last executing test programs: 36m20.969706893s ago: executing program 0 (id=3440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 36m20.041511182s ago: executing program 0 (id=3446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="89e7ee2c7cdad9b4b47380c988ca4f870a9ef905dbd95c71a94ec0a4d1f7bfead1c98d8e73e18b5d3d62240c786ba26c123aa18c3ca9b2928de9bfc8d15e", 0x3e}], 0x1) 36m16.089047857s ago: executing program 0 (id=3457): bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close(r1) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x3) 36m15.288036813s ago: executing program 0 (id=3460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x12f451, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 36m14.328901323s ago: executing program 0 (id=3464): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) 36m13.561668243s ago: executing program 0 (id=3466): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) r1 = syz_open_procfs(0x0, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1b500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='block_rq_remap\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000a96000/0x1000)=nil) 36m13.197486153s ago: executing program 32 (id=3466): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) r1 = syz_open_procfs(0x0, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x1b500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='block_rq_remap\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) close_range(r7, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000a96000/0x1000)=nil) 4m17.330091692s ago: executing program 3 (id=9005): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={r2, 0x0, 0x81, 0x1, &(0x7f00000001c0)=[{0xd, 0x8, 0xb30}]}) 4m17.234879238s ago: executing program 3 (id=9007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000de0a00000008000300", @ANYRES32=r2, @ANYBLOB="1c0050800800030001ac0f00050002"], 0x38}}, 0x0) 4m16.517894045s ago: executing program 3 (id=9008): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 4m15.957545026s ago: executing program 3 (id=9011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'comedi_bond\x00', [0x4, 0xe, 0x8, 0xfffffffb, 0x1000, 0x101, 0x6623, 0x6, 0xb, 0x0, 0xfffffffa, 0x2, 0xfffffffe, 0x8, 0x6, 0x7, 0x1, 0x7, 0x4, 0xa261, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) 4m14.20342133s ago: executing program 5 (id=9012): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffffffff, 0x2, 0x1, 0x0, 0x2}) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) 4m13.796689227s ago: executing program 3 (id=9014): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m13.661546208s ago: executing program 5 (id=9015): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x240) r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x7, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x2}}) 4m13.660934478s ago: executing program 3 (id=9016): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xdddd1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m11.213996373s ago: executing program 5 (id=9024): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) 4m11.101350328s ago: executing program 5 (id=9025): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = open(&(0x7f0000000080)='./file1\x00', 0x20042, 0x144) r1 = open(&(0x7f0000000000)='./file2\x00', 0x6840, 0x120) copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0) 4m11.003430373s ago: executing program 5 (id=9026): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m10.886845507s ago: executing program 5 (id=9027): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 3m58.202411121s ago: executing program 33 (id=9016): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xdddd1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m55.504112986s ago: executing program 34 (id=9027): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[], 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 43.521507196s ago: executing program 1 (id=9929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @local}, 0x2}}, 0x2e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 42.610680628s ago: executing program 1 (id=9935): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x3}, {}, {0x2, 0x4}, {0x2, 0x5}], {0x4, 0x1}, [{0x8, 0x0, r4}], {0x10, 0x3}, {0x20, 0x5}}, 0x54, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3a155000) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) 41.407083743s ago: executing program 1 (id=9943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000300)=0x4, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) 40.178842947s ago: executing program 1 (id=9946): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 37.248071318s ago: executing program 1 (id=9962): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 36.974589928s ago: executing program 1 (id=9967): socket(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x7ff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xe0f8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 31.549910788s ago: executing program 4 (id=9991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 28.234049257s ago: executing program 4 (id=10003): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) listen(0xffffffffffffffff, 0x9) listen(0xffffffffffffffff, 0x7b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 27.270748011s ago: executing program 4 (id=10005): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x240) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) 25.740952289s ago: executing program 4 (id=10014): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000240)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, '\x00', "651fd19ea85f4000073e820ca8382065", "00020008", "ffff00000b00"}, 0x28) close(r2) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 24.827670871s ago: executing program 4 (id=10015): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 24.659817306s ago: executing program 4 (id=10017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x20040054) 21.864374138s ago: executing program 35 (id=9967): socket(0x10, 0x3, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x7ff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xe0f8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9.408013404s ago: executing program 36 (id=10017): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x20040054) 7.968444173s ago: executing program 6 (id=10086): write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r2, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x0}, 0x40) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x2319, 0x7, 0x8, 0x69, 0x1ff}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 7.862943442s ago: executing program 6 (id=10088): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) r1 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14) socket$pptp(0x18, 0x1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='#,d\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 7.557949354s ago: executing program 8 (id=10092): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xffbfffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100001000010000000000ffdbdf250a010100000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000803200000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000002000100af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000ffffffff1c"], 0x170}}, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0xc000, r2}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}]}, 0x30}}, 0x0) rename(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00') 6.023692292s ago: executing program 8 (id=10094): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f00005b1000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 5.201696233s ago: executing program 2 (id=10096): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x400, 0x0, 0x32}, 0x9c) semget$private(0x0, 0x6, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) eventfd2(0x5, 0x801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) 5.107530016s ago: executing program 8 (id=10097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f02106b820776ebd10e88b2101dc06cc427374f0caa5de5b55b00dfed30c0fa7af6c646f9539c58830b6057ea6", 0x2d}, {&(0x7f0000000b80)="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", 0xf20}, {&(0x7f0000000480)}], 0x3, 0x0, 0x0, 0x7400}, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000001000000003000000160000000700000007000000"]) 4.368307881s ago: executing program 6 (id=10098): write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r2, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x0}, 0x40) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x2319, 0x7, 0x8, 0x69, 0x1ff}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 4.338053791s ago: executing program 2 (id=10099): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x800000000003, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x0, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x8000]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.284086839s ago: executing program 7 (id=10100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334", 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7", 0x8}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.249416437s ago: executing program 2 (id=10101): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.212046742s ago: executing program 7 (id=10102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) 4.16085458s ago: executing program 8 (id=10103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x3, 0xb) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd"], 0x8) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0x386, &(0x7f0000000d80)={@multicast, @link_local, @void, {@mpls_mc={0x8848, {[{0x10}, {0xc}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}], @ipv4=@gre={{0x16, 0x4, 0x1, 0x6, 0x360, 0x64, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, {[@lsrr={0x83, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0xf, [{@loopback, 0xdb5b}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@multicast1, 0x7}, {@local, 0xff}]}, @timestamp={0x44, 0x18, 0x3d, 0x0, 0x6, [0xeaf, 0x1ff, 0x7fffffff, 0x6, 0x401]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xbb, 0x1, [0xe], "5e84ecd444630636985b6a6221677abc6dec04a536001b4e9590ba8a8d729ac5f8c846302a6c539f57266a9c6f548007d34810d456628dc5ca1f1dde2a53ebe678c08e38c192beb8d56f0c8a97eba450e19cfe7e185f230f9e8ca017b59b6c4fac04cd5ebf8f9156d4c4271ead8a296aaa3a7849aeeaf4e1b7197ed13f25cb002bd96655fcffa067e308b86d232bc83f200f738d50b3bd30b7a72c7bf9a393ece45a76ce8168c5ef16fa764d32eb35ef23192be4f67f0b837180bf"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5, 0x8, 0xe49], "0f3c5a118f043ce8a831b96e9e7f62058b8badfd3b93084e6d98f9313e7da672323795f111e5443fd57893d3142872fc20c55acd8698774a7ac516e4a19ce2fde109b04b168536a3011182a5ca56428aa129d362ee05a0d5659b42bed743368404fe4a4a8afb09638586707501d6c6766596999fa7dea88cd2d607a0245fb286074715002f718d6d93687cfc3891f866dd79864ac042282a577f78c1e2bf76d6456e1d1b87c4cfdb4f54afbae9c354003d96fe1f1bf73e79bc4378cbf30c9798de523efed2116a14fe5d357ca1bc2ab7d1a791f4b1df"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "34268ad28184669376921fa85ac48c01f7c587b35e5792c1a94758a1e63db627ca7a8083d7cbac36858e020524d7c41dfd27b8fe78a9cf5d7e9cee509ab9c0cbb45e9e74c0070fcf5717a71d50229811d56593f0ccca"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x1, 0x3, 0x0, 0x0, 0x4}, 0x1, {0x200}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5, 0x3, 0x1, 0x3, 0x0, 0xd}, 0x2, {0x2, 0x3, 0x2, 0x15, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "13b6d10aa76f2fc726b3e2c674866918c04f41d1786cadd9353c9e1df35d7c8f8ad337b2fc489704bfc7052fbbe04eef33b80e0c9b90769e16d4a5158c77234498cdf45bf76ceacbd1333a54ca725dba8f0a3133116f26e7f3376fab30c78dfc2c63d4f9ca0609644ca69308e311004333c1965e8e417698cb841cbee2440828809faf3cfd41ed62ac2c9bf6b137b453ab6d01b7b91a7892f60d01914e18e0bc882b66e57479d5f863cdadbea8e10255aa82f9e597232a7d1cb661a2fa376c720c38b576e53a42028af831bd4528601a1bb2496752"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.097533574s ago: executing program 2 (id=10104): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4) 2.781954085s ago: executing program 7 (id=10105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 2.779303483s ago: executing program 8 (id=10106): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f00005b1000/0x3000)=nil, 0x3000, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 2.091721897s ago: executing program 7 (id=10107): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002000000"], 0x80}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) 2.050154825s ago: executing program 6 (id=10108): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@any, 0x2}) 1.885643472s ago: executing program 6 (id=10109): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x400, 0x0, 0x32}, 0x9c) semget$private(0x0, 0x6, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) eventfd2(0x5, 0x801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) 1.770166068s ago: executing program 8 (id=10110): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000080)="00012c615bc2") 1.119121307s ago: executing program 7 (id=10111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334", 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7", 0x8}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.040354408s ago: executing program 6 (id=10112): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x240) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) 1.020778468s ago: executing program 7 (id=10113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f02106b820776ebd10e88b2101dc06cc427374f0caa5de5b55b00dfed30c0fa7af6c646f9539c58830b6057ea6", 0x2d}, {&(0x7f0000000b80)="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", 0xf20}, {&(0x7f0000000480)}], 0x3, 0x0, 0x0, 0x7400}, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000001000000003000000160000000700000007000000"]) 970.390749ms ago: executing program 2 (id=10114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc}) 0s ago: executing program 2 (id=10115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000003000000950000000000000047ad49afb569e2906fcb0cdd285459c59fea5b5fc2"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x60280) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0xd, 0x7f, 0x1, 'queue0\x00', 0x3ff}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000200)={0xc}, 0x8) sendmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x7, 0x7c2, 0xa0363159, 0x32314742, 0x2, 0x7e, 0x6, 0x2, 0x1, 0x4, 0x2, 0x6}}) kernel console output (not intermixed with test programs): ented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2738.848358][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2738.989939][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2739.017191][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2739.106140][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2739.140672][T11068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2739.175966][T11077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2739.273265][T11064] kvm: pic: non byte read [ 2739.282224][T11064] kvm: pic: non byte read [ 2739.297851][T11064] kvm: pic: non byte read [ 2739.324073][T11064] kvm: pic: non byte read [ 2739.378768][T10969] hsr_slave_0: entered promiscuous mode [ 2739.403437][T10969] hsr_slave_1: entered promiscuous mode [ 2739.419561][ T51] Bluetooth: hci1: command tx timeout [ 2740.366069][ T30] audit: type=1400 audit(1752055873.186:5744): avc: denied { bind } for pid=11092 comm="syz.4.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2741.269139][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8985'. [ 2741.305904][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8985'. [ 2741.489566][ T51] Bluetooth: hci1: command tx timeout [ 2744.166178][T10969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2744.201010][T10969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2744.232173][T10969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2744.294135][T10969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2745.340268][T10969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2745.387375][T10969] 8021q: adding VLAN 0 to HW filter on device team0 [ 2745.422201][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 2745.429347][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2746.057985][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 2746.065138][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2746.811326][T11173] lo speed is unknown, defaulting to 1000 [ 2746.817914][T11173] lo speed is unknown, defaulting to 1000 [ 2746.824389][T11173] lo speed is unknown, defaulting to 1000 [ 2746.973134][T11173] infiniband syz0: set down [ 2746.977657][T11173] infiniband syz0: added lo [ 2747.240087][T11173] RDS/IB: syz0: added [ 2747.244137][T11173] smc: adding ib device syz0 with port count 1 [ 2747.250465][T11173] smc: ib device syz0 port 1 has pnetid [ 2747.257199][T11173] lo speed is unknown, defaulting to 1000 [ 2747.337038][ T9649] lo speed is unknown, defaulting to 1000 [ 2747.397260][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2747.436238][T11173] lo speed is unknown, defaulting to 1000 [ 2747.488427][T10969] veth0_vlan: entered promiscuous mode [ 2747.518983][T10969] veth1_vlan: entered promiscuous mode [ 2747.578237][T10969] veth0_macvtap: entered promiscuous mode [ 2747.591373][T10969] veth1_macvtap: entered promiscuous mode [ 2747.598312][T11173] lo speed is unknown, defaulting to 1000 [ 2747.611180][T10969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2747.625999][T10969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2747.656391][T10969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2747.678457][T10969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2747.693790][T11180] comedi comedi0: Minor 14 could not be opened [ 2747.701369][T10969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2747.721497][T10969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2747.747018][T11173] lo speed is unknown, defaulting to 1000 [ 2747.908308][ T4974] lo speed is unknown, defaulting to 1000 [ 2747.927889][T11173] lo speed is unknown, defaulting to 1000 [ 2747.941629][ T9082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2747.971287][ T9082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2748.031928][ T9082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2748.046017][ T9082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2748.112843][T11173] lo speed is unknown, defaulting to 1000 [ 2748.589700][T25295] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2748.749302][T25295] usb 3-1: Using ep0 maxpacket: 8 [ 2748.755898][T25295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2748.772749][T25295] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2748.791523][T25295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2748.798622][ T30] audit: type=1400 audit(1752055881.616:5745): avc: denied { mounton } for pid=11191 comm="syz.3.9014" path="/593/file1/file0" dev="autofs" ino=180885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 2748.809237][T25295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2748.825144][ C1] vkms_vblank_simulate: vblank timer overrun [ 2748.829322][T11192] fuse: Bad value for 'fd' [ 2748.882645][T25295] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 2748.905029][T25295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.913268][T25295] usb 3-1: Product: syz [ 2748.917569][T25295] usb 3-1: Manufacturer: syz [ 2748.926269][T25295] usb 3-1: SerialNumber: syz [ 2748.937542][T25295] usb 3-1: config 0 descriptor?? [ 2748.954746][T25295] redrat3 3-1:0.0: Couldn't find all endpoints [ 2749.895654][ T9649] usb 3-1: USB disconnect, device number 46 [ 2751.162148][T11215] 9pnet_fd: Insufficient options for proto=fd [ 2751.269525][T11216] mkiss: ax0: crc mode is auto. [ 2751.511335][T25295] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2751.660666][T11225] fuse: Bad value for 'fd' [ 2751.690929][T25295] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 2751.701342][T25295] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2751.715153][T25295] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 2751.724288][T25295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 2751.732796][T25295] usb 2-1: SerialNumber: syz [ 2751.946507][T25295] usb 2-1: USB disconnect, device number 43 [ 2753.011450][ T6261] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2753.659473][ T6261] usb 2-1: Using ep0 maxpacket: 8 [ 2753.674820][ T6261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2753.687265][ T6261] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2753.703185][ T6261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2753.755331][ T6261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2753.775964][ T6261] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 2753.785126][ T6261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2753.794917][ T6261] usb 2-1: Product: syz [ 2753.799320][ T6261] usb 2-1: Manufacturer: syz [ 2753.804539][ T6261] usb 2-1: SerialNumber: syz [ 2753.919646][ T6261] usb 2-1: config 0 descriptor?? [ 2754.072240][ T6261] redrat3 2-1:0.0: Couldn't find all endpoints [ 2754.227596][ T24] usb 2-1: USB disconnect, device number 44 [ 2754.345441][ T6261] libceph: connect (1)[c::]:6789 error -101 [ 2754.389569][ T6261] libceph: mon0 (1)[c::]:6789 connect error [ 2754.700056][ T6261] libceph: connect (1)[c::]:6789 error -101 [ 2754.708135][ T6261] libceph: mon0 (1)[c::]:6789 connect error [ 2754.980707][T11255] ceph: No mds server is up or the cluster is laggy [ 2756.768066][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2756.775776][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2756.785720][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2756.793459][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2756.883226][T11286] rdma_rxe: rxe_newlink: failed to add lo [ 2757.262272][T11283] block nbd2: shutting down sockets [ 2759.119522][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2759.416384][ T30] audit: type=1400 audit(1752055892.226:5746): avc: denied { ioctl } for pid=11323 comm="syz.4.9060" path="socket:[181058]" dev="sockfs" ino=181058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2759.465323][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2759.513471][ T24] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2759.562622][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2759.618255][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2759.668194][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2759.753888][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2759.773761][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2759.788439][ T24] usb 2-1: Product: syz [ 2759.792761][ T24] usb 2-1: Manufacturer: syz [ 2759.833693][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 2759.855509][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 2759.867264][ T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2760.793869][T11336] mkiss: ax0: crc mode is auto. [ 2762.092781][ T6261] usb 2-1: USB disconnect, device number 45 [ 2762.694246][ T30] audit: type=1400 audit(1752055895.486:5747): avc: denied { create } for pid=11359 comm="syz.1.9071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2762.778593][ T6261] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2762.857575][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9074'. [ 2762.869945][T11367] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2762.878646][T11367] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2762.887430][T11367] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2762.896128][T11367] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2762.908321][T11367] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2762.917253][T11367] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2762.926435][T11367] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2762.935486][T11367] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2762.987427][ T6261] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2763.006764][ T6261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2763.018268][ T6261] usb 5-1: Product: syz [ 2763.023508][ T6261] usb 5-1: Manufacturer: syz [ 2763.028697][ T6261] usb 5-1: SerialNumber: syz [ 2763.038981][ T6261] usb 5-1: config 0 descriptor?? [ 2763.451163][ T6261] usb 5-1: Firmware version (0.0) predates our first public release. [ 2763.459467][ T6261] usb 5-1: Please update to version 0.2 or newer [ 2763.729177][ T6261] usb 5-1: USB disconnect, device number 54 [ 2763.776401][T11378] mkiss: ax0: crc mode is auto. [ 2763.978817][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9077'. [ 2764.031950][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9077'. [ 2765.139346][T15914] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2765.278995][T27669] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2765.288866][T27669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2765.299418][T27669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2765.308395][T27669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2765.605176][T15914] usb 2-1: Using ep0 maxpacket: 32 [ 2765.650296][T27669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2765.680812][T15914] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 2765.697023][T15914] usb 2-1: config 0 has no interface number 0 [ 2765.706693][T15914] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2765.717962][T15914] usb 2-1: config 0 interface 196 has no altsetting 0 [ 2765.726914][T15914] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2765.736128][T15914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.744179][T15914] usb 2-1: Product: syz [ 2765.748423][T15914] usb 2-1: Manufacturer: syz [ 2765.753299][T15914] usb 2-1: SerialNumber: syz [ 2765.760151][T15914] usb 2-1: config 0 descriptor?? [ 2765.765757][T11388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2765.836985][T11395] lo speed is unknown, defaulting to 1000 [ 2766.338955][ T2072] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2766.350774][ T2072] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2766.364133][T15914] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 2766.384390][T15914] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 2766.427731][ T2072] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2766.439233][ T2072] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2766.493634][ T2072] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2766.511471][ T2072] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2766.590183][ T24] usb 2-1: USB disconnect, device number 46 [ 2766.680620][ T2072] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2766.687983][T11412] ieee802154 phy0 wpan0: encryption failed: -22 [ 2766.700765][ T2072] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2767.040851][T11395] chnl_net:caif_netlink_parms(): no params data found [ 2767.310947][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2767.367113][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 2767.416486][T11395] bridge_slave_0: entered allmulticast mode [ 2767.598676][T11395] bridge_slave_0: entered promiscuous mode [ 2767.871406][ T51] Bluetooth: hci5: command tx timeout [ 2767.963254][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 2768.056674][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 2768.093998][T11395] bridge_slave_1: entered allmulticast mode [ 2768.261678][T11395] bridge_slave_1: entered promiscuous mode [ 2769.391377][T11395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2769.582671][T11395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2769.784253][T27669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2769.796403][T27669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2769.804447][T27669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2769.812779][T27669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2769.820352][T27669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2769.892328][ T51] Bluetooth: hci5: command tx timeout [ 2769.899882][T11395] team0: Port device team_slave_0 added [ 2769.912635][ T2072] bridge_slave_1: left allmulticast mode [ 2769.922729][ T2072] bridge_slave_1: left promiscuous mode [ 2769.928596][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state [ 2769.940540][ T2072] bridge_slave_0: left allmulticast mode [ 2769.946269][ T2072] bridge_slave_0: left promiscuous mode [ 2769.952062][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state [ 2770.090354][T11443] Bluetooth: MGMT ver 1.23 [ 2770.925934][ T2072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2770.937190][ T2072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2770.951780][ T2072] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2770.962397][ T2072] bond0 (unregistering): Released all slaves [ 2770.976317][T11395] team0: Port device team_slave_1 added [ 2770.984126][T11435] lo speed is unknown, defaulting to 1000 [ 2771.012184][T11395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2771.019707][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2771.048112][T11395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2771.060211][ T2072] tipc: Left network mode [ 2771.060718][T11395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2771.073643][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2771.102685][T11395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2771.252724][ T4974] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2771.294266][T11395] hsr_slave_0: entered promiscuous mode [ 2771.302319][T11395] hsr_slave_1: entered promiscuous mode [ 2771.308246][T11395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2771.316172][T11395] Cannot create hsr debugfs directory [ 2771.411830][ T4974] usb 3-1: Using ep0 maxpacket: 8 [ 2771.429965][ T4974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2771.449391][ T4974] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2771.469589][ T4974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.494276][ T4974] usb 3-1: config 0 descriptor?? [ 2771.513753][ T4974] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2771.836044][ T2072] hsr_slave_0: left promiscuous mode [ 2771.841947][ T2072] hsr_slave_1: left promiscuous mode [ 2771.850626][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2771.863055][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2771.878969][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2771.889163][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2771.889362][ T51] Bluetooth: hci0: command tx timeout [ 2771.912898][ T4974] gspca_vc032x: reg_w err -71 [ 2771.917697][ T4974] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 2771.943966][ T4974] usb 3-1: USB disconnect, device number 47 [ 2771.950308][ T2072] veth1_macvtap: left promiscuous mode [ 2771.955819][ T2072] veth0_macvtap: left promiscuous mode [ 2771.969283][ T51] Bluetooth: hci5: command tx timeout [ 2771.979161][ T2072] veth1_vlan: left promiscuous mode [ 2771.984706][ T2072] veth0_vlan: left promiscuous mode [ 2772.548977][ T2072] team0 (unregistering): Port device team_slave_1 removed [ 2772.607375][ T2072] team0 (unregistering): Port device team_slave_0 removed [ 2772.809942][ T5896] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 2772.944185][T11468] mkiss: ax0: crc mode is auto. [ 2772.975542][T11435] chnl_net:caif_netlink_parms(): no params data found [ 2773.041545][ T5896] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 2773.078100][ T5896] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2773.089602][ T5896] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2773.101250][ T5896] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 2773.110581][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 2773.118734][ T5896] usb 3-1: SerialNumber: syz [ 2773.144729][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9104'. [ 2773.341080][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 2773.348656][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2773.372067][ T5896] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 2773.380734][ T5896] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input203 [ 2773.395011][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.402010][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.408948][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.415999][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.422951][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.429963][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.436899][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.443853][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 2773.450617][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 2773.463875][ T5896] usb 3-1: USB disconnect, device number 48 [ 2773.499961][T11435] bridge_slave_0: entered allmulticast mode [ 2773.506901][T11435] bridge_slave_0: entered promiscuous mode [ 2773.515625][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 2773.523355][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2773.531919][T11435] bridge_slave_1: entered allmulticast mode [ 2773.538796][T11435] bridge_slave_1: entered promiscuous mode [ 2773.546549][T11395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2773.568146][T11395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2773.589708][T11395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2773.602458][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2773.615709][T11395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2773.647672][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2773.688944][T11435] team0: Port device team_slave_0 added [ 2773.715012][T11435] team0: Port device team_slave_1 added [ 2773.755707][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2773.766006][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2773.793096][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2773.805173][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2773.812274][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2773.838349][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2773.888345][T11435] hsr_slave_0: entered promiscuous mode [ 2773.894921][T11435] hsr_slave_1: entered promiscuous mode [ 2773.908408][T11435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2773.925426][T11435] Cannot create hsr debugfs directory [ 2773.969438][ T51] Bluetooth: hci0: command tx timeout [ 2774.011888][ T2072] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 2774.020769][ T2072] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 2774.032384][ T2072] bridge0: port 3(netdevsim0) entered disabled state [ 2774.049341][ T51] Bluetooth: hci5: command tx timeout [ 2774.213893][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.220267][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.554029][T11395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2774.677352][ T2072] bridge_slave_1: left allmulticast mode [ 2774.697589][ T2072] bridge_slave_1: left promiscuous mode [ 2774.765641][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state [ 2774.807143][ T2072] bridge_slave_0: left allmulticast mode [ 2774.923708][ T2072] bridge_slave_0: left promiscuous mode [ 2774.931282][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state [ 2775.830279][T11517] IPv6: NLM_F_CREATE should be specified when creating new route [ 2776.069302][ T51] Bluetooth: hci0: command tx timeout [ 2776.292430][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 2776.298562][T11520] block nbd4: shutting down sockets [ 2778.129115][ T30] audit: type=1400 audit(1752055910.146:5748): avc: denied { shutdown } for pid=11534 comm="syz.2.9121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2778.149854][T27669] Bluetooth: hci0: command tx timeout [ 2778.173227][ T30] audit: type=1400 audit(1752055910.146:5749): avc: denied { read } for pid=11534 comm="syz.2.9121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2778.258971][ T2072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2778.274155][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9123'. [ 2778.323157][ T2072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2778.340851][ T2072] bond0 (unregistering): Released all slaves [ 2778.373923][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 2778.426637][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.433713][T18695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2778.446889][T11435] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2778.518033][ T2072] tipc: Left network mode [ 2778.518412][T11435] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2778.553735][T11435] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2778.595205][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.602270][T16503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2778.636361][T11435] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2779.388265][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2779.429655][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 2779.466770][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 2779.473923][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2779.533914][T27748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2779.541040][T27748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2780.952120][ T2072] hsr_slave_0: left promiscuous mode [ 2780.959751][ T2072] hsr_slave_1: left promiscuous mode [ 2781.549431][ T9930] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2782.424774][ T2072] team0 (unregistering): Port device team_slave_1 removed [ 2782.594928][ T2072] team0 (unregistering): Port device team_slave_0 removed [ 2782.599339][ T9930] usb 5-1: Using ep0 maxpacket: 32 [ 2782.620806][ T9930] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2783.056406][ T9930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2783.066665][ T9930] usb 5-1: config 0 descriptor?? [ 2783.333018][T11596] comedi comedi0: Minor 14 could not be opened [ 2783.774474][ T9930] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2783.784719][ T9930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2783.796210][ T9930] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2783.814152][ T9930] usb 5-1: media controller created [ 2783.856314][ T9930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2783.932865][T11600] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2783.945569][T11598] kvm: pic: non byte read [ 2783.968407][ T9930] az6027: usb out operation failed. (-71) [ 2783.975740][ T9930] az6027: usb out operation failed. (-71) [ 2783.986394][T11598] kvm: pic: non byte read [ 2783.991433][ T9930] stb0899_attach: Driver disabled by Kconfig [ 2783.997810][T11598] kvm: pic: non byte read [ 2783.998648][ T9930] az6027: no front-end attached [ 2783.998648][ T9930] [ 2784.011142][T11598] kvm: pic: non byte read [ 2784.026288][ T9930] az6027: usb out operation failed. (-71) [ 2784.039180][ T9930] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2784.056904][ T9930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input204 [ 2784.076493][ T9930] dvb-usb: schedule remote query interval to 400 msecs. [ 2784.083783][ T9930] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2784.095052][ T9930] usb 5-1: USB disconnect, device number 55 [ 2784.133043][ T9930] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2784.218017][ T6711] smc: removing ib device syz0 [ 2784.236022][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2784.574524][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2785.437941][T11395] veth0_vlan: entered promiscuous mode [ 2785.457387][T11395] veth1_vlan: entered promiscuous mode [ 2785.524560][T11395] veth0_macvtap: entered promiscuous mode [ 2785.643073][T11395] veth1_macvtap: entered promiscuous mode [ 2785.874539][T11395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2785.996491][T11395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2786.123205][T11395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.253592][T11395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.359295][T11395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.378180][T11395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2786.575929][T11435] veth0_vlan: entered promiscuous mode [ 2786.839700][T11435] veth1_vlan: entered promiscuous mode [ 2787.290871][T18695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2787.318318][T18695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2787.354653][T11435] veth0_macvtap: entered promiscuous mode [ 2787.397541][T11435] veth1_macvtap: entered promiscuous mode [ 2787.445239][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2787.526544][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2787.548255][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2787.557843][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2787.618152][T11435] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.659937][T11435] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.668653][T11435] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.679075][T11435] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2787.844501][T11657] overlayfs: missing 'workdir' [ 2788.214844][ T30] audit: type=1400 audit(1752055921.036:5750): avc: denied { unmount } for pid=10526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2788.278335][T20624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2788.329240][T20624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2788.339524][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2788.347340][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2788.744305][T11670] mkiss: ax0: crc mode is auto. [ 2789.407584][T11676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2790.223307][ T9930] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 2790.434607][ T9930] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2790.478778][ T9930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2790.500747][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2790.541222][ T9930] usb 8-1: Product: syz [ 2790.610203][ T9930] usb 8-1: Manufacturer: syz [ 2790.642910][ T9930] usb 8-1: SerialNumber: syz [ 2790.717710][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2790.731743][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 2790.741220][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2790.773498][ T9930] usb 8-1: config 0 descriptor?? [ 2790.776216][ T24] usb 2-1: config 0 descriptor?? [ 2791.254367][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9167'. [ 2791.266796][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9167'. [ 2791.623054][ T9930] usb 8-1: Firmware: major: 114, minor: 105, hardware type: UNKNOWN (47) [ 2791.847410][ T9930] usb 8-1: failed to fetch extended address, random address set [ 2791.857979][ T9930] usb 8-1: atusb_probe: initialization failed, error = -524 [ 2791.916359][ T9930] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 2791.940829][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 2791.983017][ T9930] usb 8-1: USB disconnect, device number 2 [ 2792.019985][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2792.034325][ T24] usb 2-1: USB disconnect, device number 47 [ 2792.159992][T11713] @: renamed from vlan0 (while UP) [ 2792.679927][ T9649] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2793.270768][ T9649] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2793.297385][ T9649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.320315][ T9649] usb 5-1: config 0 descriptor?? [ 2793.968843][T11745] ieee802154 phy0 wpan0: encryption failed: -22 [ 2794.005067][T11746] block nbd7: shutting down sockets [ 2794.199902][ T9649] ath6kl: Failed to read usb control message: -71 [ 2794.206818][ T9649] ath6kl: Unable to read the bmi data from the device: -71 [ 2794.236817][ T9649] ath6kl: Unable to recv target info: -71 [ 2794.273234][ T9649] ath6kl: Failed to init ath6kl core: -71 [ 2794.285160][ T9649] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2794.323346][ T9649] usb 5-1: USB disconnect, device number 56 [ 2794.366645][T11749] ip6erspan0: entered promiscuous mode [ 2794.590226][T10140] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 2794.753741][T10140] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2794.778267][T10140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2794.802689][T10140] usb 8-1: Product: syz [ 2794.814539][T10140] usb 8-1: Manufacturer: syz [ 2794.824286][T10140] usb 8-1: SerialNumber: syz [ 2794.861482][ T30] audit: type=1400 audit(1752055927.676:5751): avc: denied { mount } for pid=11757 comm="syz.1.9188" name="/" dev="hugetlbfs" ino=185560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2794.886267][T10140] usb 8-1: config 0 descriptor?? [ 2795.059822][T11761] ptrace attach of "./syz-executor exec"[10526] was attempted by "./syz-executor exec"[11761] [ 2795.092284][ T30] audit: type=1400 audit(1752055927.906:5752): avc: denied { mounton } for pid=11757 comm="syz.1.9188" path="/69/file1/bus" dev="hugetlbfs" ino=185563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 2795.115736][ C1] vkms_vblank_simulate: vblank timer overrun [ 2795.342134][T11761] overlayfs: workdir and upperdir must be separate subtrees [ 2795.601303][T11770] lo speed is unknown, defaulting to 1000 [ 2795.607274][T11770] lo speed is unknown, defaulting to 1000 [ 2795.615786][T11770] lo speed is unknown, defaulting to 1000 [ 2795.662652][T11770] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2795.988909][T10140] usb 8-1: Firmware: major: 114, minor: 105, hardware type: UNKNOWN (47) [ 2796.014212][T11770] lo speed is unknown, defaulting to 1000 [ 2796.023398][T11770] lo speed is unknown, defaulting to 1000 [ 2796.030695][T11770] lo speed is unknown, defaulting to 1000 [ 2796.037323][T11770] lo speed is unknown, defaulting to 1000 [ 2796.043979][T11770] lo speed is unknown, defaulting to 1000 [ 2796.050647][T11770] lo speed is unknown, defaulting to 1000 [ 2796.184839][ T30] audit: type=1400 audit(1752055929.006:5753): avc: denied { unmount } for pid=10526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2796.214017][T10140] usb 8-1: failed to fetch extended address, random address set [ 2796.247113][T10140] usb 8-1: atusb_probe: initialization failed, error = -524 [ 2796.357476][T10140] atusb 8-1:0.0: probe with driver atusb failed with error -524 [ 2796.597486][T10140] usb 8-1: USB disconnect, device number 3 [ 2798.067302][ T4974] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2798.419281][ T4974] usb 3-1: device descriptor read/64, error -71 [ 2799.142239][T11804] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2799.159316][ T4974] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2799.289310][ T4974] usb 3-1: device descriptor read/64, error -71 [ 2799.336993][T11815] netlink: 4756 bytes leftover after parsing attributes in process `syz.7.9208'. [ 2799.739578][ T4974] usb usb3-port1: attempt power cycle [ 2800.209410][ T4974] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2800.436328][T11834] rdma_rxe: rxe_newlink: failed to add lo [ 2801.322703][ T4974] usb 3-1: device not accepting address 51, error -71 [ 2802.869659][T11854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2803.909307][T10140] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2804.075664][T10140] usb 2-1: device descriptor read/64, error -71 [ 2804.832119][T10140] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2805.230862][T10140] usb 2-1: device descriptor read/64, error -71 [ 2805.359722][T10140] usb usb2-port1: attempt power cycle [ 2805.928693][T10140] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2805.965820][T10140] usb 2-1: device descriptor read/8, error -71 [ 2806.212818][T10140] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2806.250977][T10140] usb 2-1: device descriptor read/8, error -71 [ 2806.603685][T10140] usb usb2-port1: unable to enumerate USB device [ 2808.556098][T11938] random: crng reseeded on system resumption [ 2808.574188][ T30] audit: type=1400 audit(1752580229.376:5754): avc: denied { write } for pid=11932 comm="syz.6.9243" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2809.552726][ T30] audit: type=1400 audit(1752580229.376:5755): avc: denied { ioctl } for pid=11932 comm="syz.6.9243" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2810.936116][T11949] netlink: 'syz.1.9249': attribute type 2 has an invalid length. [ 2812.083209][T11961] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2812.092891][T11961] kvm: pic: non byte read [ 2812.097359][T11961] kvm: pic: non byte read [ 2812.105034][T11961] kvm: pic: single mode not supported [ 2812.105068][T11961] pic_ioport_write: 2 callbacks suppressed [ 2812.105079][T11961] kvm: pic: level sensitive irq not supported [ 2812.134582][T11961] kvm: pic: non byte read [ 2812.147491][T11961] kvm: pic: non byte read [ 2812.152739][T11961] kvm: pic: level sensitive irq not supported [ 2812.152827][T11961] kvm: pic: non byte read [ 2812.647505][T11987] overlayfs: missing 'workdir' [ 2812.925376][T11997] netlink: 'syz.1.9264': attribute type 21 has an invalid length. [ 2812.933343][T11997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9264'. [ 2812.959990][T11997] netlink: 'syz.1.9264': attribute type 5 has an invalid length. [ 2812.970763][T11997] netlink: 'syz.1.9264': attribute type 6 has an invalid length. [ 2812.981713][T11997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9264'. [ 2813.059249][ T9930] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 2813.210657][ T9930] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2813.259055][ T9930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.288400][ T9930] usb 8-1: config 0 descriptor?? [ 2813.899633][ T9930] ath6kl: Failed to read usb control message: -71 [ 2813.921212][ T9930] ath6kl: Unable to read the bmi data from the device: -71 [ 2814.239057][ T9930] ath6kl: Unable to recv target info: -71 [ 2814.248747][ T9930] ath6kl: Failed to init ath6kl core: -71 [ 2814.265915][ T9930] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2814.278651][ T9930] usb 8-1: USB disconnect, device number 4 [ 2816.679290][ T4974] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2816.839262][ T4974] usb 5-1: Using ep0 maxpacket: 32 [ 2816.865497][ T4974] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 2816.893957][ T4974] usb 5-1: config 0 has no interface number 0 [ 2816.908103][T12036] xt_cgroup: invalid path, errno=-2 [ 2816.928782][ T4974] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2816.955155][ T4974] usb 5-1: config 0 interface 196 has no altsetting 0 [ 2816.964778][ T4974] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2816.975118][ T4974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.983270][ T4974] usb 5-1: Product: syz [ 2816.987622][ T4974] usb 5-1: Manufacturer: syz [ 2816.994885][ T4974] usb 5-1: SerialNumber: syz [ 2817.048471][ T4974] usb 5-1: config 0 descriptor?? [ 2817.098747][T12028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2817.107478][ T30] audit: type=1400 audit(1752580237.936:5756): avc: denied { bind } for pid=12037 comm="syz.6.9278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2817.369020][ T4974] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2817.922835][ T4974] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 2817.957683][ T4974] usb 5-1: USB disconnect, device number 57 [ 2817.988591][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2818.024159][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2818.038289][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2818.049408][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2818.293537][T12055] overlayfs: missing 'workdir' [ 2818.309600][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2818.315651][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2818.468733][ T30] audit: type=1400 audit(1752580239.286:5757): avc: denied { execute } for pid=12056 comm="syz.6.9284" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2818.492099][ C0] vkms_vblank_simulate: vblank timer overrun [ 2818.593272][T12048] ceph: No mds server is up or the cluster is laggy [ 2818.749390][ T5896] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 2819.632757][ T5896] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2819.642482][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.677188][ T5896] usb 5-1: config 0 descriptor?? [ 2819.902060][ T5896] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2819.932795][ T5896] asix 5-1:0.0: probe with driver asix failed with error -32 [ 2820.169722][ T4974] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2820.339466][ T4974] usb 7-1: Using ep0 maxpacket: 32 [ 2820.397496][ T4974] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2820.415924][ T4974] usb 7-1: config 0 has no interface number 0 [ 2820.442905][ T4974] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2820.463699][ T4974] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2820.475874][ T4974] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2820.485909][ T4974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2820.494345][ T4974] usb 7-1: Product: syz [ 2820.502420][ T4974] usb 7-1: Manufacturer: syz [ 2820.507080][ T4974] usb 7-1: SerialNumber: syz [ 2820.566097][ T4974] usb 7-1: config 0 descriptor?? [ 2820.574519][T12085] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2820.871131][ T9930] libceph: connect (1)[c::]:6789 error -101 [ 2820.877200][ T9930] libceph: mon0 (1)[c::]:6789 connect error [ 2820.885604][ T9930] libceph: connect (1)[c::]:6789 error -101 [ 2820.891935][ T9930] libceph: mon0 (1)[c::]:6789 connect error [ 2821.150151][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2821.737532][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2821.796172][ T5896] usb 5-1: USB disconnect, device number 58 [ 2821.813564][ T4974] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2821.849031][ T4974] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 2821.877441][ T4974] usb 7-1: USB disconnect, device number 2 [ 2822.359525][T10140] libceph: connect (1)[c::]:6789 error -101 [ 2822.365533][T10140] libceph: mon0 (1)[c::]:6789 connect error [ 2822.369282][T27669] Bluetooth: hci2: command 0x0406 tx timeout [ 2822.601064][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9306'. [ 2823.043820][T12097] ceph: No mds server is up or the cluster is laggy [ 2823.640586][T10140] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 2823.820649][T10140] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2823.842947][T10140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2823.866233][T10140] usb 2-1: config 0 descriptor?? [ 2824.715914][T10140] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2824.726048][T10140] asix 2-1:0.0: probe with driver asix failed with error -32 [ 2826.345264][ T4974] usb 2-1: USB disconnect, device number 52 [ 2826.557392][ T4974] libceph: connect (1)[c::]:6789 error -101 [ 2826.563515][ T4974] libceph: mon0 (1)[c::]:6789 connect error [ 2826.842186][ T9649] libceph: connect (1)[c::]:6789 error -101 [ 2826.868364][T12184] No such timeout policy "syz1" [ 2826.877952][T12184] fuse: Bad value for 'fd' [ 2827.236143][ T9649] libceph: mon0 (1)[c::]:6789 connect error [ 2827.478176][T12175] ceph: No mds server is up or the cluster is laggy [ 2827.769580][ T9649] libceph: connect (1)[c::]:6789 error -101 [ 2827.775581][ T9649] libceph: mon0 (1)[c::]:6789 connect error [ 2828.226357][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9332'. [ 2828.230198][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9333'. [ 2828.520906][T12211] overlayfs: missing 'lowerdir' [ 2832.754661][T12260] netlink: 'syz.2.9352': attribute type 2 has an invalid length. [ 2833.579257][T10140] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2833.707653][T12281] overlayfs: failed to resolve './file0': -2 [ 2833.750664][T10140] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2833.769333][T10140] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.784400][T10140] usb 7-1: config 0 descriptor?? [ 2834.409846][ T5897] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2834.453109][T10140] ath6kl: Failed to read usb control message: -71 [ 2834.466652][T10140] ath6kl: Unable to read the bmi data from the device: -71 [ 2834.483394][T10140] ath6kl: Unable to recv target info: -71 [ 2834.499553][T10140] ath6kl: Failed to init ath6kl core: -71 [ 2834.515695][T10140] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2834.543122][T12299] netlink: 'syz.2.9366': attribute type 2 has an invalid length. [ 2834.554257][T10140] usb 7-1: USB disconnect, device number 3 [ 2834.582868][ T5897] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2834.599282][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.613107][ T5897] usb 2-1: Product: syz [ 2834.617515][ T5897] usb 2-1: Manufacturer: syz [ 2834.630774][ T5897] usb 2-1: SerialNumber: syz [ 2834.656874][ T5897] usb 2-1: config 0 descriptor?? [ 2834.675334][ T5897] ch341 2-1:0.0: ch341-uart converter detected [ 2834.922058][ T5897] usb 2-1: failed to receive control message: -121 [ 2834.938799][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 2834.950483][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2834.980479][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2835.280411][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2835.383458][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2835.523446][ T5896] usb 2-1: USB disconnect, device number 53 [ 2835.537764][T12302] ceph: No mds server is up or the cluster is laggy [ 2835.548739][ T5896] ch341 2-1:0.0: device disconnected [ 2835.655154][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.667669][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.040081][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9380'. [ 2837.173782][T12347] No control pipe specified [ 2837.618833][ T9930] libceph: connect (1)[c::]:6789 error -101 [ 2837.682492][ T9930] libceph: mon0 (1)[c::]:6789 connect error [ 2838.446218][ T9930] libceph: connect (1)[c::]:6789 error -101 [ 2838.454668][ T9930] libceph: mon0 (1)[c::]:6789 connect error [ 2838.761436][T12355] ceph: No mds server is up or the cluster is laggy [ 2838.889407][ T5896] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2839.055027][ T5896] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2839.085477][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2839.113059][ T5896] usb 5-1: Product: syz [ 2839.129259][ T5896] usb 5-1: Manufacturer: syz [ 2839.139359][ T5896] usb 5-1: SerialNumber: syz [ 2839.168399][ T5896] usb 5-1: config 0 descriptor?? [ 2839.175330][ T5896] ch341 5-1:0.0: ch341-uart converter detected [ 2839.376554][T12379] comedi comedi0: Minor 14 could not be opened [ 2839.391179][ T5896] usb 5-1: failed to receive control message: -71 [ 2839.409516][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2839.436516][ T5896] usb 5-1: USB disconnect, device number 59 [ 2839.458663][ T5896] ch341 5-1:0.0: device disconnected [ 2840.639337][ T5896] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2840.649424][ T9930] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2840.661451][ T9930] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2840.829319][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 2840.847013][ T5896] usb 5-1: no configurations [ 2840.864735][ T5896] usb 5-1: can't read configurations, error -22 [ 2841.039263][ T5896] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2841.219260][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 2841.225307][ T5896] usb 5-1: no configurations [ 2841.238459][ T5896] usb 5-1: can't read configurations, error -22 [ 2841.260411][ T5896] usb usb5-port1: attempt power cycle [ 2841.578121][T12410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2841.629377][ T5896] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2841.660029][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 2841.668214][ T5896] usb 5-1: no configurations [ 2841.674091][ T5896] usb 5-1: can't read configurations, error -22 [ 2841.892971][ T5896] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2841.939791][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 2841.948407][ T5896] usb 5-1: no configurations [ 2841.959664][ T5896] usb 5-1: can't read configurations, error -22 [ 2841.983479][ T5896] usb usb5-port1: unable to enumerate USB device [ 2842.876913][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9410'. [ 2843.112141][T12444] mkiss: ax0: crc mode is auto. [ 2843.194430][ T5896] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2843.463882][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2843.475414][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.503237][ T5896] usb 2-1: config 0 descriptor?? [ 2843.511198][ T5897] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 2843.522856][ T5897] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2843.739375][T12304] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 2843.940772][T12304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2843.968813][ T5896] ath6kl: Failed to read usb control message: -71 [ 2843.975873][ T5896] ath6kl: Unable to read the bmi data from the device: -71 [ 2843.986038][ T5896] ath6kl: Unable to recv target info: -71 [ 2843.992599][ T5896] ath6kl: Failed to init ath6kl core: -71 [ 2844.004726][ T5896] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2844.021467][T12304] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2844.036641][ T5896] usb 2-1: USB disconnect, device number 54 [ 2844.070280][T12304] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 2844.105545][T12304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2844.172144][T12304] usb 7-1: config 0 descriptor?? [ 2844.197430][T12453] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2844.208511][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9423'. [ 2844.669262][ T30] audit: type=1400 audit(1752580265.486:5758): avc: denied { getopt } for pid=12475 comm="syz.1.9427" lport=59298 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2844.839501][T26238] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2844.907223][T12304] usbhid 7-1:0.0: can't add hid device: -71 [ 2844.913262][T12304] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2844.923285][T12304] usb 7-1: USB disconnect, device number 4 [ 2844.999306][T26238] usb 5-1: Using ep0 maxpacket: 16 [ 2845.006043][T26238] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 2845.025821][T26238] usb 5-1: config 2 has no interface number 0 [ 2845.043130][T26238] usb 5-1: config 2 interface 142 has no altsetting 0 [ 2845.065089][T26238] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=dd.cc [ 2845.083272][T26238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.092409][T26238] usb 5-1: Product: syz [ 2845.098918][T26238] usb 5-1: Manufacturer: syz [ 2845.106230][T26238] usb 5-1: SerialNumber: syz [ 2846.108748][T12494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2846.624898][T12502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2847.334230][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9435'. [ 2847.869344][T12304] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2848.884714][T12304] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2848.897882][T12304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2848.927978][T12304] usb 7-1: config 0 descriptor?? [ 2849.123566][T26238] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 2849.198114][T26238] usb 5-1: USB disconnect, device number 64 [ 2849.371010][T12304] ath6kl: Failed to read usb control message: -71 [ 2849.398276][T12304] ath6kl: Unable to read the bmi data from the device: -71 [ 2849.417669][T12304] ath6kl: Unable to recv target info: -71 [ 2849.435993][T12304] ath6kl: Failed to init ath6kl core: -71 [ 2849.455914][T12304] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2849.537996][T12304] usb 7-1: USB disconnect, device number 5 [ 2849.900505][T12548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9449'. [ 2850.200531][T10140] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2850.409719][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9452'. [ 2850.421019][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9452'. [ 2851.243492][T10140] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2851.267075][T10140] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2851.284640][T10140] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2851.561235][T10140] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2851.591392][T10140] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2851.601725][T10140] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2851.616456][T10140] usb 2-1: Product: syz [ 2851.626260][T10140] usb 2-1: Manufacturer: syz [ 2851.647837][T10140] cdc_wdm 2-1:1.0: skipping garbage [ 2851.655163][T10140] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2853.127230][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9465'. [ 2853.139214][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9465'. [ 2853.229391][T10140] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2853.511415][T12304] usb 2-1: USB disconnect, device number 55 [ 2854.064672][T10140] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2854.427621][T10140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.495432][T10140] usb 5-1: config 0 descriptor?? [ 2854.537615][T12607] xt_connbytes: Forcing CT accounting to be enabled [ 2854.974527][T10140] ath6kl: Failed to read usb control message: -71 [ 2855.002121][T10140] ath6kl: Unable to read the bmi data from the device: -71 [ 2855.154030][T10140] ath6kl: Unable to recv target info: -71 [ 2855.168536][T10140] ath6kl: Failed to init ath6kl core: -71 [ 2855.174843][T10140] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2855.186934][T10140] usb 5-1: USB disconnect, device number 65 [ 2856.045978][T12636] block nbd2: shutting down sockets [ 2856.072829][T10140] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 2856.239749][T10140] usb 2-1: device descriptor read/64, error -71 [ 2856.719280][T10140] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 2857.269391][T10140] usb 2-1: device descriptor read/64, error -71 [ 2857.389471][T10140] usb usb2-port1: attempt power cycle [ 2857.549353][T26238] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2857.779296][ T6261] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 2857.981197][T10140] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 2858.029761][T10140] usb 2-1: device descriptor read/8, error -71 [ 2858.089235][T26238] usb 3-1: device descriptor read/64, error -71 [ 2858.171770][ T6261] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2858.181254][ T6261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.210021][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 2858.244154][ T6261] usb 8-1: config 0 descriptor?? [ 2858.269284][T10140] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 2858.299708][T10140] usb 2-1: device descriptor read/8, error -71 [ 2858.369266][T26238] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2858.419357][T10140] usb usb2-port1: unable to enumerate USB device [ 2858.509249][T26238] usb 3-1: device descriptor read/64, error -71 [ 2858.620069][T26238] usb usb3-port1: attempt power cycle [ 2858.674040][ T6261] ath6kl: Failed to read usb control message: -71 [ 2858.694581][ T6261] ath6kl: Unable to read the bmi data from the device: -71 [ 2858.717006][ T6261] ath6kl: Unable to recv target info: -71 [ 2858.745274][ T6261] ath6kl: Failed to init ath6kl core: -71 [ 2858.762980][ T6261] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2858.812816][ T6261] usb 8-1: USB disconnect, device number 5 [ 2858.969351][T26238] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2859.024468][T26238] usb 3-1: device descriptor read/8, error -71 [ 2859.289448][T26238] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2859.433059][T26238] usb 3-1: device descriptor read/8, error -71 [ 2859.611688][T26238] usb usb3-port1: unable to enumerate USB device [ 2860.702957][T12690] overlayfs: failed to resolve './file0': -2 [ 2860.788894][T12692] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9499'. [ 2861.209410][T10140] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 2861.349246][T10140] usb 7-1: device descriptor read/64, error -71 [ 2861.362750][T12705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2862.390085][T10140] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 2862.483620][T12722] overlayfs: failed to resolve './file0': -2 [ 2862.519263][ T6261] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2862.530100][T10140] usb 7-1: device descriptor read/64, error -71 [ 2862.697181][T10140] usb usb7-port1: attempt power cycle [ 2862.759736][T12728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2863.105048][ T6261] usb 8-1: device descriptor read/64, error -71 [ 2863.415811][T26238] libceph: connect (1)[c::]:6789 error -101 [ 2863.424084][T26238] libceph: mon0 (1)[c::]:6789 connect error [ 2863.609982][ T6261] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2863.640919][T12726] ceph: No mds server is up or the cluster is laggy [ 2863.649984][T10140] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 2863.698987][T10140] usb 7-1: device descriptor read/8, error -71 [ 2864.133157][ T6261] usb 8-1: device descriptor read/64, error -71 [ 2864.250205][ T6261] usb usb8-port1: attempt power cycle [ 2864.371265][T12748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2864.899440][ T6261] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2865.077434][T12760] overlayfs: failed to resolve './file1': -2 [ 2865.167847][ T6261] usb 8-1: device descriptor read/8, error -71 [ 2865.569330][ T6261] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2865.637014][ T6261] usb 8-1: device descriptor read/8, error -71 [ 2865.659295][ T9930] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 2865.770296][ T6261] usb usb8-port1: unable to enumerate USB device [ 2865.818499][ T9930] usb 3-1: device descriptor read/64, error -71 [ 2866.016642][T12780] rdma_rxe: rxe_newlink: failed to add lo [ 2866.409321][ T9930] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 2866.479331][ T5896] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2866.549326][ T9930] usb 3-1: device descriptor read/64, error -71 [ 2866.629374][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 2866.643248][ T5896] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 2866.654842][ T5896] usb 5-1: config 2 has no interface number 0 [ 2866.666404][ T5896] usb 5-1: config 2 interface 142 has no altsetting 0 [ 2866.673854][ T9930] usb usb3-port1: attempt power cycle [ 2866.682398][ T5896] usb 5-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=dd.cc [ 2866.692757][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.703846][ T5896] usb 5-1: Product: syz [ 2866.708097][ T5896] usb 5-1: Manufacturer: syz [ 2866.713482][ T5896] usb 5-1: SerialNumber: syz [ 2866.782011][T12792] overlayfs: failed to resolve './file1': -2 [ 2866.946101][ T5896] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 2866.955151][ T5896] usb 5-1: USB disconnect, device number 66 [ 2867.042145][ T9930] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 2867.239139][ T9930] usb 3-1: device descriptor read/8, error -71 [ 2867.560122][ T9930] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 2867.609692][ T9930] usb 3-1: device descriptor read/8, error -71 [ 2867.768268][ T9930] usb usb3-port1: unable to enumerate USB device [ 2868.013034][T12807] mkiss: ax0: crc mode is auto. [ 2869.728690][T12822] No control pipe specified [ 2870.251539][T12836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2871.074695][T12304] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2871.240666][T12304] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2871.250084][T12304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2871.267719][T12304] usb 7-1: config 0 descriptor?? [ 2871.703097][T12304] ath6kl: Failed to read usb control message: -71 [ 2871.714956][T12304] ath6kl: Unable to read the bmi data from the device: -71 [ 2871.732592][T12304] ath6kl: Unable to recv target info: -71 [ 2871.763583][T12304] ath6kl: Failed to init ath6kl core: -71 [ 2871.791773][T12304] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2871.858368][T12304] usb 7-1: USB disconnect, device number 10 [ 2876.169247][T12304] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2876.331058][T12304] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2876.389717][T12304] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 2876.418785][T12304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2876.437384][T12304] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2876.464623][T12304] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2876.479243][T12304] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2876.496556][T12304] usb 5-1: Product: syz [ 2876.522728][T12304] usb 5-1: Manufacturer: syz [ 2876.558508][T12304] cdc_wdm 5-1:1.0: skipping garbage [ 2876.570064][T12304] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2877.089239][ T9930] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2877.852883][T12304] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 2877.878487][T12304] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2877.922412][ T9930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2877.935006][ T9930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.947258][ T9930] usb 2-1: config 0 descriptor?? [ 2878.461411][ T9930] ath6kl: Failed to read usb control message: -71 [ 2878.860116][ T9930] ath6kl: Unable to read the bmi data from the device: -71 [ 2879.305984][ T9930] ath6kl: Unable to recv target info: -71 [ 2879.335765][ T6261] usb 5-1: USB disconnect, device number 67 [ 2879.392710][ T9930] ath6kl: Failed to init ath6kl core: -71 [ 2879.398863][ T9930] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2879.431935][ T9930] usb 2-1: USB disconnect, device number 60 [ 2880.940465][ T9649] libceph: connect (1)[c::]:6789 error -101 [ 2880.969021][ T9649] libceph: mon0 (1)[c::]:6789 connect error [ 2881.220692][T12959] ceph: No mds server is up or the cluster is laggy [ 2881.239839][ T9649] libceph: connect (1)[c::]:6789 error -101 [ 2881.261736][ T9649] libceph: mon0 (1)[c::]:6789 connect error [ 2881.449782][ T5896] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2881.609248][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 2882.078943][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2882.088712][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2882.098564][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2882.109898][ T5896] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 2882.119770][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.127752][ T5896] usb 2-1: Product: syz [ 2882.134908][ T5896] usb 2-1: Manufacturer: syz [ 2882.145034][ T5896] usb 2-1: SerialNumber: syz [ 2882.150910][ T5896] usb 2-1: config 0 descriptor?? [ 2882.170730][ T5896] redrat3 2-1:0.0: Couldn't find all endpoints [ 2882.265492][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9586'. [ 2882.296785][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9586'. [ 2882.491050][ T5896] usb 2-1: USB disconnect, device number 61 [ 2882.549276][ T9649] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2884.665405][ T9649] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2884.684178][ T9649] usb 8-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 2884.749664][ T9649] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2884.764600][ T9649] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2884.797578][ T9649] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2884.807472][ T9649] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2885.147418][ T9649] usb 8-1: Product: syz [ 2885.151695][ T9649] usb 8-1: Manufacturer: syz [ 2885.177107][ T9649] cdc_wdm 8-1:1.0: skipping garbage [ 2885.347465][ T9649] cdc_wdm 8-1:1.0: skipping garbage [ 2885.359462][ T9649] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2885.386837][ T9649] usb 8-1: USB disconnect, device number 10 [ 2885.469066][ T4974] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 2885.509013][ T4974] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2886.994594][T13025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2887.229244][ T9930] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2887.348419][T25295] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 2887.357187][T25295] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2887.390557][ T9930] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2887.411677][ T9930] usb 8-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 2887.630875][ T9930] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2887.640962][ T9930] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2887.656852][ T9930] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2887.666159][ T9930] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2887.674739][ T9930] usb 8-1: Product: syz [ 2887.678951][ T9930] usb 8-1: Manufacturer: syz [ 2887.702228][ T9930] cdc_wdm 8-1:1.0: skipping garbage [ 2887.717599][ T9930] cdc_wdm 8-1:1.0: skipping garbage [ 2887.722927][ T9930] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2887.731757][ T5896] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2887.900943][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 2887.920962][ T5896] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 2887.945770][ T5896] usb 5-1: config 0 has no interface number 0 [ 2887.977864][ T5896] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2888.026118][ T5896] usb 5-1: config 0 interface 196 has no altsetting 0 [ 2888.049602][ T5896] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2888.080983][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2888.105455][ T5896] usb 5-1: Product: syz [ 2888.115104][ T5896] usb 5-1: Manufacturer: syz [ 2888.125205][ T5896] usb 5-1: SerialNumber: syz [ 2888.142919][ T5896] usb 5-1: config 0 descriptor?? [ 2888.159749][T13029] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2888.574824][ T5896] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2888.594988][ T5896] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 2888.637442][ T5896] usb 5-1: USB disconnect, device number 68 [ 2888.929289][T13020] Bluetooth: hci5: command 0x0406 tx timeout [ 2890.073989][T26238] usb 8-1: USB disconnect, device number 11 [ 2890.547890][T26238] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 2890.561633][T26238] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2892.128543][ T9649] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2892.839226][ T9649] usb 2-1: Using ep0 maxpacket: 32 [ 2892.854267][ T9649] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 2892.863537][ T9649] usb 2-1: config 0 has no interface number 0 [ 2892.873316][ T9649] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2892.987905][ T9649] usb 2-1: config 0 interface 196 has no altsetting 0 [ 2893.141228][T13101] mkiss: ax0: crc mode is auto. [ 2893.523144][ T9649] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2893.616625][ T9649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.626532][ T9649] usb 2-1: Product: syz [ 2893.630995][ T9649] usb 2-1: Manufacturer: syz [ 2893.635655][ T9649] usb 2-1: SerialNumber: syz [ 2893.651750][ T9649] usb 2-1: config 0 descriptor?? [ 2893.659061][T13088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2893.950104][ T9649] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2893.959510][ T9649] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 2893.981504][ T9649] usb 2-1: USB disconnect, device number 62 [ 2894.091266][T27669] Bluetooth: hci0: command 0x0406 tx timeout [ 2894.728601][ T5896] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 2894.738803][ T5896] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2895.608928][T13125] rdma_rxe: rxe_newlink: failed to add lo [ 2897.111940][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.118335][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.410154][ T9930] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 2897.419765][ T9930] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2897.675287][T13161] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2900.469342][ T5896] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2900.649709][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 2900.670086][ T5896] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2900.678278][ T5896] usb 7-1: config 0 has no interface number 0 [ 2900.691870][ T5896] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2900.719706][T13193] autofs: Unknown parameter 'fd0x0000000000000000' [ 2900.726392][ T5896] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2900.741365][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2900.751497][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.764448][ T5896] usb 7-1: Product: syz [ 2900.768625][ T5896] usb 7-1: Manufacturer: syz [ 2900.783593][ T5896] usb 7-1: SerialNumber: syz [ 2900.790333][ T5896] usb 7-1: config 0 descriptor?? [ 2900.796313][T13180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2901.031279][T13202] mkiss: ax0: crc mode is auto. [ 2901.320465][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 2901.351822][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 2901.361359][ T5896] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 2901.371117][ T5896] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 2901.383677][ T5896] usb 7-1: USB disconnect, device number 11 [ 2902.604760][T13224] rdma_rxe: rxe_newlink: failed to add lo [ 2903.489540][ T4974] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2903.582178][ T5896] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 2903.598527][ T5896] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2903.749900][ T4974] usb 7-1: Using ep0 maxpacket: 16 [ 2903.758172][ T4974] usb 7-1: config 2 has an invalid interface number: 142 but max is 0 [ 2903.773951][ T4974] usb 7-1: config 2 has no interface number 0 [ 2903.788503][ T4974] usb 7-1: config 2 interface 142 has no altsetting 0 [ 2903.808920][ T4974] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=dd.cc [ 2903.861208][ T4974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.872242][ T4974] usb 7-1: Product: syz [ 2903.876634][ T4974] usb 7-1: Manufacturer: syz [ 2903.881708][ T4974] usb 7-1: SerialNumber: syz [ 2904.338539][ T4974] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 2904.353634][ T4974] usb 7-1: USB disconnect, device number 12 [ 2904.562048][T13245] overlayfs: missing 'lowerdir' [ 2905.686821][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2905.702376][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2905.949760][T13254] ceph: No mds server is up or the cluster is laggy [ 2906.087148][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2906.093864][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2906.368508][T13275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2906.559230][T12304] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2906.809247][T12304] usb 3-1: Using ep0 maxpacket: 8 [ 2906.857882][T12304] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2906.872130][T12304] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2906.881715][T12304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.890974][T12304] usb 3-1: Product: syz [ 2906.895633][T12304] usb 3-1: Manufacturer: syz [ 2906.901736][T12304] usb 3-1: SerialNumber: syz [ 2906.919389][T12304] usb 3-1: config 0 descriptor?? [ 2907.695431][T13289] autofs: Unknown parameter 'fd0x0000000000000000' [ 2909.087395][T13311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2909.253645][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2909.333641][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2909.352646][ T6261] usb 3-1: USB disconnect, device number 61 [ 2909.641441][ T6261] libceph: connect (1)[c::]:6789 error -101 [ 2909.694850][ T6261] libceph: mon0 (1)[c::]:6789 connect error [ 2909.785036][T13310] ceph: No mds server is up or the cluster is laggy [ 2910.965599][T13340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2910.988431][T13340] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2911.005097][T13340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2911.011268][T13340] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2911.112757][T13340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2911.146788][T13340] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2911.283865][T13340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2911.310168][T13340] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2912.358189][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9706'. [ 2912.367133][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9706'. [ 2912.376245][T13362] netlink: 'syz.7.9706': attribute type 7 has an invalid length. [ 2912.532445][T13020] Bluetooth: hci3: command 0x0406 tx timeout [ 2912.539626][T13020] Bluetooth: hci2: command 0x0406 tx timeout [ 2912.560701][T13337] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2912.671898][T13337] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2912.683983][T26238] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2912.909745][T26238] usb 7-1: Using ep0 maxpacket: 8 [ 2912.962812][T26238] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2912.972343][T26238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2912.983110][T26238] usb 7-1: Product: syz [ 2912.987458][T26238] usb 7-1: Manufacturer: syz [ 2912.994417][T26238] usb 7-1: SerialNumber: syz [ 2913.067883][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2913.074140][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2913.079921][T26238] usb 7-1: config 0 descriptor?? [ 2913.089467][T27669] Bluetooth: hci1: command 0x0406 tx timeout [ 2913.169435][T27669] Bluetooth: hci5: command 0x0406 tx timeout [ 2913.189420][T26238] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2913.260485][T13337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2913.273517][T13337] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2913.329265][T27669] Bluetooth: hci0: command 0x0406 tx timeout [ 2913.355468][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2913.377457][T13376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2913.399076][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2913.437796][T13337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2913.460457][T13337] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2913.510115][T13337] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2913.521544][T13337] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2913.535292][T26238] gspca_sonixj: reg_r err -32 [ 2913.540103][T26238] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 2913.550179][T26238] usb 7-1: USB disconnect, device number 13 [ 2913.564195][T13337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2913.575673][T13337] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2913.691274][T13370] ceph: No mds server is up or the cluster is laggy [ 2913.768752][T13384] netlink: 4792 bytes leftover after parsing attributes in process `syz.4.9714'. [ 2914.063725][T13394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2915.209348][T26238] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 2915.460595][T26238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2915.482149][T26238] usb 7-1: config 0 has no interfaces? [ 2915.501592][T26238] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2915.523213][T26238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2915.541964][T26238] usb 7-1: config 0 descriptor?? [ 2915.746796][T13409] comedi comedi0: Minor 14 could not be opened [ 2915.893908][T13414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2916.154758][T13420] mkiss: ax0: crc mode is auto. [ 2917.014227][T12304] libceph: connect (1)[c::]:6789 error -101 [ 2917.022823][T12304] libceph: mon0 (1)[c::]:6789 connect error [ 2917.051442][T13438] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2917.073509][ T30] audit: type=1400 audit(1752580337.886:5759): avc: denied { getopt } for pid=13429 comm="syz.1.9726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2917.282825][T12304] libceph: connect (1)[c::]:6789 error -101 [ 2917.291801][T12304] libceph: mon0 (1)[c::]:6789 connect error [ 2917.349223][ T5896] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2917.480237][T13426] ceph: No mds server is up or the cluster is laggy [ 2917.519455][ T5896] usb 8-1: Using ep0 maxpacket: 8 [ 2917.542809][ T5896] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2917.552879][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2917.562651][ T5896] usb 8-1: Product: syz [ 2917.566896][ T5896] usb 8-1: Manufacturer: syz [ 2917.577182][ T5896] usb 8-1: SerialNumber: syz [ 2917.602962][ T5896] usb 8-1: config 0 descriptor?? [ 2917.617844][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2918.158557][ T5896] gspca_sonixj: reg_r err -32 [ 2918.164930][ T5896] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 2918.175052][ T5896] usb 8-1: USB disconnect, device number 12 [ 2918.198419][T12304] usb 7-1: USB disconnect, device number 14 [ 2918.488248][T13460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2918.731138][ T30] audit: type=1400 audit(1752580339.556:5760): avc: denied { append } for pid=13468 comm="syz.4.9739" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2918.733535][T13469] random: crng reseeded on system resumption [ 2918.754383][ C0] vkms_vblank_simulate: vblank timer overrun [ 2920.328594][ T5896] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 2920.514953][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2920.527088][T13498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2920.535240][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2920.544334][ T5896] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2920.544352][T12304] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2920.553493][T25295] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2920.572874][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2920.583101][ T5896] usb 5-1: config 0 descriptor?? [ 2920.749269][T12304] usb 8-1: Using ep0 maxpacket: 8 [ 2920.753895][T25295] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2920.757180][T12304] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2920.763083][T25295] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2920.774618][T12304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.782685][T25295] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2920.806235][T12304] usb 8-1: Product: syz [ 2920.810648][T12304] usb 8-1: Manufacturer: syz [ 2920.815280][T12304] usb 8-1: SerialNumber: syz [ 2920.818179][T25295] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2920.833122][T25295] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 2920.840365][T12304] usb 8-1: config 0 descriptor?? [ 2920.845499][T25295] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 2920.865154][T25295] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2920.877648][T25295] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2920.885729][T25295] usb 7-1: Product: syz [ 2920.890032][T25295] usb 7-1: Manufacturer: syz [ 2920.897532][T25295] cdc_wdm 7-1:1.0: skipping garbage [ 2920.902876][T25295] cdc_wdm 7-1:1.0: skipping garbage [ 2920.908159][T25295] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2921.128644][T12304] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2921.591202][ T5896] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2922.139228][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 2922.607025][T12304] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2922.656838][T12304] usb 8-1: USB disconnect, device number 13 [ 2922.889705][ T5896] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2922.898895][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2922.906977][ T5896] usb 2-1: Product: syz [ 2922.911235][ T5896] usb 2-1: Manufacturer: syz [ 2922.915865][ T5896] usb 2-1: SerialNumber: syz [ 2922.922589][ T5896] usb 2-1: config 0 descriptor?? [ 2922.932492][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2922.999846][T12304] usb 5-1: USB disconnect, device number 69 [ 2923.333919][ T5896] gspca_sonixj: reg_r err -32 [ 2923.358410][ T5896] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 2923.399546][ T9930] usb 7-1: USB disconnect, device number 15 [ 2923.446280][ T5896] usb 2-1: USB disconnect, device number 63 [ 2923.789276][ T9930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2923.959300][ T9930] usb 7-1: Using ep0 maxpacket: 8 [ 2923.973652][ T9930] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2923.991162][ T9930] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2924.007693][ T9930] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2924.031525][ T9930] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2924.079070][ T9930] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2924.088603][ T9930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.159330][ T9649] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 2924.184336][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9765'. [ 2924.193734][ T30] audit: type=1400 audit(1752580345.006:5761): avc: denied { node_bind } for pid=13545 comm="syz.2.9765" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2924.575735][ T9930] usb 7-1: GET_CAPABILITIES returned 0 [ 2924.614482][ T9930] usbtmc 7-1:16.0: can't read capabilities [ 2925.223555][ T9649] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2925.232063][ T9649] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2925.244495][ T9649] usb 2-1: config 8 has no interface number 0 [ 2925.554404][ T9649] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2925.564834][ T9649] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2925.578669][ T9649] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2925.585593][ T9649] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2925.594895][ T9649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.811271][ T9649] usb 2-1: string descriptor 0 read error: -71 [ 2925.818827][ T9649] ir_toy 2-1:8.177: required endpoints not found [ 2925.828096][ T9649] usb 2-1: USB disconnect, device number 64 [ 2926.529378][T25295] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2926.575835][ T9930] usb 7-1: USB disconnect, device number 16 [ 2926.729306][T25295] usb 3-1: Using ep0 maxpacket: 32 [ 2926.739829][T25295] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2926.748081][T25295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2926.764693][T25295] usb 3-1: config 0 has no interface number 0 [ 2926.776285][T25295] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2926.804582][T25295] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2926.815984][T25295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2926.825300][T25295] usb 3-1: Product: syz [ 2926.833772][T25295] usb 3-1: Manufacturer: syz [ 2926.840537][T25295] usb 3-1: SerialNumber: syz [ 2927.425260][T25295] usb 3-1: config 0 descriptor?? [ 2927.437285][T25295] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 2927.450673][T25295] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 2927.862484][ T30] audit: type=1400 audit(1752580348.686:5762): avc: denied { read } for pid=13579 comm="syz.2.9777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2928.167343][ T30] audit: type=1400 audit(1752580348.716:5763): avc: denied { setattr } for pid=13579 comm="syz.2.9777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2928.255420][T13599] ptrace attach of "./syz-executor exec"[10969] was attempted by " [ 2928.660257][T25295] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 2928.868521][T13603] comedi comedi0: Minor 14 could not be opened [ 2928.885468][T25295] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 2930.117833][T25295] usb 3-1: USB disconnect, device number 62 [ 2930.319764][T13624] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2931.053677][T13647] comedi comedi0: Minor 14 could not be opened [ 2931.097479][T13649] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 2931.123021][T13649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2935.130723][T13696] comedi comedi0: Minor 14 could not be opened [ 2935.214771][T13693] mkiss: ax0: crc mode is auto. [ 2936.790918][T13714] No control pipe specified [ 2938.280640][T25295] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 2938.825287][T25295] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2938.834312][T25295] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2938.844017][T25295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2938.857451][T25295] usb 7-1: config 0 descriptor?? [ 2939.131528][T13758] rdma_rxe: rxe_newlink: failed to add lo [ 2941.062204][ T9649] usb 7-1: USB disconnect, device number 17 [ 2941.376109][T13791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2944.558642][T13831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2946.579673][ T9649] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2946.757029][ T9649] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2947.145521][ T9649] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2947.168167][ T9649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2947.193763][ T9649] usb 2-1: Product: syz [ 2947.205572][ T9649] usb 2-1: Manufacturer: syz [ 2947.230275][ T9649] usb 2-1: SerialNumber: syz [ 2947.237339][ T9649] usb 2-1: config 0 descriptor?? [ 2947.429332][ T4974] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 2947.456105][ T9649] usb 2-1: USB disconnect, device number 65 [ 2948.297979][ T4974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2948.350220][ T4974] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2948.406348][ T4974] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2948.448265][ T4974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2948.511997][ T4974] usb 7-1: config 0 descriptor?? [ 2948.538954][ T4974] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2948.551331][ T4974] dvb-usb: bulk message failed: -22 (3/0) [ 2948.565360][ T4974] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2948.579820][ T4974] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2948.589210][ T4974] usb 7-1: media controller created [ 2948.598896][ T4974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2948.704138][ T30] audit: type=1400 audit(1752580369.516:5764): avc: denied { watch watch_reads } for pid=13892 comm="syz.1.9881" path="/216/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2949.214026][T13878] dvb-usb: bulk message failed: -22 (33/0) [ 2949.240629][ T4974] dvb-usb: bulk message failed: -22 (6/0) [ 2949.251508][ T4974] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2949.265026][ T4974] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input209 [ 2949.296405][ T4974] dvb-usb: schedule remote query interval to 150 msecs. [ 2949.465602][ T4974] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2949.483229][ T4974] usb 7-1: USB disconnect, device number 18 [ 2949.503722][ T4974] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2950.423371][ T30] audit: type=1400 audit(1752580371.186:5765): avc: denied { append } for pid=13912 comm="syz.4.9887" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2950.561568][T13915] loop8: detected capacity change from 0 to 16382 [ 2951.615467][T13941] comedi comedi0: Minor 14 could not be opened [ 2952.995637][ T5896] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2953.169368][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 2953.177115][ T5896] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 2953.193109][ T5896] usb 3-1: config 0 has no interface number 0 [ 2953.199602][ T5896] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2953.212055][ T5896] usb 3-1: config 0 interface 196 has no altsetting 0 [ 2953.221532][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2953.233123][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2953.241694][ T5896] usb 3-1: Product: syz [ 2953.245905][ T5896] usb 3-1: Manufacturer: syz [ 2953.256353][ T5896] usb 3-1: SerialNumber: syz [ 2953.290218][ T5896] usb 3-1: config 0 descriptor?? [ 2953.297908][T13949] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2954.462433][T13976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9903'. [ 2954.654177][ T5896] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 2954.662369][ T5896] ipheth 3-1:0.196: probe with driver ipheth failed with error -32 [ 2954.682550][ T5896] usb 3-1: USB disconnect, device number 63 [ 2954.779411][T26238] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2955.455742][T26238] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2955.478822][T26238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2955.514025][T26238] usb 5-1: config 0 descriptor?? [ 2956.083960][T26238] ath6kl: Failed to read usb control message: -71 [ 2956.103656][T26238] ath6kl: Unable to read the bmi data from the device: -71 [ 2956.117615][T26238] ath6kl: Unable to recv target info: -71 [ 2956.125893][T26238] ath6kl: Failed to init ath6kl core: -71 [ 2956.132663][T26238] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2956.147135][T26238] usb 5-1: USB disconnect, device number 70 [ 2956.220183][T13998] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 2956.720584][T14012] comedi comedi0: Minor 14 could not be opened [ 2958.533191][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.543016][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.054331][T14045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2959.231443][T14048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2959.729322][T25295] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2959.900086][T25295] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2959.910473][T25295] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2959.923915][T25295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2959.934940][T25295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2959.959470][T25295] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2959.978491][T25295] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2959.988729][T25295] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2960.004149][T25295] usb 5-1: Product: syz [ 2960.010643][T25295] usb 5-1: Manufacturer: syz [ 2960.021939][T25295] cdc_wdm 5-1:1.0: skipping garbage [ 2960.027154][T25295] cdc_wdm 5-1:1.0: skipping garbage [ 2960.035286][T25295] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2960.042592][T25295] cdc_wdm 5-1:1.0: Unknown control protocol [ 2960.664736][T14079] mkiss: ax0: crc mode is auto. [ 2961.362664][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9941'. [ 2961.379236][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9941'. [ 2962.527090][T26238] usb 5-1: USB disconnect, device number 71 [ 2964.499583][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2964.505659][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2965.074140][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2965.152870][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2965.392266][T14129] ceph: No mds server is up or the cluster is laggy [ 2965.444472][T14149] netlink: 4728 bytes leftover after parsing attributes in process `syz.6.9964'. [ 2965.488791][T14152] fuse: Bad value for 'fd' [ 2965.492131][ T30] audit: type=1400 audit(1752580386.306:5766): avc: denied { mounton } for pid=14147 comm="syz.1.9962" path="/233/file1/file0" dev="autofs" ino=196062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 2966.626325][ T30] audit: type=1400 audit(1752580387.366:5767): avc: denied { connect } for pid=14156 comm="syz.7.9965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2967.078566][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9970'. [ 2968.135256][T14185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2968.642856][T14196] mkiss: ax0: crc mode is auto. [ 2969.779460][ T30] audit: type=1400 audit(1752580390.606:5768): avc: denied { getopt } for pid=14211 comm="syz.6.9983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2971.012428][T14231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2971.605628][T14242] mkiss: ax0: crc mode is auto. [ 2971.689393][ T30] audit: type=1400 audit(1752580392.336:5769): avc: denied { write } for pid=14240 comm="syz.6.9992" lport=55215 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2973.318209][T14269] loop6: detected capacity change from 0 to 524287999 [ 2973.862029][T14276] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 2973.882034][T14276] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2974.320198][T26238] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 2975.102031][T26238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2975.119275][T26238] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2975.128164][T26238] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2975.159174][T26238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.180618][T26238] usb 7-1: config 0 descriptor?? [ 2975.200942][T26238] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2975.208703][T26238] dvb-usb: bulk message failed: -22 (3/0) [ 2975.225147][T26238] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2975.245485][T26238] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2975.260570][T26238] usb 7-1: media controller created [ 2975.299872][T26238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2975.325760][T14286] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 2975.422606][T14278] dvb-usb: bulk message failed: -22 (33/0) [ 2975.493040][T26238] dvb-usb: bulk message failed: -22 (6/0) [ 2975.499450][T26238] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2975.515636][T26238] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input210 [ 2975.529070][T26238] dvb-usb: schedule remote query interval to 150 msecs. [ 2975.536273][T26238] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2975.552077][T26238] usb 7-1: USB disconnect, device number 19 [ 2976.273455][T26238] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2976.769056][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2976.776660][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2976.879346][T26238] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2977.094005][T14319] mkiss: ax0: crc mode is auto. [ 2977.399834][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2977.410440][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2977.489377][T26238] usb 7-1: Using ep0 maxpacket: 8 [ 2977.496355][T26238] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2977.510928][T26238] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2977.524819][T26238] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2977.543304][T26238] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2977.556818][T26238] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2977.626082][T26238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.756884][T14311] ceph: No mds server is up or the cluster is laggy [ 2977.868989][T26238] usb 7-1: GET_CAPABILITIES returned 0 [ 2977.893307][T26238] usbtmc 7-1:16.0: can't read capabilities [ 2978.081868][T25295] usb 7-1: USB disconnect, device number 20 [ 2978.309197][T26238] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2978.459188][T26238] usb 3-1: Using ep0 maxpacket: 32 [ 2978.470726][T26238] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2978.478800][T26238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2978.489245][T26238] usb 3-1: config 0 has no interface number 0 [ 2978.495320][T26238] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2978.511207][T26238] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2978.521069][T26238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.529030][T26238] usb 3-1: Product: syz [ 2978.535534][T26238] usb 3-1: Manufacturer: syz [ 2978.540145][T26238] usb 3-1: SerialNumber: syz [ 2978.546002][T26238] usb 3-1: config 0 descriptor?? [ 2978.554276][T26238] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 2978.562087][T26238] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 2978.757288][T26238] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 2978.779473][T26238] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 2979.166057][T26238] usb 3-1: USB disconnect, device number 64 [ 2980.039215][T14350] comedi comedi2: fl512: I/O port conflict (0x1009e1,16) [ 2981.648456][T14368] kvm: pic: non byte write [ 2981.844829][T13020] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2981.855501][T13020] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2981.864619][T13020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2981.876412][T13020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2981.879234][ T4974] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2981.885569][T13020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2981.903871][T27669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2981.913061][T27669] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2981.923388][T27669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2981.932117][T27669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2981.941932][T27669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2981.973511][T14371] lo speed is unknown, defaulting to 1000 [ 2982.039297][ T4974] usb 7-1: Using ep0 maxpacket: 32 [ 2982.045880][ T4974] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 2982.056137][ T4974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2982.066546][ T4974] usb 7-1: config 0 has no interface number 0 [ 2982.075021][ T4974] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2982.097369][ T4974] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2982.115971][ T4974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.134222][ T4974] usb 7-1: Product: syz [ 2982.138401][ T4974] usb 7-1: Manufacturer: syz [ 2982.152286][ T4974] usb 7-1: SerialNumber: syz [ 2982.168100][ T4974] usb 7-1: config 0 descriptor?? [ 2982.180688][ T4974] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 2982.198388][ T4974] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 2982.254150][T14371] chnl_net:caif_netlink_parms(): no params data found [ 2982.395826][T14371] bridge0: port 1(bridge_slave_0) entered blocking state [ 2982.398239][ T4974] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 2982.410201][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 2982.412405][ T4974] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 2982.417371][T14371] bridge_slave_0: entered allmulticast mode [ 2982.426851][ T4974] usb 7-1: USB disconnect, device number 21 [ 2982.442617][T14371] bridge_slave_0: entered promiscuous mode [ 2982.929104][T14371] bridge0: port 2(bridge_slave_1) entered blocking state [ 2982.936326][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 2982.943752][T14371] bridge_slave_1: entered allmulticast mode [ 2982.951279][T14371] bridge_slave_1: entered promiscuous mode [ 2982.983359][T14371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2982.995089][T14371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2983.032836][T14371] team0: Port device team_slave_0 added [ 2983.041483][T14371] team0: Port device team_slave_1 added [ 2983.178682][T14371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2983.197895][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2983.385728][T14371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2983.747095][T14371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2983.789428][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2983.823857][T14371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2983.969312][T27669] Bluetooth: hci2: command tx timeout [ 2984.166966][T14371] hsr_slave_0: entered promiscuous mode [ 2984.180445][T14404] netlink: 4792 bytes leftover after parsing attributes in process `syz.2.10041'. [ 2984.181688][T14371] hsr_slave_1: entered promiscuous mode [ 2984.197712][T14371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2984.208548][T14371] Cannot create hsr debugfs directory [ 2984.291514][T25295] libceph: connect (1)[c::]:6789 error -101 [ 2984.297585][T25295] libceph: mon0 (1)[c::]:6789 connect error [ 2984.429070][T14412] netlink: 'syz.2.10042': attribute type 8 has an invalid length. [ 2984.571057][T10140] libceph: connect (1)[c::]:6789 error -101 [ 2984.577677][T10140] libceph: mon0 (1)[c::]:6789 connect error [ 2984.892335][T14371] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2984.906469][T14371] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2984.916768][T14371] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2984.927034][T14371] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2984.983194][T14371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2984.998768][T14371] 8021q: adding VLAN 0 to HW filter on device team0 [ 2985.022703][T16503] bridge0: port 1(bridge_slave_0) entered blocking state [ 2985.029773][T16503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2985.049181][T16503] bridge0: port 2(bridge_slave_1) entered blocking state [ 2985.056248][T16503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2985.078411][T14405] ceph: No mds server is up or the cluster is laggy [ 2985.169618][T10140] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2985.428589][T10140] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2985.484837][T10140] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2985.529756][T10140] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2985.637099][T14371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2985.644061][T10140] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2985.655185][T10140] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2985.671629][T10140] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2985.694209][T10140] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2985.719280][T10140] usb 7-1: Product: syz [ 2985.723461][T10140] usb 7-1: Manufacturer: syz [ 2985.741518][T10140] cdc_wdm 7-1:1.0: skipping garbage [ 2985.746745][T10140] cdc_wdm 7-1:1.0: skipping garbage [ 2985.753451][T10140] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2985.759628][T10140] cdc_wdm 7-1:1.0: Unknown control protocol [ 2986.122120][T27669] Bluetooth: hci2: command tx timeout [ 2986.495285][T14371] veth0_vlan: entered promiscuous mode [ 2986.511330][T14371] veth1_vlan: entered promiscuous mode [ 2986.635153][T14371] veth0_macvtap: entered promiscuous mode [ 2986.753117][ T30] audit: type=1400 audit(1752580407.546:5770): avc: denied { connect } for pid=14444 comm="syz.2.10049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2987.046800][T14371] veth1_macvtap: entered promiscuous mode [ 2987.063107][T14371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2987.078813][T14371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2987.091876][T14371] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.102771][T14371] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.111897][T14371] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.153014][T14371] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.273275][T11734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2987.325319][T11734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2987.337958][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2987.355628][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2988.130188][T27669] Bluetooth: hci2: command tx timeout [ 2988.160649][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2988.180470][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2988.202087][ T5896] usb 7-1: USB disconnect, device number 22 [ 2988.260014][T10140] libceph: connect (1)[c::]:6789 error -101 [ 2988.301697][T10140] libceph: mon0 (1)[c::]:6789 connect error [ 2989.054031][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 2989.060241][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 2989.120060][T14466] ceph: No mds server is up or the cluster is laggy [ 2989.707992][T14488] team0: Port device team_slave_0 removed [ 2989.820736][T14490] trusted_key: encrypted_key: insufficient parameters specified [ 2989.985458][T14488] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2990.210441][T27669] Bluetooth: hci2: command tx timeout [ 2990.619205][T26238] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2990.769251][T26238] usb 7-1: Using ep0 maxpacket: 32 [ 2991.024199][T26238] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 2991.047749][T26238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.058235][T26238] usb 7-1: config 0 has no interface number 0 [ 2991.067299][T26238] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2991.085274][T26238] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2991.096353][T26238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.105869][T26238] usb 7-1: Product: syz [ 2991.110310][T26238] usb 7-1: Manufacturer: syz [ 2991.115007][T26238] usb 7-1: SerialNumber: syz [ 2991.132682][T26238] usb 7-1: config 0 descriptor?? [ 2991.143281][T26238] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 2991.151001][T26238] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 2991.574343][T14519] ptrace attach of "./syz-executor exec"[11395] was attempted by ""[14519] [ 2992.114417][T26238] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 2992.322792][T26238] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 2992.330959][ T9649] libceph: connect (1)[c::]:6789 error -101 [ 2992.337149][ T9649] libceph: mon0 (1)[c::]:6789 connect error [ 2992.476342][T14521] ceph: No mds server is up or the cluster is laggy [ 2993.472325][ T1204] usb 7-1: USB disconnect, device number 23 [ 2993.960520][T14553] trusted_key: encrypted_key: insufficient parameters specified [ 2994.214894][T14554] fuse: Bad value for 'fd' [ 2994.334184][T13020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2994.343596][T13020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2994.351547][T13020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2994.359615][T13020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2994.366843][T13020] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2994.423811][T14551] lo speed is unknown, defaulting to 1000 [ 2994.737187][T18695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2994.774877][T14551] chnl_net:caif_netlink_parms(): no params data found [ 2994.814011][ T1204] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2994.864527][T18695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2994.974276][T18695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2994.989503][T10140] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2995.199246][ T1204] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2995.208255][ T1204] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2995.218591][ T1204] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2995.229843][ T1204] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2995.271980][ T1204] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2995.300771][T10140] usb 7-1: Using ep0 maxpacket: 32 [ 2995.365909][ T1204] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2995.374066][T18695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.389923][T10140] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 2995.400341][ T1204] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2995.432807][T10140] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2995.449581][ T1204] usb 8-1: Product: syz [ 2995.462141][ T1204] usb 8-1: Manufacturer: syz [ 2995.470696][T10140] usb 7-1: config 0 has no interface number 0 [ 2995.470799][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 2995.479564][T10140] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2995.561474][ T1204] cdc_wdm 8-1:1.0: skipping garbage [ 2995.566698][ T1204] cdc_wdm 8-1:1.0: skipping garbage [ 2995.588361][ T1204] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2995.595534][ T1204] cdc_wdm 8-1:1.0: Unknown control protocol [ 2995.599262][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2995.602492][T10140] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2995.673454][T14551] bridge_slave_0: entered allmulticast mode [ 2995.701510][T10140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2995.711328][T14551] bridge_slave_0: entered promiscuous mode [ 2995.735060][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 2995.750635][T10140] usb 7-1: Product: syz [ 2995.762332][T14551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2995.769636][T10140] usb 7-1: Manufacturer: syz [ 2995.774240][T10140] usb 7-1: SerialNumber: syz [ 2995.793187][T14551] bridge_slave_1: entered allmulticast mode [ 2995.804391][T10140] usb 7-1: config 0 descriptor?? [ 2995.813800][T14551] bridge_slave_1: entered promiscuous mode [ 2995.822423][T10140] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 2995.840821][T10140] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 2995.898106][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2995.929047][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2996.384160][T14601] ptrace attach of "./syz-executor exec"[11395] was attempted by " [ 2996.409470][T10140] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 2996.539096][T13020] Bluetooth: hci4: command tx timeout [ 2996.570212][T14551] team0: Port device team_slave_0 added [ 2996.609653][T10140] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 2996.634060][T18695] bridge_slave_1: left allmulticast mode [ 2996.640075][T18695] bridge_slave_1: left promiscuous mode [ 2996.646126][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 2996.668753][T18695] bridge_slave_0: left allmulticast mode [ 2996.674541][T18695] bridge_slave_0: left promiscuous mode [ 2996.684313][T18695] bridge0: port 1(bridge_slave_0) entered disabled state [ 2997.692584][T14613] trusted_key: encrypted_key: insufficient parameters specified [ 2998.181623][T14588] usb 7-1: USB disconnect, device number 24 [ 2998.267744][ T9649] usb 8-1: USB disconnect, device number 14 [ 2998.609478][T13020] Bluetooth: hci4: command tx timeout [ 2998.822668][T14632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2998.833753][T14632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2999.015926][T14633] xt_hashlimit: size too large, truncated to 1048576 [ 2999.663464][T18695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2999.798093][T18695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2999.857471][T18695] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2999.954349][T18695] bond0 (unregistering): Released all slaves [ 2999.990446][T14551] team0: Port device team_slave_1 added [ 3000.570749][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3000.586997][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3000.655753][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3000.759325][T13020] Bluetooth: hci4: command tx timeout [ 3000.809761][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3000.816727][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3001.278283][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3001.351203][T14551] hsr_slave_0: entered promiscuous mode [ 3001.357229][T14551] hsr_slave_1: entered promiscuous mode [ 3001.364850][T14551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3001.372611][T14551] Cannot create hsr debugfs directory [ 3001.452830][T18695] hsr_slave_0: left promiscuous mode [ 3001.463428][T18695] hsr_slave_1: left promiscuous mode [ 3001.471632][T18695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3001.487794][T18695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3001.497672][T18695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3001.513799][T18695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3001.549754][T10140] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 3001.566081][T18695] veth1_macvtap: left promiscuous mode [ 3001.576148][T18695] veth0_macvtap: left promiscuous mode [ 3001.585984][T18695] veth1_vlan: left promiscuous mode [ 3001.749072][T18695] veth0_vlan: left promiscuous mode [ 3002.260144][T14668] trusted_key: encrypted_key: insufficient parameters specified [ 3002.574351][T18695] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 3002.586450][T18695] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 3002.595987][T18695] CPU: 1 UID: 0 PID: 18695 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3002.608222][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3002.609553][T10140] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3002.618263][T18695] Workqueue: netns cleanup_net [ 3002.626942][T10140] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3002.631576][T18695] RIP: 0010:ip6_mc_clear_src+0x89/0x5a0 [ 3002.631600][T18695] Code: 49 bc 00 00 00 00 00 fc ff df 48 8d 45 10 49 89 c5 48 89 04 24 49 c1 ed 03 4d 01 e5 eb 32 e8 2e aa 7d f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 80 04 00 00 4c 8b 3b 48 8d 7b 30 48 89 de e8 [ 3002.641739][T10140] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3002.647236][T18695] RSP: 0018:ffffc9000b9e7398 EFLAGS: 00010206 [ 3002.647254][T18695] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a3e4d5b [ 3002.647265][T18695] RDX: ffff888029068000 RSI: ffffffff8a3e4ce2 RDI: 0000000000000005 [ 3002.647275][T18695] RBP: ffff88805778b800 R08: 0000000000000005 R09: 0000000000000000 [ 3002.647285][T18695] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 3002.647296][T18695] R13: ffffed100aef1702 R14: ffff88805778b828 R15: 0000000000000001 [ 3002.647307][T18695] FS: 0000000000000000(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 3002.647323][T18695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3002.647334][T18695] CR2: 00007f9d397e69d8 CR3: 000000004148b000 CR4: 00000000003526f0 [ 3002.647344][T18695] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3002.647354][T18695] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3002.647369][T18695] Call Trace: [ 3002.647375][T18695] [ 3002.647384][T18695] __ipv6_dev_mc_dec+0x2bd/0x3b0 [ 3002.647408][T18695] __ipv6_ifa_notify+0x3d8/0xd60 [ 3002.647431][T18695] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 3002.667128][T10140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3002.675904][T18695] ? do_raw_spin_lock+0x12c/0x2b0 [ 3002.798306][T18695] ? addrconf_ifdown.isra.0+0xe8b/0x1a90 [ 3002.803935][T18695] addrconf_ifdown.isra.0+0xe8b/0x1a90 [ 3002.809389][T18695] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 3002.815274][T18695] addrconf_notify+0x220/0x19e0 [ 3002.820108][T18695] ? ip6mr_device_event+0x1bc/0x230 [ 3002.825300][T18695] notifier_call_chain+0xbc/0x410 [ 3002.830310][T18695] ? __pfx_addrconf_notify+0x10/0x10 [ 3002.835578][T18695] call_netdevice_notifiers_info+0xbe/0x140 [ 3002.841454][T18695] dev_close_many+0x319/0x630 [ 3002.846114][T18695] ? __pfx_dev_close_many+0x10/0x10 [ 3002.851296][T18695] unregister_netdevice_many_notify+0x578/0x2700 [ 3002.857612][T18695] ? lockdep_hardirqs_on+0x7c/0x110 [ 3002.862796][T18695] ? batadv_tt_local_event+0x455/0x7f0 [ 3002.868246][T18695] ? __local_bh_enable_ip+0xa4/0x120 [ 3002.873525][T18695] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3002.880283][T18695] ? unregister_netdevice_queue+0x22e/0x3f0 [ 3002.886166][T18695] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3002.892395][T18695] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 3002.898197][T18695] default_device_exit_batch+0x853/0xaf0 [ 3002.903822][T18695] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3002.909963][T18695] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 3002.915411][T18695] ? __pfx___might_resched+0x10/0x10 [ 3002.920685][T18695] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3002.926828][T18695] ops_undo_list+0x363/0xab0 [ 3002.931411][T18695] ? __pfx_ops_undo_list+0x10/0x10 [ 3002.936513][T18695] ? __local_bh_enable_ip+0xa4/0x120 [ 3002.941785][T18695] cleanup_net+0x408/0x890 [ 3002.946192][T18695] ? __pfx_cleanup_net+0x10/0x10 [ 3002.951119][T18695] ? rcu_is_watching+0x12/0xc0 [ 3002.955868][T18695] process_one_work+0x9cf/0x1b70 [ 3002.960791][T18695] ? __pfx_batadv_nc_worker+0x10/0x10 [ 3002.966150][T18695] ? __pfx_process_one_work+0x10/0x10 [ 3002.971510][T18695] ? assign_work+0x1a0/0x250 [ 3002.976081][T18695] worker_thread+0x6c8/0xf10 [ 3002.980657][T18695] ? __pfx_worker_thread+0x10/0x10 [ 3002.985764][T18695] kthread+0x3c5/0x780 [ 3002.989812][T18695] ? __pfx_kthread+0x10/0x10 [ 3002.994383][T18695] ? rcu_is_watching+0x12/0xc0 [ 3002.999135][T18695] ? __pfx_kthread+0x10/0x10 [ 3003.003704][T18695] ret_from_fork+0x5d7/0x6f0 [ 3003.008278][T18695] ? __pfx_kthread+0x10/0x10 [ 3003.012847][T18695] ret_from_fork_asm+0x1a/0x30 [ 3003.017595][T18695] [ 3003.020593][T18695] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3003.024477][ C1] vkms_vblank_simulate: vblank timer overrun [ 3003.029959][T13020] Bluetooth: hci4: command tx timeout [ 3003.031423][T18695] ---[ end trace 0000000000000000 ]--- [ 3003.035847][T10140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3003.056562][T18695] RIP: 0010:ip6_mc_clear_src+0x89/0x5a0 [ 3003.062162][T10140] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3003.062185][T10140] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3003.062201][T10140] usb 9-1: Product: syz [ 3003.062213][T10140] usb 9-1: Manufacturer: syz [ 3003.073487][T10140] cdc_wdm 9-1:1.0: skipping garbage [ 3003.079745][T18695] Code: 49 bc 00 00 00 00 00 fc ff df 48 8d 45 10 49 89 c5 48 89 04 24 49 c1 ed 03 4d 01 e5 eb 32 e8 2e aa 7d f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 80 04 00 00 4c 8b 3b 48 8d 7b 30 48 89 de e8 [ 3003.113532][ C1] vkms_vblank_simulate: vblank timer overrun [ 3003.113581][T10140] cdc_wdm 9-1:1.0: skipping garbage [ 3003.116243][T10140] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 3003.121499][T18695] RSP: 0018:ffffc9000b9e7398 EFLAGS: 00010206 [ 3003.169213][T10140] cdc_wdm 9-1:1.0: Unknown control protocol [ 3003.196338][T18695] [ 3003.198680][T18695] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a3e4d5b [ 3003.258083][T18695] RDX: ffff888029068000 RSI: ffffffff8a3e4ce2 RDI: 0000000000000005 [ 3003.270211][T18695] RBP: ffff88805778b800 R08: 0000000000000005 R09: 0000000000000000 [ 3003.278193][T18695] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 3003.286297][T18695] R13: ffffed100aef1702 R14: ffff88805778b828 R15: 0000000000000001 [ 3003.297723][T18695] FS: 0000000000000000(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 3003.308696][T18695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3003.316450][T18695] CR2: 0000001b3101bff8 CR3: 0000000030eb5000 CR4: 00000000003526f0 [ 3003.324522][T18695] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3003.339670][T18695] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3003.347653][T18695] Kernel panic - not syncing: Fatal exception [ 3003.353897][T18695] Kernel Offset: disabled [ 3003.358203][T18695] Rebooting in 86400 seconds..