last executing test programs: 22.957050859s ago: executing program 1 (id=1049): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) poll(&(0x7f0000000000), 0x0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 21.401376102s ago: executing program 1 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x800, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.015936175s ago: executing program 1 (id=1058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r1 = open(0x0, 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7b) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0x4fc0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x7c4f, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7355, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000a40)="06090a9f20b1b9868e7ebadd1f41f08be54eb7c953d712020eeb05420629fe7eb494191c97bf6df48fc879b91d658def0f964d5f2cecbbefe31455845f5e1373c15ef4e3be2f6ae58f81d933738c1f43068aac227a9def8a3026cbd3128363ed126e8f8bd5f9e0e0b268f51969e7c48b42ed796902377a312744bd14c67deb01c6b12c9d8f49118fc74b98613d973fc72eaae7d2d431e31e5ce7dfc8ae5a394fcec9c3fa577c6f9c7aa196449681bbc300792bbd7ff8205d0295f6e159e5c75bedeef2c52ca15bced3ac2072e6721b48093683a093948e6786f2e386fd45c70cb88eb1d04e6f68a285016a9eafd23a81d1836e80bec1989933601eb201c11ea7d218ba03b6ec597894c379592f89441c7a5615d26a3fc2ef33d8b76d1091b5b8c0b3a715cb8e6d85d22e3e7d6bbb3ba59d596cd8987713607b64a4b23a51813937fb209909e36716675f2a2f95a611624ea24cb596a8af10dec7d1384ea908e527f5eb30ab33f02128e0b2b79d7ef164c26cd6d2b2cf8d8d175b618ba5119ac12c65dbb63d855579a1347e94c3bc05d1b731e510522e3d7c2c686f0311fbfb02f1a7f9a92640ff4fb342f308d3f64f91d9c712fc893c8cc9759ab3624eeeb8fc8076bf004988bca3f56bf04d98bcb6a3b377c5e7239803f272ef859b1c862c453478048e2192550f9611855c6ec9f6101c5499a9e216c7537c14d218f6bd18fafa8b20aee2c1e078e20430e57766e8efffa775b6a35697997536fdf08b7b67951f5ece95cac5970f939080ba6c438971471a8956f1b3143c0989e56e11b7d983fe06c8c57dfc3f3b44dc68ecb3fd9ea9dc984d339e57bcbe6a7334072caf45186b58426d67502e3e8f98a4f0793f34ee34debe3f08bd35ff0d2d23b9e19cfca6f9db896d9220c41d5590157ef03201a9587ac407a3f974398ef7b9def3d730c630ab15a440bc13cdfe069ce38f313f028d9eca734715ca2f757e15068b36e462ff6852e8f56a1c3e316bb31c49127afbeaf9dfc138c4b9e4e7b37fb6ca83bd7d54df1454303527ca3e0a51c3335c4d5aef1c4bd8c005b0b2f775da34b7a718c4dae04ff12651b341f51258689ab281187425499fa7021fe20dd8e68acb3ec1d5ddf16da258fe256b4595a9e362a6c471cca3fe622a592c1d0277177eff34504200f8ebd7c65a56993d742895414b39aa076d8787871696739c628e69aed2a571c2979c041ff8d05082e4cc649170ccbf6f812aadad2a3f62164606b5812ef7f5a1dbf48acd7543072d4cab8e741d419a0066b422e5a5814081fa434fd0726c38a57814ceea0a0fdb98b8264e8405397e697c61ab4cf0cdf195cf3eeb8c971766f779cf75a63837f3102836b3847d9ba7cfd63b05b882f8339a93f7582de3d4a660c6af1d478d3d5b1965484373cf5575ae39f067836eb15432ae0e63be2f5e3f02e8c67118bf5463f5eb7dae2a0739f28cecdcd92db21b28dba874a75752af018f3426922864a6154efe257e4681e2754ca2d9913a5bf1985aca31c6698febf9e9d0321ff47f69c32f87d38547f5456c9799a2cded8dadd3ad0f8d1f525a463336271c6948678e7878cd4806cf96c1a418374e3f5ab79145877fd458dff805ec1d3d16f5724439d3f2970172f90ba03f0f2a32e63ee1b14d9113babc464da040a0c82c311e25e1c51ce9e7f64d6e1c49d0f3abb226a7c9794ecdc052fec91ea5d6abeac9fc7a2e5c8a3ac0b82ac1854b45b6b8d733dc37452133e1174f802494835844ce257ca04ec4af11e88b2e8d2d2025cd5316bbc7cc53d2433c1aa3968521c4dd3024963baf5acf919d95fe31ebddcd5c0d87e2efcae20af109e40f69395adfd5d1434af14d948fc4bebad14e9afa6ef55e56e2488dc8cdb5f00104fe365461f709c6612530a3ac8e6422b7e9db1535a8f224a432613809bb8b2d60ba1f4de68bc91fa1cfa2e6057827d1d373ba587fc7c36c674a9c505e571345916c9f9686daa63e8022d6db316237fea469d2901ca0404e9e613c4a0a1500a74a4da038fb01f840957befc1baa9fc087ff8a7ad284fb347b5987e28ab5395c8f2dfdee06cf7cbabf7f84c5e1b3152c3cb898d26015897f33cdd45a390f042e722b627273941854c76e46591ccc25534911a24fb377a2974a6bd224807ffe15af76733a535f3b85e259660857920c8415422ff0283702921f188d07f99ba1e35ad642865ad430346bed5fff218be768780b6380f96e48d543b7e8ce08be8f2a28f77ae60aa8c3dec943d61f3111128c0567aad7045c97a7777b658dfb1104d9381f7ecc3dba6c0b17808274cb6b7e6926652460c29bfb87c3bcaab4b5badcf7a80d402ee7f12f027127c989a76dc9e942706b8426f1714012f187da10df8ccc6ea9d53a2c33b94c0b86190c31e905cf6ecb7e53adac8ef86ee6828fe4ed9fb564eb22fcfca91981bd62e114b70b1232b8a96f8162eab52823c3c80cb3273114bc9b7a7ca3df7cbdb2d0fd0dca403ea4d8861c651591f7f67fec475794b8809a3d5d2bbed2769994e566cda0b2ffe4c507740372651e81a60289fe52e45cc1f925ffaf9aaec4c6ca44f4e130b3f51e4dfbbf8a9df1d8476df7e03f633d4300ef7ab15399153640a0af489433bf274732030bc98d32dfda3f8b4609033374d2ccc56dc9b714e76ed11b3271027704fa54bc56dd5b920e92ea3a143eb313ec09cf6fb9fad25e1fb02036e885e3a0f1a67a0c81bcf71e4de68d270a045665067dea2935e5b1a3978de762760bb2930711a84b0c5b2894ab56039f2199a9a7fa9bdbdb00b04cbc5a4e89055914f2e7776abcfc9090baf978dfe0065737e70a284f7b497292c7ff0d5e9d2a41318b22d6a72b5b59b48c36b7e46693d695adaf1a5aa349b2899c152516014e2ed8530224791889c7c80e33cdbb04ee7d494855fc5c73f305521a41e1d93125974fe015f988feb1ced21fb038440a88295f2a3fb81390795e220e320a3d1edc3e494c3f62a659f11d010710b7dd9b0c816d14a3bd4ce6b876362cdc7e65bc88f14e50a54008f81ef56de1fe17897df9a84a6a9e28f8452afeed282fd232fec79a03504f0b5471cad33af440a6f4f3d81fa69ea2201bcf618777b7afd21cafc10d19356777927351d40cea0e4b4f0562c803f6c3a7d059c7b9c898d2f0b67d94219665152663c230ff7172e8b7e20245a00dcaadc46f02ca4ccf88ac187b5107cfe0df54d40191eba506b9c9605d619ea22b525aafa305d52083d0bffff3ffecbce2d786a4e9b96ec8063748a42d84e7d0becd4091e9edf3acb4c4a75d5f6877cf91f053782f051d5296c5050709fd04eda3f317471e358a3c3b85ef2ce5f6db8527297a7e5cfc1685b347902a00acfb2395de04bffce3a72cdbd38daa5cb2f1da2220149882445acbf8ab4b5e246836874422bd77493ef7be801cb6b4e1ce72ead8fe6fbc66e404b58cdef067403adf070d40a34feacf332e7c502a8147944c7c4365b5e9622edb3b14aa978a11a7f5ca105cba4a4467e11b9b21c17d2c5a47d3da7b0bbdfc8ca095056a9765eae081c2d4ba411ef5d37c3bd1df9298d828eacb93aecc443e6b947743ddc68295925b1c2645e5c2be3ac7c166ba415757bfe7aa54ce597c57ee022059187c1603831176668ad22270b4ca2f04c291872d32ddfcc3a634ab5ed68e8467ae3d873d55cfafb69c1892f36887a02a85d253a4244e4678c6d9be62698f3eb8723dd38389cd6122d643c511a6bea021c87cb63b5edbc37698028dc876ab6f2b1fa138bf4b303b12882c610c7559bcd63a8d149f4a0f86776a2c3665fafdc9ce4044fabf79f7c21518b6734ce04236b3bee92d762c6918433cb35999dbec34258d17f81c5415b990f712f2d01aa51157f128fd46aa99342ab5acb332535d4efd89494aeb2602824e7893f403277b9dbd254cda64a28a952313b5a590c0a6b7201276879cb038816a35dee813aff30c2ee3bfe332669f74419dcd7836000ec4bb7505905cba77eb91286639d61f97dac93c19328397b4b7db7bb145e4b1b44ba1fd7a839972d2ebb7716a93be19234e1d13b6a8d84525a08f1b601a24df1d9e59e3f62fc542d669a8d3767cb4379a130f686221c36036a048b97b2d8e806ec4d76a7c9a3b132f8a80c739fc6bcc235023c26cf0a1271ac22b76004b7619d7e081db4197119437a3798ea13a6bf027394fbd6d3af19aff1efb8f87137f6375f57e43e8e9da71400ef657fca03d30f8b807a33764bb1e2e47e9a58fa5473ad6adcc934f4d658d21ed56d82ce5e22a11ed5bb43e2b195e00db80ae250ad807dd086cbd9c8d0543a997e5d6539064c3ef23074aa3ce1bd92c8be7102f3106fedb07b6c66dc19b2820afd10bd801d0271b99f67ce221eaa48e4256acd652b686b49d4550a1f413156a89722c8aa71960ed961b348652ac843e769a83b5990f4280672bd3a65c4b23514bf664de2e54fca07458ab3b4ddfaced3b38024fce5ac667e33b8b8e65b4e4d69d3b1adbfbe258bf738778f199cd191ff330c56288c2ea509b0e6149aa5670c6d15e3418f3b40dca0266543ee5bb6feaa06a533d13a3fb3eefab7d80e0b4cefc11e53f54a8ba2e0397cdeb0a1438a634c69708d5c526d8a023d7a8ebe6afeb4940c006169c2a90e7bcd849b7ee977503a947830e92e0eff3d02da0aefd95012015f4372171eb2a4e80c755eb12a96e6bfcc4992ffd7c40f804a01f42c0123192cd730a02ff4bbc0022f8dfc3a46c246c4b657dcf1a653d6619133fc7cd47fd26cccafa90e98a221461c2822b06a6adaa8dad37c21b67c0180da881bc1312e505a8bc696bd939025ebf4aebc6d8b2daa7a2e9c3ed142e53c16bf95e4b97f857887e539e3c15edf291311f44be020d699cb218ec50b0ada694516101fc9b1caff4d7649b691091f6386daec50a21ff7c1155ecce5e4dd2c19c23e65c73f42891d98373e0dfe15b4e0e4e581daf5450fb7f44cb606cd33928e2db023a8535376830c58dc0f541815a38d3f644a99d0dcabd64c6c0418ca60271698829e0c972cf187d27f8bd7a931819339d8adba08884201ba57b5a90d5612fbcd4a03fc583e96d6244c1395d2e75090fb7d783fdde40797c7302bf4a2a2259ccc6482d39219e11b3239263a144771ac1dd515ad12b58c8b77ae00578e1573a712f5f0f305a50358053f0d826ef56e32f584c5fd7fc4f60fcb8dbaa62c8040a0575b8ad5200e38a78aeb1c5bd3b49fdb7d8db80363c86a9ef1b29f0e29c929fe691b148d12767f31ede93937a118b3caf85f754a91f5b268f5b2a347863225d54414511454550c817cabaecb33a8345f4df219a439105cd0185c3af2ab7c32139c9d68354393798aa5fa75c5f2be89c7a5403d4424e475b619af059c82bd1e537354feef00dd49c1ba8dfb3f59a7004e7cdb", 0xf00}, {&(0x7f0000001a40)="c2f3a88da071d96c72693eb3431ab283e02e0f363a04667af64004fe25072cc8bdec97165b7cd5d3da1b40b282d040be0ac8e3dd5506c17ba5ea29f255230cbfea68c4809c41644dc5c8b675bf747a993b6a25f51f3acc86cba6be4c34e2cd78402771438492d4751b2fcbca206dfe5a20c18a1cb52d11cc980e7237ab298eaa282fb7ff6b605f5188894fd4b12728eb7982052826a1f10a2057340624271c430fc2ace54ef24f4c24f2223a177fd124fb45249912ec79e522d58e131811a06a6ff11acae9329cb8174b75750ed6a3ec7aa65a253a1551a6504b3c81ad34106194508af4a90a", 0xe6}, {&(0x7f0000001c40)="fcbd815ab68b3ab64697ca9e25b5e0bb927240f9842d9c6e7d1ee514b58f43554b32e2791121f4887c33febbb30edaed735efb3f89916e1b4a422d6129d12d1c143f95c6e7dd6712055b21ba42890aff8472f213c520ef67281edd62fd970cc0cb97fd78858ae0d7185720c0b1d4f0ad6fc3943821730f2be6ddb139c3c355490d758dc787ad983d173e7f6ad230ac604768aa4517d960b6a6b359b7d79ebb98b9dd455d8c19f726fe83c9fe5d428597d559e0186f20804e5288e7bc6321fea6c4d925f1", 0xc4}, {&(0x7f0000000200)="b6ac7564e536a21701b6ab4ee0133f998c65696c3f15287fe317b2166e2f01df8d297f14e79de9eac4cc05ce13b4a05389", 0x31}, {&(0x7f0000000280)}], 0x5) 16.74664829s ago: executing program 3 (id=1061): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES64], 0x0) 14.804088672s ago: executing program 3 (id=1065): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) poll(&(0x7f0000000000), 0x0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 13.052730084s ago: executing program 3 (id=1067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r1 = open(0x0, 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7b) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0x4fc0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x7c4f, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7355, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000a40)="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", 0xf00}, {&(0x7f0000001a40)="c2f3a88da071d96c72693eb3431ab283e02e0f363a04667af64004fe25072cc8bdec97165b7cd5d3da1b40b282d040be0ac8e3dd5506c17ba5ea29f255230cbfea68c4809c41644dc5c8b675bf747a993b6a25f51f3acc86cba6be4c34e2cd78402771438492d4751b2fcbca206dfe5a20c18a1cb52d11cc980e7237ab298eaa282fb7ff6b605f5188894fd4b12728eb7982052826a1f10a2057340624271c430fc2ace54ef24f4c24f2223a177fd124fb45249912ec79e522d58e131811a06a6ff11acae9329cb8174b75750ed6a3ec7aa65a253a1551a6504b3c81ad34106194508af4a90a", 0xe6}, {&(0x7f0000001c40)="fcbd815ab68b3ab64697ca9e25b5e0bb927240f9842d9c6e7d1ee514b58f43554b32e2791121f4887c33febbb30edaed735efb3f89916e1b4a422d6129d12d1c143f95c6e7dd6712055b21ba42890aff8472f213c520ef67281edd62fd970cc0cb97fd78858ae0d7185720c0b1d4f0ad6fc3943821730f2be6ddb139c3c355490d758dc787ad983d173e7f6ad230ac604768aa4517d960b6a6b359b7d79ebb98b9dd455d8c19f726fe83c9fe5d428597d559e0186f20804e5288e7bc6321fea6c4d925f1", 0xc4}, {&(0x7f0000000200)="b6ac7564e536a21701b6ab4ee0133f998c65696c3f15287fe317b2166e2f01df8d297f14e79de9eac4cc05ce13b4a05389", 0x31}, {&(0x7f0000000280)}], 0x5) 12.9906812s ago: executing program 0 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) 11.855873532s ago: executing program 0 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) llistxattr(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r7, 0x2000) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 9.413672823s ago: executing program 1 (id=1072): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x2, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x2c, 0x0, [0x8, 0x8, 0x0, 0x10001, 0xaab, 0xb, 0x0, 0x9, 0x9, 0xe2de, 0xffffffff, 0x3, 0x0, 0xf, 0xffff, 0xd]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x7, 0x7, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x2, 0xfffffffe, 0x6]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc", @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.412325283s ago: executing program 0 (id=1073): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES64], 0x0) 7.929860189s ago: executing program 3 (id=1075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005dce4d7096247be73e6b90d5b83c74553ba4b5fa4d6e91151b6bbe"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) fcntl$setflags(r4, 0x2, 0x1) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000000580)=[r11], 0x1, r8, r9, 0x3, 0x2, 0x2, 0x802, {0xac7c, 0x1, 0xa, 0x69, 0x4f49, 0x2, 0x4, 0x45, 0x412f, 0xe154, 0x4, 0x8007, 0x3ff, 0x7fff, "fe1d00043413000000000000000caa000000c1261e09cb5b1b73040900000010"}}) 7.753246926s ago: executing program 2 (id=1076): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) ptrace(0x4206, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x0, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080), 0x0, 0x800004, 0x10030, 0x1, 0x0}) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/crash_elfcorehdr_size', 0x80040, 0x0) read$alg(r4, &(0x7f0000000600)=""/138, 0x8a) recvmmsg(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x48, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x3, 0x5, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x700, 0x7, 0x9}}) 6.555728764s ago: executing program 0 (id=1077): r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) syz_open_dev$radio(0x0, 0x0, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 6.180416661s ago: executing program 3 (id=1078): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.046422774s ago: executing program 2 (id=1079): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48819) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x11) 5.970146312s ago: executing program 1 (id=1080): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r0 = open(0x0, 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7b) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0x4fc0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x7c4f, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7355, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000a40)="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", 0xf00}, {&(0x7f0000001a40)="c2f3a88da071d96c72693eb3431ab283e02e0f363a04667af64004fe25072cc8bdec97165b7cd5d3da1b40b282d040be0ac8e3dd5506c17ba5ea29f255230cbfea68c4809c41644dc5c8b675bf747a993b6a25f51f3acc86cba6be4c34e2cd78402771438492d4751b2fcbca206dfe5a20c18a1cb52d11cc980e7237ab298eaa282fb7ff6b605f5188894fd4b12728eb7982052826a1f10a2057340624271c430fc2ace54ef24f4c24f2223a177fd124fb45249912ec79e522d58e131811a06a6ff11acae9329cb8174b75750ed6a3ec7aa65a253a1551a6504b3c81ad34106194508af4a90a", 0xe6}, {&(0x7f0000001c40)="fcbd815ab68b3ab64697ca9e25b5e0bb927240f9842d9c6e7d1ee514b58f43554b32e2791121f4887c33febbb30edaed735efb3f89916e1b4a422d6129d12d1c143f95c6e7dd6712055b21ba42890aff8472f213c520ef67281edd62fd970cc0cb97fd78858ae0d7185720c0b1d4f0ad6fc3943821730f2be6ddb139c3c355490d758dc787ad983d173e7f6ad230ac604768aa4517d960b6a6b359b7d79ebb98b9dd455d8c19f726fe83c9fe5d428597d559e0186f20804e5288e7bc6321fea6c4d925f1", 0xc4}, {&(0x7f0000000200)="b6ac7564e536a21701b6ab4ee0133f998c65696c3f15287fe317b2166e2f01df8d297f14e79de9eac4cc05ce13b4a05389", 0x31}, {&(0x7f0000000280)}], 0x5) 4.87660128s ago: executing program 2 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.942958932s ago: executing program 2 (id=1082): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, 0x0, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3.099421215s ago: executing program 3 (id=1083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r1 = open(0x0, 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7b) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0x0, 0x0, 0x0, 0x448}, 0x0, [0x4fc0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x7c4f, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7355, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x3, 0x0, 0x0, 0x66, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000a40)="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", 0xf00}, {&(0x7f0000001a40)="c2f3a88da071d96c72693eb3431ab283e02e0f363a04667af64004fe25072cc8bdec97165b7cd5d3da1b40b282d040be0ac8e3dd5506c17ba5ea29f255230cbfea68c4809c41644dc5c8b675bf747a993b6a25f51f3acc86cba6be4c34e2cd78402771438492d4751b2fcbca206dfe5a20c18a1cb52d11cc980e7237ab298eaa282fb7ff6b605f5188894fd4b12728eb7982052826a1f10a2057340624271c430fc2ace54ef24f4c24f2223a177fd124fb45249912ec79e522d58e131811a06a6ff11acae9329cb8174b75750ed6a3ec7aa65a253a1551a6504b3c81ad34106194508af4a90a", 0xe6}, {&(0x7f0000001c40)="fcbd815ab68b3ab64697ca9e25b5e0bb927240f9842d9c6e7d1ee514b58f43554b32e2791121f4887c33febbb30edaed735efb3f89916e1b4a422d6129d12d1c143f95c6e7dd6712055b21ba42890aff8472f213c520ef67281edd62fd970cc0cb97fd78858ae0d7185720c0b1d4f0ad6fc3943821730f2be6ddb139c3c355490d758dc787ad983d173e7f6ad230ac604768aa4517d960b6a6b359b7d79ebb98b9dd455d8c19f726fe83c9fe5d428597d559e0186f20804e5288e7bc6321fea6c4d925f1", 0xc4}, {&(0x7f0000000200)="b6ac7564e536a21701b6ab4ee0133f998c65696c3f15287fe317b2166e2f01df8d297f14e79de9eac4cc05ce13b4a05389", 0x31}, {&(0x7f0000000280)}], 0x5) 2.806440813s ago: executing program 2 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000280)={[], [{@euid_eq}, {@fsname={'fsname', 0x3d, 'bcachefs\x00'}}, {@audit}, {@appraise}, {@fowner_lt}, {@obj_role={'obj_role', 0x3d, ':#,\x00'}}, {@obj_type={'obj_type', 0x3d, '}^&{'}}]}, 0x0, 0x63c, &(0x7f0000001bc0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) setfsgid(0xee00) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000000)={{0x0, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, 0x0, 0x2, 0x8, 'syz1\x00', &(0x7f0000000440)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00'], 0x12}) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.443772928s ago: executing program 2 (id=1085): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES64], 0x0) 994.861322ms ago: executing program 0 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.322296ms ago: executing program 0 (id=1087): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x2, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x2c, 0x0, [0x8, 0x8, 0x0, 0x10001, 0xaab, 0xb, 0x0, 0x9, 0x9, 0xe2de, 0xffffffff, 0x3, 0x0, 0xf, 0xffff, 0xd]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x7, 0x7, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x2, 0xfffffffe, 0x6]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa37", @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 1 (id=1088): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x2, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x2c, 0x0, [0x8, 0x8, 0x0, 0x10001, 0xaab, 0xb, 0x0, 0x9, 0x9, 0xe2de, 0xffffffff, 0x3, 0x0, 0xf, 0xffff, 0xd]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x7, 0x7, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x2, 0xfffffffe, 0x6]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc", @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): eries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 176.665529][ T788] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 176.673107][ T788] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 176.789557][ T788] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 176.824221][ T788] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 176.915689][ T788] steelseries 0003:1038:12B6.0004: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 176.982682][ T788] steelseries 0003:1038:12B6.0004: hid_hw_raw_request() failed with -71 [ 177.025380][ T788] usb 4-1: USB disconnect, device number 4 [ 177.232576][ T6830] virtio-fs: tag not found [ 177.262290][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 177.395182][ T6825] fido_id[6825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 177.464877][ T5834] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 177.687296][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.775913][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.795769][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 177.805536][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.818439][ T5834] usb 2-1: config 0 descriptor?? [ 177.857296][ T5834] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 178.399315][ T5834] usb 2-1: USB disconnect, device number 9 [ 178.735889][ T6847] netlink: 68 bytes leftover after parsing attributes in process `syz.2.257'. [ 179.856768][ T6856] virtio-fs: tag not found [ 179.913446][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 181.032187][ T6868] binder: BINDER_SET_CONTEXT_MGR already set [ 181.038353][ T6868] binder: 6867:6868 ioctl 4018620d 200000004a80 returned -16 [ 182.161121][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.445559][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.523085][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.604294][ T5876] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 182.664772][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.694236][ T6929] loop2: detected capacity change from 0 to 64 [ 182.704422][ T5876] usb 4-1: config 0 descriptor?? [ 183.839975][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.848040][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.855560][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.862999][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.870558][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.892623][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 183.937706][ T27] audit: type=1804 audit(1760009571.663:17): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.267" name="/newroot/68/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 183.969612][ T5876] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 184.003006][ T5876] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 184.058090][ T27] audit: type=1804 audit(1760009571.763:18): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.267" name="/newroot/68/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 184.144928][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.351852][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.382152][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.427724][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 184.473207][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.493477][ T43] usb 1-1: config 0 descriptor?? [ 184.504087][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 185.381794][ T5921] usb 1-1: USB disconnect, device number 4 [ 185.390828][ T5876] steelseries 0003:1038:12B6.0005: hid_hw_raw_request() failed with -71 [ 185.406424][ T5876] usb 4-1: USB disconnect, device number 5 [ 193.745008][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 194.065408][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.118582][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.230796][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234167][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.237267][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.251258][ T5921] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 194.325305][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.338556][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.359183][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.373571][ T5921] usb 4-1: config 0 descriptor?? [ 194.402535][ T788] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 194.423387][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.442395][ T788] usb 2-1: config 0 descriptor?? [ 194.461533][ T788] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 194.832058][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.847857][ T788] usb 2-1: USB disconnect, device number 10 [ 194.854329][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.869134][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.880060][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.890892][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.900463][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.908529][ T5921] steelseries 0003:1038:12B6.0006: unknown main item tag 0x0 [ 194.932719][ T5921] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 196.248706][ T5921] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 196.341752][ T5921] usb 4-1: USB disconnect, device number 6 [ 196.736793][ T7064] binder: BINDER_SET_CONTEXT_MGR already set [ 196.743152][ T7064] binder: 7063:7064 ioctl 4018620d 200000004a80 returned -16 [ 199.034933][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.388050][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.398741][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.412057][ T5876] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 199.421489][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.433453][ T5876] usb 1-1: config 0 descriptor?? [ 199.456434][ T5876] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 199.746036][ T5786] usb 1-1: USB disconnect, device number 5 [ 199.865226][ T5792] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.987564][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.049170][ T5792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.059664][ T5792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.069421][ T5792] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 200.078847][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.088507][ T5792] usb 3-1: Product: syz [ 200.092763][ T5792] usb 3-1: Manufacturer: syz [ 200.097549][ T5792] usb 3-1: SerialNumber: syz [ 200.104880][ T5792] usb 3-1: config 0 descriptor?? [ 200.113889][ T5792] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 200.130258][ T5792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.140473][ T5792] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 200.149645][ T5792] usb 3-1: media controller created [ 200.172326][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.191443][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.206026][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.221882][ T5876] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 200.235283][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.248032][ T5792] DVB: Unable to find symbol tda10046_attach() [ 200.254256][ T5792] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 200.255537][ T5876] usb 2-1: config 0 descriptor?? [ 200.273424][ T5792] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 200.683135][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 200.691765][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 200.899738][ T5792] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 201.321661][ T5792] usb 3-1: USB disconnect, device number 4 [ 201.414841][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 201.427251][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 201.433609][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 201.440117][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 201.465429][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 201.473325][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 201.482114][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 201.489800][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 201.497473][ T5876] steelseries 0003:1038:12B6.0007: unknown main item tag 0x0 [ 201.525289][ T5876] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 201.765733][ T7105] syz_tun: entered allmulticast mode [ 202.718685][ T7116] syzkaller0: entered promiscuous mode [ 202.752394][ T7116] syzkaller0: entered allmulticast mode [ 202.808826][ T5876] steelseries 0003:1038:12B6.0007: hid_hw_raw_request() failed with -71 [ 203.329240][ T5876] usb 2-1: USB disconnect, device number 11 [ 204.175266][ T5792] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 204.620472][ T5792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.713440][ T5792] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.913744][ T5792] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 204.923433][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.943321][ T5792] usb 3-1: config 0 descriptor?? [ 205.049504][ T5792] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 205.853434][ T7145] syz_tun: entered allmulticast mode [ 207.008371][ T5834] usb 3-1: USB disconnect, device number 5 [ 207.131762][ T7146] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.333608][ T7169] loop3: detected capacity change from 0 to 32768 [ 208.359051][ T7169] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 208.369445][ T7169] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 208.378974][ T7169] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 208.389071][ T7169] BTRFS info (device loop3): use zstd compression, level 3 [ 208.396318][ T7169] BTRFS info (device loop3): using free space tree [ 208.528610][ T7169] BTRFS info (device loop3): enabling ssd optimizations [ 208.535679][ T7169] BTRFS info (device loop3): auto enabling async discard [ 208.560464][ T27] audit: type=1800 audit(1760009596.283:19): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.318" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 209.068041][ T7187] syzkaller1: entered promiscuous mode [ 209.128199][ T7187] syzkaller1: entered allmulticast mode [ 209.487871][ T5781] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 211.442741][ T5785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5785) [ 212.085085][ T5827] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.226482][ T5921] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.274796][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 212.282675][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.293282][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.295087][ T5786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.308767][ T5827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.319151][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.327606][ T5827] usb 4-1: Product: syz [ 212.331819][ T5827] usb 4-1: Manufacturer: syz [ 212.337038][ T5827] usb 4-1: SerialNumber: syz [ 212.418406][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.428826][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.441920][ T5921] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 212.452191][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.465163][ T5921] usb 1-1: config 0 descriptor?? [ 212.484311][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 212.491805][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 212.502480][ T5786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.512870][ T5786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.522344][ T5786] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.531590][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.552052][ T5786] usb 2-1: config 0 descriptor?? [ 212.810047][ T5834] usb 1-1: USB disconnect, device number 6 [ 212.993259][ T7219] syzkaller0: entered promiscuous mode [ 212.999224][ T7219] syzkaller0: entered allmulticast mode [ 215.217033][ T23] usb 2-1: USB disconnect, device number 12 [ 215.677524][ T5827] usb 4-1: 0:2 : does not exist [ 215.683003][ T5827] usb 4-1: unit 9 not found! [ 215.812190][ T5827] usb 4-1: USB disconnect, device number 7 [ 215.937319][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.187361][ T7249] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.390216][ T7259] virtio-fs: tag not found [ 216.400857][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 216.616014][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.818245][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.935081][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.965070][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 216.974598][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.041611][ T23] usb 3-1: config 0 descriptor?? [ 217.059203][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.650814][ T5834] usb 3-1: USB disconnect, device number 6 [ 218.084275][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.265447][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 218.339727][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.530531][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.865114][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.894777][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.923111][ T23] usb 1-1: Product: syz [ 218.955135][ T23] usb 1-1: Manufacturer: syz [ 218.988899][ T23] usb 1-1: SerialNumber: syz [ 220.786356][ T23] usb 1-1: 0:2 : does not exist [ 221.121084][ T7280] loop2: detected capacity change from 0 to 32768 [ 221.138139][ T23] usb 1-1: unit 9 not found! [ 221.175605][ T7280] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 221.234543][ T23] usb 1-1: USB disconnect, device number 7 [ 221.300620][ T5785] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.471407][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.485453][ T7290] tipc: Started in network mode [ 221.498005][ T7290] tipc: Node identity 266757f062c7, cluster identity 4711 [ 221.526351][ T7290] tipc: Enabled bearer , priority 0 [ 221.554946][ T7291] syzkaller0: entered promiscuous mode [ 221.568019][ T7291] syzkaller0: entered allmulticast mode [ 221.596737][ T7290] tipc: Resetting bearer [ 221.611335][ T7289] tipc: Resetting bearer [ 221.656038][ T7289] tipc: Disabling bearer [ 222.557116][ T7301] ptrace attach of "./syz-executor exec"[5781] was attempted by "ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dà䧥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3q·(*R\x09Ò-e“\x22gç„ÛãõNÒøN?-ñòÝ‹²ò³Õ0ÐÞªä…JxÊÙ~~°ÓÑ/AL†¿I8‡ŽÆo$«¤îaÔ3æe@Jàc«®T ð¶Ì‘³Äѧ8%pþ缑Ó/Ü!/%Vþ'R±joq£svgq½c´]\x09 [ 222.654823][ T5871] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 222.694826][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 223.025694][ T5871] usb 3-1: no configurations [ 223.036914][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.047366][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.053746][ T5871] usb 3-1: can't read configurations, error -22 [ 223.073447][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 223.115050][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.137207][ T23] usb 2-1: config 0 descriptor?? [ 223.295170][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 223.374840][ T5871] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 224.305654][ T5871] usb 3-1: no configurations [ 224.324825][ T5871] usb 3-1: can't read configurations, error -22 [ 224.338103][ T5871] usb usb3-port1: attempt power cycle [ 224.375926][ T23] usb 2-1: USB disconnect, device number 13 [ 224.774849][ T5871] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 224.829026][ T5871] usb 3-1: no configurations [ 224.833691][ T5871] usb 3-1: can't read configurations, error -22 [ 225.005403][ T5871] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 225.188819][ T5871] usb 3-1: no configurations [ 225.193492][ T5871] usb 3-1: can't read configurations, error -22 [ 225.220677][ T5871] usb usb3-port1: unable to enumerate USB device [ 225.431050][ T7324] loop1: detected capacity change from 0 to 32768 [ 225.439030][ T7324] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 225.539663][ T7326] loop3: detected capacity change from 0 to 256 [ 225.711735][ T5785] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.917246][ T7328] loop2: detected capacity change from 0 to 64 [ 226.085436][ T7330] tipc: Started in network mode [ 226.090401][ T7330] tipc: Node identity f2fb8c8801, cluster identity 4711 [ 226.140234][ T7330] tipc: Enabled bearer , priority 0 [ 226.175325][ T7331] syzkaller0: entered promiscuous mode [ 226.287396][ T7331] syzkaller0: entered allmulticast mode [ 226.360853][ T7335] tipc: Resetting bearer [ 226.427667][ T7329] tipc: Resetting bearer [ 226.500151][ T7329] tipc: Disabling bearer [ 227.059854][ T27] audit: type=1804 audit(1760009614.783:20): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.362" name="/newroot/91/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 227.888886][ T7348] ptrace attach of "./syz-executor exec"[5782] was attempted by "ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dà䧥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3q·(*R\x09Ò-e“\x22gç„ÛãõNÒøN?-ñòÝ‹²ò³Õ0ÐÞªä…JxÊÙ~~°ÓÑ/AL†¿I8‡ŽÆo$«¤îaÔ3æe@Jàc«®T ð¶Ì‘³Äѧ8%pþ缑Ó/Ü!/%Vþ'R±joq£svgq½c´]\x09 [ 227.986350][ T27] audit: type=1804 audit(1760009615.713:21): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.362" name="/newroot/91/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 228.546462][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 229.315422][ T5871] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.537402][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.556202][ T7366] loop3: detected capacity change from 0 to 256 [ 229.562753][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.601759][ T5871] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 229.825597][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.852649][ T5871] usb 1-1: config 0 descriptor?? [ 229.880778][ T5871] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 230.354513][ T5871] usb 1-1: USB disconnect, device number 8 [ 230.398027][ T7382] tipc: Started in network mode [ 230.413250][ T7382] tipc: Node identity ea720d9b3696, cluster identity 4711 [ 230.452590][ T7382] tipc: Enabled bearer , priority 0 [ 230.472192][ T7386] syzkaller0: entered promiscuous mode [ 230.574156][ T7386] syzkaller0: entered allmulticast mode [ 230.657344][ T7388] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.675054][ T7381] tipc: Resetting bearer [ 230.748638][ T7381] tipc: Disabling bearer [ 232.537453][ T7404] ptrace attach of "./syz-executor exec"[5783] was attempted by "ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dà䧥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3q·(*R\x09Ò-e“\x22gç„ÛãõNÒøN?-ñòÝ‹²ò³Õ0ÐÞªä…JxÊÙ~~°ÓÑ/AL†¿I8‡ŽÆo$«¤îaÔ3æe@Jàc«®T ð¶Ì‘³Äѧ8%pþ缑Ó/Ü!/%Vþ'R±joq£svgq½c´]\x09 [ 233.679853][ T7417] tipc: Started in network mode [ 233.792337][ T7417] tipc: Node identity aaad0fe8edfa, cluster identity 4711 [ 233.802597][ T7417] tipc: Enabled bearer , priority 0 [ 233.816708][ T7423] syzkaller0: entered promiscuous mode [ 233.822366][ T7423] syzkaller0: entered allmulticast mode [ 233.855829][ T7417] tipc: Resetting bearer [ 233.869599][ T7416] tipc: Resetting bearer [ 233.914643][ T7416] tipc: Disabling bearer [ 234.015012][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.217551][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.248691][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.277213][ T5871] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 234.291760][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.313409][ T5871] usb 4-1: config 0 descriptor?? [ 234.329358][ T5871] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 234.768326][ T23] usb 4-1: USB disconnect, device number 8 [ 235.213733][ T7439] ptrace attach of "./syz-executor exec"[5782] was attempted by "ßRåÖ~…¼sÛ„9!þ+îËlàvûs\x22~UëxåaŒ*œfÜÈPyôw.¼ÁÉ6û©iîÂBÖ¡O‹¼ÕÎ ¼‘Ì^¦$ îÆwÃü*ƒãû? Æ;Ø-é«b·?3—AÕ”‘SÃÑ­ÂKkÆÛr\x0aæéÃØ™:…y>sÄy\x1b¢SD8\x1bÝuƒ\x0aÚÑ2Ûš.¼bf×h„³Üú™‰ËݹÆ5¿cM¹+²wœkà×Ò|Í(Hnô'cC¼æj<,ᨊ¬r.uñ(ln¹vNÍ¿FˆQ+&iÝÁŽÐkŸŸÐ&È¢¬Ä¤>è²¥½f‰bRs«ó·–¾\x0c~1šœ‰Ï%^“?ñ\x1bÈYµû\x1b­g¯´-3Ë©VO|\x0aá³·ÖÆÄ[.ØÀ'3õ¹‹ÚDµÁAÿÅüzrcOÆ ¥ƒ,œô‘»;ò½ŽÛj„Õ!pŽoûŸUe{‘™ˆÅs%@èO®tnZ–b™§Bš&+4û?pÄÅRN¡Œû½!YË‘Nj˜âgÎiqÐïÜ[¶6ÙÍh“í²vN|›°Õ xiúèPo54(%*ª Ëô½ŒáëħlåLU•»©²Dà䧥7`zú8äh¨Â“ý½„Ù=»‚¨š-eÞði¤’î}˜\x5c\x09£v:-×Ë\x09•œ9.½¦V€¨•§E×&õ†æ¹\x09 b&hΚ€AŽ‘`œRœƒ&±½Ö•—AÌÔO •Ý›/\x1bLÀ\x07Àû&÷òDÈuÄoO…æÆ^Cò'S1 @¯ÃŠòôû#^^ô„¥V1¥¾56rè©´tUõ\x0cô¸½0é´²˜´´>’‰ÅªèÙìMÑü²VÐjØ\x07À=ºÉ}]M†‡XUtûÜY[%>p¹üÄù*×ójšs;”Ûx—9K§£4Ím{yÞãWp5p\x0cVÕ\x0c×\x0a(UηúX«þ8'C}ôħ¿°J=Òјáæ6WwØ&äu×]÷±8?¯œ +Äßþ3q·(*R\x09Ò-e“\x22gç„ÛãõNÒøN?-ñòÝ‹²ò³Õ0ÐÞªä…JxÊÙ~~°ÓÑ/AL†¿I8‡ŽÆo$«¤îaÔ3æe@Jàc«®T ð¶Ì‘³Äѧ8%pþ缑Ó/Ü!/%Vþ'R±joq£svgq½c´]\x09 [ 236.922797][ T7462] tipc: Enabled bearer , priority 0 [ 237.103208][ T7465] syzkaller0: entered promiscuous mode [ 237.109117][ T7465] syzkaller0: entered allmulticast mode [ 237.143603][ T7462] tipc: Resetting bearer [ 237.164528][ T7461] tipc: Resetting bearer [ 237.232849][ T7461] tipc: Disabling bearer [ 237.422083][ T7459] loop2: detected capacity change from 0 to 32768 [ 237.431309][ T7459] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 237.744293][ T5785] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 237.891035][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 238.329638][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.344769][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.359368][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 238.369131][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.380423][ T23] usb 4-1: config 0 descriptor?? [ 238.390973][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 239.361936][ T23] usb 4-1: USB disconnect, device number 9 [ 240.810625][ T7500] loop1: detected capacity change from 0 to 32768 [ 240.823314][ T7500] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 242.111939][ T7516] loop3: detected capacity change from 0 to 64 [ 242.495589][ T27] audit: type=1804 audit(1760009630.203:22): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.411" name="/newroot/101/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 243.209675][ T27] audit: type=1804 audit(1760009630.213:23): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.411" name="/newroot/101/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 243.544836][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.804335][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.834761][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.859915][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 243.897081][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.948424][ T43] usb 2-1: config 0 descriptor?? [ 243.961706][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 245.339111][ T43] usb 2-1: USB disconnect, device number 14 [ 248.914869][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 249.096746][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.107020][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.120278][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 249.128009][ T788] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 249.139146][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.150124][ T788] usb 2-1: config 0 descriptor?? [ 249.159369][ T788] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 249.316524][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.327658][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.337941][ T5921] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 249.347960][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.358877][ T5921] usb 3-1: config 0 descriptor?? [ 249.471731][ T5834] usb 2-1: USB disconnect, device number 15 [ 250.508848][ T7586] fuse: root generation should be zero [ 250.547485][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.558732][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.566253][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.575367][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.582807][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.590788][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.598514][ T5921] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 250.610825][ T5921] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 250.657301][ T5921] steelseries 0003:1038:12B6.0008: hid_hw_raw_request() failed with -71 [ 250.687112][ T5921] usb 3-1: USB disconnect, device number 11 [ 250.874125][ T7602] fido_id[7602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 250.934777][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.114985][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 251.126263][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.685931][ T5834] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 252.701682][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.714442][ T5834] usb 4-1: config 0 descriptor?? [ 253.110486][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 253.119523][ T5834] usbhid: probe of 4-1:0.0 failed with error -71 [ 253.131999][ T5834] usb 4-1: USB disconnect, device number 10 [ 254.498057][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.592750][ T7635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.689636][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.729144][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.751149][ T5834] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 254.763766][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.795488][ T5834] usb 1-1: config 0 descriptor?? [ 255.585339][ T5834] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 255.659014][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668975][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.884958][ T5834] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 256.255822][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.341500][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.353826][ T5834] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 256.407005][ T5871] usb 1-1: USB disconnect, device number 9 [ 256.425096][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.475474][ T5834] usb 4-1: config 0 descriptor?? [ 256.622127][ T7657] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 256.922223][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 256.939971][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 256.958429][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 256.982337][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 257.007045][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 257.031186][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 257.045010][ T5834] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0 [ 257.063191][ T5834] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 257.116488][ T5834] steelseries 0003:1038:12B6.0009: hid_hw_raw_request() failed with -71 [ 257.161557][ T5834] usb 4-1: USB disconnect, device number 11 [ 257.236930][ T7664] fido_id[7664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 261.035111][ T7717] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 261.936465][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 262.145112][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 262.257718][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.434422][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.633963][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.787584][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.871873][ T788] usb 2-1: Product: syz [ 262.937907][ T788] usb 2-1: Manufacturer: syz [ 262.981520][ T788] usb 2-1: SerialNumber: syz [ 263.247334][ T788] usb 2-1: 0:2 : does not exist [ 263.252321][ T788] usb 2-1: unit 9 not found! [ 263.420592][ T788] usb 2-1: USB disconnect, device number 16 [ 263.940542][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.938942][ T7767] binder: 7750:7767 ioctl 4018620d 0 returned -22 [ 265.189751][ T7769] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 267.775843][ T7776] virtio-fs: tag not found [ 267.835365][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 268.091098][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 269.209327][ T7796] netlink: 196 bytes leftover after parsing attributes in process `syz.2.475'. [ 269.824876][ T788] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 270.754786][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 270.771728][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.787429][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.810531][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.831595][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.846816][ T788] usb 2-1: Product: syz [ 270.852232][ T788] usb 2-1: Manufacturer: syz [ 270.855354][ T7811] tipc: Enabled bearer , priority 0 [ 270.857695][ T788] usb 2-1: SerialNumber: syz [ 270.870958][ T7813] binder: 7812:7813 ioctl 4018620d 0 returned -22 [ 270.900357][ T7811] syzkaller0: entered promiscuous mode [ 270.911055][ T7811] syzkaller0: entered allmulticast mode [ 270.950525][ T7811] tipc: Resetting bearer [ 271.011571][ T7810] tipc: Resetting bearer [ 271.081931][ T7810] tipc: Disabling bearer [ 271.103259][ T788] usb 2-1: 0:2 : does not exist [ 271.120830][ T788] usb 2-1: unit 9 not found! [ 271.200571][ T788] usb 2-1: USB disconnect, device number 17 [ 273.772305][ T7825] loop0: detected capacity change from 0 to 32768 [ 273.790245][ T7825] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 274.158703][ T7827] loop2: detected capacity change from 0 to 40427 [ 274.209980][ T7827] F2FS-fs (loop2): invalid crc value [ 274.217496][ T7827] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.257471][ T7827] F2FS-fs (loop2): Start checkpoint disabled! [ 274.278106][ T7827] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 274.621520][ T6383] kworker/u4:14: attempt to access beyond end of device [ 274.621520][ T6383] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 274.637564][ T6383] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 274.645967][ T6383] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 274.680756][ T5785] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 274.707919][ T7834] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 276.384932][ T5921] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.586695][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 276.621180][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.661476][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.677859][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.688840][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.712189][ T5921] usb 1-1: Product: syz [ 276.722666][ T5921] usb 1-1: Manufacturer: syz [ 276.733095][ T5921] usb 1-1: SerialNumber: syz [ 277.101275][ T5921] usb 1-1: 0:2 : does not exist [ 277.108101][ T5921] usb 1-1: unit 9 not found! [ 277.306052][ T7867] loop1: detected capacity change from 0 to 32768 [ 277.322327][ T5921] usb 1-1: USB disconnect, device number 10 [ 277.346440][ T7867] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 277.359630][ T7865] fuse: Unknown parameter '0x0000000000000004' [ 277.426597][ T5801] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.453357][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.849175][ T7878] loop2: detected capacity change from 0 to 64 [ 278.132913][ T7875] loop1: detected capacity change from 0 to 40427 [ 278.158956][ T7875] F2FS-fs (loop1): invalid crc value [ 278.178853][ T7875] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.229339][ T7875] F2FS-fs (loop1): Start checkpoint disabled! [ 278.242764][ T7875] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 279.160900][ T7883] loop0: detected capacity change from 0 to 32768 [ 279.258216][ T27] audit: type=1804 audit(1760009666.263:24): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.498" name="/newroot/121/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 279.304196][ T7883] [ 279.304196][ T7883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.304196][ T7883] [ 279.489040][ T27] audit: type=1804 audit(1760009666.293:25): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.498" name="/newroot/121/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 279.721847][ T6390] kworker/u4:18: attempt to access beyond end of device [ 279.721847][ T6390] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 279.740783][ T6390] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 279.748957][ T6390] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 280.261537][ T6416] [ 280.261537][ T6416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.261537][ T6416] [ 280.307072][ T6416] [ 280.307072][ T6416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.307072][ T6416] [ 280.325440][ T6416] [ 280.325440][ T6416] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.325440][ T6416] [ 280.337631][ T5782] [ 280.337631][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.337631][ T5782] [ 280.371483][ T113] [ 280.371483][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.371483][ T113] [ 280.421771][ T5782] [ 280.421771][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.421771][ T5782] [ 280.554934][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 281.143005][ T7897] loop2: detected capacity change from 0 to 32768 [ 281.359180][ T7899] loop1: detected capacity change from 0 to 32768 [ 281.397163][ T7897] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 281.490707][ T7899] [ 281.490707][ T7899] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.490707][ T7899] [ 281.525002][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.533722][ T5921] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.551268][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.570163][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 281.623849][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.637718][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.650563][ T5921] usb 4-1: Product: syz [ 281.657438][ T5921] usb 4-1: Manufacturer: syz [ 281.720436][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 281.728306][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 281.736046][ T5921] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 282.318130][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 282.416738][ T5921] usb 4-1: USB disconnect, device number 12 [ 282.459670][ T5801] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 282.484239][ T6383] [ 282.484239][ T6383] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.484239][ T6383] [ 282.521474][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 282.535096][ T6383] [ 282.535096][ T6383] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.535096][ T6383] [ 282.551191][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.570350][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.586462][ T6383] [ 282.586462][ T6383] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.586462][ T6383] [ 282.612833][ T5784] [ 282.612833][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.612833][ T5784] [ 282.626215][ T5871] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.642538][ T112] [ 282.642538][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.642538][ T112] [ 282.686071][ T5784] [ 282.686071][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.686071][ T5784] [ 282.702046][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.711573][ T5871] usb 1-1: Product: syz [ 282.727921][ T5871] usb 1-1: Manufacturer: syz [ 282.793607][ T5871] usb 1-1: SerialNumber: syz [ 283.346926][ T7911] binder: BINDER_SET_CONTEXT_MGR already set [ 283.389253][ T7911] binder: 7908:7911 ioctl 4018620d 200000004a80 returned -16 [ 285.166587][ T7920] loop3: detected capacity change from 0 to 40427 [ 285.183300][ T7920] F2FS-fs (loop3): invalid crc value [ 285.223250][ T7920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.265570][ T7920] F2FS-fs (loop3): Start checkpoint disabled! [ 285.307447][ T7920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 285.939743][ T6390] kworker/u4:18: attempt to access beyond end of device [ 285.939743][ T6390] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 285.954376][ T6390] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 285.972849][ T6390] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 286.901686][ T5871] usb 1-1: 0:2 : does not exist [ 286.915872][ T5871] usb 1-1: unit 9 not found! [ 286.980153][ T7935] loop2: detected capacity change from 0 to 256 [ 286.988406][ T5871] usb 1-1: USB disconnect, device number 11 [ 287.499018][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.364920][ T5786] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 290.715051][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 291.586161][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.716834][ T5786] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 291.729464][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.784104][ T5786] usb 4-1: config 0 descriptor?? [ 292.302880][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'. [ 292.321986][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.521'. [ 292.345685][ T7967] macsec1: entered allmulticast mode [ 292.353436][ T7967] macvlan0: entered allmulticast mode [ 292.385209][ T7967] veth1_vlan: entered allmulticast mode [ 292.439932][ T7981] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 292.542464][ T5786] usbhid 4-1:0.0: can't add hid device: -71 [ 292.561176][ T5786] usbhid: probe of 4-1:0.0 failed with error -71 [ 292.609876][ T5786] usb 4-1: USB disconnect, device number 13 [ 292.719088][ T5792] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.931345][ T5792] usb 1-1: Using ep0 maxpacket: 16 [ 292.959050][ T5792] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.989138][ T5792] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.013779][ T5792] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.239425][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.248571][ T5792] usb 1-1: Product: syz [ 293.252786][ T5792] usb 1-1: Manufacturer: syz [ 293.258005][ T5792] usb 1-1: SerialNumber: syz [ 298.198886][ T8020] virtio-fs: tag not found [ 298.207242][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 298.298891][ T5792] usb 1-1: 0:2 : does not exist [ 298.303922][ T5792] usb 1-1: unit 9 not found! [ 298.383042][ T5792] usb 1-1: USB disconnect, device number 12 [ 298.489314][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.486757][ T8026] tipc: Enabled bearer , priority 0 [ 299.525205][ T8026] syzkaller0: entered promiscuous mode [ 299.575058][ T8026] syzkaller0: entered allmulticast mode [ 299.615355][ T8026] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 300.178450][ T8026] tipc: Resetting bearer [ 300.207123][ T8025] tipc: Resetting bearer [ 300.275870][ T8025] tipc: Disabling bearer [ 305.856935][ T5786] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 306.252883][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 306.266152][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.277514][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.293032][ T5786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.304519][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.316273][ T5786] usb 1-1: Product: syz [ 306.321981][ T5786] usb 1-1: Manufacturer: syz [ 306.349435][ T5786] usb 1-1: SerialNumber: syz [ 307.624780][ T8078] ptrace attach of "./syz-executor exec"[5783] was attempted by "./syz-executor exec"[8078] [ 308.962489][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 309.169150][ T8090] netlink: 196 bytes leftover after parsing attributes in process `syz.2.551'. [ 309.263992][ T8092] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 309.382464][ T5786] usb 1-1: 0:2 : does not exist [ 309.398249][ T5786] usb 1-1: unit 9 not found! [ 309.456032][ T5786] usb 1-1: USB disconnect, device number 13 [ 309.523041][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.485290][ T8122] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[8122] [ 312.546696][ T788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 314.234879][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 314.255643][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.271728][ T788] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 314.284526][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.297563][ T788] usb 3-1: config 0 descriptor?? [ 314.617113][ T8143] loop3: detected capacity change from 0 to 256 [ 314.941683][ T8141] loop1: detected capacity change from 0 to 32768 [ 314.951042][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 314.957428][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 314.967268][ T8141] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 314.980872][ T788] usb 3-1: USB disconnect, device number 12 [ 315.043441][ T5921] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 315.425710][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 315.466602][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.521296][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.548461][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.660462][ T8155] tipc: Enabling of bearer rejected, failed to enable media [ 315.735196][ T8155] syzkaller0: entered promiscuous mode [ 315.760464][ T8155] syzkaller0: entered allmulticast mode [ 315.780836][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.789642][ T5921] usb 1-1: Product: syz [ 315.793857][ T5921] usb 1-1: Manufacturer: syz [ 315.800258][ T5921] usb 1-1: SerialNumber: syz [ 316.342032][ T8160] ptrace attach of "./syz-executor exec"[5781] was attempted by ""[8160] [ 316.928030][ T5921] usb 1-1: can't set config #1, error -71 [ 316.936282][ T5921] usb 1-1: USB disconnect, device number 14 [ 317.078487][ T788] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 317.098784][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105283][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.260752][ T8175] loop1: detected capacity change from 0 to 32768 [ 318.276793][ T788] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.285789][ T8175] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 318.301817][ T788] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.313046][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.322357][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 318.340204][ T788] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.368225][ T788] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.419134][ T788] usb 3-1: Product: syz [ 318.446411][ T788] usb 3-1: Manufacturer: syz [ 318.456593][ T8180] loop0: detected capacity change from 0 to 256 [ 318.652897][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 318.706701][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 318.803534][ T788] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 319.236725][ T788] usb 3-1: USB disconnect, device number 13 [ 319.335114][ T5785] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.165407][ T8188] tipc: Enabled bearer , priority 0 [ 320.188847][ T8188] syzkaller0: entered promiscuous mode [ 320.203497][ T8188] syzkaller0: entered allmulticast mode [ 320.259769][ T8188] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 320.288111][ T8188] tipc: Resetting bearer [ 320.324315][ T8187] tipc: Resetting bearer [ 320.440539][ T8187] tipc: Disabling bearer [ 321.316085][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 321.535321][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 321.556343][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.591544][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.622052][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.649254][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.672332][ T23] usb 3-1: Product: syz [ 321.685266][ T23] usb 3-1: Manufacturer: syz [ 321.698940][ T23] usb 3-1: SerialNumber: syz [ 323.002476][ T8227] loop3: detected capacity change from 0 to 256 [ 325.058491][ T23] usb 3-1: 0:2 : does not exist [ 325.093384][ T23] usb 3-1: unit 9 not found! [ 325.247769][ T23] usb 3-1: USB disconnect, device number 14 [ 325.367537][ T8253] binder: 8249:8253 ioctl c0306201 200000000180 returned -14 [ 326.943416][ T8269] loop1: detected capacity change from 0 to 1024 [ 326.956137][ T8269] ext4: Unknown parameter 'euid' [ 327.009157][ T5785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.243244][ T8287] loop2: detected capacity change from 0 to 1024 [ 328.277624][ T5792] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 328.286481][ T8287] ext4: Unknown parameter 'euid' [ 328.413038][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.743354][ T5792] usb 4-1: Using ep0 maxpacket: 16 [ 328.824269][ T5792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.902839][ T8296] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 329.158294][ T5792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.239782][ T5792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.317233][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.387502][ T5792] usb 4-1: Product: syz [ 329.433924][ T5792] usb 4-1: Manufacturer: syz [ 329.480090][ T5792] usb 4-1: SerialNumber: syz [ 331.027671][ T8309] loop0: detected capacity change from 0 to 32768 [ 331.076738][ T8309] [ 331.076738][ T8309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.076738][ T8309] [ 331.473825][ T8311] loop1: detected capacity change from 0 to 32768 [ 331.569244][ T8311] [ 331.569244][ T8311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 331.569244][ T8311] [ 332.162971][ T42] [ 332.162971][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.162971][ T42] [ 332.218918][ T42] [ 332.218918][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.218918][ T42] [ 332.242865][ T42] [ 332.242865][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.242865][ T42] [ 332.267288][ T5782] [ 332.267288][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.267288][ T5782] [ 332.468310][ T113] [ 332.468310][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.468310][ T113] [ 332.765912][ T5782] [ 332.765912][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.765912][ T5782] [ 332.784952][ T6402] [ 332.784952][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.784952][ T6402] [ 332.844823][ T6402] [ 332.844823][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.844823][ T6402] [ 332.881081][ T6402] [ 332.881081][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.881081][ T6402] [ 332.929854][ T5784] [ 332.929854][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.929854][ T5784] [ 332.965547][ T112] [ 332.965547][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 332.965547][ T112] [ 332.998094][ T8319] loop0: detected capacity change from 0 to 256 [ 333.015062][ T5784] [ 333.015062][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 333.015062][ T5784] [ 334.631195][ T5792] usb 4-1: 0:2 : does not exist [ 334.657428][ T5792] usb 4-1: unit 9 not found! [ 334.781505][ T5792] usb 4-1: USB disconnect, device number 14 [ 334.890935][ T8334] binder: 8333:8334 ioctl c0306201 200000000180 returned -14 [ 334.909354][ T6226] udevd[6226]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.234751][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 336.142063][ T8346] loop3: detected capacity change from 0 to 64 [ 336.230604][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.251025][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.287883][ T5876] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 336.307631][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.356042][ T5876] usb 2-1: config 0 descriptor?? [ 336.782182][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.808565][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.829313][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.860203][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.883654][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.908492][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.917703][ T5876] steelseries 0003:1038:12B6.000A: unknown main item tag 0x0 [ 336.935379][ T5876] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 337.021809][ T27] audit: type=1804 audit(1760009724.733:26): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.626" name="/newroot/159/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 337.062932][ T27] audit: type=1804 audit(1760009724.743:27): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.626" name="/newroot/159/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 337.114539][ T5876] steelseries 0003:1038:12B6.000A: hid_hw_raw_request() failed with -71 [ 337.197475][ T5876] usb 2-1: USB disconnect, device number 18 [ 337.364054][ T8358] fido_id[8358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 337.625178][ T5792] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 337.824823][ T5792] usb 1-1: Using ep0 maxpacket: 16 [ 337.867592][ T5792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.967319][ T5792] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 338.031596][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.092913][ T5792] usb 1-1: config 0 descriptor?? [ 338.118765][ T8368] loop1: detected capacity change from 0 to 256 [ 339.051028][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 339.119778][ T8371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 339.229601][ T8371] macsec1: entered allmulticast mode [ 339.254822][ T8371] macvlan0: entered allmulticast mode [ 339.260646][ T8371] veth1_vlan: entered allmulticast mode [ 339.614949][ T5792] usbhid 1-1:0.0: can't add hid device: -71 [ 339.631839][ T5792] usbhid: probe of 1-1:0.0 failed with error -71 [ 339.654809][ T5834] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 339.662279][ T5792] usb 1-1: USB disconnect, device number 15 [ 339.864933][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 339.889317][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.919467][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.934094][ T5834] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.943955][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.635138][ T5834] usb 4-1: Product: syz [ 340.639396][ T5834] usb 4-1: Manufacturer: syz [ 340.644158][ T5834] usb 4-1: SerialNumber: syz [ 341.138073][ T8389] loop2: detected capacity change from 0 to 64 [ 341.415205][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 341.489746][ T27] audit: type=1804 audit(1760009729.213:28): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.636" name="/newroot/155/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 341.634852][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 341.705896][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.758278][ T43] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 341.799840][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.836644][ T43] usb 1-1: config 0 descriptor?? [ 341.859336][ T8393] loop2: detected capacity change from 0 to 64 [ 341.881640][ T5834] usb 4-1: 0:2 : does not exist [ 341.908583][ T5834] usb 4-1: unit 9 not found! [ 341.986917][ T5834] usb 4-1: USB disconnect, device number 15 [ 342.043571][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.311426][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 342.323271][ T8397] loop1: detected capacity change from 0 to 1024 [ 342.337542][ T43] usbhid: probe of 1-1:0.0 failed with error -71 [ 342.355706][ T8397] ext4: Unknown parameter 'euid' [ 342.420422][ T43] usb 1-1: USB disconnect, device number 16 [ 342.767161][ T8403] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 343.821453][ T8409] loop3: detected capacity change from 0 to 256 [ 344.313099][ T27] audit: type=1804 audit(1760009731.833:29): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.638" name="/newroot/156/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 344.334795][ T27] audit: type=1804 audit(1760009731.843:30): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.638" name="/newroot/156/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 346.016398][ T8423] loop1: detected capacity change from 0 to 32768 [ 346.084405][ T8423] [ 346.084405][ T8423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.084405][ T8423] [ 346.696692][ T8426] loop3: detected capacity change from 0 to 64 [ 346.988203][ T27] audit: type=1804 audit(1760009734.663:31): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.646" name="/newroot/163/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 347.116139][ T6387] [ 347.116139][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.116139][ T6387] [ 347.130632][ T8428] tipc: Enabled bearer , priority 0 [ 347.160426][ T8428] syzkaller0: entered promiscuous mode [ 347.174953][ T6387] [ 347.174953][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.174953][ T6387] [ 347.194120][ T8428] syzkaller0: entered allmulticast mode [ 347.208340][ T6387] [ 347.208340][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.208340][ T6387] [ 347.236298][ T8432] tipc: Resetting bearer [ 347.260453][ T5784] [ 347.260453][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.260453][ T5784] [ 347.279497][ T113] [ 347.279497][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.279497][ T113] [ 347.292753][ T8427] tipc: Resetting bearer [ 347.325685][ T5784] [ 347.325685][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 347.325685][ T5784] [ 347.344977][ T8427] tipc: Disabling bearer [ 347.444780][ T788] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 347.649014][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.679885][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.881739][ T788] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 347.891291][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.904864][ T788] usb 3-1: config 0 descriptor?? [ 349.156640][ T788] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 349.374276][ T788] usb 3-1: USB disconnect, device number 15 [ 349.557390][ T8457] loop0: detected capacity change from 0 to 64 [ 349.587888][ T8461] loop1: detected capacity change from 0 to 64 [ 350.059739][ T27] audit: type=1804 audit(1760009737.783:32): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.658" name="/newroot/157/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 350.173449][ T27] audit: type=1804 audit(1760009737.793:33): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.656" name="/newroot/174/file1/bus" dev="loop0" ino=21 res=1 errno=0 [ 350.285403][ T27] audit: type=1804 audit(1760009737.813:34): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.656" name="/newroot/174/file1/bus" dev="loop0" ino=21 res=1 errno=0 [ 350.925502][ T8481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.784338][ T8501] loop2: detected capacity change from 0 to 64 [ 354.134753][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 354.189311][ T27] audit: type=1804 audit(1760009741.903:35): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.668" name="/newroot/162/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 354.691073][ T8504] loop0: detected capacity change from 0 to 32768 [ 354.726609][ T8504] [ 354.726609][ T8504] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 354.726609][ T8504] [ 355.144698][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.325804][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.373588][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 355.413647][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.881467][ T43] usb 2-1: config 0 descriptor?? [ 356.477479][ T42] [ 356.477479][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.477479][ T42] [ 356.490936][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 356.500259][ T42] [ 356.500259][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.500259][ T42] [ 356.511492][ T42] [ 356.511492][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.511492][ T42] [ 356.522833][ T113] [ 356.522833][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.522833][ T113] [ 356.534809][ T5782] [ 356.534809][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.534809][ T5782] [ 356.615723][ T5782] [ 356.615723][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 356.615723][ T5782] [ 356.646044][ T5876] usb 2-1: USB disconnect, device number 19 [ 357.090095][ T8522] loop3: detected capacity change from 0 to 1024 [ 357.120735][ T8522] ext4: Unknown parameter 'euid' [ 358.412087][ T8537] loop2: detected capacity change from 0 to 64 [ 358.577879][ T8540] loop3: detected capacity change from 0 to 164 [ 358.854162][ T8540] Unable to read rock-ridge attributes [ 358.884420][ T8540] Unable to read rock-ridge attributes [ 359.401714][ T8546] loop1: detected capacity change from 0 to 64 [ 359.435606][ T27] audit: type=1804 audit(1760009747.143:36): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.678" name="/newroot/166/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 359.513080][ T27] audit: type=1804 audit(1760009747.163:37): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.678" name="/newroot/166/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 359.954831][ T788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 360.084800][ T27] audit: type=1804 audit(1760009747.583:38): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.679" name="/newroot/161/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 360.276970][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.294665][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.350963][ T8551] netlink: 'syz.0.680': attribute type 3 has an invalid length. [ 360.358970][ T8551] netlink: 666 bytes leftover after parsing attributes in process `syz.0.680'. [ 360.395842][ T788] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 360.408964][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.435880][ T788] usb 4-1: config 0 descriptor?? [ 360.894853][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 360.904998][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 360.912423][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 360.943454][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 360.964528][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 360.973919][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 360.992573][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 361.007018][ T788] steelseries 0003:1038:12B6.000B: unknown main item tag 0x0 [ 361.100534][ T788] steelseries 0003:1038:12B6.000B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 361.165110][ T788] steelseries 0003:1038:12B6.000B: hid_hw_raw_request() failed with -71 [ 361.179379][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.214528][ T788] usb 4-1: USB disconnect, device number 16 [ 361.324273][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.410897][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 361.468519][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.506582][ T43] usb 2-1: config 0 descriptor?? [ 361.534062][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 361.569475][ T8560] fido_id[8560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 362.166834][ T43] usb 2-1: USB disconnect, device number 20 [ 364.266418][ T8577] loop2: detected capacity change from 0 to 256 [ 365.174999][ T788] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 365.405114][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 365.415239][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.431621][ T788] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 365.441422][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.462525][ T788] usb 1-1: config 0 descriptor?? [ 365.504957][ T5921] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 365.717761][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.778326][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.809151][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 365.818501][ T8606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 365.841556][ T5921] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 365.859684][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.877100][ T5921] usb 3-1: config 0 descriptor?? [ 365.996028][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 366.002379][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 366.019654][ T788] usb 1-1: USB disconnect, device number 17 [ 366.300487][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.310403][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.325708][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.333971][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.347906][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.355858][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.363953][ T5921] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 366.405218][ T5921] steelseries 0003:1038:12B6.000C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 366.417569][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 366.622630][ T5921] steelseries 0003:1038:12B6.000C: hid_hw_raw_request() failed with -71 [ 366.711600][ T5921] usb 3-1: USB disconnect, device number 16 [ 366.951308][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.021790][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.064271][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 367.088911][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.102912][ T8613] fido_id[8613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 367.109094][ T43] usb 2-1: config 0 descriptor?? [ 367.129803][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 367.632858][ T8617] loop3: detected capacity change from 0 to 1024 [ 367.650679][ T8617] ext4: Unknown parameter 'euid' [ 367.678647][ T5921] usb 2-1: USB disconnect, device number 21 [ 368.672932][ T8629] loop3: detected capacity change from 0 to 256 [ 369.804136][ T8638] tipc: Enabled bearer , priority 0 [ 369.812388][ T8638] syzkaller0: entered promiscuous mode [ 369.818690][ T8638] syzkaller0: entered allmulticast mode [ 369.828993][ T8638] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 370.203845][ T8639] tipc: Resetting bearer [ 370.634961][ T8634] tipc: Resetting bearer [ 370.792219][ T8634] tipc: Disabling bearer [ 373.604423][ T8667] loop0: detected capacity change from 0 to 32768 [ 373.687538][ T8667] [ 373.687538][ T8667] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 373.687538][ T8667] [ 374.584983][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 374.843574][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.895221][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.945330][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 374.955164][ T6387] [ 374.955164][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 374.955164][ T6387] [ 374.987894][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.042524][ T6387] [ 375.042524][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.042524][ T6387] [ 375.056477][ T23] usb 2-1: config 0 descriptor?? [ 375.069539][ T6387] [ 375.069539][ T6387] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.069539][ T6387] [ 375.077150][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 375.102184][ T112] [ 375.102184][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.102184][ T112] [ 375.133568][ T5782] [ 375.133568][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.133568][ T5782] [ 375.159486][ T5782] [ 375.159486][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 375.159486][ T5782] [ 376.374939][ T43] usb 2-1: USB disconnect, device number 22 [ 378.333634][ T8711] loop2: detected capacity change from 0 to 1024 [ 378.399241][ T8711] ext4: Unknown parameter 'euid' [ 378.615494][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622633][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.368411][ T27] audit: type=1326 audit(1760009767.093:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8717 comm="syz.1.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab2c58eec9 code=0x0 [ 379.422532][ T8722] loop2: detected capacity change from 0 to 64 [ 379.683439][ T27] audit: type=1804 audit(1760009767.403:40): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.722" name="/newroot/178/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 380.337455][ T8730] loop1: detected capacity change from 0 to 64 [ 380.357595][ T8728] tipc: Enabled bearer , priority 0 [ 380.559239][ T27] audit: type=1804 audit(1760009768.283:41): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.725" name="/newroot/173/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 380.676757][ T27] audit: type=1804 audit(1760009768.303:42): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.725" name="/newroot/173/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 380.676910][ T8728] syzkaller0: entered promiscuous mode [ 380.765122][ T8728] syzkaller0: entered allmulticast mode [ 380.884766][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 380.906936][ T8728] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 381.066803][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.077967][ T8728] tipc: Resetting bearer [ 381.117305][ T8727] tipc: Resetting bearer [ 381.119120][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.138271][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 381.147457][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.160721][ T43] usb 3-1: config 0 descriptor?? [ 381.169729][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 381.207206][ T8727] tipc: Disabling bearer [ 382.543882][ T788] usb 3-1: USB disconnect, device number 17 [ 385.135791][ T8767] loop2: detected capacity change from 0 to 256 [ 385.577025][ T8773] tipc: Enabled bearer , priority 0 [ 385.585917][ T8773] syzkaller0: entered promiscuous mode [ 385.591441][ T8773] syzkaller0: entered allmulticast mode [ 385.605575][ T8773] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.674548][ T8774] binder: 8770:8774 ioctl c0306201 200000000180 returned -14 [ 385.703011][ T8773] tipc: Resetting bearer [ 385.723517][ T8769] tipc: Resetting bearer [ 385.803230][ T8769] tipc: Disabling bearer [ 388.538633][ T8811] loop0: detected capacity change from 0 to 256 [ 388.584977][ T788] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 388.786201][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.798635][ T8816] bridge_slave_0: left allmulticast mode [ 388.804336][ T8816] bridge_slave_0: left promiscuous mode [ 388.821104][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.845965][ T788] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 388.856053][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.876119][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.892504][ T8816] bridge_slave_1: left allmulticast mode [ 388.902482][ T788] usb 4-1: config 0 descriptor?? [ 388.909876][ T8816] bridge_slave_1: left promiscuous mode [ 388.926557][ T788] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 388.938242][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.984414][ T8816] bond0: (slave bond_slave_0): Releasing backup interface [ 389.045431][ T8816] bond0: (slave bond_slave_1): Releasing backup interface [ 389.157751][ T8816] team0: Port device team_slave_0 removed [ 389.257853][ T8816] team0: Port device team_slave_1 removed [ 389.301224][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.318754][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.343933][ T788] usb 4-1: USB disconnect, device number 17 [ 389.382670][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.398642][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.561122][ T8822] tipc: Enabled bearer , priority 0 [ 389.571652][ T8823] syzkaller0: entered promiscuous mode [ 389.589578][ T8823] syzkaller0: entered allmulticast mode [ 389.678920][ T8823] tipc: Resetting bearer [ 389.733057][ T8823] tipc: Disabling bearer [ 391.704236][ T8858] loop1: detected capacity change from 0 to 64 [ 391.990507][ T8862] loop3: detected capacity change from 0 to 256 [ 392.038158][ T27] audit: type=1804 audit(1760009779.763:43): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.755" name="/newroot/184/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 392.085396][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 392.294786][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 392.310417][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.335341][ T43] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 392.357330][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.369369][ T43] usb 1-1: config 0 descriptor?? [ 392.665730][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 392.696877][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'. [ 392.823597][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 392.839445][ T43] usbhid: probe of 1-1:0.0 failed with error -71 [ 392.865292][ T43] usb 1-1: USB disconnect, device number 18 [ 392.955240][ T8868] tipc: Enabled bearer , priority 0 [ 392.984268][ T8868] syzkaller0: entered promiscuous mode [ 392.999745][ T8868] syzkaller0: entered allmulticast mode [ 393.025379][ T8868] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 393.048806][ T8867] tipc: Resetting bearer [ 393.094483][ T8867] tipc: Disabling bearer [ 393.256061][ T788] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 393.275858][ T8874] loop1: detected capacity change from 0 to 64 [ 393.495724][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 393.613200][ T27] audit: type=1804 audit(1760009781.323:44): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.762" name="/newroot/186/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 393.645064][ T27] audit: type=1804 audit(1760009781.333:45): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.762" name="/newroot/186/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 393.710155][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.726126][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.754958][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 393.764451][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.790879][ T43] usb 4-1: config 0 descriptor?? [ 393.823833][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 393.914775][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 393.922278][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.934299][ T788] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 393.943504][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.953899][ T788] usb 3-1: config 0 descriptor?? [ 393.975020][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 394.075846][ T43] usb 4-1: USB disconnect, device number 18 [ 394.157068][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.172554][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.183046][ T5871] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 394.198481][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.209724][ T5871] usb 1-1: config 0 descriptor?? [ 394.319788][ T8870] binder_alloc: 8869: binder_alloc_buf, no vma [ 394.336349][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 394.355837][ T8870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.760'. [ 394.373261][ T8870] macsec1: entered allmulticast mode [ 394.379064][ T8870] macvlan0: entered allmulticast mode [ 394.384508][ T8870] veth1_vlan: entered allmulticast mode [ 394.585720][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 394.591922][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 394.616100][ T788] usb 3-1: USB disconnect, device number 18 [ 394.675920][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.683503][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.703601][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.712739][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.722704][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.730991][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.739038][ T5871] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 394.804236][ T5871] steelseries 0003:1038:12B6.000D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 394.891128][ T5871] steelseries 0003:1038:12B6.000D: hid_hw_raw_request() failed with -71 [ 395.096029][ T5871] usb 1-1: USB disconnect, device number 19 [ 395.149890][ T8889] fido_id[8889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 396.290372][ T8903] tipc: Enabled bearer , priority 0 [ 396.298517][ T8903] syzkaller0: entered promiscuous mode [ 396.304078][ T8903] syzkaller0: entered allmulticast mode [ 396.320542][ T8903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 396.359955][ T8901] tipc: Resetting bearer [ 396.401924][ T8901] tipc: Disabling bearer [ 397.545531][ T27] audit: type=1326 audit(1760009785.273:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.3.772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f138eec9 code=0x0 [ 397.860689][ T8922] syzkaller0: entered promiscuous mode [ 397.868711][ T8922] syzkaller0: entered allmulticast mode [ 397.884835][ T5876] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 397.919360][ T8922] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 398.086709][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.103159][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.134829][ T5876] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 398.143947][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.166833][ T5876] usb 1-1: config 0 descriptor?? [ 398.176487][ T5876] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 398.569595][ T5876] usb 1-1: USB disconnect, device number 20 [ 399.563221][ T8939] tipc: Enabled bearer , priority 0 [ 399.572371][ T8939] syzkaller0: entered promiscuous mode [ 399.578006][ T8939] syzkaller0: entered allmulticast mode [ 399.592302][ T8939] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 399.624720][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 399.647012][ T8938] tipc: Resetting bearer [ 399.826935][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.852541][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.881446][ T23] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 399.923168][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.936998][ T8938] tipc: Disabling bearer [ 399.948577][ T23] usb 3-1: config 0 descriptor?? [ 401.140642][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.159036][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.185594][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.213108][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.245199][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.261833][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.279925][ T23] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 401.310524][ T23] steelseries 0003:1038:12B6.000E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 401.395614][ T23] steelseries 0003:1038:12B6.000E: hid_hw_raw_request() failed with -71 [ 401.472143][ T23] usb 3-1: USB disconnect, device number 19 [ 401.616847][ T8960] fido_id[8960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 401.835002][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 402.034726][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 402.057208][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.102469][ T43] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 402.127534][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.138722][ T43] usb 1-1: config 0 descriptor?? [ 402.366655][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 402.372778][ T43] usbhid: probe of 1-1:0.0 failed with error -71 [ 402.397263][ T43] usb 1-1: USB disconnect, device number 21 [ 403.186506][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 403.495113][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 403.586518][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.614900][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.638377][ T5921] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 403.649959][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.668866][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.677546][ T5876] usb 3-1: Product: syz [ 403.681771][ T5876] usb 3-1: Manufacturer: syz [ 403.691610][ T5876] usb 3-1: SerialNumber: syz [ 404.090482][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.118945][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.180632][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 405.609813][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.680656][ T5876] usb 3-1: 0:2 : does not exist [ 405.735079][ T5876] usb 3-1: unit 9 not found! [ 405.755975][ T5921] usb 2-1: config 0 descriptor?? [ 405.850131][ T5876] usb 3-1: USB disconnect, device number 20 [ 405.874063][ T5921] usb 2-1: can't set config #0, error -71 [ 405.887602][ T5921] usb 2-1: USB disconnect, device number 23 [ 405.970628][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.066221][ T8996] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 406.222318][ T9004] virtio-fs: tag not found [ 406.233172][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 406.559917][ T9010] virtio-fs: tag not found [ 406.600696][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'. [ 412.504896][ T788] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 412.904716][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 412.918421][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.938031][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.698409][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.711865][ T788] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.721348][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.735900][ T788] usb 1-1: config 0 descriptor?? [ 414.786654][ T788] usbhid 1-1:0.0: can't add hid device: -71 [ 414.814959][ T788] usbhid: probe of 1-1:0.0 failed with error -71 [ 414.850580][ T788] usb 1-1: USB disconnect, device number 22 [ 415.074917][ T5871] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 415.321875][ T5871] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 415.336141][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.347191][ T5871] usb 3-1: Product: syz [ 415.351488][ T5871] usb 3-1: Manufacturer: syz [ 415.361640][ T5871] usb 3-1: SerialNumber: syz [ 415.364514][ T9085] virtio-fs: tag not found [ 415.380677][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 415.394206][ T5871] usb 3-1: config 0 descriptor?? [ 415.611888][ T5871] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 415.825000][ T5876] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 416.104845][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 416.135111][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.164221][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.185031][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 416.198623][ T5876] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.208194][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.221728][ T5876] usb 1-1: config 0 descriptor?? [ 417.060289][ T5871] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 417.078917][ T5871] usb 3-1: USB disconnect, device number 21 [ 417.143355][ T5876] HID 045e:07da: Invalid code 65791 type 1 [ 417.156514][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input6 [ 417.178876][ T5876] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 418.047088][ T788] usb 1-1: USB disconnect, device number 23 [ 418.287774][ T9108] loop1: detected capacity change from 0 to 64 [ 420.697134][ T9119] loop3: detected capacity change from 0 to 64 [ 421.092249][ T27] audit: type=1804 audit(1760009808.803:47): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.825" name="/newroot/211/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 421.121877][ T27] audit: type=1804 audit(1760009808.813:48): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.825" name="/newroot/211/file1/bus" dev="loop3" ino=21 res=1 errno=0 [ 422.062690][ T27] audit: type=1326 audit(1760009809.783:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab2c58eec9 code=0x0 [ 422.185011][ T27] audit: type=1326 audit(1760009809.903:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2c58eec9 code=0x0 [ 423.162836][ T9148] loop0: detected capacity change from 0 to 1024 [ 423.182948][ T9148] ext4: Unknown parameter 'euid' [ 423.613920][ T9158] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 423.732014][ T9156] loop2: detected capacity change from 0 to 64 [ 424.794285][ T9170] loop1: detected capacity change from 0 to 64 [ 425.107352][ T27] audit: type=1804 audit(1760009812.833:51): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.837" name="/newroot/211/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 425.171285][ T27] audit: type=1804 audit(1760009812.863:52): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.837" name="/newroot/211/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 426.219236][ T27] audit: type=1326 audit(1760009813.943:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.0.842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec178eec9 code=0x0 [ 426.333181][ T27] audit: type=1326 audit(1760009814.053:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9177 comm="syz.0.842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ec178eec9 code=0x0 [ 427.013319][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 427.048536][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.840'. [ 427.860833][ T9200] virtio-fs: tag not found [ 427.870255][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 427.955650][ T9204] loop1: detected capacity change from 0 to 64 [ 429.366861][ T9217] 9pnet_fd: Insufficient options for proto=fd [ 432.560706][ T9233] netlink: 196 bytes leftover after parsing attributes in process `syz.0.852'. [ 432.586453][ T9240] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 433.067702][ T9247] syzkaller0: entered promiscuous mode [ 433.105954][ T9247] syzkaller0: entered allmulticast mode [ 433.199849][ T9247] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.018933][ T9264] loop2: detected capacity change from 0 to 1024 [ 435.043709][ T9264] ext4: Unknown parameter 'euid' [ 435.058036][ T9265] virtio-fs: tag not found [ 435.324138][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 435.422558][ T9271] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 436.208446][ T9281] loop1: detected capacity change from 0 to 164 [ 437.217598][ T9281] Unable to read rock-ridge attributes [ 437.253560][ T9280] Unable to read rock-ridge attributes [ 438.046662][ T9279] loop2: detected capacity change from 0 to 32768 [ 438.081376][ T9279] [ 438.081376][ T9279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.081376][ T9279] [ 439.560495][ T9305] loop1: detected capacity change from 0 to 164 [ 439.979126][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.985687][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.287419][ T9305] Unable to read rock-ridge attributes [ 440.288440][ T9307] fuse: Bad value for 'fd' [ 440.326376][ T9304] Unable to read rock-ridge attributes [ 440.552990][ T2987] [ 440.552990][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.552990][ T2987] [ 440.661934][ T2987] [ 440.661934][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.661934][ T2987] [ 441.634756][ T2987] [ 441.634756][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.634756][ T2987] [ 441.665517][ T113] [ 441.665517][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.665517][ T113] [ 441.701461][ T5783] [ 441.701461][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.701461][ T5783] [ 441.740241][ T5783] [ 441.740241][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.740241][ T5783] [ 441.953235][ T5871] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 442.147602][ T5871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.167021][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 442.178085][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 442.206993][ T5871] usb 2-1: Product: syz [ 442.227696][ T5871] usb 2-1: Manufacturer: syz [ 442.254768][ T5871] usb 2-1: SerialNumber: syz [ 442.733743][ T9324] loop3: detected capacity change from 0 to 1024 [ 442.742393][ T9324] ext4: Unknown parameter 'euid' [ 443.135236][ T9329] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 444.142576][ T9342] loop0: detected capacity change from 0 to 164 [ 444.188758][ T9342] Unable to read rock-ridge attributes [ 444.208057][ T9342] Unable to read rock-ridge attributes [ 445.040885][ T5786] usb 2-1: USB disconnect, device number 24 [ 445.937052][ T9351] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 448.585492][ T9370] loop2: detected capacity change from 0 to 32768 [ 448.608347][ T9370] [ 448.608347][ T9370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.608347][ T9370] [ 450.083136][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 450.100116][ T9385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.895'. [ 450.122814][ T9385] macsec1: entered allmulticast mode [ 450.189246][ T9385] macvlan0: entered allmulticast mode [ 450.244831][ T9385] veth1_vlan: entered allmulticast mode [ 450.309928][ T6402] [ 450.309928][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.309928][ T6402] [ 450.413763][ T6402] [ 450.413763][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.413763][ T6402] [ 450.926607][ T6402] [ 450.926607][ T6402] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.926607][ T6402] [ 451.191693][ T112] [ 451.191693][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.191693][ T112] [ 451.301912][ T5783] [ 451.301912][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.301912][ T5783] [ 451.313226][ T5783] [ 451.313226][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 451.313226][ T5783] [ 453.624339][ T9419] virtio-fs: tag not found [ 453.647407][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 454.833512][ T9437] loop3: detected capacity change from 0 to 164 [ 454.947905][ T9437] Unable to read rock-ridge attributes [ 454.967699][ T9437] Unable to read rock-ridge attributes [ 455.936025][ T9444] tipc: Enabled bearer , priority 0 [ 456.003933][ T9444] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 456.041982][ T9444] tipc: Resetting bearer [ 456.095966][ T9442] tipc: Disabling bearer [ 462.805928][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 462.832792][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.928'. [ 463.987715][ T9523] loop1: detected capacity change from 0 to 1024 [ 464.027336][ T9523] ext4: Unknown parameter 'euid' [ 464.397014][ T9528] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 464.526727][ T9527] loop2: detected capacity change from 0 to 1024 [ 464.576945][ T9527] ext4: Unknown parameter 'euid' [ 465.377821][ T9538] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 467.057671][ T9547] loop3: detected capacity change from 0 to 64 [ 468.884372][ T9558] tipc: Enabled bearer , priority 0 [ 468.974154][ T9566] loop1: detected capacity change from 0 to 164 [ 468.998017][ T9566] Unable to read rock-ridge attributes [ 469.015241][ T9566] Unable to read rock-ridge attributes [ 469.316084][ T9558] syzkaller0: entered promiscuous mode [ 469.376808][ T9558] syzkaller0: entered allmulticast mode [ 469.733674][ T9568] tipc: Resetting bearer [ 469.822184][ T9554] tipc: Resetting bearer [ 469.931379][ T9554] tipc: Disabling bearer [ 473.430658][ T9613] binder: 9612:9613 ioctl c0306201 0 returned -14 [ 476.552113][ T9630] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 477.590290][ T9650] loop0: detected capacity change from 0 to 64 [ 481.939688][ T9666] loop3: detected capacity change from 0 to 32768 [ 484.459392][ T9701] loop0: detected capacity change from 0 to 64 [ 485.002527][ T27] audit: type=1804 audit(1760009872.493:55): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.981" name="/newroot/247/file1/bus" dev="loop0" ino=21 res=1 errno=0 [ 485.518038][ T27] audit: type=1804 audit(1760009872.493:56): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.981" name="/newroot/247/file1/bus" dev="loop0" ino=21 res=1 errno=0 [ 486.115908][ T5871] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 486.431076][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 486.721143][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.064166][ T5871] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 487.169685][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.200961][ T5871] usb 1-1: config 0 descriptor?? [ 487.246793][ T27] audit: type=1326 audit(1760009874.953:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.3.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43f138eec9 code=0x0 [ 487.268455][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.955614][ T27] audit: type=1326 audit(1760009875.663:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9718 comm="syz.3.986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43f138eec9 code=0x0 [ 488.597550][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 488.616729][ T5871] usbhid: probe of 1-1:0.0 failed with error -71 [ 488.664906][ T5871] usb 1-1: USB disconnect, device number 24 [ 488.970486][ T9727] loop2: detected capacity change from 0 to 32768 [ 489.018629][ T9727] [ 489.018629][ T9727] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 489.018629][ T9727] [ 491.773674][ T6401] [ 491.773674][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.773674][ T6401] [ 491.804268][ T6401] [ 491.804268][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.804268][ T6401] [ 491.817201][ T6401] [ 491.817201][ T6401] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.817201][ T6401] [ 491.830389][ T5783] [ 491.830389][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.830389][ T5783] [ 491.866005][ T5783] [ 491.866005][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.866005][ T5783] [ 491.890440][ T113] [ 491.890440][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 491.890440][ T113] [ 491.934294][ T9749] loop0: detected capacity change from 0 to 1024 [ 491.985877][ T9749] ext4: Unknown parameter 'euid' [ 492.055790][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.604981][ T9756] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 493.872572][ T27] audit: type=1326 audit(1760009881.573:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.2.995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7bab8eec9 code=0x0 [ 494.188299][ T27] audit: type=1326 audit(1760009881.913:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.2.995" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7bab8eec9 code=0x0 [ 495.583570][ T9770] tipc: Enabled bearer , priority 0 [ 495.598100][ T9770] syzkaller0: entered promiscuous mode [ 495.603631][ T9770] syzkaller0: entered allmulticast mode [ 495.623999][ T9770] tipc: Resetting bearer [ 495.641579][ T9769] tipc: Resetting bearer [ 495.667439][ T9769] tipc: Disabling bearer [ 497.324764][ T5921] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 497.564877][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 497.694608][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.759357][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.795263][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.804421][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.864774][ T5921] usb 3-1: Product: syz [ 497.928631][ T5921] usb 3-1: Manufacturer: syz [ 497.933303][ T5921] usb 3-1: SerialNumber: syz [ 498.177802][ T9787] loop1: detected capacity change from 0 to 64 [ 499.315191][ T27] audit: type=1804 audit(1760009886.353:61): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1004" name="/newroot/259/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 499.584697][ T27] audit: type=1804 audit(1760009886.363:62): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1004" name="/newroot/259/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 501.421363][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427862][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.649223][ T5921] usb 3-1: 0:2 : does not exist [ 501.661838][ T5921] usb 3-1: unit 9 not found! [ 501.739378][ T5921] usb 3-1: USB disconnect, device number 22 [ 501.816839][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.361047][ T9832] loop2: detected capacity change from 0 to 1024 [ 503.384132][ T9832] ext4: Unknown parameter 'euid' [ 503.722356][ T9835] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 505.968442][ T9850] loop2: detected capacity change from 0 to 1024 [ 505.990270][ T9850] ext4: Unknown parameter 'euid' [ 506.137501][ T9852] tipc: Enabled bearer , priority 0 [ 506.161958][ T9852] syzkaller0: entered promiscuous mode [ 506.180394][ T9852] syzkaller0: entered allmulticast mode [ 506.255092][ T9852] tipc: Resetting bearer [ 506.538776][ T9856] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 506.867454][ T9851] tipc: Resetting bearer [ 507.016648][ T9851] tipc: Disabling bearer [ 507.465216][ T788] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 507.695678][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 507.790729][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.939253][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.982360][ T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.013188][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.046396][ T788] usb 4-1: Product: syz [ 508.050631][ T788] usb 4-1: Manufacturer: syz [ 508.091094][ T788] usb 4-1: SerialNumber: syz [ 509.429451][ T9884] virtio-fs: tag not found [ 510.031689][ T9891] virtio-fs: tag not found [ 510.063644][ T9890] loop1: detected capacity change from 0 to 4096 [ 510.814781][ T9896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 511.019020][ T788] usb 4-1: 0:2 : does not exist [ 511.038256][ T788] usb 4-1: unit 9 not found! [ 511.090764][ T788] usb 4-1: USB disconnect, device number 19 [ 511.182944][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.406328][ T9905] loop3: detected capacity change from 0 to 4096 [ 511.438528][ T9906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.654366][ T9930] tipc: Enabled bearer , priority 0 [ 513.710978][ T9930] syzkaller0: entered promiscuous mode [ 513.716639][ T9930] syzkaller0: entered allmulticast mode [ 513.775889][ T9932] tipc: Enabled bearer , priority 0 [ 513.807040][ T9930] tipc: Resetting bearer [ 513.826259][ T9932] syzkaller0: entered promiscuous mode [ 513.831805][ T9932] syzkaller0: entered allmulticast mode [ 513.908980][ T9929] tipc: Resetting bearer [ 514.021230][ T9929] tipc: Disabling bearer [ 514.121452][ T9935] tipc: Resetting bearer [ 514.192393][ T9931] tipc: Resetting bearer [ 514.334294][ T9931] tipc: Disabling bearer [ 514.870919][ T788] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 515.294845][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 515.564885][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 515.612907][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.668742][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.732874][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.793153][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.838416][ T43] usb 1-1: Product: syz [ 515.865380][ T43] usb 1-1: Manufacturer: syz [ 515.870051][ T43] usb 1-1: SerialNumber: syz [ 515.905935][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 515.915930][ T788] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 515.925771][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.944499][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 515.958280][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 515.966483][ T788] usb 2-1: Product: syz [ 515.970744][ T788] usb 2-1: Manufacturer: syz [ 515.975558][ T788] usb 2-1: SerialNumber: syz [ 516.231739][ T788] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 516.260747][ T788] usb 2-1: USB disconnect, device number 25 [ 516.289673][ T788] usblp0: removed [ 516.430953][ T9960] binder: 9959:9960 ioctl c0306201 0 returned -14 [ 518.629989][ T43] usb 1-1: 0:2 : does not exist [ 518.653271][ T43] usb 1-1: unit 9 not found! [ 519.275109][ T43] usb 1-1: USB disconnect, device number 25 [ 519.665947][ T9982] tipc: Enabled bearer , priority 0 [ 519.726037][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.094269][ T9980] tipc: Resetting bearer [ 520.944272][ T788] tipc: Node number set to 1151358960 [ 521.135848][ T9979] tipc: Disabling bearer [ 523.904918][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 524.105339][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 524.129579][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.148992][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.224736][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.269060][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.297484][ T5921] usb 4-1: Product: syz [ 524.314788][ T5921] usb 4-1: Manufacturer: syz [ 524.342392][ T5921] usb 4-1: SerialNumber: syz [ 524.506568][T10003] loop1: detected capacity change from 0 to 32768 [ 524.581199][ T5921] usb 4-1: 0:2 : does not exist [ 524.588242][T10003] [ 524.588242][T10003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 524.588242][T10003] [ 524.600932][ T5921] usb 4-1: unit 9 not found! [ 524.849960][ T5921] usb 4-1: USB disconnect, device number 20 [ 525.645778][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.239696][T10057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1070'. [ 530.605255][ T2987] [ 530.605255][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.605255][ T2987] [ 530.630464][ T2987] [ 530.630464][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.630464][ T2987] [ 530.657491][ T2987] [ 530.657491][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.657491][ T2987] [ 530.679776][ T112] [ 530.679776][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.679776][ T112] [ 530.701449][ T5784] [ 530.701449][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.701449][ T5784] [ 530.758091][ T5784] [ 530.758091][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.758091][ T5784] [ 531.285156][ T5876] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 531.634879][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 531.710447][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.972353][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.108603][ T5876] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.264685][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.304900][ T5876] usb 1-1: Product: syz [ 532.309142][ T5876] usb 1-1: Manufacturer: syz [ 532.313771][ T5876] usb 1-1: SerialNumber: syz [ 532.715192][ T5876] usb 1-1: 0:2 : does not exist [ 532.784199][ T5876] usb 1-1: unit 9 not found! [ 532.923788][ T5876] usb 1-1: USB disconnect, device number 26 [ 535.214785][ T788] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 535.568249][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.636454][ T788] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 535.663230][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.734986][ T788] usb 4-1: config 0 descriptor?? [ 535.783131][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 536.187074][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 536.238879][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 536.275088][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 536.285188][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 536.313331][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 536.325599][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 536.765411][ T788] pwc: recv_control_msg error -71 req 02 val 2000 [ 536.785369][ T788] pwc: recv_control_msg error -71 req 02 val 2100 [ 536.804956][ T788] pwc: recv_control_msg error -71 req 04 val 1500 [ 536.845267][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 536.853451][T10108] loop1: detected capacity change from 0 to 32768 [ 536.865099][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 536.911643][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 536.949727][T10108] [ 536.949727][T10108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.949727][T10108] [ 536.973802][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 537.009680][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 537.071386][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 537.106093][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 537.220883][ T788] pwc: Registered as video103. [ 537.297260][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 537.496621][ T788] usb 4-1: USB disconnect, device number 21 [ 537.517882][T10143] loop2: detected capacity change from 0 to 1024 [ 537.607891][T10143] ext4: Unknown parameter 'euid' [ 538.042447][T10148] snd_dummy snd_dummy.0: control 3:129:3:syz0:5 is already present [ 539.205515][ T5876] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 539.285959][T10161] tipc: Enabled bearer , priority 0 [ 539.334946][T10161] syzkaller0: entered promiscuous mode [ 539.374878][T10161] syzkaller0: entered allmulticast mode [ 539.462358][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 539.504238][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.529723][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.551007][T10161] tipc: Resetting bearer [ 539.557370][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.591410][T10140] loop3: detected capacity change from 0 to 32768 [ 539.597234][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.635754][T10159] tipc: Resetting bearer [ 539.649765][ T5876] usb 3-1: Product: syz [ 539.658532][T10140] [ 539.658532][T10140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 539.658532][T10140] [ 539.669229][ T5876] usb 3-1: Manufacturer: syz [ 539.669250][ T5876] usb 3-1: SerialNumber: syz [ 539.717351][T10159] tipc: Disabling bearer [ 539.919203][ T5876] usb 3-1: 0:2 : does not exist [ 539.958263][ T5876] usb 3-1: unit 9 not found! [ 540.012300][ T2987] [ 540.012300][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.012300][ T2987] [ 540.069892][ T5876] usb 3-1: USB disconnect, device number 23 [ 540.078724][ T2987] [ 540.078724][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.078724][ T2987] [ 540.116695][ T2987] [ 540.116695][ T2987] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.116695][ T2987] [ 540.167384][ T5784] [ 540.167384][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.167384][ T5784] [ 540.186313][ T5784] [ 540.186313][ T5784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.186313][ T5784] [ 540.187158][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.228436][ T113] [ 540.228436][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 540.228436][ T113] [ 540.281786][ T113] ================================================================== [ 540.289917][ T113] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 540.296794][ T113] Write of size 8 at addr ffff88807f3a8040 by task jfsCommit/113 [ 540.304512][ T113] [ 540.306857][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 540.314049][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.324113][ T113] Call Trace: [ 540.327399][ T113] [ 540.330340][ T113] dump_stack_lvl+0x16c/0x230 [ 540.335029][ T113] ? __lock_acquire+0x7c80/0x7c80 [ 540.340066][ T113] ? show_regs_print_info+0x20/0x20 [ 540.345267][ T113] ? load_image+0x3b0/0x3b0 [ 540.349779][ T113] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 540.355151][ T113] ? __virt_addr_valid+0x18c/0x540 [ 540.360272][ T113] ? __virt_addr_valid+0x469/0x540 [ 540.365406][ T113] print_report+0xac/0x220 [ 540.369826][ T113] ? txEnd+0x32d/0x520 [ 540.373889][ T113] kasan_report+0x117/0x150 [ 540.378423][ T113] ? txEnd+0x32d/0x520 [ 540.382500][ T113] kasan_check_range+0x288/0x290 [ 540.387445][ T113] txEnd+0x32d/0x520 [ 540.391342][ T113] jfs_lazycommit+0x5a6/0xa60 [ 540.396021][ T113] ? txFreelock+0x5a0/0x5a0 [ 540.400533][ T113] ? do_task_dead+0xd0/0xd0 [ 540.405035][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 540.409983][ T113] kthread+0x2fa/0x390 [ 540.414048][ T113] ? txFreelock+0x5a0/0x5a0 [ 540.418552][ T113] ? kthread_blkcg+0xd0/0xd0 [ 540.423144][ T113] ret_from_fork+0x48/0x80 [ 540.427584][ T113] ? kthread_blkcg+0xd0/0xd0 [ 540.432177][ T113] ret_from_fork_asm+0x11/0x20 [ 540.436958][ T113] [ 540.439976][ T113] [ 540.442305][ T113] Allocated by task 10108: [ 540.446715][ T113] kasan_set_track+0x4e/0x70 [ 540.451301][ T113] __kasan_kmalloc+0x8f/0xa0 [ 540.455899][ T113] lmLogOpen+0x2df/0xfb0 [ 540.460146][ T113] jfs_mount_rw+0xea/0x670 [ 540.464575][ T113] jfs_fill_super+0x592/0xac0 [ 540.469263][ T113] mount_bdev+0x22b/0x2d0 [ 540.473590][ T113] legacy_get_tree+0xea/0x180 [ 540.478274][ T113] vfs_get_tree+0x8c/0x280 [ 540.482687][ T113] do_new_mount+0x24b/0xa40 [ 540.487189][ T113] __se_sys_mount+0x2da/0x3c0 [ 540.491865][ T113] do_syscall_64+0x55/0xb0 [ 540.496283][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.502171][ T113] [ 540.504492][ T113] Freed by task 5784: [ 540.508463][ T113] kasan_set_track+0x4e/0x70 [ 540.513052][ T113] kasan_save_free_info+0x2e/0x50 [ 540.518076][ T113] ____kasan_slab_free+0x126/0x1e0 [ 540.523195][ T113] slab_free_freelist_hook+0x130/0x1b0 [ 540.528662][ T113] __kmem_cache_free+0xba/0x1f0 [ 540.533515][ T113] lmLogClose+0x297/0x520 [ 540.537847][ T113] jfs_umount+0x2ef/0x3c0 [ 540.542178][ T113] jfs_put_super+0x8c/0x190 [ 540.546681][ T113] generic_shutdown_super+0x134/0x2b0 [ 540.552057][ T113] kill_block_super+0x44/0x90 [ 540.556733][ T113] deactivate_locked_super+0x97/0x100 [ 540.562108][ T113] cleanup_mnt+0x429/0x4c0 [ 540.566525][ T113] task_work_run+0x1ce/0x250 [ 540.571117][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 540.576409][ T113] exit_to_user_mode_prepare+0xf6/0x180 [ 540.581959][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 540.587427][ T113] do_syscall_64+0x61/0xb0 [ 540.591843][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.597755][ T113] [ 540.600077][ T113] Last potentially related work creation: [ 540.605789][ T113] kasan_save_stack+0x3e/0x60 [ 540.610469][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 540.615849][ T113] kvfree_call_rcu+0xee/0x780 [ 540.620559][ T113] cgroup_migrate_finish+0x1a3/0x370 [ 540.625845][ T113] cgroup_attach_task+0x5cd/0x830 [ 540.630868][ T113] cgroup_attach_task_all+0x9a/0xe0 [ 540.636071][ T113] kvm_vm_worker_thread+0xd2/0x570 [ 540.641179][ T113] kthread+0x2fa/0x390 [ 540.645247][ T113] ret_from_fork+0x48/0x80 [ 540.649661][ T113] ret_from_fork_asm+0x11/0x20 [ 540.654431][ T113] [ 540.656766][ T113] Second to last potentially related work creation: [ 540.663338][ T113] kasan_save_stack+0x3e/0x60 [ 540.668025][ T113] __kasan_record_aux_stack+0xaf/0xc0 [ 540.673419][ T113] kvfree_call_rcu+0xee/0x780 [ 540.678104][ T113] cgroup_migrate_finish+0x1a3/0x370 [ 540.683385][ T113] cgroup_attach_task+0x5cd/0x830 [ 540.688411][ T113] cgroup_attach_task_all+0x9a/0xe0 [ 540.693612][ T113] kvm_vm_worker_thread+0x38e/0x570 [ 540.698817][ T113] kthread+0x2fa/0x390 [ 540.702885][ T113] ret_from_fork+0x48/0x80 [ 540.707305][ T113] ret_from_fork_asm+0x11/0x20 [ 540.712110][ T113] [ 540.714431][ T113] The buggy address belongs to the object at ffff88807f3a8000 [ 540.714431][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 540.728489][ T113] The buggy address is located 64 bytes inside of [ 540.728489][ T113] freed 1024-byte region [ffff88807f3a8000, ffff88807f3a8400) [ 540.742307][ T113] [ 540.744634][ T113] The buggy address belongs to the physical page: [ 540.751076][ T113] page:ffffea0001fcea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f3a8 [ 540.761227][ T113] head:ffffea0001fcea00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 540.770160][ T113] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 540.778160][ T113] page_type: 0xffffffff() [ 540.782486][ T113] raw: 00fff00000000840 ffff888017841dc0 ffffea0001fb4c00 dead000000000002 [ 540.791064][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 540.799638][ T113] page dumped because: kasan: bad access detected [ 540.806040][ T113] page_owner tracks the page as allocated [ 540.811763][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 194, tgid 194 (kworker/u4:5), ts 80133639562, free_ts 80098732681 [ 540.832358][ T113] post_alloc_hook+0x1cd/0x210 [ 540.837133][ T113] get_page_from_freelist+0x195c/0x19f0 [ 540.842718][ T113] __alloc_pages+0x1e3/0x460 [ 540.847313][ T113] alloc_slab_page+0x5d/0x170 [ 540.851990][ T113] new_slab+0x87/0x2e0 [ 540.856064][ T113] ___slab_alloc+0xc6d/0x1300 [ 540.860746][ T113] __kmem_cache_alloc_node+0x1a2/0x260 [ 540.866205][ T113] __kmalloc_node_track_caller+0xa2/0x230 [ 540.871936][ T113] kmalloc_reserve+0x117/0x260 [ 540.876722][ T113] __alloc_skb+0x138/0x2c0 [ 540.881176][ T113] inet6_rt_notify+0xb4/0x240 [ 540.885853][ T113] fib6_add+0x1d9a/0x3d20 [ 540.890192][ T113] ip6_ins_rt+0xc9/0x120 [ 540.894438][ T113] __ipv6_ifa_notify+0x62f/0xaa0 [ 540.899385][ T113] addrconf_dad_completed+0x181/0xd40 [ 540.904759][ T113] addrconf_dad_work+0xc4e/0x14e0 [ 540.909782][ T113] page last free stack trace: [ 540.914449][ T113] free_unref_page_prepare+0x7ce/0x8e0 [ 540.919924][ T113] free_unref_page+0x32/0x2e0 [ 540.924613][ T113] __unfreeze_partials+0x1cf/0x210 [ 540.929776][ T113] put_cpu_partial+0x17c/0x250 [ 540.934568][ T113] __slab_free+0x31d/0x410 [ 540.939018][ T113] qlist_free_all+0x75/0xe0 [ 540.943546][ T113] kasan_quarantine_reduce+0x143/0x160 [ 540.949029][ T113] __kasan_slab_alloc+0x22/0x80 [ 540.953894][ T113] slab_post_alloc_hook+0x6e/0x4d0 [ 540.959006][ T113] __kmem_cache_alloc_node+0x13e/0x260 [ 540.964469][ T113] kmalloc_trace+0x2a/0xe0 [ 540.968915][ T113] ref_tracker_alloc+0x134/0x460 [ 540.973850][ T113] netdev_queue_update_kobjects+0x191/0x480 [ 540.979753][ T113] netdev_register_kobject+0x269/0x310 [ 540.985222][ T113] register_netdevice+0x128f/0x1ae0 [ 540.990432][ T113] nsim_create+0x3ca/0x4a0 [ 540.994853][ T113] [ 540.997172][ T113] Memory state around the buggy address: [ 541.002796][ T113] ffff88807f3a7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 541.010851][ T113] ffff88807f3a7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 541.018909][ T113] >ffff88807f3a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 541.026961][ T113] ^ [ 541.033106][ T113] ffff88807f3a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 541.041161][ T113] ffff88807f3a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 541.049244][ T113] ================================================================== [ 541.156948][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 541.164229][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 541.171451][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.181533][ T113] Call Trace: [ 541.184884][ T113] [ 541.187842][ T113] dump_stack_lvl+0x16c/0x230 [ 541.192569][ T113] ? show_regs_print_info+0x20/0x20 [ 541.197796][ T113] ? load_image+0x3b0/0x3b0 [ 541.202348][ T113] panic+0x2c0/0x710 [ 541.206270][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 541.210801][ T113] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 541.216733][ T113] ? _raw_spin_unlock+0x40/0x40 [ 541.221586][ T113] ? print_memory_metadata+0x314/0x400 [ 541.227092][ T113] ? txEnd+0x32d/0x520 [ 541.231163][ T113] check_panic_on_warn+0x84/0xa0 [ 541.236111][ T113] ? txEnd+0x32d/0x520 [ 541.240179][ T113] end_report+0x6f/0x140 [ 541.244424][ T113] kasan_report+0x128/0x150 [ 541.248937][ T113] ? txEnd+0x32d/0x520 [ 541.253005][ T113] kasan_check_range+0x288/0x290 [ 541.257948][ T113] txEnd+0x32d/0x520 [ 541.261844][ T113] jfs_lazycommit+0x5a6/0xa60 [ 541.266552][ T113] ? txFreelock+0x5a0/0x5a0 [ 541.271055][ T113] ? do_task_dead+0xd0/0xd0 [ 541.275558][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 541.280503][ T113] kthread+0x2fa/0x390 [ 541.284582][ T113] ? txFreelock+0x5a0/0x5a0 [ 541.289101][ T113] ? kthread_blkcg+0xd0/0xd0 [ 541.293685][ T113] ret_from_fork+0x48/0x80 [ 541.298101][ T113] ? kthread_blkcg+0xd0/0xd0 [ 541.302692][ T113] ret_from_fork_asm+0x11/0x20 [ 541.307467][ T113] [ 541.310874][ T113] Kernel Offset: disabled [ 541.315206][ T113] Rebooting in 86400 seconds..