470.090684][ T5888] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 470.851626][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 470.851641][ T30] audit: type=1400 audit(1762565249.891:700): avc: denied { create } for pid=12386 comm="syz.5.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 470.996182][ T30] audit: type=1400 audit(1762565249.919:701): avc: denied { getopt } for pid=12386 comm="syz.5.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.239436][ T5824] usb 5-1: USB disconnect, device number 40 [ 471.245522][ T5888] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 471.263487][ T5888] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 471.274439][ T5824] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 471.283441][ T5888] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -71 [ 471.320701][ T5888] usb 7-1: USB disconnect, device number 7 [ 471.347192][ T9] usb 9-1: USB disconnect, device number 3 [ 471.526956][T12392] fido_id[12392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 474.108400][T12437] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2024'. [ 475.372589][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ab68400: rx timeout, send abort [ 475.380968][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807ab68400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 476.512331][ T5824] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 476.835643][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.890170][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 477.149429][ T5824] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 477.181370][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.197929][ T5824] usb 6-1: config 0 descriptor?? [ 477.678773][ T5824] kovaplus 0003:1E7D:2D50.002E: unknown main item tag 0x0 [ 477.696321][ T5824] kovaplus 0003:1E7D:2D50.002E: unknown main item tag 0x0 [ 477.712104][ T5824] kovaplus 0003:1E7D:2D50.002E: unknown main item tag 0x0 [ 477.720447][ T5824] kovaplus 0003:1E7D:2D50.002E: unknown main item tag 0x0 [ 477.728505][ T5824] kovaplus 0003:1E7D:2D50.002E: unknown main item tag 0x0 [ 477.756397][ T5824] kovaplus 0003:1E7D:2D50.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 477.891257][ T5824] kovaplus 0003:1E7D:2D50.002E: couldn't init struct kovaplus_device [ 477.926806][ T5824] kovaplus 0003:1E7D:2D50.002E: couldn't install mouse [ 477.939003][ T5824] kovaplus 0003:1E7D:2D50.002E: probe with driver kovaplus failed with error -71 [ 477.952216][ T5824] usb 6-1: USB disconnect, device number 15 [ 479.353426][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 479.377319][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2038'. [ 479.599175][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 479.627180][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 479.651051][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.861322][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 479.878447][ T9] pvrusb2: ********** [ 479.883396][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 480.050888][ T9] pvrusb2: Important functionality might not be entirely working. [ 480.070379][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 480.086212][ T9] pvrusb2: ********** [ 480.092599][ T2337] pvrusb2: Invalid write control endpoint [ 480.145097][ T2337] pvrusb2: Invalid write control endpoint [ 480.152999][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 480.162673][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 480.172134][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 480.194925][ T2337] pvrusb2: Device being rendered inoperable [ 480.203878][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 480.217180][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 480.231139][ T2337] pvrusb2: Attached sub-driver cx25840 [ 480.242345][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 480.263196][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 480.311991][T12513] pvrusb2: Attempted to execute control transfer when device not ok [ 480.333844][ T5813] usb 8-1: USB disconnect, device number 5 [ 481.317599][T12552] binder: 12551:12552 unknown command 0 [ 481.329768][T12552] binder: 12551:12552 ioctl c0306201 200000000080 returned -22 [ 482.026588][T12570] sctp: [Deprecated]: syz.5.2052 (pid 12570) Use of int in max_burst socket option deprecated. [ 482.026588][T12570] Use struct sctp_assoc_value instead [ 482.781196][ T5891] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 482.982611][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 483.004908][ T5891] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 483.027155][ T5891] usb 6-1: config 0 has no interface number 0 [ 483.502910][ T5891] usb 6-1: config 0 interface 12 has no altsetting 0 [ 483.659312][ T5891] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 483.668427][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.676393][ T5891] usb 6-1: Product: syz [ 483.713950][ T5891] usb 6-1: Manufacturer: syz [ 483.719181][ T5891] usb 6-1: SerialNumber: syz [ 483.738740][ T5891] usb 6-1: config 0 descriptor?? [ 484.115846][ T5824] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 484.299105][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.501288][ T5824] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 484.603827][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.619221][ T5824] usb 7-1: config 0 descriptor?? [ 484.630856][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 485.069862][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 485.077098][ T5824] pwc: recv_control_msg error -32 req 02 val 2700 [ 485.085631][ T5824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 485.093160][ T5824] pwc: recv_control_msg error -32 req 04 val 1000 [ 485.102149][ T5824] pwc: recv_control_msg error -32 req 04 val 1300 [ 485.110081][ T5824] pwc: recv_control_msg error -32 req 04 val 1400 [ 485.121406][ T5824] pwc: recv_control_msg error -32 req 02 val 2000 [ 485.343643][ T5824] pwc: recv_control_msg error -71 req 04 val 1500 [ 485.351598][ T5824] pwc: recv_control_msg error -71 req 02 val 2500 [ 485.362536][ T5824] pwc: recv_control_msg error -71 req 02 val 2400 [ 485.378038][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 485.385415][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 485.413455][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 485.432654][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 485.439451][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 485.451764][ T5824] pwc: Registered as video103. [ 485.468574][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input43 [ 485.530138][ T5824] usb 7-1: USB disconnect, device number 8 [ 485.530871][ T30] audit: type=1400 audit(1762565263.622:702): avc: denied { create } for pid=12625 comm="syz.7.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 486.329620][ T5891] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 486.346389][ T5891] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 486.371435][ T5891] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 486.385351][ T5891] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 486.405424][ T5891] usb 6-1: USB disconnect, device number 16 [ 487.632941][ T5891] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 487.816289][ T5891] usb 5-1: config 0 has no interfaces? [ 487.823527][ T5891] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 487.832980][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.885038][ T5891] usb 5-1: Product: syz [ 487.897295][ T5891] usb 5-1: Manufacturer: syz [ 487.906597][ T5891] usb 5-1: SerialNumber: syz [ 487.983416][ T5891] usb 5-1: config 0 descriptor?? [ 488.216295][ T5891] usb 5-1: USB disconnect, device number 41 [ 488.807725][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.823077][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.204261][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.213393][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.286239][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.332780][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 489.352900][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.516181][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 489.522625][ T10] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 489.545708][ T10] usb 6-1: config 0 has no interface number 0 [ 489.644393][ T10] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 489.685554][ T10] usb 6-1: config 0 interface 196 has no altsetting 0 [ 489.695925][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 489.707395][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.715412][ T30] audit: type=1804 audit(1762565267.532:703): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2091" name="/newroot/47/file0" dev="fuse" ino=1 res=1 errno=0 [ 489.752018][ T10] usb 6-1: Product: syz [ 489.756178][ T10] usb 6-1: Manufacturer: syz [ 489.781852][ T10] usb 6-1: SerialNumber: syz [ 489.865108][T12709] tipc: Started in network mode [ 489.874839][T12709] tipc: Node identity 12de6ba03d3f, cluster identity 4711 [ 489.898119][ T10] usb 6-1: config 0 descriptor?? [ 489.921013][T12709] tipc: Enabled bearer , priority 0 [ 489.921423][T12692] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 490.067369][T12712] syzkaller0: entered promiscuous mode [ 490.075071][T12712] syzkaller0: entered allmulticast mode [ 490.083588][T12712] tipc: Resetting bearer [ 490.119037][T12708] tipc: Resetting bearer [ 490.127178][T12716] afs: Unknown parameter 'F' [ 490.984804][ T10] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 491.055762][ T9] tipc: Node number set to 803302304 [ 491.075526][ T10] ipheth 6-1:0.196: probe with driver ipheth failed with error -110 [ 493.171462][T12708] tipc: Disabling bearer [ 493.204312][ T5891] usb 6-1: USB disconnect, device number 17 [ 494.081109][ T5824] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 494.583447][T12789] syzkaller0: entered allmulticast mode [ 494.645218][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 494.658529][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 494.670775][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.947377][ T5824] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 494.957967][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.998931][ T5824] usb 5-1: Product: syz [ 495.003627][ T5824] usb 5-1: Manufacturer: syz [ 495.008199][ T5824] usb 5-1: SerialNumber: syz [ 495.031885][ T5824] usb 5-1: config 0 descriptor?? [ 495.046767][ T5824] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 495.066776][ T5824] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 495.229955][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2116'. [ 495.266929][T12798] afs: Unknown parameter 'F' [ 495.702394][ T5824] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 495.716677][ T5824] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 496.492773][ T5824] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 496.979739][ T5824] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 497.011573][ T5824] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 497.031155][ T5824] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 497.046715][ T5824] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 497.054612][ T5824] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 497.069043][ T5824] usb 5-1: USB disconnect, device number 42 [ 498.494964][T12851] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2133'. [ 499.509815][ T30] audit: type=1400 audit(1762565276.680:704): avc: denied { sqpoll } for pid=12864 comm="syz.6.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 499.735882][ T30] audit: type=1400 audit(1762565276.914:705): avc: denied { create } for pid=12871 comm="syz.6.2140" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 499.797074][ T30] audit: type=1400 audit(1762565276.914:706): avc: denied { link } for pid=12871 comm="syz.6.2140" name="file1" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 499.838291][ T30] audit: type=1400 audit(1762565276.914:707): avc: denied { write } for pid=12871 comm="syz.6.2140" name="file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 499.885217][ T30] audit: type=1400 audit(1762565276.914:708): avc: denied { setattr } for pid=12871 comm="syz.6.2140" name="file0" dev="overlay" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 499.981039][ T30] audit: type=1400 audit(1762565276.914:709): avc: denied { read } for pid=12871 comm="syz.6.2140" name="file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 500.557997][ T5813] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 500.707564][ T5891] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 500.766893][ T5813] usb 7-1: Using ep0 maxpacket: 16 [ 500.785882][ T5813] usb 7-1: config 0 has no interfaces? [ 500.799664][ T5813] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 500.814518][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.831836][ T5813] usb 7-1: Product: syz [ 500.840751][ T5813] usb 7-1: Manufacturer: syz [ 500.869136][ T5813] usb 7-1: SerialNumber: syz [ 501.041377][ T5813] usb 7-1: config 0 descriptor?? [ 501.064840][ T5891] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.092810][ T5891] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 501.164895][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.350751][ T5891] usb 9-1: config 0 descriptor?? [ 501.447476][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 501.840798][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 501.849870][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 501.895030][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 501.901933][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 501.909484][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 501.916509][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 501.923357][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 501.937676][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 501.944830][ T5891] pwc: recv_control_msg error -32 req 04 val 1500 [ 502.054712][ T5824] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 502.167066][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 502.175798][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 502.183070][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 502.189933][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 502.214645][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.227754][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.233904][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.255537][ T5824] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.279106][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.280592][ T5891] pwc: Registered as video103. [ 502.325339][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 502.331069][ T5824] usb 5-1: config 0 descriptor?? [ 502.355853][ T5824] pwc: Askey VC010 type 2 USB webcam detected. [ 502.408401][ T5891] usb 9-1: USB disconnect, device number 4 [ 502.669594][T12906] afs: Unknown parameter 'dy' [ 502.707962][ T5813] usb 7-1: USB disconnect, device number 9 [ 502.956452][ T5824] pwc: recv_control_msg error -32 req 02 val 2b00 [ 502.984790][ T5824] pwc: recv_control_msg error -32 req 02 val 2700 [ 503.037724][ T5824] pwc: recv_control_msg error -32 req 02 val 2c00 [ 503.048891][ T5824] pwc: recv_control_msg error -32 req 04 val 1000 [ 503.060903][ T5824] pwc: recv_control_msg error -32 req 04 val 1300 [ 503.077441][ T5824] pwc: recv_control_msg error -32 req 04 val 1400 [ 503.122532][ T5824] pwc: recv_control_msg error -32 req 02 val 2000 [ 503.134739][ T5824] pwc: recv_control_msg error -32 req 02 val 2100 [ 503.357375][T12916] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 503.368193][ T5824] pwc: recv_control_msg error -71 req 02 val 2500 [ 503.540659][ T5824] pwc: recv_control_msg error -71 req 02 val 2400 [ 503.569830][ T5824] pwc: recv_control_msg error -71 req 02 val 2600 [ 503.660356][ T5824] pwc: recv_control_msg error -71 req 02 val 2900 [ 503.677855][ T5824] pwc: recv_control_msg error -71 req 02 val 2800 [ 503.718731][ T5824] pwc: recv_control_msg error -71 req 04 val 1100 [ 503.815128][ T5824] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.929405][ T5824] pwc: Registered as video103. [ 503.955590][ T5824] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 504.138239][ T5824] usb 5-1: USB disconnect, device number 43 [ 504.237356][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2152'. [ 504.387270][ T30] audit: type=1400 audit(1762565281.217:710): avc: denied { bind } for pid=12921 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.408775][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 504.510819][ T30] audit: type=1400 audit(1762565281.217:711): avc: denied { connect } for pid=12921 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.565392][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 504.670663][ T994] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.670722][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2152'. [ 504.701056][ T994] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.749154][ T994] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.757874][ T994] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.790633][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 506.965565][ T5824] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 506.993664][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.504822][ T5824] usb 8-1: Product: syz [ 507.546224][ T5824] usb 8-1: Manufacturer: syz [ 507.552527][ T5824] usb 8-1: SerialNumber: syz [ 507.847261][ T30] audit: type=1400 audit(1762565284.482:712): avc: denied { append } for pid=12983 comm="syz.6.2171" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 508.592015][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 508.638874][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 508.728700][T12999] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 510.016649][T13010] kvm: pic: non byte write [ 510.895693][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 510.915962][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 510.930780][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 510.943420][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 510.960747][ T5824] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 510.974747][T13027] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πFVluc'f`ކ;1 [ 510.997091][ T5824] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 511.058962][ T5824] usb 8-1: USB disconnect, device number 6 [ 511.145803][T13029] input: syz1 as /devices/virtual/input/input46 [ 512.501834][ T30] audit: type=1804 audit(1762565288.588:713): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2185" name="/newroot/75/file1" dev="fuse" ino=1 res=1 errno=0 [ 512.542715][ T30] audit: type=1800 audit(1762565288.597:714): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2185" name="/" dev="fuse" ino=1 res=0 errno=0 [ 513.724288][ T30] audit: type=1400 audit(1762565289.991:715): avc: denied { connect } for pid=13042 comm="syz.6.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.710287][T13055] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 514.988917][T13062] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 515.556929][ T5824] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 515.729394][T13071] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 515.880311][T13071] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 515.944551][ T5824] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 515.979286][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.997801][ T5824] usb 7-1: Product: syz [ 515.999596][T13071] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 516.002090][ T5824] usb 7-1: Manufacturer: syz [ 516.015218][ T5824] usb 7-1: SerialNumber: syz [ 516.188062][T13071] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 516.200256][T13071] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 516.255002][T13071] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 516.299249][T13071] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 516.323189][T13071] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 516.456002][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 516.525822][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 517.305874][ T5891] IPVS: starting estimator thread 0... [ 517.502915][T13097] IPVS: using max 37 ests per chain, 88800 per kthread [ 517.656099][T13099] veth1_to_bond: entered allmulticast mode [ 517.664637][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2205'. [ 517.824215][T13099] bond0: (slave bond_slave_1): Releasing backup interface [ 518.127522][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 519.289757][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 519.681049][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.693837][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.122926][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 520.204437][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 520.568405][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 521.250256][ T5824] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 521.404012][ T5824] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 521.661206][ T5824] usb 7-1: USB disconnect, device number 10 [ 522.430834][ T30] audit: type=1400 audit(1762565298.129:716): avc: denied { append } for pid=13165 comm="syz.8.2223" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.945913][ T30] audit: type=1326 audit(1762565298.606:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.5.2227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f3e58f6c9 code=0x0 [ 524.817900][T13205] syzkaller0: entered promiscuous mode [ 524.827945][T13205] syzkaller0: entered allmulticast mode [ 525.722470][T13219] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 526.116175][T13226] kAFS: No cell specified [ 527.374764][T13247] netlink: 6 bytes leftover after parsing attributes in process `syz.8.2245'. [ 527.406382][T13247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.724937][T13293] syzkaller0: entered promiscuous mode [ 530.733998][T13293] syzkaller0: entered allmulticast mode [ 530.931483][ T977] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 531.125054][ T977] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.143856][ T977] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 531.258519][ T977] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.346919][ T977] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 531.368386][ T977] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 531.385058][ T977] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.400309][ T977] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.408327][ T977] usb 9-1: Product: syz [ 531.413830][ T977] usb 9-1: Manufacturer: syz [ 531.421975][ T30] audit: type=1400 audit(1762565306.538:718): avc: denied { append } for pid=13298 comm="syz.4.2260" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 531.446916][ T977] cdc_wdm 9-1:1.0: skipping garbage [ 531.452134][ T977] cdc_wdm 9-1:1.0: skipping garbage [ 531.472424][ T977] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 531.478782][ T977] cdc_wdm 9-1:1.0: Unknown control protocol [ 531.558143][T13308] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 531.694382][ T30] audit: type=1400 audit(1762565306.800:719): avc: denied { read write } for pid=13290 comm="syz.8.2256" name="cdc-wdm0" dev="devtmpfs" ino=3789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 531.774519][ T30] audit: type=1400 audit(1762565306.800:720): avc: denied { open } for pid=13290 comm="syz.8.2256" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 531.787942][ T977] usb 9-1: USB disconnect, device number 5 [ 531.800892][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 531.813156][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 531.819234][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 532.532587][T13317] syzkaller0: entered promiscuous mode [ 532.538312][T13317] syzkaller0: entered allmulticast mode [ 532.553182][T13317] tipc: Enabled bearer , priority 0 [ 532.560817][T13316] tipc: Resetting bearer [ 532.574064][T13316] tipc: Disabling bearer [ 533.141486][T13325] tipc: Enabled bearer , priority 0 [ 533.332582][T13325] syzkaller0: entered promiscuous mode [ 533.342290][T13325] syzkaller0: entered allmulticast mode [ 533.348401][T13325] tipc: Resetting bearer [ 533.410269][ T977] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 533.423424][T13329] syzkaller0: entered promiscuous mode [ 533.428919][T13329] syzkaller0: entered allmulticast mode [ 533.482963][T13324] tipc: Resetting bearer [ 533.715226][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 533.737260][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 141, setting to 64 [ 533.828599][ T977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 533.839250][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.878418][ T977] usb 5-1: config 0 descriptor?? [ 533.899514][T13327] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 534.183386][ T977] ath6kl: Failed to submit usb control message: -71 [ 534.282410][ T977] ath6kl: unable to send the bmi data to the device: -71 [ 534.304181][ T977] ath6kl: Unable to send get target info: -71 [ 534.396306][ T977] ath6kl: Failed to init ath6kl core: -71 [ 534.416145][ T977] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 534.518799][ T977] usb 5-1: USB disconnect, device number 44 [ 538.429825][T13324] tipc: Disabling bearer [ 538.658249][ T30] audit: type=1400 audit(1762565313.292:721): avc: denied { create } for pid=13380 comm="syz.6.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 540.384524][T13371] kthread_run failed with err -4 [ 542.306298][ T977] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 542.673503][T13426] Cannot find set identified by id 3 to match [ 542.721625][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 542.733308][ T977] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 542.741585][ T977] usb 7-1: config 0 has no interface number 1 [ 542.747952][ T977] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.979950][ T977] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 542.992024][ T977] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 543.005864][ T977] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 543.337756][ T977] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.408688][ T977] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.438623][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.464906][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.511143][ T977] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 543.555664][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.590498][ T977] usb 7-1: Product: syz [ 543.611001][ T977] usb 7-1: Manufacturer: syz [ 543.615777][ T977] usb 7-1: SerialNumber: syz [ 543.634889][ T977] usb 7-1: config 0 descriptor?? [ 543.640481][T13420] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 543.664391][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 543.673557][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 543.687761][ T977] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.768145][ T977] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.976357][T13417] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2291'. [ 544.004192][ T9] usb 7-1: USB disconnect, device number 11 [ 544.107158][T13441] syzkaller0: entered promiscuous mode [ 544.113234][T13441] syzkaller0: entered allmulticast mode [ 544.582872][T13446] syzkaller0: entered promiscuous mode [ 544.588483][T13446] syzkaller0: entered allmulticast mode [ 544.881296][ T977] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 545.173717][ T977] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 545.190535][ T977] usb 6-1: config 0 has no interface number 0 [ 545.209448][ T977] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.264133][ T977] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 545.593846][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.602185][ T977] usb 6-1: Product: syz [ 545.608497][ T977] usb 6-1: Manufacturer: syz [ 545.613114][ T977] usb 6-1: SerialNumber: syz [ 545.631884][ T977] usb 6-1: config 0 descriptor?? [ 545.655658][ T977] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 546.443414][ T30] audit: type=1400 audit(1762565320.027:722): avc: denied { map } for pid=13467 comm="syz.7.2306" path="socket:[52371]" dev="sockfs" ino=52371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.873432][T13472] syzkaller0: entered promiscuous mode [ 547.884695][T13472] syzkaller0: entered allmulticast mode [ 548.609925][T13482] svc: failed to register nfsdv3 RPC service (errno 111). [ 548.752328][ T977] usb 6-1: USB disconnect, device number 18 [ 548.783258][ T30] audit: type=1400 audit(1762565322.777:723): avc: denied { setopt } for pid=13484 comm="syz.8.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 548.805127][ T977] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 548.809422][T13482] svc: failed to register nfsaclv3 RPC service (errno 111). [ 549.270108][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 549.683866][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2313'. [ 550.706409][ T30] audit: type=1400 audit(1762565324.582:724): avc: denied { listen } for pid=13506 comm="syz.4.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 550.734469][ T30] audit: type=1400 audit(1762565324.601:725): avc: denied { accept } for pid=13506 comm="syz.4.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 550.788511][ T30] audit: type=1400 audit(1762565324.657:726): avc: denied { rename } for pid=13500 comm="syz.7.2314" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 550.816111][ T30] audit: type=1400 audit(1762565324.685:727): avc: denied { unlink } for pid=13500 comm="syz.7.2314" name="file0" dev="fuse" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 551.007333][T13519] syzkaller0: entered promiscuous mode [ 551.031890][T13519] syzkaller0: entered allmulticast mode [ 552.023981][T13536] netlink: 'syz.5.2318': attribute type 11 has an invalid length. [ 554.245661][ T977] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 554.479583][T13564] tipc: Enabling of bearer rejected, failed to enable media [ 554.589174][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 554.752052][ T977] usb 5-1: config 0 has no interfaces? [ 554.826825][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 554.874472][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 555.085324][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 555.106386][ T977] usb 5-1: Manufacturer: syz [ 555.135854][ T977] usb 5-1: config 0 descriptor?? [ 555.272726][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 555.326158][ T30] audit: type=1400 audit(1762565328.904:728): avc: denied { read } for pid=13578 comm="syz.8.2332" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.584539][ T30] audit: type=1400 audit(1762565328.904:729): avc: denied { open } for pid=13578 comm="syz.8.2332" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.609886][ T30] audit: type=1400 audit(1762565328.913:730): avc: denied { ioctl } for pid=13578 comm="syz.8.2332" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.652378][ T977] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 555.698234][T13550] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 555.800924][T13583] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2334'. [ 555.810164][T13583] bond_slave_0: entered promiscuous mode [ 555.816057][T13583] bond_slave_1: entered promiscuous mode [ 555.857819][ T977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.926007][ T977] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 555.926517][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 555.938163][ T977] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.049833][ T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 556.063503][ T9] usb 6-1: config 0 has no interface number 0 [ 556.074249][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.095035][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.107612][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 556.123378][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.141866][ T977] usb 7-1: Product: syz [ 556.146297][ T9] usb 6-1: Product: syz [ 556.156934][ T977] usb 7-1: Manufacturer: syz [ 556.160688][ T9] usb 6-1: Manufacturer: syz [ 556.181314][ T977] usb 7-1: SerialNumber: syz [ 556.187044][ T9] usb 6-1: SerialNumber: syz [ 556.204223][ T977] cdc_mbim 7-1:1.0: skipping garbage [ 556.212770][ T9] usb 6-1: config 0 descriptor?? [ 556.228866][ T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 556.256374][ T9] em28xx 6-1:0.132: Video interface 132 found: [ 556.616335][T13576] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 556.954381][ T9] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 557.584173][ T869] usb 5-1: USB disconnect, device number 45 [ 557.784060][T13576] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 557.823409][ T977] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 557.859223][ T977] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 558.203539][T13576] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 558.216115][ T9] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 558.233946][ T9] em28xx 6-1:0.132: board has no eeprom [ 558.241180][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 558.241336][T13576] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 558.247411][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 558.265216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.275258][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 558.281579][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 96 5b fa f8 48 8d 7b 34 48 b8 00 00 [ 558.301159][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 558.307201][ C0] RAX: 0000000000000001 RBX: ffff88802924d400 RCX: 1ffff11005249a90 [ 558.315160][ C0] RDX: 0000000000000000 RSI: ffffffff88c2b198 RDI: ffff88802924d480 [ 558.323116][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 558.331067][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 558.339026][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 558.346987][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 558.356020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.362584][ C0] CR2: 00007f003c37f2a7 CR3: 0000000034f8b000 CR4: 00000000003526f0 [ 558.370548][ C0] Call Trace: [ 558.373814][ C0] [ 558.376651][ C0] comedi_buf_write_samples+0x406/0x640 [ 558.382191][ C0] parport_interrupt+0xec/0x150 [ 558.387024][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 558.392465][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 558.397897][ C0] __handle_irq_event_percpu+0x236/0x920 [ 558.403516][ C0] handle_irq_event+0xab/0x1e0 [ 558.408263][ C0] handle_edge_irq+0x3ca/0x9e0 [ 558.413006][ C0] __common_interrupt+0xd0/0x2f0 [ 558.417925][ C0] common_interrupt+0xba/0xe0 [ 558.422583][ C0] [ 558.425489][ C0] [ 558.428399][ C0] asm_common_interrupt+0x26/0x40 [ 558.433399][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 558.439014][ C0] Code: c7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 76 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 558.458601][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 558.464643][ C0] RAX: 0000000001442de3 RBX: 0000000000000000 RCX: ffffffff8b60b2a9 [ 558.472590][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b6dd RDI: ffffffff8bf07040 [ 558.480622][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 558.488570][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 558.496514][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 558.504469][ C0] ? ct_kernel_exit+0x139/0x190 [ 558.509307][ C0] default_idle+0x13/0x20 [ 558.513791][ C0] default_idle_call+0x6c/0xb0 [ 558.518535][ C0] do_idle+0x38d/0x500 [ 558.522591][ C0] ? __pfx_do_idle+0x10/0x10 [ 558.527164][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 558.532345][ C0] cpu_startup_entry+0x4f/0x60 [ 558.537094][ C0] rest_init+0x16b/0x2b0 [ 558.541319][ C0] ? acpi_subsystem_init+0x133/0x180 [ 558.546594][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 558.552126][ C0] start_kernel+0x3f6/0x4e0 [ 558.556608][ C0] x86_64_start_reservations+0x18/0x30 [ 558.562044][ C0] x86_64_start_kernel+0x130/0x190 [ 558.567136][ C0] common_startup_64+0x13e/0x148 [ 558.572055][ C0] [ 558.575071][ C0] Modules linked in: [ 558.578947][ C0] ---[ end trace 0000000000000000 ]--- [ 558.584373][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 558.590677][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 96 5b fa f8 48 8d 7b 34 48 b8 00 00 [ 558.610263][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010046 [ 558.616308][ C0] RAX: 0000000000000001 RBX: ffff88802924d400 RCX: 1ffff11005249a90 [ 558.624261][ C0] RDX: 0000000000000000 RSI: ffffffff88c2b198 RDI: ffff88802924d480 [ 558.632209][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 558.640155][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 558.648107][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 558.656055][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 558.664989][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.671549][ C0] CR2: 00007f003c37f2a7 CR3: 0000000034f8b000 CR4: 00000000003526f0 [ 558.679499][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 558.686858][ C0] Kernel Offset: disabled [ 558.691158][ C0] Rebooting in 86400 seconds..