last executing test programs: 23m21.298202192s ago: executing program 2 (id=348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) close(0xffffffffffffffff) signalfd(0xffffffffffffffff, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x3, 0x11) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 23m19.905337604s ago: executing program 2 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x8840) 23m19.793716209s ago: executing program 2 (id=354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x2f5}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 23m19.402418403s ago: executing program 1 (id=357): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001016c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140000000000000000938010000080a050000000000000000000500"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 23m19.307091983s ago: executing program 1 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x6400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) 23m18.825842673s ago: executing program 2 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x8840) 23m18.679261821s ago: executing program 2 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 23m17.599546076s ago: executing program 2 (id=371): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="b0e186a45e10341c5f8b01b851", 0xd}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 23m15.863312657s ago: executing program 1 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) 23m15.820145055s ago: executing program 1 (id=374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000027c0)="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", 0x2f5}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 23m15.69507364s ago: executing program 4 (id=376): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000700)=ANY=[]) 23m14.953307944s ago: executing program 1 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 23m14.001853427s ago: executing program 1 (id=387): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xe3bbedd24f4353f0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 23m12.653468797s ago: executing program 4 (id=390): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0xf, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x1}]}) 23m11.33996571s ago: executing program 4 (id=394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)) 23m11.291548557s ago: executing program 4 (id=395): unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$inet(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x5e9c41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x499, 0x0, 0x0, &(0x7f0000000280)) setsockopt(0xffffffffffffffff, 0x8, 0x4, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 23m10.359758059s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 23m9.421758134s ago: executing program 4 (id=403): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e12000008"], 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23m2.425248795s ago: executing program 32 (id=371): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="b0e186a45e10341c5f8b01b851", 0xd}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 22m58.905341559s ago: executing program 33 (id=387): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xe3bbedd24f4353f0, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 22m53.897908734s ago: executing program 34 (id=403): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e12000008"], 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 22m45.699666661s ago: executing program 0 (id=484): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0x12, 0x0, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000700)) socket(0x200000000000011, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 22m44.777398083s ago: executing program 0 (id=486): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 22m42.846556173s ago: executing program 0 (id=488): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x4741, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x81, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000003c0)={0x19}) 22m41.924783722s ago: executing program 0 (id=490): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000140)="8f", 0x1}], 0x1) 22m41.719805202s ago: executing program 0 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 22m41.610290077s ago: executing program 0 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 22m26.146723043s ago: executing program 35 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 13.716950788s ago: executing program 8 (id=5101): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x2000000, 0x4000, 0x0, 0x2a3}, &(0x7f0000000280), &(0x7f0000000240)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x4, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) 12.154351835s ago: executing program 8 (id=5107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11.129337506s ago: executing program 8 (id=5109): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5ca, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xe334, 0x400, 0xfffffff5, 0x1e3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.156782448s ago: executing program 8 (id=5113): timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5e608e9d48f0f4a61499b8d70", &(0x7f00000000c0)="f75c7baa39914f7177a5007e6e0781f2e62526fd09b87d715787bcd06fcbc754d5f559f50bb8b4774b82844a7c20161a9667e7308d4197f2d2b954431471539ceb66f4e0eb6d7c9dd3f91837f283ac7a369d3cc02d6c771cef9415f568d7e9cb3d4735116973924b3f1e8c84e5c83c67d8ad"}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0xfffff800, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 8.826766778s ago: executing program 3 (id=5116): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8c}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) clock_settime(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 8.251009504s ago: executing program 3 (id=5118): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[], 0x68}}, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x4abd, 0x80, 0x4, 0x1ab}, &(0x7f0000000040), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) keyctl$get_persistent(0x16, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 8.09272501s ago: executing program 6 (id=5120): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000380)={0x3, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) 7.652588019s ago: executing program 6 (id=5122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) userfaultfd(0x80001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 6.806902092s ago: executing program 5 (id=5123): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5ca, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xe334, 0x400, 0xfffffff5, 0x1e3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.487667499s ago: executing program 7 (id=5125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 6.480948986s ago: executing program 3 (id=5126): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) 6.418386859s ago: executing program 5 (id=5127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0xffffd000) syz_open_procfs(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.482973263s ago: executing program 7 (id=5128): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="e4bcf8b5e0ec4c66c207edd14731b90e1c5a10e12940d7f5153c2bf85ecab5189d54d014a00a404aa5", 0x29}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x800, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r4, &(0x7f0000000180), 0x4) 5.255952143s ago: executing program 6 (id=5129): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8c}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) clock_settime(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 4.922006868s ago: executing program 6 (id=5130): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r1, 0x0, 0x0, 0x8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e6574000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.874668111s ago: executing program 3 (id=5131): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000140)=0x47) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.655082311s ago: executing program 8 (id=5132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r5], &(0x7f0000000040)}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.575913716s ago: executing program 3 (id=5133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000040), 0x84800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.830782682s ago: executing program 7 (id=5134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) close(0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272dfee37fec456574c41ea5cd3860cb2a72de2e1448fdb5f428f5c7fb8f40442d4b9b2bcfb8d5a8dd39ea038222eb4976f868eacd03f282aae735aac5ae16f460275a3f2369b477602669969c3590c7d10e93ebd81cff49585ef40e40b59bfb7a88e32e943f06a05ed228b0d4286d1290000000000000000000000a01e66c50d585ba50e67dd3be3a0a719dcea96541457145e4b4a6c21d882d84cd3934f8ec9f965cdc6f2db0ffe4f8c18948e19560414984363a1436389185e3cec0d7c86cdfb33fe512afd7a96609c0890e6bbe8383515301cf884c580bace7384d9162e5eb71c988c3245e9c2a5fb", 0x138}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1}, 0x40010120) 2.876455991s ago: executing program 8 (id=5135): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0xffffffffffffff81, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.875818607s ago: executing program 7 (id=5136): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 2.663521553s ago: executing program 7 (id=5137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff", 0xa5}, {&(0x7f0000000040)}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a696", 0x3e}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.374922678s ago: executing program 5 (id=5138): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000200)='./file1\x00', 0x0) 2.253896353s ago: executing program 7 (id=5139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$unix(0x1, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000540)) lseek(r2, 0xa, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x17) userfaultfd(0x801) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf000, 0x0, 0x52c49f2792529d0e}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 2.211773964s ago: executing program 5 (id=5140): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00", 0x57}], 0x1) userfaultfd(0x801) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, r4, 0x0) userfaultfd(0x80001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) 1.749174317s ago: executing program 5 (id=5141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2cf2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0xc3}], 0x1, 0x2003, 0x0) 631.707187ms ago: executing program 6 (id=5142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 316.950097ms ago: executing program 6 (id=5143): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 316.147388ms ago: executing program 5 (id=5144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') fanotify_init(0x0, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdd, 0x8}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 3 (id=5145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) kernel console output (not intermixed with test programs): sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1056.329398][T20602] Can't find a SQUASHFS superblock on nullb0 [ 1056.714195][ T30] audit: type=1326 audit(1751151627.455:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1056.802440][ T30] audit: type=1326 audit(1751151627.455:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1056.826520][ T30] audit: type=1326 audit(1751151627.455:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1056.831529][T20590] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1056.849960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.850774][ T30] audit: type=1800 audit(1751151627.515:1610): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3760" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1056.930957][ T30] audit: type=1326 audit(1751151627.935:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1057.054619][ T30] audit: type=1326 audit(1751151627.935:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1057.078144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.197168][ T30] audit: type=1326 audit(1751151627.935:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1057.787104][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 1057.881486][T20610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20610 comm=syz.3.3762 [ 1060.096259][ T30] audit: type=1326 audit(1751151627.935:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.7.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1060.735808][T20626] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1061.365214][T20633] tipc: Started in network mode [ 1061.370237][T20633] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1061.379306][T20633] tipc: Enabled bearer , priority 0 [ 1061.532715][T20637] tipc: Enabling of bearer rejected, failed to enable media [ 1062.374247][T20637] tipc: Started in network mode [ 1062.433643][ T5970] tipc: Node number set to 11578026 [ 1062.441267][T20637] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1062.449382][T20637] tipc: Enabled bearer , priority 0 [ 1063.623772][ T5816] tipc: Node number set to 11578026 [ 1063.984682][ T3568] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1065.216782][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3777'. [ 1065.251179][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1065.251194][ T30] audit: type=1326 audit(1751151636.455:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.401042][ T30] audit: type=1326 audit(1751151636.495:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.430830][T19994] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1065.439382][ T30] audit: type=1326 audit(1751151636.585:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.467591][ T30] audit: type=1326 audit(1751151636.585:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.493145][ T30] audit: type=1326 audit(1751151636.585:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.638169][T20685] tipc: Enabled bearer , priority 10 [ 1065.672677][T20685] tipc: Enabling of bearer rejected, already enabled [ 1065.681384][T19994] usb 9-1: Using ep0 maxpacket: 16 [ 1065.711101][ T30] audit: type=1326 audit(1751151636.595:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.745514][T19994] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.762378][T19994] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1065.847706][ T30] audit: type=1326 audit(1751151636.595:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1065.871191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.987788][T20690] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1066.526816][ T30] audit: type=1326 audit(1751151636.595:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1066.562885][T19994] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.572307][T19994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.580313][T19994] usb 9-1: Product: syz [ 1066.599837][T19994] usb 9-1: Manufacturer: syz [ 1066.620644][ T30] audit: type=1326 audit(1751151636.595:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1066.623994][T19994] usb 9-1: SerialNumber: syz [ 1066.643997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.721728][ T30] audit: type=1326 audit(1751151636.595:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.6.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141db8e929 code=0x7ffc0000 [ 1066.758325][T20693] overlayfs: missing 'lowerdir' [ 1067.082807][T20668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1067.846288][T20668] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1068.023794][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1068.152094][T19994] cdc_ncm 9-1:1.0: failed to get mac address [ 1068.366444][T19994] cdc_ncm 9-1:1.0: bind() failure [ 1068.810130][T19994] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1068.850007][T19994] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1068.890069][T19994] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1068.912633][T19994] usb 9-1: USB disconnect, device number 63 [ 1069.085063][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1069.709060][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1069.727421][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.737538][ T10] usb 7-1: Product: syz [ 1069.743544][ T10] usb 7-1: Manufacturer: syz [ 1069.748250][ T10] usb 7-1: SerialNumber: syz [ 1069.765815][ T10] usb 7-1: config 0 descriptor?? [ 1069.891913][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 1070.917766][ T10] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1070.925768][ T10] usb 7-1: Firmware version (0.0) predates our first public release. [ 1070.933931][ T10] usb 7-1: Please update to version 0.2 or newer [ 1071.182468][ T10] usb 7-1: USB disconnect, device number 66 [ 1071.781671][T20742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1071.788842][T20742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1071.901284][T20742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1071.911364][T20742] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1071.919452][T20742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1071.995936][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1071.995951][ T30] audit: type=1800 audit(1751151643.195:1734): pid=20767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3796" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1072.025076][T20767] Can't find a SQUASHFS superblock on nullb0 [ 1072.079176][T20768] tipc: Enabling of bearer rejected, already enabled [ 1072.123677][T20768] tipc: Enabling of bearer rejected, already enabled [ 1072.160727][T19994] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1072.373589][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3798'. [ 1072.501035][ T5823] Bluetooth: hci4: command 0x040f tx timeout [ 1072.719100][T19994] usb 9-1: Using ep0 maxpacket: 32 [ 1073.860971][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 1073.941089][T16783] Bluetooth: hci5: command 0x0c1a tx timeout [ 1073.947159][T13377] Bluetooth: hci3: command 0x0c1a tx timeout [ 1073.950810][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1074.713526][T19994] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1074.724513][T19994] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1074.766457][T19994] usb 9-1: can't read configurations, error -71 [ 1075.023314][T20796] overlayfs: missing 'lowerdir' [ 1075.063896][ T30] audit: type=1326 audit(1751151646.265:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20792 comm="syz.8.3803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x0 [ 1075.379243][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3803'. [ 1076.027603][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1078.390663][T19994] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1078.550706][T19994] usb 8-1: Using ep0 maxpacket: 16 [ 1078.561917][T19994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.580651][T19994] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1078.592700][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1078.600140][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1078.663641][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1078.689231][T19994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.817573][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.251797][T20829] tipc: Enabling of bearer rejected, already enabled [ 1079.270796][T19994] usb 8-1: config 0 descriptor?? [ 1079.275971][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.284802][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.293070][T19994] usb 8-1: can't set config #0, error -71 [ 1079.301734][T19994] usb 8-1: USB disconnect, device number 78 [ 1079.307838][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.323045][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.335420][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.343030][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.382140][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.389855][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1079.571026][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1080.177776][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1080.241963][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1080.354810][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1080.373981][ T5970] hid-generic 0002:0004:0009.002F: unknown main item tag 0x0 [ 1080.512363][ T5970] hid-generic 0002:0004:0009.002F: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1081.009944][T20855] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1083.299546][T20898] xt_addrtype: ipv6 does not support BROADCAST matching [ 1083.747350][T20891] tipc: Enabling of bearer rejected, already enabled [ 1083.764726][T20892] tipc: Enabling of bearer rejected, already enabled [ 1084.354009][T20907] netlink: 292 bytes leftover after parsing attributes in process `syz.7.3829'. [ 1085.375138][T20919] netlink: 292 bytes leftover after parsing attributes in process `syz.7.3832'. [ 1087.560664][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1087.663321][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1087.676042][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1087.711315][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1087.727229][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1087.736954][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.742854][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1087.745412][ T10] usb 4-1: Product: syz [ 1087.891716][T20960] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1087.939619][ T10] usb 4-1: Manufacturer: syz [ 1087.945848][ T10] usb 4-1: SerialNumber: syz [ 1087.954475][ T10] usb 4-1: config 0 descriptor?? [ 1088.009579][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.062491][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.069927][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.077440][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.084919][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.094497][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.208771][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.208802][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1088.216436][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.240760][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.250653][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.250653][ T5885] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1088.265981][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.273921][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.282572][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.290008][T19994] hid-generic 0002:0004:0009.0030: unknown main item tag 0x0 [ 1088.303205][T19994] hid-generic 0002:0004:0009.0030: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1088.377537][T20966] fido_id[20966]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1088.433434][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 1088.780733][T19994] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1088.883375][T20976] overlayfs: missing 'lowerdir' [ 1089.262041][T19994] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 1089.273898][T19994] usb 7-1: config 0 has no interface number 0 [ 1089.280062][T19994] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1089.292854][T19994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.329640][T19994] usb 7-1: config 0 descriptor?? [ 1089.357691][T19994] hub 7-1:0.3: bad descriptor, ignoring hub [ 1089.372943][T19994] hub 7-1:0.3: probe with driver hub failed with error -5 [ 1089.398545][T19994] sierra 7-1:0.3: Sierra USB modem converter detected [ 1089.594628][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1089.605180][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1089.628090][T19994] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1090.177545][ T10] usb 4-1: USB disconnect, device number 76 [ 1090.180139][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1090.351779][T19994] usb 7-1: USB disconnect, device number 67 [ 1090.381157][T19994] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1090.931515][T19994] sierra 7-1:0.3: device disconnected [ 1091.720402][ T30] audit: type=1326 audit(1751151662.915:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20987 comm="syz.3.3846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x0 [ 1091.720444][T19994] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1091.951240][T19994] usb 7-1: Using ep0 maxpacket: 16 [ 1092.307045][T19994] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.324218][T19994] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1092.336386][T19994] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.346166][T19994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.354365][T19994] usb 7-1: Product: syz [ 1092.359624][T19994] usb 7-1: Manufacturer: syz [ 1092.364343][T19994] usb 7-1: SerialNumber: syz [ 1092.528458][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1092.551381][ T5885] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1092.558966][ T5885] usb 8-1: can't read configurations, error -71 [ 1092.580168][T20993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1092.597057][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3846'. [ 1092.880712][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1093.031076][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1093.090751][ T5885] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1093.788170][T21015] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1094.015886][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.026987][ T10] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1094.036117][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.078128][ T10] usb 6-1: config 0 descriptor?? [ 1094.153877][T19994] cdc_ncm 7-1:1.0: failed to get mac address [ 1094.191738][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 1094.212691][ T5885] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1094.219362][ T5885] usb 8-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1094.262522][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.295451][ T5885] usb 8-1: config 0 descriptor?? [ 1094.363414][T19994] cdc_ncm 7-1:1.0: bind() failure [ 1094.375359][T19994] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1094.385003][T19994] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1094.397490][T19994] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 1094.416756][T19994] usb 7-1: USB disconnect, device number 68 [ 1094.678122][ T10] pantherlord 0003:0E8F:0003.0031: item fetching failed at offset 4/5 [ 1094.690939][ T10] pantherlord 0003:0E8F:0003.0031: parse failed [ 1094.697282][ T10] pantherlord 0003:0E8F:0003.0031: probe with driver pantherlord failed with error -22 [ 1095.877107][T21009] IPVS: ip_vs_add_dest(): server weight less than zero [ 1095.888512][ T1207] IPVS: starting estimator thread 0... [ 1095.950138][ T1207] usb 6-1: USB disconnect, device number 53 [ 1096.344000][ T5885] usbhid 8-1:0.0: can't add hid device: -71 [ 1096.350524][ T5885] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1096.381101][ T5885] usb 8-1: USB disconnect, device number 80 [ 1096.424346][T21033] IPVS: using max 43 ests per chain, 103200 per kthread [ 1096.450714][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1097.030666][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1098.183135][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.190735][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.198225][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1098.206082][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.239689][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1098.265164][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.292063][ T10] usb 4-1: can't read configurations, error -71 [ 1098.304982][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.390965][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.424182][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1098.440187][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.099682][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.117450][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.128962][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.140679][ T5885] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1099.180812][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.194830][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.208061][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.220025][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.232234][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.239631][ T1207] hid-generic 0002:0004:0009.0032: unknown main item tag 0x0 [ 1099.258565][ T1207] hid-generic 0002:0004:0009.0032: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1099.350653][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 1099.505556][T21088] 9pnet_fd: Insufficient options for proto=fd [ 1100.417107][T21080] fido_id[21080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1100.826951][T21104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21104 comm=syz.7.3871 [ 1104.001177][T21113] input: syz1 as /devices/virtual/input/input83 [ 1104.770720][ T5970] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1104.895185][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1104.911659][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 1104.919215][ T5885] usb 7-1: chopping to 0 config(s) [ 1104.930732][ T5970] usb 9-1: Using ep0 maxpacket: 32 [ 1104.950664][ T5885] usb 7-1: can't read configurations, error -32 [ 1105.202273][ T976] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1105.278311][T21128] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1970299695.1831805743) [ 1105.580752][ T976] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1105.596188][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.617800][ T976] usb 6-1: Product: syz [ 1105.630544][ T976] usb 6-1: Manufacturer: syz [ 1105.635743][ T976] usb 6-1: SerialNumber: syz [ 1105.805948][ T976] usb 6-1: config 0 descriptor?? [ 1106.833457][ T976] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1106.849261][ T976] usb 6-1: Firmware version (0.0) predates our first public release. [ 1106.885749][ T976] usb 6-1: Please update to version 0.2 or newer [ 1107.073481][ T976] usb 6-1: USB disconnect, device number 54 [ 1107.081107][T21136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1107.098446][T21136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1107.104985][T21136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1107.123249][T21136] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1107.129731][T21136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1107.296287][ T5970] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1107.382574][ T5970] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1107.490741][ T5970] usb 9-1: can't read configurations, error -71 [ 1108.470972][T16783] Bluetooth: hci4: command 0x040f tx timeout [ 1109.350717][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1109.356918][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1109.363018][T16783] Bluetooth: hci2: command 0x0401 tx timeout [ 1109.500799][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 1110.678329][T21187] input: syz1 as /devices/virtual/input/input84 [ 1111.276050][T21192] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1970299695.1831805743) [ 1111.578233][T21197] Malformed UNC in devname [ 1111.578233][T21197] [ 1111.662727][T21198] fuse: Unknown parameter 'group_id00000000000000000000' [ 1111.669776][T21197] CIFS: VFS: Malformed UNC in devname [ 1112.381251][T21207] ubi: mtd0 is already attached to ubi31 [ 1112.717794][T21221] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3901'. [ 1113.034044][T21232] Can't find a SQUASHFS superblock on nullb0 [ 1113.570648][ T10] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1113.760660][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1113.775793][ T10] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 1113.815615][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.868921][ T10] usb 8-1: config 0 has no interfaces? [ 1113.886985][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1113.906413][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.979817][ T10] usb 8-1: config 0 descriptor?? [ 1114.220905][T21241] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1115.390908][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.397243][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.120241][T21263] Malformed UNC in devname [ 1117.120241][T21263] [ 1117.190828][T21263] CIFS: VFS: Malformed UNC in devname [ 1117.236089][T21265] fuse: Unknown parameter 'group_id00000000000000000000' [ 1117.501153][T19995] usb 8-1: USB disconnect, device number 81 [ 1119.407711][T21290] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1119.459522][T21291] ubi: mtd0 is already attached to ubi31 [ 1120.720801][T19995] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1121.560724][T19995] usb 7-1: Using ep0 maxpacket: 8 [ 1121.567324][T19995] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1121.574425][T19995] usb 7-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1121.586411][T19995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.698719][T19995] usb 7-1: config 0 descriptor?? [ 1122.242783][T21317] Malformed UNC in devname [ 1122.242783][T21317] [ 1122.310843][ T30] audit: type=1400 audit(1751151693.435:1737): avc: denied { rename } for pid=21307 comm="syz.3.3924" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1122.324780][T21317] CIFS: VFS: Malformed UNC in devname [ 1122.353309][T21318] fuse: Bad value for 'user_id' [ 1122.358727][T21318] fuse: Bad value for 'user_id' [ 1122.515608][T19995] hid-u2fzero 0003:20A0:4287.0033: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.6-1/input0 [ 1122.559080][T19995] hid-u2fzero 0003:20A0:4287.0033: NitroKey U2F LED initialised [ 1123.033079][T19995] hid-u2fzero 0003:20A0:4287.0033: NitroKey U2F RNG initialised [ 1123.064639][T19995] usb 7-1: USB disconnect, device number 71 [ 1123.100457][T21324] fido_id[21324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1124.571399][T21339] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3932'. [ 1125.755897][T21351] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1126.171974][T21357] ubi: mtd0 is already attached to ubi31 [ 1126.223031][T21359] netlink: 292 bytes leftover after parsing attributes in process `syz.8.3936'. [ 1132.859540][T21460] netlink: 292 bytes leftover after parsing attributes in process `syz.8.3964'. [ 1133.234617][T21461] overlayfs: missing 'lowerdir' [ 1134.693568][T21487] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1135.301397][T21492] Malformed UNC in devname [ 1135.301397][T21492] [ 1135.308134][T21492] CIFS: VFS: Malformed UNC in devname [ 1135.343283][T21492] fuse: Bad value for 'fd' [ 1135.535084][T21495] overlayfs: missing 'lowerdir' [ 1135.878824][T21503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.941496][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3975'. [ 1138.656096][T21540] netlink: 'syz.5.3986': attribute type 1 has an invalid length. [ 1138.821142][ T30] audit: type=1326 audit(1751151709.995:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1138.901802][T21551] ubi: mtd0 is already attached to ubi31 [ 1139.353198][T21559] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1139.620826][ T30] audit: type=1326 audit(1751151709.995:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1139.752747][T21560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.786498][ T30] audit: type=1326 audit(1751151710.025:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1139.819771][ T30] audit: type=1326 audit(1751151710.025:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.075808][ T30] audit: type=1326 audit(1751151710.835:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.107291][ T30] audit: type=1326 audit(1751151710.835:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.136407][ T30] audit: type=1326 audit(1751151710.835:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.315426][ T30] audit: type=1326 audit(1751151710.835:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.342605][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3989'. [ 1140.368150][ T30] audit: type=1326 audit(1751151710.835:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fced758e929 code=0x7ffc0000 [ 1140.411949][ T30] audit: type=1326 audit(1751151710.845:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21539 comm="syz.5.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fced752ab19 code=0x7ffc0000 [ 1140.521234][T21570] netlink: 292 bytes leftover after parsing attributes in process `syz.8.3992'. [ 1143.009425][T21607] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1143.307791][T21613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.389218][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1144.181805][ T976] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1144.368176][ T976] usb 8-1: Using ep0 maxpacket: 32 [ 1144.845709][T21631] overlayfs: missing 'lowerdir' [ 1146.533444][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1146.541920][ T976] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1146.550660][ T976] usb 8-1: can't read configurations, error -71 [ 1148.891963][T21675] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1149.476587][T21683] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1150.308694][T21698] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4025'. [ 1150.329703][T21698] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4025'. [ 1150.552994][T21704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1150.633857][T21704] kvm: pic: single mode not supported [ 1150.633946][T21704] kvm: pic: non byte read [ 1150.739891][T21704] kvm: pic: level sensitive irq not supported [ 1150.739990][T21704] kvm: pic: non byte read [ 1150.755829][T21704] kvm: pic: level sensitive irq not supported [ 1150.755892][T21704] kvm: pic: non byte read [ 1151.602354][T21704] kvm: pic: level sensitive irq not supported [ 1151.602421][T21704] kvm: pic: non byte read [ 1152.180355][T21723] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1153.672411][ T5970] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1153.910681][ T5970] usb 7-1: Using ep0 maxpacket: 16 [ 1153.925767][ T5970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.003516][ T5970] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1154.158064][T21746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.456607][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.614511][ T5970] usb 7-1: config 0 descriptor?? [ 1155.077160][ T5970] pantherlord 0003:0E8F:0003.0034: item fetching failed at offset 4/5 [ 1155.094655][ T5970] pantherlord 0003:0E8F:0003.0034: parse failed [ 1155.101850][ T5970] pantherlord 0003:0E8F:0003.0034: probe with driver pantherlord failed with error -22 [ 1155.759381][ T5970] usb 7-1: USB disconnect, device number 72 [ 1157.605352][T21772] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1157.755900][T21042] bridge_slave_1: left allmulticast mode [ 1157.761875][T21042] bridge_slave_1: left promiscuous mode [ 1158.706150][T21042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.716911][T21042] bridge_slave_0: left allmulticast mode [ 1158.726298][T21042] bridge_slave_0: left promiscuous mode [ 1158.740390][T21042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.555618][T21788] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1159.580783][ T976] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1160.042666][ T976] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1160.051977][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.059960][ T976] usb 7-1: Product: syz [ 1160.066168][ T976] usb 7-1: Manufacturer: syz [ 1160.072205][ T976] usb 7-1: SerialNumber: syz [ 1160.084991][ T976] usb 7-1: config 0 descriptor?? [ 1160.207901][T21042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.218482][T21042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.228899][T21042] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1160.237891][T21042] bond0 (unregistering): Released all slaves [ 1160.249349][T21757] tipc: Enabling of bearer rejected, already enabled [ 1160.308283][T21768] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1160.330827][T21779] tipc: Enabling of bearer rejected, already enabled [ 1160.338733][T21768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1160.368452][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1160.368469][ T30] audit: type=1400 audit(1751151731.565:1821): avc: denied { firmware_load } for pid=21763 comm="syz.3.4043" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1160.369557][T21768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1160.410036][T21042] tipc: Disabling bearer [ 1160.603344][T21042] tipc: Disabling bearer [ 1160.608871][T21042] tipc: Left network mode [ 1160.683987][T21803] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1161.559716][ T976] usb 7-1: Firmware version (0.0) predates our first public release. [ 1161.607486][ T976] usb 7-1: Please update to version 0.2 or newer [ 1161.806565][T21813] overlayfs: missing 'lowerdir' [ 1161.978881][T21042] hsr_slave_0: left promiscuous mode [ 1162.178163][T21821] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1162.400768][ T5892] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1162.763738][T21042] hsr_slave_1: left promiscuous mode [ 1163.032010][T21042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.121223][T21042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.149670][T21042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.158803][T21042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.158953][ T5892] usb 9-1: config 0 has no interfaces? [ 1163.317074][T21830] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1163.421698][T21042] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1163.530474][ T5892] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1163.548575][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.600020][ T5892] usb 9-1: Product: syz [ 1163.626364][ T5892] usb 9-1: Manufacturer: syz [ 1163.663586][ T5892] usb 9-1: SerialNumber: syz [ 1163.677302][ T5892] usb 9-1: config 0 descriptor?? [ 1163.758297][T21042] veth1_macvtap: left promiscuous mode [ 1163.770900][T21042] veth0_macvtap: left promiscuous mode [ 1163.793882][T21042] veth1_vlan: left promiscuous mode [ 1163.823766][T21042] veth0_vlan: left promiscuous mode [ 1166.143875][T21042] team0 (unregistering): Port device team_slave_1 removed [ 1166.304851][T21042] team0 (unregistering): Port device team_slave_0 removed [ 1166.929653][T21820] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1166.939649][T21850] tipc: Enabling of bearer rejected, already enabled [ 1166.940693][T21820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1166.957730][ T976] usb 7-1: USB disconnect, device number 73 [ 1166.984882][T21855] tipc: Enabling of bearer rejected, already enabled [ 1167.111615][T21820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1167.654069][ T916] usb 9-1: USB disconnect, device number 68 [ 1168.881442][ T976] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1169.476701][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1169.487129][T21871] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1169.495100][T21871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1170.133194][ T36] bridge_slave_1: left allmulticast mode [ 1171.201580][ T36] bridge_slave_1: left promiscuous mode [ 1171.238573][T21881] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1171.248208][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.581185][ T36] bridge_slave_0: left allmulticast mode [ 1171.590340][ T36] bridge_slave_0: left promiscuous mode [ 1171.618056][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.649025][ T36] bridge_slave_1: left allmulticast mode [ 1171.711908][ T36] bridge_slave_1: left promiscuous mode [ 1171.717683][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.751819][ T36] bridge_slave_0: left allmulticast mode [ 1171.757577][ T36] bridge_slave_0: left promiscuous mode [ 1171.776129][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.314826][ T30] audit: type=1400 audit(1751151743.515:1822): avc: denied { read } for pid=21897 comm="syz.6.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1172.740952][ T916] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1172.976058][ T916] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 1173.446127][ T916] usb 7-1: config 0 has no interface number 0 [ 1173.464931][ T916] usb 7-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1173.514589][ T916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.535625][ T916] usb 7-1: config 0 descriptor?? [ 1173.588135][ T916] hub 7-1:0.3: bad descriptor, ignoring hub [ 1173.597349][ T916] hub 7-1:0.3: probe with driver hub failed with error -5 [ 1173.606188][ T916] sierra 7-1:0.3: Sierra USB modem converter detected [ 1173.711114][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.735703][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.750700][T21127] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1173.768698][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1173.778137][ T36] bond0 (unregistering): Released all slaves [ 1173.795496][ T36] bond1 (unregistering): Released all slaves [ 1173.889085][ T916] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1174.481372][T21127] usb 6-1: config 0 has no interfaces? [ 1174.572801][ T36] bond2 (unregistering): Released all slaves [ 1174.754423][T21127] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1174.766658][ T916] usb 7-1: USB disconnect, device number 75 [ 1174.788271][T21127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.815432][ T916] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1174.824384][T21127] usb 6-1: Product: syz [ 1174.828563][T21127] usb 6-1: Manufacturer: syz [ 1174.857424][ T916] sierra 7-1:0.3: device disconnected [ 1174.869953][T21127] usb 6-1: SerialNumber: syz [ 1174.885391][T21889] tipc: Enabled bearer , priority 10 [ 1174.991980][T21918] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1175.217877][T21893] tipc: Enabling of bearer rejected, already enabled [ 1175.227780][T21127] usb 6-1: config 0 descriptor?? [ 1175.282713][ T36] tipc: Disabling bearer [ 1175.290927][ T36] tipc: Disabling bearer [ 1175.358330][ T36] tipc: Left network mode [ 1175.530444][ T36] tipc: Disabling bearer [ 1175.559547][ T36] tipc: Disabling bearer [ 1175.686561][ T36] tipc: Left network mode [ 1175.745398][T21929] block nbd6: Unsupported socket: shutdown callout must be supported. [ 1175.773801][T21931] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1176.303974][T21933] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1177.056785][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.063213][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.175647][T21929] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1177.527891][ T10] usb 6-1: USB disconnect, device number 55 [ 1179.140903][T16783] Bluetooth: hci2: command 0x0401 tx timeout [ 1180.092527][T21959] netlink: 292 bytes leftover after parsing attributes in process `syz.6.4091'. [ 1181.661059][T21977] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1183.207220][ T10] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1183.790404][T16783] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1184.302810][ T36] hsr_slave_0: left promiscuous mode [ 1184.353341][ T36] hsr_slave_1: left promiscuous mode [ 1184.706939][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.746406][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.974910][T22011] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1185.367495][ T36] hsr_slave_0: left promiscuous mode [ 1185.422074][ T36] hsr_slave_1: left promiscuous mode [ 1185.433746][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.448715][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.459533][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.479659][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.601705][ T36] veth1_macvtap: left promiscuous mode [ 1185.607619][ T36] veth0_macvtap: left promiscuous mode [ 1185.616982][ T36] veth1_vlan: left promiscuous mode [ 1186.600686][ T36] veth0_vlan: left promiscuous mode [ 1186.640660][ T5892] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1186.927580][ T5892] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1187.046470][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1187.139381][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1187.224904][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1187.295945][ T5892] usb 4-1: Product: syz [ 1187.342370][ T5892] usb 4-1: Manufacturer: syz [ 1187.377598][ T5892] usb 4-1: SerialNumber: syz [ 1187.455206][ T5892] usb 4-1: config 0 descriptor?? [ 1187.715729][ T5892] usb 4-1: selecting invalid altsetting 0 [ 1187.909801][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1187.933024][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1187.958394][ T5892] usb 4-1: USB disconnect, device number 79 [ 1188.074610][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.148396][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.163791][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.171576][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.187429][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.225863][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.239645][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.253537][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.262248][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.269659][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.277558][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.285822][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.293560][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.303827][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.311503][ T5899] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 1188.320773][T22030] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1188.350522][ T5899] hid-generic 0002:0004:0009.0035: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1188.444374][T22037] fido_id[22037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1188.481349][T22030] usb 9-1: Using ep0 maxpacket: 16 [ 1188.700149][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1188.838236][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1189.095263][T22044] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1190.003901][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1190.041700][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1190.490909][T22030] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1190.499428][T22030] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1190.520033][T22030] usb 9-1: can't read configurations, error -71 [ 1190.759717][T22024] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1190.899403][T22024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1190.932855][T22024] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1192.779431][T22067] tipc: Enabling of bearer rejected, already enabled [ 1192.823765][T22067] tipc: Enabling of bearer rejected, already enabled [ 1193.210779][ T43] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1193.363827][T22086] netlink: 'syz.7.4120': attribute type 10 has an invalid length. [ 1193.391641][T22086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.415598][T22086] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1193.993711][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 1194.028621][ T43] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1194.347066][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.374982][ T43] usb 9-1: config 0 has no interfaces? [ 1194.494322][ T43] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1194.504559][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.525198][ T43] usb 9-1: config 0 descriptor?? [ 1197.159304][T22112] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1197.170349][ T5892] usb 9-1: USB disconnect, device number 72 [ 1197.178774][T16783] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 1197.253481][T22112] kvm: pic: single mode not supported [ 1197.253563][T22112] kvm: pic: non byte read [ 1197.264976][T22112] kvm: pic: level sensitive irq not supported [ 1197.265039][T22112] kvm: pic: non byte read [ 1197.294216][T22112] kvm: pic: level sensitive irq not supported [ 1197.294277][T22112] kvm: pic: non byte read [ 1197.318040][T22112] kvm: pic: level sensitive irq not supported [ 1197.318381][T22112] kvm: pic: non byte read [ 1197.383405][T22121] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1198.850820][T22154] netlink: 'syz.8.4136': attribute type 10 has an invalid length. [ 1198.872445][T22154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.887474][T22154] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1199.330904][T22152] tipc: Enabling of bearer rejected, already enabled [ 1199.500968][T22155] tipc: Enabling of bearer rejected, already enabled [ 1199.572647][T22157] Malformed UNC in devname [ 1199.572647][T22157] [ 1199.598723][T22157] CIFS: VFS: Malformed UNC in devname [ 1199.621655][T22157] fuse: Unknown parameter 'use00000000000000000000' [ 1203.254091][T22205] Malformed UNC in devname [ 1203.254091][T22205] [ 1203.261380][T22205] CIFS: VFS: Malformed UNC in devname [ 1203.787714][T22208] fuse: Unknown parameter 'user_i00000000000000000000' [ 1204.780811][T22231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1204.901965][ T976] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1205.060704][ T976] usb 8-1: Using ep0 maxpacket: 32 [ 1207.697908][ T976] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1207.710744][ T976] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1207.718337][ T976] usb 8-1: can't read configurations, error -71 [ 1208.254161][T22283] netlink: 'syz.7.4166': attribute type 10 has an invalid length. [ 1208.701562][T22284] input: syz0 as /devices/virtual/input/input86 [ 1209.003235][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.026175][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.048450][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.083104][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.090533][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.588596][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.691640][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.729345][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.747627][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.809288][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.817031][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.827752][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.843353][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.868968][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1209.980657][T22030] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1210.730646][ T5892] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1210.760746][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1210.782423][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1210.800644][T22030] usb 6-1: Using ep0 maxpacket: 8 [ 1210.807071][T22030] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1210.820087][T22030] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1210.820323][ T916] hid-generic 0002:0004:0009.0036: unknown main item tag 0x0 [ 1210.827384][T22030] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1210.844282][T22030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.861134][ T916] hid-generic 0002:0004:0009.0036: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1210.862060][T22030] usb 6-1: config 0 descriptor?? [ 1210.883242][T22303] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1210.910905][ T5892] usb 9-1: Using ep0 maxpacket: 16 [ 1211.799197][T22030] hid-u2fzero 0003:20A0:4287.0037: hidraw1: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0 [ 1211.972838][T22030] hid-u2fzero 0003:20A0:4287.0037: NitroKey U2F LED initialised [ 1212.192856][T22030] hid-u2fzero 0003:20A0:4287.0037: NitroKey U2F RNG initialised [ 1212.210387][T22030] usb 6-1: USB disconnect, device number 56 [ 1213.349553][T22330] fido_id[22330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1213.396458][ T1207] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1213.510779][ T5892] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1213.580675][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 1213.908353][ T5892] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1214.137780][ T5892] usb 9-1: can't read configurations, error -71 [ 1214.680317][T22343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22343 comm=syz.5.4176 [ 1214.863623][T22349] Malformed UNC in devname [ 1214.863623][T22349] [ 1214.888605][T22349] CIFS: VFS: Malformed UNC in devname [ 1214.934106][T22349] fuse: Unknown parameter 'user_i00000000000000000000' [ 1215.190665][ T916] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1215.281262][ T1207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1215.473831][ T916] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1215.547412][ T916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1215.734659][ T1207] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1215.737817][ T916] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.751428][ T916] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1215.760043][ T1207] usb 4-1: can't read configurations, error -71 [ 1215.765823][ T916] usb 6-1: Product: syz [ 1215.772573][ T916] usb 6-1: Manufacturer: syz [ 1215.777230][ T916] usb 6-1: SerialNumber: syz [ 1215.781618][ T5899] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1215.784311][ T916] usb 6-1: config 0 descriptor?? [ 1215.817198][ T916] usb 6-1: selecting invalid altsetting 0 [ 1216.032392][ T5899] usb 7-1: config 0 has no interfaces? [ 1216.052642][ T916] usb 6-1: USB disconnect, device number 57 [ 1216.062646][ T5899] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1216.095504][T22320] udevd[22320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.136173][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.280592][ T5899] usb 7-1: Product: syz [ 1216.294968][ T5899] usb 7-1: Manufacturer: syz [ 1216.299626][ T5899] usb 7-1: SerialNumber: syz [ 1216.792462][ T5899] usb 7-1: config 0 descriptor?? [ 1217.354843][T22392] ubi: mtd0 is already attached to ubi31 [ 1218.585619][T22409] netlink: 'syz.5.4195': attribute type 10 has an invalid length. [ 1218.605641][T22409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.619486][T22409] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1219.160198][ T1207] usb 7-1: USB disconnect, device number 76 [ 1219.200342][T22415] netlink: 'syz.8.4196': attribute type 1 has an invalid length. [ 1219.276574][T22420] netlink: 'syz.8.4196': attribute type 1 has an invalid length. [ 1219.569289][ T30] audit: type=1326 audit(1751151790.765:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1219.593478][ T30] audit: type=1326 audit(1751151790.765:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.047966][ T30] audit: type=1326 audit(1751151790.765:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.071443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1220.110781][ T30] audit: type=1326 audit(1751151790.765:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.340241][ T30] audit: type=1326 audit(1751151790.765:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.364338][ T30] audit: type=1326 audit(1751151790.765:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.405192][T22418] overlayfs: missing 'lowerdir' [ 1220.419440][ T30] audit: type=1326 audit(1751151790.765:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.497574][ T30] audit: type=1326 audit(1751151790.765:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.522932][ T30] audit: type=1326 audit(1751151791.285:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1220.550304][ T30] audit: type=1326 audit(1751151791.285:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz.8.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ed58e929 code=0x7ffc0000 [ 1221.733610][ T43] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1221.930703][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1222.230698][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.283793][ T43] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1222.298193][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.324537][ T43] usb 7-1: config 0 descriptor?? [ 1222.496053][ T976] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1222.673508][ T976] usb 8-1: config 0 has no interfaces? [ 1222.695006][ T976] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1222.714278][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.737182][T22460] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1222.746700][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1222.766568][ T43] pantherlord 0003:0E8F:0003.0038: item fetching failed at offset 4/5 [ 1222.821079][ T976] usb 8-1: Product: syz [ 1222.825272][ T976] usb 8-1: Manufacturer: syz [ 1223.319846][ T43] pantherlord 0003:0E8F:0003.0038: parse failed [ 1223.852297][ T976] usb 8-1: SerialNumber: syz [ 1223.892555][ T43] pantherlord 0003:0E8F:0003.0038: probe with driver pantherlord failed with error -22 [ 1223.924336][ T976] usb 8-1: config 0 descriptor?? [ 1223.972416][ T43] usb 7-1: USB disconnect, device number 77 [ 1224.355012][T22469] tipc: Enabling of bearer rejected, already enabled [ 1224.398540][T22469] tipc: Enabling of bearer rejected, already enabled [ 1224.907043][ T5823] Bluetooth: hci1: command 0x040f tx timeout [ 1225.949710][T19995] usb 8-1: USB disconnect, device number 86 [ 1227.898101][T22503] tipc: Enabling of bearer rejected, already enabled [ 1227.947053][T22503] tipc: Enabling of bearer rejected, already enabled [ 1228.229905][T22507] input: syz0 as /devices/virtual/input/input87 [ 1229.648692][T22523] netlink: 'syz.8.4225': attribute type 10 has an invalid length. [ 1230.670748][ T5892] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1230.952069][T22537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1230.991318][ T5892] usb 9-1: config 0 has no interfaces? [ 1230.999109][ T5892] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1231.008466][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.018914][ T5892] usb 9-1: Product: syz [ 1231.023455][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1231.025970][ T5892] usb 9-1: Manufacturer: syz [ 1231.047344][ T5892] usb 9-1: SerialNumber: syz [ 1231.133370][ T5892] usb 9-1: config 0 descriptor?? [ 1233.903228][T19995] usb 9-1: USB disconnect, device number 75 [ 1235.887156][T22588] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1970299695.1831805743) [ 1236.339907][T22593] netlink: 292 bytes leftover after parsing attributes in process `syz.7.4241'. [ 1236.902294][T22604] input: syz0 as /devices/virtual/input/input88 [ 1237.359271][T22610] netlink: 'syz.8.4244': attribute type 10 has an invalid length. [ 1238.273016][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.350664][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.404114][T22616] netlink: 292 bytes leftover after parsing attributes in process `syz.8.4246'. [ 1239.152112][ T916] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1239.888394][ T916] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1239.908987][ T916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.922984][ T916] usb 6-1: Product: syz [ 1239.927178][ T916] usb 6-1: Manufacturer: syz [ 1239.941109][ T916] usb 6-1: SerialNumber: syz [ 1239.953704][ T916] usb 6-1: config 0 descriptor?? [ 1241.145574][ T916] usb 6-1: Firmware version (0.0) predates our first public release. [ 1241.164728][ T916] usb 6-1: Please update to version 0.2 or newer [ 1241.559201][ T916] usb 6-1: USB disconnect, device number 58 [ 1244.007577][T22667] overlayfs: missing 'lowerdir' [ 1244.261724][T22669] Can't find a SQUASHFS superblock on nullb0 [ 1244.890699][T19995] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1245.009738][T22677] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1245.100673][T19995] usb 8-1: Using ep0 maxpacket: 8 [ 1245.258902][T19995] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1245.294556][T19995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.322174][T19995] usb 8-1: Product: syz [ 1245.381451][T19995] usb 8-1: Manufacturer: syz [ 1245.386095][T19995] usb 8-1: SerialNumber: syz [ 1245.396767][T19995] usb 8-1: config 0 descriptor?? [ 1245.407004][T19995] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1245.418122][T19995] usb 8-1: setting power ON [ 1245.423152][T19995] dvb-usb: bulk message failed: -22 (2/0) [ 1245.444424][T19995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1245.500902][T19995] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1245.751377][T19995] usb 8-1: media controller created [ 1246.093067][T19995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.161613][T22690] Malformed UNC in devname [ 1246.161613][T22690] [ 1246.182045][T22690] CIFS: VFS: Malformed UNC in devname [ 1246.187787][T19995] usb 8-1: selecting invalid altsetting 6 [ 1246.197655][T19995] usb 8-1: digital interface selection failed (-22) [ 1246.225288][T19995] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1246.472816][T19995] usb 8-1: setting power OFF [ 1246.564767][T19995] dvb-usb: bulk message failed: -22 (2/0) [ 1246.849473][T19995] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1246.883525][T22690] fuse: Unknown parameter '0x0000000000000006' [ 1247.361610][T19995] (NULL device *): no alternate interface [ 1247.786871][T19995] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1248.228037][T22701] input: syz0 as /devices/virtual/input/input89 [ 1248.326806][T19995] usb 8-1: USB disconnect, device number 87 [ 1248.560453][T22721] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1248.597074][T22721] kvm: pic: level sensitive irq not supported [ 1248.597158][T22721] kvm: pic: non byte read [ 1248.609030][T22721] kvm: pic: level sensitive irq not supported [ 1248.609093][T22721] kvm: pic: non byte read [ 1248.630116][T22721] kvm: pic: level sensitive irq not supported [ 1248.630256][T22721] kvm: pic: non byte read [ 1248.836987][T22721] kvm: pic: level sensitive irq not supported [ 1248.837039][T22721] kvm: pic: non byte read [ 1249.790646][T22744] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1250.694941][T22746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1250.776114][T22746] kvm: pic: level sensitive irq not supported [ 1250.776230][T22746] kvm: pic: non byte read [ 1250.801788][T22746] kvm: pic: level sensitive irq not supported [ 1250.801852][T22746] kvm: pic: non byte read [ 1250.966937][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1250.966964][ T30] audit: type=1800 audit(1751151822.165:1896): pid=22750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4284" name="/" dev="9p" ino=2 res=0 errno=0 [ 1251.804139][T22768] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4288'. [ 1251.848455][T22754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1251.855803][T22754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1251.865631][T22754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1251.872942][T22754] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1251.881126][T22754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1252.910622][ T5827] Bluetooth: hci4: command 0x040f tx timeout [ 1253.440193][T22766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1253.446471][T22766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1253.452493][T22766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1253.459025][T22766] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1253.469870][T22766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.479678][T22777] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1254.524522][T19994] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1255.234932][T22799] block nbd8: Unsupported socket: shutdown callout must be supported. [ 1255.460846][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1255.460910][T16783] Bluetooth: hci3: command 0x0c1a tx timeout [ 1255.466928][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1255.472950][T16783] Bluetooth: hci4: command 0x040f tx timeout [ 1255.485154][T19994] usb 7-1: Using ep0 maxpacket: 8 [ 1255.485460][T22799] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1255.503536][T19994] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1255.515709][T19994] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.552548][T22812] tipc: Enabling of bearer rejected, already enabled [ 1255.567686][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1255.574563][T22812] tipc: Enabling of bearer rejected, already enabled [ 1255.582393][T19994] usb 7-1: config 0 has no interfaces? [ 1255.587899][T19994] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1255.600874][T19994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.610496][T19994] usb 7-1: config 0 descriptor?? [ 1255.890259][T22815] ubi: mtd0 is already attached to ubi31 [ 1257.540882][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1257.994864][T22824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1258.027036][T22824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1258.034697][T22824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1258.043215][T22824] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1258.054377][T22824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1258.112354][ T5970] usb 7-1: USB disconnect, device number 78 [ 1258.923651][ T5827] Bluetooth: hci4: command 0x040f tx timeout [ 1259.088410][T22851] ubi: mtd0 is already attached to ubi31 [ 1260.100703][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1260.106819][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1260.112975][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 1260.119131][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 1261.502794][T22889] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1261.647964][T22889] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1262.701494][T13377] Bluetooth: hci2: unexpected event for opcode 0x204e [ 1263.888385][ T30] audit: type=1400 audit(1751151835.075:1897): avc: denied { unlink } for pid=22901 comm="syz.6.4327" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1264.297259][T22938] netlink: 'syz.8.4334': attribute type 10 has an invalid length. [ 1266.022531][T22947] input: syz0 as /devices/virtual/input/input90 [ 1266.833464][T22974] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4335'. [ 1267.770660][T22990] input: syz0 as /devices/virtual/input/input91 [ 1268.903244][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1272.371336][T13377] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1275.527357][ T43] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1275.705122][ T5892] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1275.941084][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 1276.014166][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.094481][ T5892] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1276.154314][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1276.246438][ T5892] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1276.375874][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.614377][ T5892] usb 6-1: config 0 descriptor?? [ 1277.327726][T23095] netlink: 'syz.8.4377': attribute type 10 has an invalid length. [ 1277.882918][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1277.898129][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1277.905892][ T43] usb 4-1: can't read configurations, error -71 [ 1278.401192][ T5892] usb 6-1: USB disconnect, device number 59 [ 1279.474569][T23126] Malformed UNC in devname [ 1279.474569][T23126] [ 1279.483942][T23126] CIFS: VFS: Malformed UNC in devname [ 1279.497655][T23126] fuse: Unknown parameter 'fd0x0000000000000006' [ 1279.620804][ T916] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1279.896622][ T916] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1280.048154][ T916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.149780][ T916] usb 9-1: Product: syz [ 1280.233746][ T916] usb 9-1: Manufacturer: syz [ 1280.277636][ T916] usb 9-1: SerialNumber: syz [ 1280.416611][ T916] usb 9-1: config 0 descriptor?? [ 1281.662811][ T916] usb 9-1: Firmware version (0.0) predates our first public release. [ 1281.670970][ T916] usb 9-1: Please update to version 0.2 or newer [ 1283.233396][T23161] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1283.748976][ T916] usb 9-1: USB disconnect, device number 76 [ 1285.945061][ T43] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1286.428088][ T5899] usb 8-1: new full-speed USB device number 88 using dummy_hcd [ 1286.731867][ T5899] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1287.331317][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.363087][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1287.398268][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1287.538638][ T5899] usb 8-1: config 0 has no interface number 0 [ 1287.547277][ T5899] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1287.560972][ T43] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1287.563098][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.570008][ T43] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1287.581056][ T5899] usb 8-1: config 0 descriptor?? [ 1287.600399][ T5899] hub 8-1:0.3: bad descriptor, ignoring hub [ 1287.606508][ T5899] hub 8-1:0.3: probe with driver hub failed with error -5 [ 1287.614505][ T5899] sierra 8-1:0.3: Sierra USB modem converter detected [ 1287.717106][ T43] usb 7-1: Manufacturer: syz [ 1287.742028][ T43] usb 7-1: config 0 descriptor?? [ 1289.089904][ T5899] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1289.220622][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1289.505507][ T5899] usb 8-1: USB disconnect, device number 88 [ 1289.524843][ T5899] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1289.533956][ T5899] sierra 8-1:0.3: device disconnected [ 1289.731110][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802da9e400: rx timeout, send abort [ 1289.751116][ T30] audit: type=1400 audit(1751151860.945:1898): avc: denied { read } for pid=5170 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1289.883299][ T30] audit: type=1400 audit(1751151860.945:1899): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.904875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.944716][ T30] audit: type=1400 audit(1751151860.945:1900): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.977808][ T30] audit: type=1400 audit(1751151860.945:1901): avc: denied { add_name } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.024782][ T30] audit: type=1400 audit(1751151860.945:1902): avc: denied { create } for pid=5170 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1290.241296][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802da9e400: abort rx timeout. Force session deactivation [ 1290.335668][T23218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.116509][ T30] audit: type=1400 audit(1751151860.945:1903): avc: denied { append open } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1291.146692][ T5892] usb 7-1: USB disconnect, device number 79 [ 1291.147384][ T30] audit: type=1400 audit(1751151860.955:1904): avc: denied { getattr } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1291.943448][T23234] netlink: 'syz.8.4413': attribute type 10 has an invalid length. [ 1292.866373][T23258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4416'. [ 1293.520795][ T43] usb 8-1: new full-speed USB device number 89 using dummy_hcd [ 1293.932007][T23276] input: syz0 as /devices/virtual/input/input92 [ 1293.972149][ T43] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1294.043555][ T43] usb 8-1: config 0 has no interface number 0 [ 1294.131302][ T43] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1294.153730][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.176149][ T43] usb 8-1: config 0 descriptor?? [ 1294.227740][ T43] hub 8-1:0.3: bad descriptor, ignoring hub [ 1294.340648][T23285] overlayfs: missing 'lowerdir' [ 1294.501081][ T43] hub 8-1:0.3: probe with driver hub failed with error -5 [ 1294.564254][ T43] sierra 8-1:0.3: Sierra USB modem converter detected [ 1294.774693][ T43] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1294.856440][ T43] usb 8-1: USB disconnect, device number 89 [ 1294.869767][T23288] block nbd6: Unsupported socket: shutdown callout must be supported. [ 1294.890364][ T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1294.952266][ T43] sierra 8-1:0.3: device disconnected [ 1296.039293][T23288] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1296.906533][T13377] Bluetooth: hci2: command 0x0401 tx timeout [ 1298.865759][T23342] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4437'. [ 1299.040591][T19995] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1299.266311][T19995] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1299.274636][T19995] usb 4-1: config 0 has no interface number 0 [ 1299.373981][T19995] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1299.422747][T19995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.732230][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.862473][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.391943][T19995] usb 4-1: config 0 descriptor?? [ 1300.418644][T19995] hub 4-1:0.3: bad descriptor, ignoring hub [ 1300.531148][T19995] hub 4-1:0.3: probe with driver hub failed with error -5 [ 1300.539105][T19995] sierra 4-1:0.3: Sierra USB modem converter detected [ 1300.613285][T23364] block nbd8: Unsupported socket: shutdown callout must be supported. [ 1300.657865][T19995] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1300.722273][T19995] usb 4-1: USB disconnect, device number 84 [ 1300.738085][T19995] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1300.802692][T19995] sierra 4-1:0.3: device disconnected [ 1301.918308][T23368] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1303.220597][T13377] Bluetooth: hci2: command 0x0401 tx timeout [ 1304.745663][T19994] usb 8-1: new full-speed USB device number 90 using dummy_hcd [ 1305.100319][T23423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4459'. [ 1305.253187][T19994] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1305.264821][T19994] usb 8-1: config 0 has no interface number 0 [ 1305.287320][T19994] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1305.328021][T19994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.366493][T19994] usb 8-1: config 0 descriptor?? [ 1305.393060][T19994] hub 8-1:0.3: bad descriptor, ignoring hub [ 1305.429938][T19994] hub 8-1:0.3: probe with driver hub failed with error -5 [ 1305.478618][T19994] sierra 8-1:0.3: Sierra USB modem converter detected [ 1305.629847][T19994] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1305.654112][T23428] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1305.711379][T19994] usb 8-1: USB disconnect, device number 90 [ 1305.738421][T19994] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1305.763008][T19994] sierra 8-1:0.3: device disconnected [ 1306.228777][T23443] fuse: Bad value for 'fd' [ 1307.032832][T23445] block nbd6: Unsupported socket: shutdown callout must be supported. [ 1308.432875][T23445] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1308.837759][T23474] ubi: mtd0 is already attached to ubi31 [ 1310.350823][T13377] Bluetooth: hci2: command 0x0401 tx timeout [ 1310.578950][T23481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4479'. [ 1310.716279][T23486] netlink: 'syz.3.4480': attribute type 1 has an invalid length. [ 1310.907701][T23491] netlink: 'syz.3.4480': attribute type 1 has an invalid length. [ 1311.225756][T23493] binder: 23485:23493 ioctl c018620c 200000000380 returned -1 [ 1311.252063][T23492] binder: 23488:23492 ioctl c018620c 200000000380 returned -1 [ 1311.275816][ T30] audit: type=1326 audit(1751151882.475:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.372219][ T30] audit: type=1326 audit(1751151882.475:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.421611][ T30] audit: type=1326 audit(1751151882.475:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.446165][ T30] audit: type=1326 audit(1751151882.475:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.496434][T23502] input: syz0 as /devices/virtual/input/input93 [ 1311.533709][ T30] audit: type=1326 audit(1751151882.475:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.674249][ T30] audit: type=1326 audit(1751151882.475:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.698102][ T30] audit: type=1326 audit(1751151882.505:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.730781][ T30] audit: type=1326 audit(1751151882.505:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.4480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1311.762027][T23503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4478'. [ 1312.172663][T23521] input: syz0 as /devices/virtual/input/input94 [ 1312.805303][T23525] block nbd7: Unsupported socket: shutdown callout must be supported. [ 1313.281171][ T5892] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1313.440680][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 1313.450625][ T5892] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 1313.639702][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.651178][T23525] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1313.668260][ T5892] usb 6-1: config 0 has no interfaces? [ 1313.682817][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1313.703873][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.728058][ T5892] usb 6-1: config 0 descriptor?? [ 1314.653533][T23549] ubi: mtd0 is already attached to ubi31 [ 1314.900803][T13377] Bluetooth: hci2: command 0x0401 tx timeout [ 1315.404850][T13377] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1317.749673][ T916] usb 6-1: USB disconnect, device number 60 [ 1317.940613][ T5899] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1318.029539][T23582] netlink: 'syz.8.4502': attribute type 10 has an invalid length. [ 1318.460735][ T5899] usb 8-1: Using ep0 maxpacket: 8 [ 1318.484716][ T5899] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1318.495878][ T5899] usb 8-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1318.517429][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.695571][T23590] input: syz0 as /devices/virtual/input/input95 [ 1318.941441][ T5899] usb 8-1: config 0 descriptor?? [ 1319.793643][ T5899] usbhid 8-1:0.0: can't add hid device: -71 [ 1319.801982][ T5899] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1319.927210][ T5899] usb 8-1: USB disconnect, device number 91 [ 1321.330946][T19995] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1321.678976][T19995] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1321.718025][T19995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.836595][T19995] usb 6-1: Product: syz [ 1321.949139][ T5899] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1321.990202][T19995] usb 6-1: Manufacturer: syz [ 1321.997082][T19995] usb 6-1: SerialNumber: syz [ 1322.568852][T19995] usb 6-1: config 0 descriptor?? [ 1322.790643][ T5899] usb 9-1: Using ep0 maxpacket: 8 [ 1322.804652][ T5899] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1323.264375][ T5899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.101474][T19995] usb 6-1: Firmware version (0.0) predates our first public release. [ 1324.109661][T19995] usb 6-1: Please update to version 0.2 or newer [ 1324.535341][ T5899] usb 9-1: config 0 has no interfaces? [ 1324.540927][ T5899] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1324.551313][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.720591][T23643] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1325.047056][T19995] usb 6-1: USB disconnect, device number 61 [ 1325.104421][ T5899] usb 9-1: config 0 descriptor?? [ 1327.627676][ T5899] usb 9-1: can't set config #0, error -71 [ 1327.634945][ T5899] usb 9-1: USB disconnect, device number 77 [ 1327.996405][T13377] Bluetooth: hci3: unexpected event for opcode 0x204e [ 1329.239222][T23678] ubi: mtd0 is already attached to ubi31 [ 1331.048017][T23700] input: syz0 as /devices/virtual/input/input96 [ 1331.998669][T23709] netlink: 'syz.5.4536': attribute type 10 has an invalid length. [ 1332.656617][T23715] xt_addrtype: ipv6 does not support BROADCAST matching [ 1335.105500][T23740] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4537'. [ 1335.565796][T23746] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4543'. [ 1336.053168][T13377] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1339.016894][T23783] ubi: mtd0 is already attached to ubi31 [ 1341.412644][T23797] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1344.949770][T23828] netlink: 'syz.7.4563': attribute type 1 has an invalid length. [ 1344.973201][T23828] netlink: 'syz.7.4563': attribute type 1 has an invalid length. [ 1345.936049][ T30] audit: type=1326 audit(1751151917.135:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1345.975975][ T30] audit: type=1326 audit(1751151917.135:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.000086][ T30] audit: type=1326 audit(1751151917.135:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.030997][ T30] audit: type=1326 audit(1751151917.135:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.076017][ T30] audit: type=1326 audit(1751151917.135:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.206573][ T30] audit: type=1326 audit(1751151917.135:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.861794][T23840] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1346.887722][T23840] kvm: pic: non byte read [ 1346.903100][T23840] kvm: pic: level sensitive irq not supported [ 1346.903170][T23840] kvm: pic: non byte read [ 1346.914440][ T30] audit: type=1326 audit(1751151917.135:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1346.946038][T23840] kvm: pic: level sensitive irq not supported [ 1346.946099][T23840] kvm: pic: non byte read [ 1346.975029][T23840] kvm: pic: level sensitive irq not supported [ 1346.975090][T23840] kvm: pic: non byte read [ 1346.991648][T23840] kvm: pic: level sensitive irq not supported [ 1346.991705][T23840] kvm: pic: non byte read [ 1347.002873][T23840] kvm: pic: level sensitive irq not supported [ 1347.002933][T23840] kvm: pic: non byte read [ 1347.048601][ T30] audit: type=1326 audit(1751151917.135:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1347.102210][T23840] kvm: pic: level sensitive irq not supported [ 1347.102278][T23840] kvm: pic: non byte read [ 1347.127968][T23852] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4567'. [ 1347.137321][ T43] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1347.139640][ T30] audit: type=1326 audit(1751151917.135:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1347.229218][ T30] audit: type=1326 audit(1751151917.265:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23827 comm="syz.7.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ead8e929 code=0x7ffc0000 [ 1347.400731][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1347.498659][T23860] ubi: mtd0 is already attached to ubi31 [ 1348.054452][T23869] xt_addrtype: ipv6 does not support BROADCAST matching [ 1349.477542][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1349.491706][ T43] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1349.500917][ T43] usb 7-1: can't read configurations, error -71 [ 1351.629591][T23894] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4578'. [ 1352.503625][T23912] xt_addrtype: ipv6 does not support BROADCAST matching [ 1353.304221][T23919] input: syz0 as /devices/virtual/input/input97 [ 1354.660743][ T5892] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1355.563405][T23936] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4580'. [ 1355.750818][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 1355.971652][T23949] Malformed UNC in devname [ 1355.971652][T23949] [ 1355.979451][T23949] CIFS: VFS: Malformed UNC in devname [ 1356.223503][T23956] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4591'. [ 1357.089814][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1357.342769][ T5892] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1357.350379][ T5892] usb 6-1: can't read configurations, error -71 [ 1359.488274][T23981] tipc: Enabling of bearer rejected, already enabled [ 1359.577343][T23981] tipc: Enabling of bearer rejected, already enabled [ 1361.147507][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.154016][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.819187][T24014] Malformed UNC in devname [ 1363.819187][T24014] [ 1363.827347][T24014] CIFS: VFS: Malformed UNC in devname [ 1366.520582][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1366.520598][ T30] audit: type=1800 audit(1751151937.325:1984): pid=24036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4611" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1368.477785][T24055] block nbd6: Unsupported socket: shutdown callout must be supported. [ 1368.794152][T24062] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1369.252855][T24055] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1370.013902][T24073] Malformed UNC in devname [ 1370.013902][T24073] [ 1370.030073][T24073] CIFS: VFS: Malformed UNC in devname [ 1370.624929][T24079] input: syz0 as /devices/virtual/input/input98 [ 1370.820592][T13377] Bluetooth: hci2: command 0x0401 tx timeout [ 1372.319957][T24114] ubi: mtd0 is already attached to ubi31 [ 1373.929902][T24117] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4634'. [ 1376.402098][ T5827] Bluetooth: hci1: command 0x040f tx timeout [ 1376.437781][T24147] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4641'. [ 1376.930093][T24153] netlink: 'syz.3.4643': attribute type 1 has an invalid length. [ 1376.985175][T24154] netlink: 'syz.3.4643': attribute type 1 has an invalid length. [ 1377.479059][T24166] ubi: mtd0 is already attached to ubi31 [ 1378.037133][ T30] audit: type=1326 audit(1751151949.235:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.060597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.546359][ T30] audit: type=1326 audit(1751151949.235:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.659103][T24177] overlayfs: missing 'lowerdir' [ 1378.665764][ T30] audit: type=1326 audit(1751151949.745:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.715079][ T30] audit: type=1326 audit(1751151949.745:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.741328][ T30] audit: type=1326 audit(1751151949.745:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.765221][ T30] audit: type=1326 audit(1751151949.745:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1378.874318][ T30] audit: type=1326 audit(1751151949.745:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1379.068447][ T30] audit: type=1326 audit(1751151949.745:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1379.203205][ T30] audit: type=1326 audit(1751151949.745:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1379.264643][ T30] audit: type=1326 audit(1751151949.745:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24152 comm="syz.3.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25758e929 code=0x7ffc0000 [ 1381.599025][T24205] tipc: Enabling of bearer rejected, already enabled [ 1381.609275][T24205] tipc: Enabling of bearer rejected, already enabled [ 1383.042955][T24221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1383.613709][T13377] Bluetooth: hci1: unexpected event for opcode 0x204e [ 1384.876245][T24235] input: syz0 as /devices/virtual/input/input99 [ 1385.982411][T24243] overlayfs: missing 'lowerdir' [ 1391.331504][T24287] dlm: plock device version mismatch: kernel (1.2.0), user (1986356225.1970299695.1831805743) [ 1392.840832][T24307] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4681'. [ 1392.850674][T24307] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4681'. [ 1395.033803][T24328] input: syz0 as /devices/virtual/input/input100 [ 1397.919991][T24353] tipc: Enabling of bearer rejected, already enabled [ 1400.253005][T24374] input: syz0 as /devices/virtual/input/input101 [ 1401.312550][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1401.321709][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1401.330854][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1401.532290][T24401] overlayfs: missing 'lowerdir' [ 1401.843383][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1401.954414][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1402.718791][T24398] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1405.387919][T24427] input: syz0 as /devices/virtual/input/input102 [ 1411.228330][T24491] overlayfs: missing 'lowerdir' [ 1411.390152][T24496] input: syz0 as /devices/virtual/input/input103 [ 1411.704127][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4730'. [ 1411.713656][T24505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1412.510537][ T5899] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1412.550546][ T5892] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1412.671059][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1412.687220][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1412.767419][ T5892] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.808677][ T5899] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1412.825932][ T5892] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1412.845160][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.953022][ T5892] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.182215][ T5899] usb 4-1: config 0 descriptor?? [ 1413.197874][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1413.199114][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1413.215810][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.275548][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1413.355368][ T5892] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1413.371962][T24384] udevd[24384]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.443256][T21127] usb 4-1: USB disconnect, device number 85 [ 1413.610138][ T5892] usb 8-1: USB disconnect, device number 92 [ 1414.757927][T24542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=24542 comm=syz.3.4743 [ 1414.788485][T24549] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4742'. [ 1415.109404][T24560] xt_addrtype: ipv6 does not support BROADCAST matching [ 1415.202850][T24561] tipc: Enabling of bearer rejected, already enabled [ 1415.225076][T24561] tipc: Enabling of bearer rejected, already enabled [ 1417.201160][T24572] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1417.206817][ T5827] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1417.400613][T24572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1417.428332][T24572] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1418.359969][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1418.360001][ T30] audit: type=1400 audit(1751151989.495:2072): avc: denied { remount } for pid=24585 comm="syz.5.4753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1418.409254][ T5827] Bluetooth: hci2: unexpected event for opcode 0x204e [ 1418.775505][T24595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4755'. [ 1420.080536][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1420.093529][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1420.102862][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1420.518336][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1420.541270][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1420.597143][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4759'. [ 1421.093385][T24611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=24611 comm=syz.5.4758 [ 1422.615190][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.670640][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.220018][T24653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4768'. [ 1425.288801][T24675] tipc: Enabling of bearer rejected, already enabled [ 1425.649169][T24679] Malformed UNC in devname [ 1425.649169][T24679] [ 1425.672095][T24679] CIFS: VFS: Malformed UNC in devname [ 1425.930612][T24687] Can't find a SQUASHFS superblock on nullb0 [ 1427.736217][T24704] netlink: 292 bytes leftover after parsing attributes in process `syz.7.4780'. [ 1431.558311][T24742] Malformed UNC in devname [ 1431.558311][T24742] [ 1431.829498][T24750] Can't find a SQUASHFS superblock on nullb0 [ 1432.198884][T24748] netlink: 292 bytes leftover after parsing attributes in process `syz.6.4791'. [ 1432.281404][T24742] CIFS: VFS: Malformed UNC in devname [ 1433.061636][ T916] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1433.446089][ T916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.678939][ T916] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1433.955690][ T916] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1434.135025][ T916] usb 6-1: Product: syz [ 1434.139239][ T916] usb 6-1: Manufacturer: syz [ 1434.139257][ T916] usb 6-1: SerialNumber: syz [ 1434.151051][ T916] usb 6-1: config 0 descriptor?? [ 1434.175681][ T916] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1434.194481][T24756] udevd[24756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.292970][ T43] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1434.410796][T24782] overlayfs: failed to resolve './file0': -2 [ 1434.445309][ T43] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.154377][ T43] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1435.197313][ T43] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1435.214346][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1435.239239][T21127] usb 6-1: USB disconnect, device number 64 [ 1435.247392][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.331828][T24787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1435.344871][T24787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1435.353993][T24787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1435.582932][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1435.792540][ T43] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1435.844787][ T43] usb 7-1: USB disconnect, device number 82 [ 1436.552605][T24805] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4806'. [ 1439.787433][T21127] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1440.063865][T21127] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1440.078233][T21127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.104011][T21127] usb 6-1: config 0 descriptor?? [ 1440.118603][T21127] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1440.299886][T24856] overlayfs: missing 'lowerdir' [ 1440.406569][T21127] gp8psk: usb in 128 operation failed. [ 1440.451029][T21127] gp8psk: usb in 137 operation failed. [ 1440.669785][T21127] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1440.762137][T21127] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1440.829754][T21127] usb 6-1: USB disconnect, device number 65 [ 1442.025364][T24873] input: syz0 as /devices/virtual/input/input104 [ 1443.497982][ T976] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1443.960691][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 1444.071804][ T976] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1444.245971][T24906] input: syz0 as /devices/virtual/input/input105 [ 1444.324028][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.469189][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.479697][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1444.493331][ T976] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1444.502823][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.535273][ T976] usb 6-1: config 0 descriptor?? [ 1444.878000][T24911] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4840'. [ 1444.953874][ T976] usbhid 6-1:0.0: can't add hid device: -71 [ 1444.974856][ T976] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1445.107979][ T976] usb 6-1: USB disconnect, device number 66 [ 1445.219158][T24919] input: syz0 as /devices/virtual/input/input106 [ 1446.274104][T24925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4843'. [ 1446.283335][T24925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4843'. [ 1446.295635][T24925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4843'. [ 1448.670708][T13377] Bluetooth: hci0: command 0x1003 tx timeout [ 1448.679696][ T5827] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1449.953266][T24952] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4851'. [ 1450.894720][T24963] netlink: 292 bytes leftover after parsing attributes in process `syz.8.4855'. [ 1450.991483][T24968] input: syz0 as /devices/virtual/input/input107 [ 1451.395241][ T5827] Bluetooth: hci2: unexpected event for opcode 0x203c [ 1451.406060][T24975] input: syz0 as /devices/virtual/input/input108 [ 1451.570680][T24958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12397 sclass=netlink_route_socket pid=24958 comm=syz.6.4853 [ 1451.950928][ T976] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1452.540690][ T976] usb 9-1: Using ep0 maxpacket: 8 [ 1452.713507][ T976] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1452.772081][ T976] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.730840][ T976] usb 9-1: config 0 has no interfaces? [ 1453.865307][ T976] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1454.621265][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.676186][ T976] usb 9-1: config 0 descriptor?? [ 1455.349257][T25008] ubi: mtd0 is already attached to ubi31 [ 1457.535119][T25021] input: syz0 as /devices/virtual/input/input109 [ 1457.645197][ T976] usb 9-1: can't set config #0, error -71 [ 1457.655292][ T976] usb 9-1: USB disconnect, device number 78 [ 1457.754939][T25026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.210890][T25050] xt_addrtype: ipv6 does not support BROADCAST matching [ 1460.190019][T25064] tipc: Enabling of bearer rejected, already enabled [ 1460.227850][T25064] tipc: Enabling of bearer rejected, already enabled [ 1460.253479][T25067] Malformed UNC in devname [ 1460.253479][T25067] [ 1460.274774][T25067] CIFS: VFS: Malformed UNC in devname [ 1461.044157][T25084] overlayfs: missing 'lowerdir' [ 1461.080769][T21127] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1461.430763][T21127] usb 7-1: Using ep0 maxpacket: 8 [ 1461.439330][T21127] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1461.447864][T21127] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.458601][T21127] usb 7-1: config 0 has no interfaces? [ 1461.464424][T21127] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1461.631679][T21127] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.687715][T21127] usb 7-1: config 0 descriptor?? [ 1463.410174][T25105] input: syz0 as /devices/virtual/input/input110 [ 1463.840060][T19995] usb 7-1: USB disconnect, device number 83 [ 1464.066796][T25115] xt_addrtype: ipv6 does not support BROADCAST matching [ 1466.512643][T25140] input: syz0 as /devices/virtual/input/input111 [ 1466.838677][T25150] tipc: Enabling of bearer rejected, already enabled [ 1467.789269][T25161] input: syz0 as /devices/virtual/input/input112 [ 1468.057670][T25164] tipc: Enabling of bearer rejected, already enabled [ 1469.987595][T25177] xt_addrtype: ipv6 does not support BROADCAST matching [ 1470.189767][T25190] overlayfs: missing 'lowerdir' [ 1470.835788][T25194] input: syz0 as /devices/virtual/input/input113 [ 1473.778215][T25244] xt_addrtype: ipv6 does not support BROADCAST matching [ 1473.814998][ T5827] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1482.922234][T25352] ubi: mtd0 is already attached to ubi31 [ 1483.420593][ T1207] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1483.580497][ T1207] usb 9-1: Using ep0 maxpacket: 8 [ 1483.609102][ T1207] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1483.678745][ T1207] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.728155][ T1207] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.757955][ T1207] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1483.911935][ T1207] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1483.921967][ T1207] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.950282][ T1207] usb 9-1: config 0 descriptor?? [ 1484.453067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.469837][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.929359][ T1207] usbhid 9-1:0.0: can't add hid device: -71 [ 1484.958833][ T1207] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1485.015980][ T1207] usb 9-1: USB disconnect, device number 79 [ 1487.511868][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4957'. [ 1489.216570][T25413] binder: 25408:25413 ioctl c018620c 200000000380 returned -1 [ 1491.430584][ T5827] Bluetooth: hci5: unexpected event for opcode 0x204e [ 1492.483434][T25448] overlayfs: missing 'lowerdir' [ 1493.111188][ T5827] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1493.932202][T25469] input: syz0 as /devices/virtual/input/input114 [ 1494.403872][T25454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1494.522972][T25018] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1494.864104][T25018] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1494.890533][T25018] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1494.927375][T25018] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1494.979853][T25018] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1495.009574][T25018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.047664][T25018] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1495.321179][T25485] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1495.327962][T25018] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1495.370177][T25331] udevd[25331]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.411822][T25018] usb 8-1: USB disconnect, device number 93 [ 1496.493300][ T8113] Bluetooth: hci0: Frame reassembly failed (-84) [ 1498.510615][T13377] Bluetooth: hci0: command 0x1003 tx timeout [ 1498.518606][ T5827] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1503.907634][T25583] input: syz0 as /devices/virtual/input/input115 [ 1505.410671][ T976] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1505.629334][ T976] usb 7-1: device descriptor read/64, error -71 [ 1506.610559][ T976] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1506.760721][ T976] usb 7-1: device descriptor read/64, error -71 [ 1507.126126][ T976] usb usb7-port1: attempt power cycle [ 1507.140744][T21127] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1507.310967][T21127] usb 8-1: device descriptor read/64, error -71 [ 1507.540896][ T976] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1507.644466][T21127] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1508.070077][ T976] usb 7-1: device descriptor read/8, error -71 [ 1508.140560][T21127] usb 8-1: device descriptor read/64, error -71 [ 1508.861137][T21127] usb usb8-port1: attempt power cycle [ 1509.240788][T21127] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1510.608258][T21127] usb 8-1: device descriptor read/8, error -71 [ 1510.774959][T25644] tipc: Enabling of bearer rejected, already enabled [ 1511.010510][T25644] tipc: Enabling of bearer rejected, already enabled [ 1512.840892][T25654] tipc: Enabling of bearer rejected, already enabled [ 1513.032387][T25654] tipc: Enabling of bearer rejected, already enabled [ 1513.120531][T19995] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1513.340513][T19995] usb 7-1: device descriptor read/64, error -71 [ 1513.630551][T19995] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1514.280545][T19995] usb 7-1: device descriptor read/64, error -71 [ 1514.350556][ T5892] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1514.391169][T19995] usb usb7-port1: attempt power cycle [ 1514.502257][ T5892] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.522945][ T5892] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1514.544285][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1514.555647][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.577147][T25683] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1514.587380][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1515.164100][T19995] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1515.192494][T19995] usb 7-1: device descriptor read/8, error -71 [ 1515.206628][ T5892] usb 8-1: USB disconnect, device number 98 [ 1515.730635][T19995] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1516.317751][ T5827] Bluetooth: hci4: unexpected event for opcode 0x003c [ 1516.347452][T25710] tipc: Enabling of bearer rejected, already enabled [ 1516.371315][T25710] tipc: Enabling of bearer rejected, already enabled [ 1516.499341][T19995] usb 7-1: device descriptor read/8, error -71 [ 1516.962067][T19995] usb usb7-port1: unable to enumerate USB device [ 1517.305622][ T5827] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1518.984475][ T5827] Bluetooth: hci2: unexpected event for opcode 0x003c [ 1519.228707][T25749] overlayfs: missing 'lowerdir' [ 1521.213322][ T5827] Bluetooth: hci3: unexpected event for opcode 0x003c [ 1521.918130][ T5827] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1522.500974][ T5892] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1522.922021][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 1522.941652][ T5892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1522.970414][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.006201][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.019649][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1523.058367][ T5892] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1523.069329][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.084255][ T5892] usb 4-1: config 0 descriptor?? [ 1523.387916][T25808] input: syz0 as /devices/virtual/input/input116 [ 1523.554623][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 1523.642343][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1523.705059][ T5892] usb 4-1: USB disconnect, device number 86 [ 1524.274211][T25820] input: syz0 as /devices/virtual/input/input117 [ 1526.112065][T25841] tipc: Enabling of bearer rejected, already enabled [ 1526.137195][T25841] tipc: Enabling of bearer rejected, already enabled [ 1528.182136][T25861] input: syz0 as /devices/virtual/input/input118 [ 1530.383326][T25877] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1530.448829][T25879] input: syz0 as /devices/virtual/input/input119 [ 1530.921193][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1531.544941][ T5827] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1531.610539][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1531.678660][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1531.735898][T25900] input: syz0 as /devices/virtual/input/input120 [ 1531.942096][ T43] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1531.960524][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.993619][ T43] usb 4-1: config 0 descriptor?? [ 1532.733365][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 1532.739370][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1533.174239][ T43] usb 4-1: USB disconnect, device number 87 [ 1534.700604][T22030] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1534.900509][T22030] usb 6-1: device descriptor read/64, error -71 [ 1535.660544][T22030] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1535.800526][T22030] usb 6-1: device descriptor read/64, error -71 [ 1535.913657][T22030] usb usb6-port1: attempt power cycle [ 1536.770534][T22030] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1536.817414][T22030] usb 6-1: device descriptor read/8, error -71 [ 1537.146826][ T5827] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1537.202777][T22030] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1537.601420][T25976] ubi: mtd0 is already attached to ubi31 [ 1538.220813][T25979] tipc: Enabling of bearer rejected, already enabled [ 1538.241535][T25979] tipc: Enabling of bearer rejected, already enabled [ 1538.435612][T22030] usb 6-1: device descriptor read/8, error -71 [ 1538.771947][T22030] usb usb6-port1: unable to enumerate USB device [ 1540.500990][T26005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26005 comm=syz.6.5122 [ 1542.060257][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.115109][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.129651][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.153508][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.185328][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.306979][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.308389][T26040] input: syz0 as /devices/virtual/input/input121 [ 1542.327335][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.345739][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.383230][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.423437][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.443016][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.469378][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.529266][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.639265][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.647393][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.654981][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.663424][ T43] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1542.672510][ T43] hid-generic 0002:0004:0009.0039: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1543.243797][T26048] fido_id[26048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1544.406110][T26062] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5130'. [ 1544.491394][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5130'. [ 1545.463115][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.854215][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.655832][T13377] Bluetooth: hci1: command 0x040f tx timeout [ 1546.831908][T26076] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1547.001573][T26076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1547.007559][T26076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1547.040062][T26076] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1547.056428][T26076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.077874][ T5827] ================================================================== [ 1547.085977][ T5827] BUG: KASAN: slab-use-after-free in l2cap_disconn_ind+0xbc/0xd0 [ 1547.093710][ T5827] Read of size 1 at addr ffff88807807bab0 by task kworker/u9:5/5827 [ 1547.101684][ T5827] [ 1547.104003][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:5 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 1547.104026][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1547.104040][ T5827] Workqueue: hci1 hci_conn_timeout [ 1547.104064][ T5827] Call Trace: [ 1547.104073][ T5827] [ 1547.104081][ T5827] dump_stack_lvl+0x116/0x1f0 [ 1547.104108][ T5827] print_report+0xcd/0x680 [ 1547.104132][ T5827] ? __virt_addr_valid+0x81/0x610 [ 1547.104152][ T5827] ? __phys_addr+0xe8/0x180 [ 1547.104172][ T5827] ? l2cap_disconn_ind+0xbc/0xd0 [ 1547.104196][ T5827] kasan_report+0xe0/0x110 [ 1547.104219][ T5827] ? l2cap_disconn_ind+0xbc/0xd0 [ 1547.104246][ T5827] l2cap_disconn_ind+0xbc/0xd0 [ 1547.104270][ T5827] hci_conn_timeout+0x190/0x210 [ 1547.104289][ T5827] process_one_work+0x9cc/0x1b70 [ 1547.104311][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 1547.104332][ T5827] ? assign_work+0x1a0/0x250 [ 1547.104359][ T5827] worker_thread+0x6c8/0xf10 [ 1547.104381][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 1547.104399][ T5827] kthread+0x3c2/0x780 [ 1547.104415][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.104430][ T5827] ? rcu_is_watching+0x12/0xc0 [ 1547.104452][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.104467][ T5827] ret_from_fork+0x5d4/0x6f0 [ 1547.104492][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.104508][ T5827] ret_from_fork_asm+0x1a/0x30 [ 1547.104531][ T5827] [ 1547.104538][ T5827] [ 1547.241924][ T5827] Allocated by task 26062: [ 1547.246310][ T5827] kasan_save_stack+0x33/0x60 [ 1547.250967][ T5827] kasan_save_track+0x14/0x30 [ 1547.255620][ T5827] __kasan_kmalloc+0xaa/0xb0 [ 1547.260183][ T5827] l2cap_conn_add.part.0+0x60/0xa60 [ 1547.265358][ T5827] l2cap_chan_connect+0x15e5/0x2020 [ 1547.270541][ T5827] lowpan_control_write+0x3c9/0x740 [ 1547.275734][ T5827] full_proxy_write+0x13c/0x200 [ 1547.280559][ T5827] vfs_write+0x2a0/0x1150 [ 1547.284868][ T5827] ksys_write+0x12a/0x250 [ 1547.289171][ T5827] do_syscall_64+0xcd/0x4c0 [ 1547.293651][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.299516][ T5827] [ 1547.301816][ T5827] Freed by task 26076: [ 1547.305865][ T5827] kasan_save_stack+0x33/0x60 [ 1547.310520][ T5827] kasan_save_track+0x14/0x30 [ 1547.315171][ T5827] kasan_save_free_info+0x3b/0x60 [ 1547.320168][ T5827] __kasan_slab_free+0x51/0x70 [ 1547.324908][ T5827] kfree+0x2b4/0x4d0 [ 1547.328777][ T5827] l2cap_conn_del+0x59c/0x730 [ 1547.333429][ T5827] l2cap_connect_cfm+0x9e1/0xf80 [ 1547.338342][ T5827] hci_conn_failed+0x1ba/0x330 [ 1547.343077][ T5827] hci_abort_conn_sync+0x762/0xb10 [ 1547.348174][ T5827] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 1547.354647][ T5827] hci_suspend_sync+0x770/0xab0 [ 1547.359472][ T5827] hci_suspend_dev+0x308/0x500 [ 1547.364227][ T5827] hci_suspend_notifier+0x28d/0x2f0 [ 1547.369404][ T5827] notifier_call_chain+0xb9/0x410 [ 1547.374406][ T5827] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1547.380812][ T5827] pm_notifier_call_chain_robust+0x27/0x60 [ 1547.386596][ T5827] snapshot_open+0x189/0x2b0 [ 1547.391164][ T5827] misc_open+0x35a/0x420 [ 1547.395380][ T5827] chrdev_open+0x234/0x6a0 [ 1547.399773][ T5827] do_dentry_open+0x744/0x1c10 [ 1547.404524][ T5827] vfs_open+0x82/0x3f0 [ 1547.408585][ T5827] path_openat+0x1de4/0x2cb0 [ 1547.413150][ T5827] do_filp_open+0x20b/0x470 [ 1547.417629][ T5827] do_sys_openat2+0x11b/0x1d0 [ 1547.422277][ T5827] __x64_sys_openat+0x174/0x210 [ 1547.427099][ T5827] do_syscall_64+0xcd/0x4c0 [ 1547.431582][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.437446][ T5827] [ 1547.439742][ T5827] The buggy address belongs to the object at ffff88807807b800 [ 1547.439742][ T5827] which belongs to the cache kmalloc-1k of size 1024 [ 1547.453767][ T5827] The buggy address is located 688 bytes inside of [ 1547.453767][ T5827] freed 1024-byte region [ffff88807807b800, ffff88807807bc00) [ 1547.467618][ T5827] [ 1547.469919][ T5827] The buggy address belongs to the physical page: [ 1547.476302][ T5827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78078 [ 1547.485032][ T5827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1547.493499][ T5827] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1547.501449][ T5827] page_type: f5(slab) [ 1547.505402][ T5827] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 1547.513959][ T5827] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1547.522515][ T5827] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 1547.531158][ T5827] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1547.539819][ T5827] head: 00fff00000000003 ffffea0001e01e01 00000000ffffffff 00000000ffffffff [ 1547.548462][ T5827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1547.557102][ T5827] page dumped because: kasan: bad access detected [ 1547.563484][ T5827] page_owner tracks the page as allocated [ 1547.569169][ T5827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5718, tgid 5718 (dhcpcd-run-hook), ts 50410375153, free_ts 50186621838 [ 1547.590760][ T5827] post_alloc_hook+0x1c0/0x230 [ 1547.595501][ T5827] get_page_from_freelist+0x1321/0x3890 [ 1547.601020][ T5827] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1547.606887][ T5827] alloc_pages_mpol+0x1fb/0x550 [ 1547.611717][ T5827] new_slab+0x23b/0x330 [ 1547.615845][ T5827] ___slab_alloc+0xd9c/0x1940 [ 1547.620500][ T5827] __slab_alloc.constprop.0+0x56/0xb0 [ 1547.625872][ T5827] __kmalloc_noprof+0x2f2/0x510 [ 1547.630710][ T5827] load_elf_phdrs+0x102/0x210 [ 1547.635361][ T5827] load_elf_binary+0x1fa/0x4f00 [ 1547.640187][ T5827] bprm_execve+0x8c0/0x1650 [ 1547.644663][ T5827] do_execveat_common.isra.0+0x4a5/0x610 [ 1547.650271][ T5827] __x64_sys_execve+0x8e/0xb0 [ 1547.654932][ T5827] do_syscall_64+0xcd/0x4c0 [ 1547.659413][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.665279][ T5827] page last free pid 5704 tgid 5704 stack trace: [ 1547.671579][ T5827] __free_frozen_pages+0x7fe/0x1180 [ 1547.676766][ T5827] __put_partials+0x16d/0x1c0 [ 1547.681419][ T5827] qlist_free_all+0x4d/0x120 [ 1547.685983][ T5827] kasan_quarantine_reduce+0x195/0x1e0 [ 1547.691415][ T5827] __kasan_slab_alloc+0x69/0x90 [ 1547.696242][ T5827] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1547.701700][ T5827] getname_flags.part.0+0x4c/0x550 [ 1547.706796][ T5827] getname_flags+0x93/0xf0 [ 1547.711197][ T5827] do_sys_openat2+0xb8/0x1d0 [ 1547.715776][ T5827] __x64_sys_openat+0x174/0x210 [ 1547.720614][ T5827] do_syscall_64+0xcd/0x4c0 [ 1547.725103][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.730976][ T5827] [ 1547.733281][ T5827] Memory state around the buggy address: [ 1547.738885][ T5827] ffff88807807b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1547.746929][ T5827] ffff88807807ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1547.754964][ T5827] >ffff88807807ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1547.762994][ T5827] ^ [ 1547.768599][ T5827] ffff88807807bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1547.776637][ T5827] ffff88807807bb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1547.784671][ T5827] ================================================================== [ 1547.792758][ C1] vkms_vblank_simulate: vblank timer overrun [ 1547.811290][T13377] Bluetooth: hci4: command 0x040f tx timeout [ 1547.817736][ T5827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1547.824912][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: kworker/u9:5 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 1547.837032][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1547.847071][ T5827] Workqueue: hci1 hci_conn_timeout [ 1547.852167][ T5827] Call Trace: [ 1547.855424][ T5827] [ 1547.858333][ T5827] dump_stack_lvl+0x3d/0x1f0 [ 1547.862908][ T5827] panic+0x71c/0x800 [ 1547.866784][ T5827] ? __pfx_panic+0x10/0x10 [ 1547.871186][ T5827] ? irqentry_exit+0x3b/0x90 [ 1547.875768][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 1547.880958][ T5827] ? preempt_schedule_thunk+0x16/0x30 [ 1547.886319][ T5827] ? l2cap_disconn_ind+0xbc/0xd0 [ 1547.891250][ T5827] ? preempt_schedule_common+0x44/0xc0 [ 1547.896704][ T5827] ? check_panic_on_warn+0x1f/0xb0 [ 1547.901812][ T5827] ? l2cap_disconn_ind+0xbc/0xd0 [ 1547.906749][ T5827] check_panic_on_warn+0xab/0xb0 [ 1547.911669][ T5827] end_report+0x107/0x170 [ 1547.915982][ T5827] kasan_report+0xee/0x110 [ 1547.920379][ T5827] ? l2cap_disconn_ind+0xbc/0xd0 [ 1547.925328][ T5827] l2cap_disconn_ind+0xbc/0xd0 [ 1547.930077][ T5827] hci_conn_timeout+0x190/0x210 [ 1547.934907][ T5827] process_one_work+0x9cc/0x1b70 [ 1547.939825][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 1547.945202][ T5827] ? assign_work+0x1a0/0x250 [ 1547.949815][ T5827] worker_thread+0x6c8/0xf10 [ 1547.954412][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 1547.959508][ T5827] kthread+0x3c2/0x780 [ 1547.963566][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.968149][ T5827] ? rcu_is_watching+0x12/0xc0 [ 1547.972892][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.977458][ T5827] ret_from_fork+0x5d4/0x6f0 [ 1547.982048][ T5827] ? __pfx_kthread+0x10/0x10 [ 1547.986623][ T5827] ret_from_fork_asm+0x1a/0x30 [ 1547.991411][ T5827] [ 1547.994633][ T5827] Kernel Offset: disabled [ 1547.998935][ T5827] Rebooting in 86400 seconds..