last executing test programs: 30m51.257963938s ago: executing program 3 (id=1005): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0x80003352, 0x10, 0x0, 0x801}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x160, 0x185100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x57, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) 30m46.607372274s ago: executing program 3 (id=1015): socket(0xa, 0x800, 0xfffffffb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)=ANY=[]) r4 = memfd_secret(0x0) ftruncate(r4, 0x51a9497) syz_open_procfs(0xffffffffffffffff, 0x0) 30m44.721124647s ago: executing program 3 (id=1018): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4bfb, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@ipmr_newroute={0x64, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0x80, 0x0, 0x0, 0x2, 0x14923c2e70ec21d0, 0xe0daf53202e4a55e, 0xc8, 0x3, 0x2200}, [@RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_UID={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_NH_ID={0x8, 0x1e, 0x4a}, @RTA_TABLE={0x8, 0xf, 0x6}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_SRC={0x8, 0x2, @broadcast}, @RTA_FLOW={0x8, 0xb, 0x8791}]}, 0x64}, 0x1, 0x0, 0x0, 0x28008000}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xb) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) 30m41.185016653s ago: executing program 3 (id=1027): signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ff]}, 0x8, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0x4c) r2 = creat(0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x20, 0x80, 0x0, 0xedad, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) socket$unix(0x1, 0x5, 0x0) openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x1, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0x18, 0x0, 0x6, 0xd}]}) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x67, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000240)=0xc) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r7, &(0x7f0000000600)) 30m39.032737378s ago: executing program 3 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x1, 0x7, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x101, 0x4}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r6, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 30m31.615498404s ago: executing program 3 (id=1045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x19}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x401, 0x6e, 0x0, 0x1, 0xf5a, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 30m16.389040607s ago: executing program 32 (id=1045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x19}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x401, 0x6e, 0x0, 0x1, 0xf5a, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 26m21.589306064s ago: executing program 5 (id=1560): socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000300)={{0x4009, 0x4, 0x80, 0x7, 'syz1\x00', 0x365e250b}, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0xc2d0, 'syz0\x00', 0x0}) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x13) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x86) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfff, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x3, &(0x7f0000000080)=0x77) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000003d00090000000000000000070100000004000000080001800400108008000200", @ANYRES32, @ANYBLOB="5be614fbe3a5dfd873e8e20ba841973caa45087fef69e7718ed0729ab8d30bfba8669e484deef53c326e25ea9d0c5970b981d65cf8bb21cbca38fffab5386c96eeaa572280be500001ca3d491a0f7bc3"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffe, @local}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 26m17.37995764s ago: executing program 5 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x22, 0xef, 0x4, 0xc, 0x10000, 0xffffffffffffffff, 0xd, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 26m16.915710115s ago: executing program 5 (id=1568): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x30}, 0x0) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc4678648b84f8a1e33de36bfe1c3e68f0426d10a1f863ced625e85d7f9f4af20682"}}, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) acct(0x0) 26m13.434847034s ago: executing program 5 (id=1575): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1fce, &(0x7f0000000240)={0x0, 0x2326, 0x2, 0x2, 0x14e, 0x0, r2}) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 26m12.131291159s ago: executing program 5 (id=1576): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020}, 0x2020) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c, 0x4}, {}, {}, {}, {0xd360}, {0x0, 0x2}, {0x0, 0x80000}], 0x10}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r5) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0xffff8c39, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f75ebf30fc510000cb4f1891e2", 0x20303159}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) 26m10.99987411s ago: executing program 5 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 26m10.231938431s ago: executing program 33 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 9.465832915s ago: executing program 0 (id=5812): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000001880)={0x40, 0x13, 0x6, "9ac50500f8ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000016c0)={0x84, &(0x7f00000012c0)={0x40, 0x7, 0x15, "eb00844ec32833d711f7b14d5f314e0ecc3c56ec0a"}, 0x0, 0x0, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, 0x0, &(0x7f0000001480)={0x40, 0xb, 0x2, "2ab5"}, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001580)={0x40, 0x19, 0x2, "faca"}, 0x0, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x6}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd37) 8.31726972s ago: executing program 2 (id=5819): dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6.963678535s ago: executing program 0 (id=5826): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000380)="0000000000000000373ed8e8b662347753be5cdd4dac8a3b5d4871749c95ab7e5b4708bd623eec4abbbb076f1d", &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r3, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES64=r4], 0x0) 6.727642632s ago: executing program 1 (id=5830): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0xb, 0xfff1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x2c0488c4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r4 = gettid() sched_setscheduler(r4, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) splice(r7, 0x0, r0, &(0x7f00000002c0)=0x6, 0x5, 0xa) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08005ee0f733af29b368fd0290780000001ce0f302000e00907800030006000000020000000d00000001"], 0x0) 6.636302815s ago: executing program 4 (id=5832): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cf6ffffff070905810300020000000904010000020d00000904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x7ff, 0x8010, 0x10, 0x10, 0xb6, 0xc, 0x10, 0x10, 0xc, 0x6, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.288363436s ago: executing program 0 (id=5833): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000380)={0x0, 0x14, 0x3, "416ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "bcf8"}, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, 0x0}) 5.22395035s ago: executing program 1 (id=5834): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4374, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 4.629078855s ago: executing program 6 (id=5835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.443963908s ago: executing program 4 (id=5836): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r2, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x2000, 0x0, {0x0, 0x2710}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r5 = epoll_create1(0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 3.247543438s ago: executing program 2 (id=5837): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.995534107s ago: executing program 2 (id=5838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x7, 0x0, 0x80, {0x2000, 0x4000}}, "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", "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"}) 2.863854248s ago: executing program 6 (id=5839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 2.407994429s ago: executing program 2 (id=5840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.199817267s ago: executing program 6 (id=5841): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x10001, 0x100, {{0xb, 0x4, 0x1, 0x3c, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x65, [@loopback, @private=0xa010104]}, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x4, [{@private=0xa010101, 0xff}]}]}}}}}) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @local, 0x0}, &(0x7f00000003c0)=0xc) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x20}}], 0x2, 0x4) 2.173988896s ago: executing program 2 (id=5842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.103789124s ago: executing program 0 (id=5843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000380)="0000000000000000373ed8e8b662347753be5cdd4dac8a3b5d4871749c95ab7e5b4708bd623eec4abbbb076f1d", &(0x7f0000000300), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r3, 0xb) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES64=r4], 0x0) 2.000976322s ago: executing program 6 (id=5844): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0xb, 0xfff1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x2c0488c4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r4 = gettid() sched_setscheduler(r4, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) splice(r7, 0x0, r0, &(0x7f00000002c0)=0x6, 0x5, 0xa) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08005ee0f733af29b368fd0290780000001ce0f302000e00907800030006000000020000000d00000001"], 0x0) 1.962780417s ago: executing program 4 (id=5845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) 1.910372298s ago: executing program 2 (id=5846): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0xffffffffffffff17, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x400) ioctl$HIDIOCGRDESC(r1, 0x90044802, 0x0) 863.795126ms ago: executing program 1 (id=5847): r0 = open(&(0x7f0000000300)='./file1\x00', 0x141042, 0xa3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, &(0x7f0000001cc0)=""/194, 0xc2, 0x0) 787.599417ms ago: executing program 4 (id=5848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 749.818542ms ago: executing program 1 (id=5849): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 653.478891ms ago: executing program 0 (id=5850): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) accept4(r0, 0x0, 0x0, 0x80000) 616.327309ms ago: executing program 1 (id=5851): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}]}, 0x38}}, 0x0) 615.772055ms ago: executing program 4 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001800038014000080080003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 601.104679ms ago: executing program 6 (id=5853): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="a000398d3bec2068", 0xfedb, 0x90, &(0x7f0000000000)={0xa, 0x4e20, 0xffff, @loopback, 0x8001}, 0x1c) 461.824386ms ago: executing program 6 (id=5854): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x8054601ab100133b, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff}) 363.928861ms ago: executing program 0 (id=5855): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000000c0)) 211.830511ms ago: executing program 4 (id=5856): r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x5, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c007fc6adba35326a89fd0712eea8e98875f31b824cb979da00001d27701c94bb1648d50d641e19b3d1e84c65de0fbe604975a82e099e495492dbc5d866434d083db8e4c7302d692c18d9167a6d76224f9b996ca4c622bbe97c378ff96f2966f8ba180b72fe3146b99471579772075548df8f2f3da89f4651ee6658a85606eb7b45f9746af02f202732cd936192610318099e1eba2ca64122aebaf31c08487a24fee253f29a4a11107c08fb6b2a1cd53690faabd8935b96a27083159e4d3351ec811259e8d332c169d15216517584251edf360ac7c4fb7f7abaa5e91a00000000000000", @ANYRES16=r9, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=0x0], 0x1c}}, 0x0) 211.717676ms ago: executing program 1 (id=5857): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 34 (id=5857): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2231.760304][T25454] usb 2-1: USB disconnect, device number 49 [ 2231.901848][T27405] libceph: connect (1)[c::]:6789 error -22 [ 2231.919247][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2232.007536][T29276] ceph: No mds server is up or the cluster is laggy [ 2232.089925][T17439] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 2232.272297][T25402] libceph: connect (1)[c::]:6789 error -22 [ 2232.371315][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2232.410442][T17439] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2232.437196][T17439] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2232.478462][T17439] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2232.544213][T17439] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2232.586281][T17439] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2232.623359][T17439] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2232.639867][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'. [ 2232.718149][T17439] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2232.733359][T17439] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2232.762473][T17439] usb 1-1: Product: syz [ 2232.777618][T17439] usb 1-1: Manufacturer: syz [ 2232.788068][T17439] usb 1-1: SerialNumber: syz [ 2232.825897][T17439] usb 1-1: config 0 descriptor?? [ 2232.850444][T29270] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2232.858996][T17439] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2232.901016][T17439] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2233.049764][T27405] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2233.093016][T17439] usb 1-1: USB disconnect, device number 36 [ 2233.110472][T17439] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2233.220641][T27405] usb 3-1: Using ep0 maxpacket: 8 [ 2233.227899][T27405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.239505][T27405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2233.259921][ T5869] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2233.289403][T27405] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 2233.374429][T27405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.421864][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 2233.481661][T27405] usb 3-1: config 0 descriptor?? [ 2233.496819][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.595874][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2233.699307][ T5869] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2233.859526][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.109032][ T5869] usb 2-1: config 0 descriptor?? [ 2234.305884][T27405] uclogic 0003:5543:0003.0009: item fetching failed at offset 0/3 [ 2234.328004][T27405] uclogic 0003:5543:0003.0009: parse failed [ 2234.341896][T27405] uclogic 0003:5543:0003.0009: probe with driver uclogic failed with error -22 [ 2234.766499][ T5869] hid-picolcd 0003:04D8:F002.000A: report_id 2869054368 is invalid [ 2234.851934][ T5869] hid-picolcd 0003:04D8:F002.000A: item 0 4 1 8 parsing failed [ 2234.877835][T25454] usb 3-1: USB disconnect, device number 48 [ 2234.890433][ T5869] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 2234.898245][ T5869] hid-picolcd 0003:04D8:F002.000A: probe with driver hid-picolcd failed with error -22 [ 2235.087523][ T5869] usb 2-1: USB disconnect, device number 50 [ 2236.273613][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4864'. [ 2236.356930][ T30] audit: type=1400 audit(2000000568.032:4092): avc: denied { write } for pid=29330 comm="syz.4.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2236.464806][T29336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4866'. [ 2236.509021][T29339] netlink: 'syz.2.4868': attribute type 4 has an invalid length. [ 2236.517838][T29339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4868'. [ 2236.817644][T29343] netlink: 'syz.6.4870': attribute type 3 has an invalid length. [ 2237.808229][T29355] ceph: No mds server is up or the cluster is laggy [ 2238.014403][T25454] libceph: connect (1)[c::]:6789 error -13 [ 2238.042182][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2238.073461][T29364] IPVS: stopping backup sync thread 29365 ... [ 2238.092287][T29365] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 2238.808111][ T30] audit: type=1400 audit(2000000570.482:4093): avc: denied { setopt } for pid=29386 comm="syz.4.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2239.350192][ T5869] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2239.634765][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2239.694664][ T5869] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2239.705305][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.772372][ T5869] usb 2-1: config 0 descriptor?? [ 2240.922009][ T30] audit: type=1400 audit(2000000572.602:4094): avc: denied { bind } for pid=29425 comm="syz.2.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2240.971740][ T30] audit: type=1400 audit(2000000572.602:4095): avc: denied { connect } for pid=29425 comm="syz.2.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2241.056615][T29430] IPVS: ip_vs_add_dest(): server weight less than zero [ 2241.058278][ T5869] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v88.07 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 2241.096851][ T5869] sony 0003:054C:0268.000B: failed to claim input [ 2241.190404][T29435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29435 comm=syz.0.4897 [ 2241.213090][T29435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=29435 comm=syz.0.4897 [ 2241.246193][T25454] usb 2-1: USB disconnect, device number 51 [ 2241.353967][T29444] netlink: 'syz.2.4901': attribute type 4 has an invalid length. [ 2241.370645][T29444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4901'. [ 2241.434975][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4899'. [ 2242.153039][ T30] audit: type=1400 audit(2000000573.172:4096): avc: denied { connect } for pid=29449 comm="syz.6.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2242.561275][ T30] audit: type=1400 audit(2000000574.242:4097): avc: denied { write } for pid=29463 comm="syz.4.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2242.696643][T29469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4911'. [ 2242.713459][T29472] tipc: Enabling of bearer rejected, media not registered [ 2242.749699][ T5869] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2242.913685][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 2242.935930][T29482] comedi: valid board names for 8255 driver are: [ 2242.936152][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.953850][T29482] 8255 [ 2242.958504][T29482] comedi: valid board names for vmk80xx driver are: [ 2242.965306][ T30] audit: type=1400 audit(2000000574.622:4098): avc: denied { setopt } for pid=29483 comm="syz.6.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2242.987767][T29482] vmk80xx [ 2242.992738][ T5869] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2243.019432][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.028786][T29482] comedi: valid board names for usbduxsigma driver are: [ 2243.036768][ T5869] usb 2-1: Product: syz [ 2243.041174][ T5869] usb 2-1: Manufacturer: syz [ 2243.045850][ T5869] usb 2-1: SerialNumber: syz [ 2243.051046][T29482] usbduxsigma [ 2243.054471][T29482] comedi: valid board names for usbduxfast driver are: [ 2243.072134][ T5869] usb 2-1: config 0 descriptor?? [ 2243.082600][T29482] usbduxfast [ 2243.089462][ T5869] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2243.096923][T29482] comedi: valid board names for usbdux driver are: [ 2243.108806][T29482] usbdux [ 2243.112356][T29482] comedi: valid board names for ni6501 driver are: [ 2243.119044][T29482] ni6501 [ 2243.122650][T29482] comedi: valid board names for dt9812 driver are: [ 2243.129359][T29482] dt9812 [ 2243.133390][T29482] comedi: valid board names for ni_labpc_cs driver are: [ 2243.145044][T29482] ni_labpc_cs [ 2243.148617][T29482] comedi: valid board names for ni_daq_700 driver are: [ 2243.173949][T29482] ni_daq_700 [ 2243.180102][T29482] comedi: valid board names for labpc_pci driver are: [ 2243.193000][T29482] labpc_pci [ 2243.196316][T29482] comedi: valid board names for adl_pci9118 driver are: [ 2243.204742][T29482] pci9118dg [ 2243.208037][T29482] pci9118hg [ 2243.211818][T29482] pci9118hr [ 2243.215461][T29482] comedi: valid board names for 8255_pci driver are: [ 2243.230181][T29482] 8255_pci [ 2243.233403][T29482] comedi: valid board names for s526 driver are: [ 2243.259886][T29482] s526 [ 2243.262793][T29482] comedi: valid board names for multiq3 driver are: [ 2243.269430][T29482] multiq3 [ 2243.279764][T29482] comedi: valid board names for pcmuio driver are: [ 2243.314375][T29482] pcmuio48 [ 2243.318237][T29482] pcmuio96 [ 2243.410022][T29498] overlayfs: failed to resolve './file0': -2 [ 2243.429816][T29497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4906'. [ 2244.680465][T29482] comedi: valid board names for pcmmio driver are: [ 2244.691977][ T5869] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2244.762398][ T5869] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2244.827392][T29482] pcmmio [ 2244.872190][T29482] comedi: valid board names for pcmda12 driver are: [ 2244.936637][T29482] pcmda12 [ 2245.288694][T29482] comedi: valid board names for pcmad driver are: [ 2245.355949][T29482] pcmad12 [ 2245.399858][T29482] pcmad16 [ 2245.433952][T29482] comedi: valid board names for ni_labpc driver are: [ 2245.500036][T29482] lab-pc-1200 [ 2245.525524][T29482] lab-pc-1200ai [ 2245.569194][T29482] lab-pc+ [ 2245.610335][T29482] comedi: valid board names for atmio16 driver are: [ 2245.638699][T29482] atmio16 [ 2245.670618][T29482] atmio16d [ 2245.718948][T29482] comedi: valid board names for ni_at_ao driver are: [ 2245.776072][T29482] at-ao-6 [ 2245.779153][T29482] at-ao-10 [ 2245.793161][T29482] comedi: valid board names for ni_at_a2150 driver are: [ 2245.810094][T29482] ni_at_a2150 [ 2245.813626][T29482] comedi: valid board names for adq12b driver are: [ 2245.822804][T29482] adq12b [ 2245.825876][T29482] comedi: valid board names for mpc624 driver are: [ 2245.837675][ T5869] usb 2-1: USB disconnect, device number 52 [ 2245.853278][T29482] mpc624 [ 2245.856354][T29482] comedi: valid board names for c6xdigio driver are: [ 2245.866500][T29482] c6xdigio [ 2245.885403][T29482] comedi: valid board names for aio_iiro_16 driver are: [ 2245.900458][T29482] aio_iiro_16 [ 2245.903920][T29482] comedi: valid board names for aio_aio12_8 driver are: [ 2245.920586][T29482] aio_aio12_8 [ 2245.930667][T29482] aio_ai12_8 [ 2245.934020][T29482] aio_ao12_4 [ 2245.936482][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4924'. [ 2245.947197][T29482] comedi: valid board names for fl512 driver are: [ 2245.959804][T29482] fl512 [ 2245.962731][T29482] comedi: valid board names for dmm32at driver are: [ 2245.985969][T29482] dmm32at [ 2245.998749][T29482] comedi: valid board names for dt282x driver are: [ 2246.039529][T29482] dt2821 [ 2246.060764][T29482] dt2821-f [ 2246.064322][T29482] dt2821-g [ 2246.067677][T29482] dt2823 [ 2246.098782][T29482] dt2824-pgh [ 2246.134061][T29482] dt2824-pgl [ 2246.176584][T29482] dt2825 [ 2246.202521][T29482] dt2827 [ 2246.205710][T29482] dt2828 [ 2246.231411][T29482] dt2829 [ 2246.256978][T29482] dt21-ez [ 2246.271409][T29482] dt23-ez [ 2246.275032][T29482] dt24-ez [ 2246.278170][T29482] dt24-ez-pgl [ 2246.287423][T29482] comedi: valid board names for dt2817 driver are: [ 2246.298173][T29482] dt2817 [ 2246.324757][T29482] comedi: valid board names for dt2815 driver are: [ 2246.347495][T29482] dt2815 [ 2246.360105][T29482] comedi: valid board names for dt2814 driver are: [ 2246.490105][T29482] dt2814 [ 2246.493214][T29482] comedi: valid board names for dt2811 driver are: [ 2246.513362][T29482] dt2811-pgh [ 2246.516818][T29482] dt2811-pgl [ 2246.524117][T29482] comedi: valid board names for dt2801 driver are: [ 2246.551311][T29482] dt2801 [ 2246.560209][T29482] comedi: valid board names for das6402 driver are: [ 2246.567403][T29482] das6402-12 [ 2246.584330][T29482] das6402-16 [ 2246.604373][T29482] comedi: valid board names for das1800 driver are: [ 2246.620030][T29482] das-1701st [ 2246.623378][T29482] das-1701st-da [ 2246.626962][T29482] das-1702st [ 2246.630899][T29482] das-1702st-da [ 2246.634498][T29482] das-1702hr [ 2246.637828][T29482] das-1702hr-da [ 2246.641933][T29482] das-1701ao [ 2246.645259][T29482] das-1702ao [ 2246.649006][T29482] das-1801st [ 2246.653179][T29482] das-1801st-da [ 2246.657207][T29482] das-1802st [ 2246.664243][T29482] das-1802st-da [ 2246.667910][T29482] das-1802hr [ 2246.674661][T29482] das-1802hr-da [ 2246.678346][T29482] das-1801hc [ 2246.710960][T29482] das-1802hc [ 2246.711893][T29519] siw: device registration error -23 [ 2246.724403][T29482] das-1801ao [ 2246.736333][T29482] das-1802ao [ 2246.747648][T29482] comedi: valid board names for das800 driver are: [ 2246.768112][T29482] das-800 [ 2246.783860][T29482] cio-das800 [ 2246.798782][T29482] das-801 [ 2246.814827][T29482] cio-das801 [ 2246.835719][T29482] das-802 [ 2246.861443][T29482] cio-das802 [ 2246.911296][T29482] cio-das802/16 [ 2246.915027][T29482] comedi: valid board names for isa-das08 driver are: [ 2247.040338][T29482] isa-das08 [ 2247.108099][T29482] das08-pgm [ 2247.114412][T29482] das08-pgh [ 2247.119231][T29482] das08-pgl [ 2247.127618][T29482] das08-aoh [ 2247.138742][T29482] das08-aol [ 2247.144141][T29482] das08-aom [ 2247.152268][T29482] das08/jr-ao [ 2247.210521][T29482] das08jr-16-ao [ 2247.216040][T29482] pc104-das08 [ 2247.220927][T29482] das08jr/16 [ 2247.323541][T29482] comedi: valid board names for das16m1 driver are: [ 2247.337567][T29482] das16m1 [ 2247.344117][T29482] comedi: valid board names for dac02 driver are: [ 2247.482741][T29482] dac02 [ 2247.490479][T29482] comedi: valid board names for rti802 driver are: [ 2247.557632][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2247.577985][T29482] rti802 [ 2247.584527][T29482] comedi: valid board names for rti800 driver are: [ 2247.588326][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2247.894517][T29482] rti800 [ 2247.897484][T29482] rti815 [ 2247.909869][T29482] comedi: valid board names for pcm3724 driver are: [ 2247.916501][T29482] pcm3724 [ 2247.919520][T29482] comedi: valid board names for pcl818 driver are: [ 2248.032394][T29482] pcl818l [ 2248.035451][T29482] pcl818h [ 2248.038497][T29482] pcl818hd [ 2248.041735][T29482] pcl818hg [ 2248.042180][T29521] ceph: No mds server is up or the cluster is laggy [ 2248.049745][T29482] pcl818 [ 2248.054451][T29482] pcl718 [ 2248.057469][T29482] pcm3718 [ 2248.075740][T29482] comedi: valid board names for pcl816 driver are: [ 2248.088991][T29482] pcl816 [ 2248.095614][T29482] pcl814b [ 2248.106065][T29482] comedi: valid board names for pcl812 driver are: [ 2248.130135][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2248.139491][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2248.181784][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 2248.202906][T29482] pcl812 [ 2248.205872][T29482] pcl812pg [ 2248.208984][T29482] acl8112pg [ 2248.234159][T29482] acl8112dg [ 2248.237772][T29482] acl8112hg [ 2248.261763][T29482] a821pgl [ 2248.302993][T29482] a821pglnda [ 2248.353539][T29482] a821pgh [ 2248.360576][T29482] a822pgl [ 2248.369378][T29482] a822pgh [ 2248.372856][T29482] a823pgl [ 2248.375927][T29482] a823pgh [ 2248.378968][T29482] pcl813 [ 2248.394550][T29482] pcl813b [ 2248.409311][T29482] acl8113 [ 2248.426977][T29482] iso813 [ 2248.434861][T29482] acl8216 [ 2248.457363][T29482] a826pg [ 2248.463090][T29482] comedi: valid board names for pcl730 driver are: [ 2248.489695][T29482] pcl730 [ 2248.501050][T29482] iso730 [ 2248.535172][T29482] acl7130 [ 2248.543055][T29482] pcm3730 [ 2248.549963][T29482] pcl725 [ 2248.561773][T29482] p8r8dio [ 2248.568281][T29482] acl7225b [ 2248.578572][T29482] p16r16dio [ 2248.585980][T29552] binder: 29551:29552 ioctl c018620c 200000000100 returned -22 [ 2248.595329][T29482] pcl733 [ 2248.609715][T29482] pcl734 [ 2248.612750][T29482] opmm-1616-xt [ 2248.625599][T29482] pearl-mm-p [ 2248.644094][T29482] ir104-pbf [ 2248.665883][T29482] comedi: valid board names for pcl726 driver are: [ 2248.688700][T29482] pcl726 [ 2248.879115][T29482] pcl727 [ 2248.893275][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4940'. [ 2248.933182][T29482] pcl728 [ 2248.953365][T29482] acl6126 [ 2249.020325][T29482] acl6128 [ 2249.349657][T29482] comedi: valid board names for pcl724 driver are: [ 2249.357877][T29482] pcl724 [ 2249.361068][T29482] pcl722 [ 2249.364008][T29482] pcl731 [ 2249.382433][T29482] acl7122 [ 2249.385492][T29482] acl7124 [ 2249.388516][T29482] pet48dio [ 2249.569657][T29482] pcmio48 [ 2249.572716][T29482] onyx-mm-dio [ 2249.576083][T29482] comedi: valid board names for pcl711 driver are: [ 2249.601437][T29482] pcl711 [ 2249.621058][T29482] pcl711b [ 2249.638848][T29482] acl8112hg [ 2249.644439][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4942'. [ 2249.663070][T29482] acl8112dg [ 2249.672343][T29482] comedi: valid board names for amplc_pc263 driver are: [ 2249.749666][T29572] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4942'. [ 2249.758799][T29482] pc263 [ 2249.769733][T29482] comedi: valid board names for amplc_pc236 driver are: [ 2249.776769][T29482] pc36at [ 2249.788510][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4942'. [ 2249.800471][T29482] comedi: valid board names for amplc_dio200 driver are: [ 2249.807685][T29482] pc212e [ 2249.818911][T29482] pc214e [ 2249.827929][T29482] pc215e [ 2249.832670][T29482] pc218e [ 2249.836104][T29572] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4942'. [ 2249.854201][T29482] pc272e [ 2249.868888][T29482] comedi: valid board names for comedi_parport driver are: [ 2249.876718][T29482] comedi_parport [ 2249.888121][T29576] netlink: 'syz.6.4943': attribute type 4 has an invalid length. [ 2249.909962][T29576] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4943'. [ 2250.077815][T29482] comedi: valid board names for comedi_test driver are: [ 2250.113729][T29482] comedi_test [ 2250.293087][T29482] comedi: valid board names for comedi_bond driver are: [ 2250.636018][T29482] comedi_bond [ 2250.870173][T29596] netlink: 'syz.1.4947': attribute type 4 has an invalid length. [ 2253.166806][ T30] audit: type=1400 audit(2000000584.842:4099): avc: denied { accept } for pid=29619 comm="syz.6.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2253.492798][T29632] netlink: 'syz.6.4959': attribute type 4 has an invalid length. [ 2253.501938][T29632] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4959'. [ 2253.523191][ T5869] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2253.922380][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 2253.938567][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.260988][ T5869] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2254.299734][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.329705][ T5869] usb 3-1: Product: syz [ 2254.336971][ T5869] usb 3-1: Manufacturer: syz [ 2254.357240][ T5869] usb 3-1: SerialNumber: syz [ 2254.382682][ T5869] usb 3-1: config 0 descriptor?? [ 2254.406376][ T5869] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2254.421499][ T30] audit: type=1400 audit(2000000586.092:4100): avc: denied { connect } for pid=29646 comm="syz.0.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2255.370651][ T5869] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2255.377684][ T5869] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2255.438561][T29626] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4957'. [ 2255.769827][T29672] tipc: Started in network mode [ 2255.774710][T29672] tipc: Node identity , cluster identity 4711 [ 2255.802143][T29672] tipc: Failed to obtain node identity [ 2255.807678][T29672] tipc: Enabling of bearer rejected, failed to enable media [ 2255.854319][T25454] usb 3-1: USB disconnect, device number 49 [ 2256.010763][ T5869] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2256.089252][ T30] audit: type=1400 audit(2000000587.762:4101): avc: denied { shutdown } for pid=29686 comm="syz.6.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2256.169778][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 2256.254631][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.268963][ T5869] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2256.278667][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.287130][ T5869] usb 1-1: Product: syz [ 2256.291885][ T5869] usb 1-1: Manufacturer: syz [ 2256.296621][ T5869] usb 1-1: SerialNumber: syz [ 2256.305438][ T5869] usb 1-1: config 0 descriptor?? [ 2256.325072][ T5869] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2256.872202][T29698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4978'. [ 2257.256043][ T5869] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2258.281839][ T5869] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2260.184664][T29714] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.4983'. [ 2260.195702][T29711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4981'. [ 2260.353289][ T5869] usb 1-1: USB disconnect, device number 37 [ 2260.464145][T29722] netlink: 'syz.0.4986': attribute type 4 has an invalid length. [ 2260.480930][T29722] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4986'. [ 2261.129950][T29735] 9pnet_fd: Insufficient options for proto=fd [ 2261.142386][T29735] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2262.946409][T29754] netlink: 'syz.2.4993': attribute type 4 has an invalid length. [ 2263.568223][T27405] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2263.782127][T27405] usb 1-1: device descriptor read/64, error -71 [ 2264.089880][ T5869] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2264.184441][T27405] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2264.353969][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5003'. [ 2264.374234][T27405] usb 1-1: device descriptor read/64, error -71 [ 2264.382397][ T5869] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.399638][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2264.407235][ T5869] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2264.418230][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.463858][ T5869] usb 3-1: config 0 descriptor?? [ 2264.500107][T27405] usb usb1-port1: attempt power cycle [ 2264.859729][T27405] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2264.880327][T27405] usb 1-1: device descriptor read/8, error -71 [ 2265.136677][T27405] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2265.315810][ T5869] nintendo 0003:057E:2009.000C: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 2265.329644][T27405] usb 1-1: device descriptor read/8, error -71 [ 2265.401113][ T5869] nintendo 0003:057E:2009.000C: Failed to get joycon info; ret=-38 [ 2265.412065][ T5869] nintendo 0003:057E:2009.000C: Failed to retrieve controller info; ret=-38 [ 2265.439933][T27405] usb usb1-port1: unable to enumerate USB device [ 2265.448604][ T5869] nintendo 0003:057E:2009.000C: Failed to initialize controller; ret=-38 [ 2265.478608][T29801] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2265.504919][ T5869] nintendo 0003:057E:2009.000C: probe - fail = -38 [ 2265.539773][ T5869] nintendo 0003:057E:2009.000C: probe with driver nintendo failed with error -38 [ 2265.645154][ T5869] usb 3-1: USB disconnect, device number 50 [ 2265.953787][T29815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5006'. [ 2266.456312][ T30] audit: type=1400 audit(2000000598.132:4102): avc: denied { append } for pid=29819 comm="syz.0.5009" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2266.606630][T29826] netlink: 'syz.2.5008': attribute type 4 has an invalid length. [ 2267.259945][T25454] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2267.421758][T25454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2267.442304][T25454] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 2267.472771][T25454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.492196][T25454] usb 2-1: config 0 descriptor?? [ 2267.500273][T29835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2267.540214][T20605] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2267.738212][T29856] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2268.111617][T25454] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input27 [ 2268.383770][T20605] usb 3-1: Using ep0 maxpacket: 16 [ 2268.499928][T20605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.511226][T20605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2268.521222][T20605] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2268.531194][T20605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.576384][T20605] usb 3-1: config 0 descriptor?? [ 2268.606864][T25454] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input28 [ 2268.706071][T25454] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input29 [ 2268.794183][T25454] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.000D/input/input30 [ 2269.344644][T20605] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 2269.524201][T29868] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2269.645045][T25454] hid-udraw 0003:20D6:CB17.000D: hidraw0: USB HID vff.f8 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 2269.727567][T20605] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 2269.739148][T20605] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 2269.747866][T25454] usb 2-1: USB disconnect, device number 53 [ 2269.756567][T20605] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 2269.763946][T20605] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 2269.935149][T20605] zydacron 0003:13EC:0006.000E: hidraw1: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 2270.035054][T20605] usb 3-1: USB disconnect, device number 51 [ 2270.572222][T29878] fido_id[29878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2270.609806][T29883] fido_id[29883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2270.622825][ T30] audit: type=1400 audit(2000000602.282:4103): avc: denied { map } for pid=29892 comm="syz.0.5028" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2270.802432][T29900] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5030'. [ 2270.836547][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5030'. [ 2270.862256][T29900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5030'. [ 2271.205568][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 2271.253285][T29915] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2271.628581][ T30] audit: type=1400 audit(2000000603.302:4104): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.2 dest=55224 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2272.085923][T29933] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2272.938089][ T30] audit: type=1400 audit(2000000604.612:4105): avc: denied { bind } for pid=29938 comm="syz.1.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2273.377802][ T30] audit: type=1400 audit(2000000605.052:4106): avc: denied { map } for pid=29945 comm="syz.0.5042" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2273.791771][T27405] libceph: connect (1)[c::]:6789 error -101 [ 2273.809871][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2274.007869][T29971] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2274.018520][T29962] ceph: No mds server is up or the cluster is laggy [ 2274.045714][ T30] audit: type=1400 audit(2000000605.712:4107): avc: denied { connect } for pid=29968 comm="syz.4.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2274.188847][T27405] libceph: connect (1)[c::]:6789 error -101 [ 2274.235219][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2274.295395][ T30] audit: type=1400 audit(2000000605.722:4108): avc: denied { write } for pid=29968 comm="syz.4.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2274.665167][T29984] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2275.480434][T29987] netlink: 'syz.2.5055': attribute type 4 has an invalid length. [ 2276.344551][T30012] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2277.175688][T30016] Bluetooth: MGMT ver 1.23 [ 2278.670512][T30045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5070'. [ 2278.683064][T30045] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5070'. [ 2278.692822][T30045] netlink: 'syz.1.5070': attribute type 6 has an invalid length. [ 2278.720280][T30045] netlink: 'syz.1.5070': attribute type 4 has an invalid length. [ 2278.974606][T30056] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2280.156436][T30074] overlayfs: failed to resolve './file0': -2 [ 2280.280178][T25454] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2280.446184][T25454] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2280.454856][T25454] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2280.464344][T25454] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2280.489637][T25454] usb 1-1: config 220 has no interface number 2 [ 2280.531500][T25454] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2280.640425][T25454] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2280.661679][T25454] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2280.719040][T25454] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2280.971681][T25454] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2280.999681][T25454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.226418][T25454] usb 1-1: Product: syz [ 2281.230769][T25454] usb 1-1: Manufacturer: syz [ 2281.230900][T25454] usb 1-1: SerialNumber: syz [ 2281.400420][ T30] audit: type=1400 audit(2000000613.082:4109): avc: denied { connect } for pid=30093 comm="syz.1.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2281.448394][T25454] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2281.456320][T25454] uvcvideo 1-1:220.0: No valid video chain found. [ 2281.456328][ T30] audit: type=1400 audit(2000000613.132:4110): avc: denied { listen } for pid=30093 comm="syz.1.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2281.482695][T25454] usb 1-1: selecting invalid altsetting 0 [ 2281.507185][T25454] usb 1-1: selecting invalid altsetting 0 [ 2281.513667][T25454] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 2281.525024][T25454] usb 1-1: USB disconnect, device number 42 [ 2281.766802][T30107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5086'. [ 2282.176924][ T30] audit: type=1400 audit(2000000613.852:4111): avc: denied { audit_write } for pid=30118 comm="syz.2.5092" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2282.966650][T30139] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2283.780263][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2283.797651][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.920433][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2283.939903][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2284.032525][T30153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5102'. [ 2284.214542][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2284.228394][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2284.241943][T30147] ceph: No mds server is up or the cluster is laggy [ 2284.242387][T30160] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2284.762100][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2284.773643][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2284.968349][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 2285.000144][T30168] netlink: 'syz.4.5106': attribute type 4 has an invalid length. [ 2286.668479][T30213] siw: device registration error -23 [ 2287.153747][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5118'. [ 2287.185220][T30225] sp0: Synchronizing with TNC [ 2287.202878][T30230] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2287.202878][T30230] program syz.2.5120 not setting count and/or reply_len properly [ 2287.239357][T30224] [U] è [ 2287.451131][T30240] netlink: 'syz.0.5122': attribute type 4 has an invalid length. [ 2288.388077][T30254] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2288.672874][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2288.678970][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2288.758549][T30268] ceph: No mds server is up or the cluster is laggy [ 2288.770235][T30273] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2289.037948][T30276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'. [ 2289.889644][T25454] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2290.217362][T25454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.311796][T25454] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2290.337974][T25454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.377439][T25454] usb 1-1: config 0 descriptor?? [ 2290.598298][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5146'. [ 2290.637538][T30314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5145'. [ 2290.655401][T30315] netlink: 'syz.4.5147': attribute type 4 has an invalid length. [ 2291.396125][T25454] lg-g15 0003:046D:C222.000F: collection stack underflow [ 2291.605553][T25454] lg-g15 0003:046D:C222.000F: item 0 4 0 12 parsing failed [ 2291.648358][T25454] lg-g15 0003:046D:C222.000F: probe with driver lg-g15 failed with error -22 [ 2292.084713][T25454] usb 1-1: USB disconnect, device number 43 [ 2294.116437][T30362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5158'. [ 2294.164423][T30364] netlink: 'syz.4.5159': attribute type 1 has an invalid length. [ 2294.325536][T30369] netlink: 'syz.6.5161': attribute type 4 has an invalid length. [ 2294.687084][T20605] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2294.904628][T30380] netlink: 'syz.1.5165': attribute type 4 has an invalid length. [ 2294.981528][T20605] usb 1-1: Using ep0 maxpacket: 32 [ 2295.429715][T20605] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2295.438803][T20605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.446909][T20605] usb 1-1: Product: syz [ 2295.473605][T20605] usb 1-1: Manufacturer: syz [ 2295.555871][T20605] usb 1-1: SerialNumber: syz [ 2295.631896][T20605] usb 1-1: config 0 descriptor?? [ 2295.778401][T30395] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2297.100619][T30414] 9pnet_fd: Insufficient options for proto=fd [ 2297.114276][T30414] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2297.144147][T20605] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2297.761964][T20605] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 2298.018783][T20605] usb 1-1: USB disconnect, device number 44 [ 2298.395284][T30440] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2298.549634][T30445] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2298.575509][ T30] audit: type=1400 audit(2000000630.212:4112): avc: denied { ioctl } for pid=30443 comm="syz.1.5190" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2299.505773][T30466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5198'. [ 2299.674002][T30481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5201'. [ 2299.827996][T30488] bridge_slave_1: entered promiscuous mode [ 2299.972151][T30496] dlm: non-version read from control device 4 [ 2300.088454][T30502] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2300.196394][T30507] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5213'. [ 2300.294352][T30513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 2300.319472][T30512] Bluetooth: MGMT ver 1.23 [ 2300.444447][ T30] audit: type=1400 audit(2000000632.122:4113): avc: denied { read } for pid=30517 comm="syz.2.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2300.725488][T30527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'. [ 2301.095711][ T30] audit: type=1400 audit(2000000632.772:4114): avc: denied { bind } for pid=30526 comm="syz.6.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2301.159638][ T30] audit: type=1400 audit(2000000632.792:4115): avc: denied { node_bind } for pid=30526 comm="syz.6.5218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2301.556255][T30561] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2301.765600][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5228'. [ 2302.068335][T30579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'. [ 2302.282372][ T30] audit: type=1400 audit(2000000633.942:4116): avc: denied { ioctl } for pid=30580 comm="syz.0.5231" path="socket:[94877]" dev="sockfs" ino=94877 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2302.629953][T20605] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2302.814063][T30598] netlink: 'syz.6.5234': attribute type 4 has an invalid length. [ 2302.820976][T20605] usb 2-1: Using ep0 maxpacket: 8 [ 2302.832231][T20605] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2302.869854][T20605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.894077][T20605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2303.019644][T20605] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2303.039014][T20605] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2303.048412][T20605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2303.069078][T20605] usb 2-1: config 0 descriptor?? [ 2303.139668][T27405] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2303.299730][T27405] usb 3-1: Using ep0 maxpacket: 16 [ 2303.316543][T27405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2303.337711][T27405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2303.375763][T27405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2303.395354][T27405] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2303.405399][T27405] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2303.460975][T27405] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2303.482346][T27405] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2303.495443][T27405] usb 3-1: Manufacturer: syz [ 2303.505980][T27405] usb 3-1: config 0 descriptor?? [ 2303.536713][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2303.613575][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2303.716800][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2303.768395][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2303.775774][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2303.903750][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2304.049302][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2304.123527][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2304.165598][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2304.186562][T20605] redragon 0003:0C45:760B.0010: unknown main item tag 0x0 [ 2304.226371][T20605] redragon 0003:0C45:760B.0010: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 2304.237058][T27405] rc_core: IR keymap rc-hauppauge not found [ 2304.247160][T27405] Registered IR keymap rc-empty [ 2304.266760][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.300943][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.301221][T20605] usb 2-1: USB disconnect, device number 54 [ 2304.383405][T27405] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2304.430690][T27405] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 2304.442700][T30644] fido_id[30644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2304.476668][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.520053][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.559981][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.589751][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.619744][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.649869][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.689828][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.766856][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.809983][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.834311][T27405] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2304.881839][T27405] mceusb 3-1:0.0: Registered І with mce emulator interface version 1 [ 2304.906685][T27405] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2304.920904][T30667] batman_adv: batadv0: Adding interface: macvtap0 [ 2304.927415][T30667] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 2304.958562][T27405] usb 3-1: USB disconnect, device number 52 [ 2305.635602][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'. [ 2305.639940][T27405] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2305.715191][T30695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'. [ 2305.842428][T27405] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2305.878383][T27405] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2305.928012][T27405] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2305.978637][T27405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.107493][T30686] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2306.198318][T27405] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2306.430071][T20605] usb 3-1: USB disconnect, device number 53 [ 2306.451834][ T30] audit: type=1400 audit(2000000638.132:4117): avc: denied { bind } for pid=30703 comm="syz.1.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2306.531045][T30708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2306.646829][T30714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5266'. [ 2306.700023][T25454] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2306.869914][T25454] usb 1-1: Using ep0 maxpacket: 32 [ 2306.886485][T25454] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2306.904738][T25454] usb 1-1: config 0 has no interface number 0 [ 2306.997662][T25454] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2307.083387][T25454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.099257][T25454] usb 1-1: Product: syz [ 2307.103801][T25454] usb 1-1: Manufacturer: syz [ 2307.108390][T25454] usb 1-1: SerialNumber: syz [ 2307.123411][T25454] usb 1-1: config 0 descriptor?? [ 2307.132028][T25454] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2307.302602][T20605] libceph: connect (1)[c::]:6789 error -13 [ 2307.308958][T20605] libceph: mon0 (1)[c::]:6789 connect error [ 2307.410171][T25454] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2307.422558][T30726] ceph: No mds server is up or the cluster is laggy [ 2307.436390][T30730] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2307.570257][T25454] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2307.625393][T20605] libceph: connect (1)[c::]:6789 error -13 [ 2307.658398][T20605] libceph: mon0 (1)[c::]:6789 connect error [ 2307.979893][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2307.987798][T21902] usb 1-1: USB disconnect, device number 45 [ 2307.997187][T21902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2308.034203][T21902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2308.052443][T21902] quatech2 1-1:0.51: device disconnected [ 2308.259702][T25454] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2308.266211][ T30] audit: type=1400 audit(2000000639.942:4118): avc: denied { setopt } for pid=30750 comm="syz.1.5281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2308.405506][T30759] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 2308.429950][T25454] usb 3-1: Using ep0 maxpacket: 32 [ 2308.442283][T25454] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2308.458289][T25454] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.479495][T25454] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2308.491032][T30764] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5287'. [ 2308.501782][T25454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.512183][T25454] usb 3-1: Product: syz [ 2308.516385][T25454] usb 3-1: Manufacturer: syz [ 2308.521432][T25454] usb 3-1: SerialNumber: syz [ 2308.744957][T25454] usb 3-1: Not enough endpoints found in device, aborting! [ 2308.878643][T30777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5290'. [ 2309.361005][T30779] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2309.549937][T25454] usb 3-1: USB disconnect, device number 54 [ 2309.682351][T30789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5296'. [ 2309.711850][T30789] batman_adv: batadv0: Removing interface: macvtap0 [ 2309.990015][T30797] 9pnet_fd: Insufficient options for proto=fd [ 2310.020053][T30797] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2310.457720][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'. [ 2311.350186][T27405] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2311.530648][T30813] netlink: 'syz.1.5303': attribute type 4 has an invalid length. [ 2311.562426][T27405] usb 3-1: Using ep0 maxpacket: 32 [ 2311.586128][T27405] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2311.602542][T27405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.650452][T27405] usb 3-1: config 0 descriptor?? [ 2311.686470][T27405] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2311.834041][T30817] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2311.954583][T30821] netlink: 71 bytes leftover after parsing attributes in process `syz.1.5307'. [ 2311.996285][ T30] audit: type=1400 audit(2000000643.672:4119): avc: denied { load_policy } for pid=30825 comm="syz.0.5306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2312.114807][T27405] gspca_nw80x: reg_r err -71 [ 2312.123322][T27405] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 2312.155429][T27405] usb 3-1: USB disconnect, device number 55 [ 2312.449425][T30833] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2313.874138][T30826] SELinux: failed to load policy [ 2314.260270][T30847] 9pnet_fd: Insufficient options for proto=fd [ 2314.275775][T30847] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2314.996436][T30849] netlink: 'syz.2.5314': attribute type 4 has an invalid length. [ 2315.055667][T30855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 2315.627712][T30868] netlink: 'syz.6.5318': attribute type 4 has an invalid length. [ 2315.967590][T30883] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2316.946629][T30894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5326'. [ 2317.324964][T30904] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2317.529842][ T5869] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2317.588980][T30909] netlink: 'syz.2.5330': attribute type 4 has an invalid length. [ 2317.713322][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 2317.724333][ T5869] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2317.736697][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2317.794336][ T5869] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2317.830571][T30915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5332'. [ 2317.842405][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.941512][ T5869] usb 1-1: config 0 descriptor?? [ 2318.145901][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 2318.326851][T30929] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2318.817701][ T5869] hid_parser_main: 123 callbacks suppressed [ 2318.817738][ T5869] kye 0003:0458:0087.0011: unknown main item tag 0x0 [ 2319.013045][ T5869] kye 0003:0458:0087.0011: unknown main item tag 0x0 [ 2319.103818][ T5869] kye 0003:0458:0087.0011: unknown main item tag 0x0 [ 2319.190363][ T5869] kye 0003:0458:0087.0011: unknown main item tag 0x0 [ 2319.197117][ T5869] kye 0003:0458:0087.0011: unknown main item tag 0x0 [ 2319.326376][ T5869] kye 0003:0458:0087.0011: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.0-1/input0 [ 2319.376900][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 2319.393634][ T5869] usb 1-1: USB disconnect, device number 46 [ 2319.588642][ T30] audit: type=1400 audit(2000000651.262:4120): avc: denied { kexec_image_load } for pid=30942 comm="syz.2.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2319.908577][T30937] fido_id[30937]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2320.054656][T30953] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2320.965359][T30971] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2321.373467][T30973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5344'. [ 2322.344388][T30988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'. [ 2322.479073][T30996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 2323.099798][T25454] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2323.369608][T25454] usb 1-1: Using ep0 maxpacket: 32 [ 2323.377225][T25454] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2323.401480][T25454] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2323.427579][T25454] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2323.463227][T25454] usb 1-1: Product: syz [ 2323.481035][T25454] usb 1-1: Manufacturer: syz [ 2323.504563][T25454] usb 1-1: SerialNumber: syz [ 2323.583002][T25454] usb 1-1: config 0 descriptor?? [ 2323.588655][T30995] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2324.055273][ T5869] usb 1-1: USB disconnect, device number 47 [ 2324.291662][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2324.304251][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2324.542645][T31015] ceph: No mds server is up or the cluster is laggy [ 2324.582544][T31021] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2324.810295][ T5869] libceph: connect (1)[c::]:6789 error -13 [ 2324.870143][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 2325.591217][T31038] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2326.943647][T31065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2326.953071][T31065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2327.038310][T31070] netlink: 'syz.4.5367': attribute type 4 has an invalid length. [ 2327.322608][T31084] netlink: 'syz.1.5370': attribute type 1 has an invalid length. [ 2327.560190][ T5869] libceph: connect (1)[c::]:6789 error -13 [ 2327.579839][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 2327.672447][T31095] ceph: No mds server is up or the cluster is laggy [ 2327.771987][T31102] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2327.903153][ T5869] libceph: connect (1)[c::]:6789 error -13 [ 2327.911417][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 2328.216121][T31108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5374'. [ 2329.369801][ T5869] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2330.129779][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 2330.171786][ T5869] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 2330.215612][T31138] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2330.835356][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2330.845942][ T5869] usb 2-1: config 0 has no interface number 0 [ 2330.858756][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2330.876872][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.885223][ T5869] usb 2-1: Product: syz [ 2330.889450][ T5869] usb 2-1: Manufacturer: syz [ 2330.894233][ T5869] usb 2-1: SerialNumber: syz [ 2330.904444][ T5869] usb 2-1: config 0 descriptor?? [ 2331.118414][ T5869] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 2331.132945][ T5869] uvcvideo 2-1:0.105: No valid video chain found. [ 2331.139685][T27405] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2331.156720][ T5869] usb 2-1: USB disconnect, device number 55 [ 2331.220130][T31160] netlink: 'syz.2.5388': attribute type 4 has an invalid length. [ 2331.289640][T27405] usb 1-1: Using ep0 maxpacket: 32 [ 2331.322971][T27405] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2331.332515][T27405] usb 1-1: config 0 has no interface number 0 [ 2331.339078][T27405] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2331.379122][T27405] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2331.410897][T27405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.441150][T27405] usb 1-1: Product: syz [ 2331.445669][T27405] usb 1-1: Manufacturer: syz [ 2331.465522][T27405] usb 1-1: SerialNumber: syz [ 2331.509410][T27405] usb 1-1: config 0 descriptor?? [ 2331.562032][T27405] smsc75xx v1.0.0 [ 2332.024334][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2332.036624][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2332.390017][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2332.451176][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2332.482711][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 2332.538158][T31178] ceph: No mds server is up or the cluster is laggy [ 2332.556830][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2332.565905][T31175] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2332.609879][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2332.629683][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2332.660049][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2332.688580][T27405] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2332.720200][T27405] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2332.749606][T27405] usb 1-1: USB disconnect, device number 48 [ 2332.963486][T31201] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2332.973145][T31201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2333.223075][T31208] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2334.706683][T20605] kernel read not supported for file /dsp1 (pid: 20605 comm: kworker/0:0) [ 2334.732378][T25454] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2334.880243][T21902] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2334.899607][T25454] usb 1-1: Using ep0 maxpacket: 32 [ 2334.906519][T25454] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.939391][T25454] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2334.951987][T25454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.977416][T25454] usb 1-1: Product: syz [ 2334.989309][T25454] usb 1-1: Manufacturer: syz [ 2334.997519][T25454] usb 1-1: SerialNumber: syz [ 2335.012526][T25454] usb 1-1: config 0 descriptor?? [ 2335.022678][T25454] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2335.039629][T21902] usb 3-1: Using ep0 maxpacket: 32 [ 2335.048423][T21902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.115112][T31249] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2335.782158][T25454] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2335.871288][T21902] usb 3-1: config 0 has no interfaces? [ 2335.877278][T25454] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2335.891516][T21902] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2335.904773][T21902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.976875][T31252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5405'. [ 2335.989360][T21902] usb 3-1: Product: syz [ 2336.023626][T21902] usb 3-1: Manufacturer: syz [ 2336.068591][T21902] usb 3-1: SerialNumber: syz [ 2336.146991][T21902] usb 3-1: config 0 descriptor?? [ 2337.867455][T31257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5406'. [ 2337.944798][T27405] usb 1-1: USB disconnect, device number 49 [ 2337.993668][T31263] netlink: 'syz.6.5413': attribute type 4 has an invalid length. [ 2339.824613][T31288] netlink: 'syz.0.5419': attribute type 4 has an invalid length. [ 2339.879055][T27405] usb 3-1: USB disconnect, device number 56 [ 2340.720067][ T5869] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2340.873871][ T30] audit: type=1400 audit(2000000672.552:4121): avc: denied { setattr } for pid=31325 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2340.899662][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 2340.909469][ T5869] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2340.920980][T31326] netlink: 'syz.1.5430': attribute type 4 has an invalid length. [ 2340.935737][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.965849][ T5869] usb 3-1: Product: syz [ 2340.982784][ T5869] usb 3-1: Manufacturer: syz [ 2340.987538][ T5869] usb 3-1: SerialNumber: syz [ 2341.006633][ T5869] usb 3-1: config 0 descriptor?? [ 2341.085251][ T5869] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2341.475199][T31333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2341.504940][T31333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2341.751777][T31351] batadv_slave_1: entered promiscuous mode [ 2341.776427][T31350] batadv_slave_1: left promiscuous mode [ 2341.878995][ T5869] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 2341.917394][ T5869] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 2341.952033][ T5869] usb 3-1: USB disconnect, device number 57 [ 2342.472840][ T30] audit: type=1400 audit(2000000930.149:4122): avc: denied { mounton } for pid=31377 comm="syz.0.5445" path="/" dev="hugetlbfs" ino=97847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 2342.839254][T21902] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2343.004922][T21902] usb 1-1: Using ep0 maxpacket: 8 [ 2343.025776][T21902] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2343.049449][T21902] usb 1-1: config 179 has no interface number 0 [ 2343.057888][T21902] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2343.073295][T21902] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2343.085039][T21902] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2343.097413][T21902] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2343.109465][T21902] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2343.123172][T21902] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2343.132598][T21902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.144162][T31386] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2343.220026][T25454] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2343.379046][T25454] usb 3-1: Using ep0 maxpacket: 16 [ 2343.389812][T25454] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2343.399304][T25454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.407360][T25454] usb 3-1: Product: syz [ 2343.420694][T21902] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input32 [ 2343.433142][T25454] usb 3-1: Manufacturer: syz [ 2343.437871][T25454] usb 3-1: SerialNumber: syz [ 2343.449350][T27405] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 2343.469640][T25454] usb 3-1: config 0 descriptor?? [ 2343.588872][T27405] usb 2-1: device descriptor read/64, error -71 [ 2343.606641][ T5869] usb 1-1: USB disconnect, device number 50 [ 2343.606720][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2343.621930][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 2343.828778][T27405] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 2343.886898][T25454] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2343.896596][T25454] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2343.906754][T25454] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2343.914813][T25454] usb 3-1: media controller created [ 2343.929605][T25454] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2343.958777][T27405] usb 2-1: device descriptor read/64, error -71 [ 2344.069720][T27405] usb usb2-port1: attempt power cycle [ 2344.398462][ T5869] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2344.418463][T27405] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 2344.438865][T27405] usb 2-1: device descriptor read/8, error -71 [ 2344.469593][T25454] zl10353_read_register: readreg error (reg=127, ret==0) [ 2344.476689][T25454] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2344.484929][T25454] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2344.541316][T25454] usb 3-1: USB disconnect, device number 58 [ 2344.560560][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.573227][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2344.574250][T25454] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2344.590798][ T5869] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2344.602875][ T5869] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2344.611334][ T5869] usb 1-1: Manufacturer: syz [ 2344.617841][ T5869] usb 1-1: config 0 descriptor?? [ 2344.661054][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2344.670602][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.678607][T27405] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 2344.698765][T27405] usb 2-1: device descriptor read/8, error -71 [ 2344.809186][T27405] usb usb2-port1: unable to enumerate USB device [ 2345.002392][ T30] audit: type=1400 audit(2000000932.681:4123): avc: denied { append } for pid=31408 comm="syz.4.5458" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2345.026332][ T30] audit: type=1400 audit(2000000932.681:4124): avc: denied { execute } for pid=31408 comm="syz.4.5458" path="/dev/sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2345.279034][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2345.285094][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2345.666660][T31417] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2345.667673][ T5869] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input33 [ 2345.689383][T31418] ceph: No mds server is up or the cluster is laggy [ 2345.750563][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2345.771566][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2345.899315][ T5869] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input34 [ 2345.936039][ T5869] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input35 [ 2345.983048][ T5869] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input36 [ 2346.023059][ T5869] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 2346.042541][ T5869] usb 1-1: USB disconnect, device number 51 [ 2346.143380][T31436] overlayfs: missing 'workdir' [ 2346.533044][T31438] fido_id[31438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 2346.991667][T31459] lo speed is unknown, defaulting to 1000 [ 2347.227336][T25454] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2347.349942][T31459] lo speed is unknown, defaulting to 1000 [ 2347.378887][T25454] usb 2-1: config 0 has no interfaces? [ 2347.391137][T25454] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2347.425017][T25454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.459471][T25454] usb 2-1: config 0 descriptor?? [ 2347.632035][ T30] audit: type=1400 audit(2000000935.312:4125): avc: denied { getopt } for pid=31486 comm="syz.2.5475" lport=58701 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 2347.772495][ T30] audit: type=1400 audit(2000000935.452:4126): avc: denied { read } for pid=31493 comm="syz.0.5478" path="socket:[98433]" dev="sockfs" ino=98433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2347.841131][T25454] usb 2-1: USB disconnect, device number 60 [ 2347.989862][ T30] audit: type=1400 audit(2000000935.672:4127): avc: denied { mounton } for pid=31504 comm="syz.0.5482" path="/1098/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2348.016374][ T30] audit: type=1400 audit(2000000935.692:4128): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2348.100361][ T30] audit: type=1400 audit(2000000935.782:4129): avc: denied { accept } for pid=31508 comm="syz.0.5484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2348.136629][T27405] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2348.249010][T31511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5485'. [ 2348.286789][T27405] usb 3-1: Using ep0 maxpacket: 32 [ 2348.302235][T27405] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2348.329383][T27405] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2348.339114][T27405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.347460][T27405] usb 3-1: Product: syz [ 2348.351988][T27405] usb 3-1: Manufacturer: syz [ 2348.357399][T27405] usb 3-1: SerialNumber: syz [ 2348.408043][T27405] usb 3-1: config 0 descriptor?? [ 2348.536926][T27405] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2348.883999][T31517] 9pnet_fd: Insufficient options for proto=fd [ 2348.898041][T31517] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2349.535962][T27405] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2349.543436][T27405] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2349.847410][ T30] audit: type=1400 audit(2000000937.523:4130): avc: denied { accept } for pid=31532 comm="syz.6.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2350.173451][T31531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5480'. [ 2351.828373][ T30] audit: type=1400 audit(2000000939.504:4131): avc: denied { bind } for pid=31542 comm="syz.6.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2352.198000][ T30] audit: type=1400 audit(2000000939.534:4132): avc: denied { node_bind } for pid=31542 comm="syz.6.5490" saddr=ff07:0:fdff:ffff:b00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2353.088857][T31555] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2353.358759][T25454] usb 3-1: USB disconnect, device number 59 [ 2353.621630][T31573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5498'. [ 2353.834106][T27405] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2354.055095][T27405] usb 2-1: Using ep0 maxpacket: 32 [ 2354.106331][T27405] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.122679][T31575] netlink: 'syz.4.5500': attribute type 4 has an invalid length. [ 2354.142438][T27405] usb 2-1: config 0 has no interfaces? [ 2354.162392][T27405] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2354.181704][T27405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.206424][T27405] usb 2-1: Product: syz [ 2354.210627][T27405] usb 2-1: Manufacturer: syz [ 2354.228061][T27405] usb 2-1: SerialNumber: syz [ 2354.615039][T27405] usb 2-1: config 0 descriptor?? [ 2355.014096][T31605] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2355.394129][ T5869] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2355.613034][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 2355.707705][ T5869] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2355.778101][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.861786][T31613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5499'. [ 2356.944235][ T5869] usb 1-1: config 0 descriptor?? [ 2356.971478][ T5869] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2357.132551][T21902] usb 2-1: USB disconnect, device number 61 [ 2357.211224][T31626] vivid-007: disconnect [ 2357.689979][T31653] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2358.210816][ T5869] usb 1-1: USB disconnect, device number 52 [ 2358.816888][T31672] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2359.361028][T25402] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2359.603821][ T30] audit: type=1400 audit(2000000947.278:4133): avc: denied { read } for pid=31685 comm="syz.2.5528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2359.636137][T25402] usb 1-1: Using ep0 maxpacket: 16 [ 2359.643306][T25402] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2359.653131][T25402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.696417][T25402] usb 1-1: config 0 descriptor?? [ 2359.723558][T25402] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2360.038453][T31703] netlink: 'syz.4.5536': attribute type 29 has an invalid length. [ 2360.049487][T31703] netlink: 'syz.4.5536': attribute type 29 has an invalid length. [ 2360.059779][T31703] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5536'. [ 2360.069434][T31703] unsupported nla_type 58 [ 2360.074314][T27405] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2360.230664][T27405] usb 3-1: Using ep0 maxpacket: 8 [ 2360.237859][T27405] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2360.247112][T27405] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2360.261091][T27405] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2360.274332][T27405] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2360.285738][T27405] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2360.301861][T27405] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2360.315786][T27405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.734696][T25402] gspca_sonixj: reg_w1 err -71 [ 2360.791760][T25402] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 2360.866269][T25402] usb 1-1: USB disconnect, device number 53 [ 2361.154166][T31717] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2361.235258][T31718] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 2361.922486][T21902] usb 3-1: USB disconnect, device number 60 [ 2362.020932][T31723] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 2362.070174][T31723] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 2362.100476][T31723] 0ªî{X¹¦: entered allmulticast mode [ 2362.127914][T31723] 0ªî{X¹¦: entered promiscuous mode [ 2362.163199][T31730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5543'. [ 2362.218163][T31723] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 2362.225564][T31723] bridge0: port 1(30ªî{X¹¦) entered forwarding state [ 2362.343842][T31724] 0ªî{X¹¦: left allmulticast mode [ 2362.354324][T31733] overlayfs: failed to resolve './file1': -2 [ 2362.357608][ T30] audit: type=1400 audit(2000000950.039:4134): avc: denied { mount } for pid=31729 comm="syz.1.5544" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2362.452563][T31724] 0ªî{X¹¦: left promiscuous mode [ 2362.591540][T31724] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 2362.700227][ T30] audit: type=1400 audit(2000000950.389:4135): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2362.779289][T31737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5545'. [ 2362.861380][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5546'. [ 2363.434573][ T30] audit: type=1400 audit(2000000951.120:4136): avc: denied { mounton } for pid=31751 comm="syz.0.5551" path="/1111/file0/file0" dev="afs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 2363.600291][T31761] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2363.740037][T25402] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2364.022494][T25402] usb 3-1: Using ep0 maxpacket: 16 [ 2364.071275][T25402] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 2364.133830][T25402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.334742][T25402] usb 3-1: config 0 has no interface number 0 [ 2364.412405][T25402] usb 3-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2364.497330][T25402] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2364.532661][T25402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.581101][T25402] usb 3-1: config 0 descriptor?? [ 2364.612941][T25402] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2364.622415][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5557'. [ 2364.838485][T25454] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2364.900857][T23843] udevd[23843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2364.943467][T25402] snd-usb-audio 3-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 2364.990161][T25402] usb 3-1: USB disconnect, device number 61 [ 2365.134971][T25454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.196706][T25454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2365.220637][T25454] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2365.229850][T25454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.256259][T25454] usb 1-1: config 0 descriptor?? [ 2365.930618][ T30] audit: type=1400 audit(2000000953.621:4137): avc: denied { watch } for pid=31790 comm="syz.1.5564" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2365.990017][T25454] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 2366.007658][T25454] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 2366.014921][T25454] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 2366.047591][T25454] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 2366.058907][T25454] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 2366.078351][T25454] cm6533_jd 0003:0D8C:0022.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 2366.124710][T31802] ksmbd: Unknown IPC event: 3, ignore. [ 2366.139158][T27405] libceph: connect (1)[c::]:6789 error -22 [ 2366.145337][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2366.242697][T31808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5568'. [ 2366.450283][T27405] libceph: connect (1)[c::]:6789 error -22 [ 2366.617471][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2366.703401][T31797] ceph: No mds server is up or the cluster is laggy [ 2366.750422][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5570'. [ 2367.159445][T31815] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2367.466697][T25454] usb 1-1: USB disconnect, device number 54 [ 2367.655798][T31825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2367.808084][T31832] netlink: 'syz.2.5575': attribute type 1 has an invalid length. [ 2367.834676][T31832] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5575'. [ 2367.847434][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5575'. [ 2367.879389][ T30] audit: type=1400 audit(2000000955.572:4138): avc: denied { read } for pid=31836 comm="syz.4.5577" path="socket:[99103]" dev="sockfs" ino=99103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2367.950564][T21902] libceph: connect (1)[c::]:6789 error -101 [ 2367.960178][T21902] libceph: mon0 (1)[c::]:6789 connect error [ 2368.018436][T25454] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2368.080445][T31840] ceph: No mds server is up or the cluster is laggy [ 2368.098411][T31847] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2368.243885][T21902] libceph: connect (1)[c::]:6789 error -101 [ 2368.296450][T25454] usb 2-1: Using ep0 maxpacket: 8 [ 2368.404294][T21902] libceph: mon0 (1)[c::]:6789 connect error [ 2368.506041][T25454] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2368.582008][T31854] 9pnet_fd: Insufficient options for proto=fd [ 2368.600417][T31854] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2369.200199][T25454] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2369.210044][T25454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2369.223956][T25454] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2369.233948][T25454] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2369.250275][T25454] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2369.259842][T25454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.284333][T31859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5581'. [ 2369.545996][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5584'. [ 2370.091921][T31884] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2370.513585][T27405] usb 2-1: USB disconnect, device number 62 [ 2371.093974][T31898] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2371.924726][ T30] audit: type=1400 audit(2000000959.614:4139): avc: denied { bind } for pid=31904 comm="syz.1.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2372.097508][T31905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2372.323908][T31922] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2372.463052][T31905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2372.499340][T27405] libceph: connect (1)[c::]:6789 error -22 [ 2372.511330][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2372.848827][T25402] libceph: connect (1)[c::]:6789 error -22 [ 2372.863130][ T30] audit: type=1400 audit(2000000960.554:4140): avc: denied { write } for pid=31937 comm="syz.0.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2372.915913][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2372.970620][T31930] ceph: No mds server is up or the cluster is laggy [ 2373.016048][T31938] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2373.297006][T31905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2373.476320][T31952] loop8: detected capacity change from 0 to 8 [ 2373.510888][T31952] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 2373.521841][T31952] loop8: partition table partially beyond EOD, truncated [ 2373.540194][T31905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2373.551380][T31952] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 2373.692432][T23843] udevd[23843]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 2373.858454][T13521] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.877088][T13521] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.898840][T13521] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2373.915993][T25454] libceph: connect (1)[c::]:6789 error -13 [ 2373.927619][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2373.948740][ T2933] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2374.107085][T31966] ceph: No mds server is up or the cluster is laggy [ 2374.118108][T31975] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2374.223552][T25454] libceph: connect (1)[c::]:6789 error -13 [ 2374.394546][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2374.720769][T31989] loop6: detected capacity change from 0 to 524287999 [ 2374.830924][T31994] kvm: kvm [31993]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000ffa000 [ 2375.009040][T32004] syzkaller1: entered promiscuous mode [ 2375.024750][T32004] syzkaller1: entered allmulticast mode [ 2375.286195][T32016] 9pnet_fd: Insufficient options for proto=fd [ 2375.304012][T32016] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2376.340777][ T30] audit: type=1400 audit(2000000964.026:4141): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2376.530293][T32034] IPVS: Scheduler module ip_vs_ not found [ 2376.602764][T32043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5630'. [ 2376.635019][T32043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5630'. [ 2377.143080][T25454] libceph: connect (1)[c::]:6789 error -22 [ 2377.149150][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2377.235154][T32073] ceph: No mds server is up or the cluster is laggy [ 2377.255168][T32081] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2378.260025][ T30] audit: type=1400 audit(2000000965.947:4142): avc: denied { name_bind } for pid=32108 comm="syz.6.5650" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2378.525350][T32122] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 2378.649014][T32130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5655'. [ 2380.296843][T32176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2380.750476][ T30] audit: type=1400 audit(2000000968.448:4143): avc: denied { execute } for pid=32194 comm="syz.0.5673" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=101491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2380.815431][T32198] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2381.896452][T32213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5675'. [ 2382.349105][T32217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5677'. [ 2382.601536][T32228] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2382.829227][T25454] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2382.989351][T25454] usb 3-1: Using ep0 maxpacket: 32 [ 2382.996421][T25454] usb 3-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 2383.016202][T25454] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2383.026782][T25454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.035091][T25454] usb 3-1: Product: syz [ 2383.039488][T25454] usb 3-1: Manufacturer: syz [ 2383.044168][T25454] usb 3-1: SerialNumber: syz [ 2383.049085][T27405] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2383.055641][T25454] usb 3-1: config 0 descriptor?? [ 2383.072120][T25454] usb 3-1: bad CDC descriptors [ 2383.078415][T25454] usb 3-1: unsupported MDLM descriptors [ 2383.259371][T27405] usb 1-1: Using ep0 maxpacket: 32 [ 2383.277760][T25454] usb 3-1: USB disconnect, device number 62 [ 2383.318740][T27405] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.362816][T27405] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2383.410271][T27405] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2383.432061][T27405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.504871][T27405] usb 1-1: Product: syz [ 2383.518643][T27405] usb 1-1: Manufacturer: syz [ 2383.552197][T27405] usb 1-1: SerialNumber: syz [ 2383.560384][T27405] usb 1-1: config 0 descriptor?? [ 2383.694465][T32265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32265 comm=syz.6.5691 [ 2383.814792][ T30] audit: type=1400 audit(2000000971.510:4144): avc: denied { read write } for pid=32268 comm="syz.6.5692" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2383.880800][ T30] audit: type=1400 audit(2000000971.540:4145): avc: denied { open } for pid=32268 comm="syz.6.5692" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2384.118339][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5694'. [ 2384.193869][T32287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5684'. [ 2385.728543][T25454] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2385.944240][T25454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2386.016015][T25454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2386.123108][T25454] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 2386.193215][T25454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.338129][T25454] usb 2-1: config 0 descriptor?? [ 2386.552171][T21902] usb 1-1: USB disconnect, device number 55 [ 2386.692418][T32301] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2386.710908][T32310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'. [ 2386.784172][T25454] elecom 0003:056E:00FC.0014: item fetching failed at offset 2/5 [ 2386.804324][T32310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2386.833556][T25454] elecom 0003:056E:00FC.0014: probe with driver elecom failed with error -22 [ 2386.961978][T32310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2386.988032][T25454] usb 2-1: USB disconnect, device number 63 [ 2387.065124][T32310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2387.135895][T32310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2387.368181][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2387.548217][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2387.741321][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2387.791940][ T60] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2387.930874][T32335] input: syz1 as /devices/virtual/input/input38 [ 2388.047309][T32340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5713'. [ 2388.748323][T32353] 9p: Unknown uid 00000000004294967295 [ 2388.828375][ T30] audit: type=1400 audit(2000000976.532:4146): avc: denied { setopt } for pid=32354 comm="syz.2.5722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2388.941852][T27405] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2389.096100][T27405] usb 2-1: Using ep0 maxpacket: 32 [ 2389.106442][T27405] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.127728][T27405] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2389.150146][T27405] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2389.173421][T27405] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2389.189277][T25402] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2389.195092][ T30] audit: type=1400 audit(2000000976.893:4147): avc: denied { write } for pid=32378 comm="syz.6.5733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2389.201845][T27405] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2389.239537][T27405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.249542][T27405] usb 2-1: Product: syz [ 2389.254179][T27405] usb 2-1: Manufacturer: syz [ 2389.259738][T27405] usb 2-1: SerialNumber: syz [ 2389.284500][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2389.303596][T27405] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input39 [ 2389.348109][T25402] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2389.357342][T25402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.367853][T25402] usb 3-1: config 0 descriptor?? [ 2389.377734][T25402] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2389.506015][T27405] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2389.514737][T27405] (id 0x00) [ 2389.585971][T27405] rc_core: IR keymap rc-imon-pad not found [ 2389.592532][T27405] Registered IR keymap rc-empty [ 2389.598783][T27405] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2389.610860][T27405] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2389.706637][T27405] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 2389.718589][T27405] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input40 [ 2389.788141][T27405] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:64> initialized [ 2390.068848][T27405] usb 2-1: USB disconnect, device number 64 [ 2390.181148][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5737'. [ 2390.214430][T25402] gspca_stv06xx: I2C: Read error writing address: -71 [ 2390.229296][T25402] usb 3-1: USB disconnect, device number 63 [ 2390.720693][ T30] audit: type=1400 audit(2000000978.423:4148): avc: denied { ioctl } for pid=32395 comm="syz.0.5738" path="socket:[101370]" dev="sockfs" ino=101370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2390.855754][ T30] audit: type=1400 audit(2000000978.563:4149): avc: denied { listen } for pid=32399 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2390.956938][T32402] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2391.727100][T32430] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2392.840529][T25402] libceph: connect (1)[c::]:6789 error -22 [ 2392.846865][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2393.115370][T25402] libceph: connect (1)[c::]:6789 error -22 [ 2393.131116][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2393.246720][T32449] ceph: No mds server is up or the cluster is laggy [ 2393.458512][T25402] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2393.662414][T32473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5757'. [ 2393.665721][T25402] usb 2-1: Using ep0 maxpacket: 16 [ 2393.745742][T25402] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2394.081216][T25402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2394.189574][T25402] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2394.262277][T25402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.332156][T25402] usb 2-1: Product: syz [ 2394.492746][T25402] usb 2-1: Manufacturer: syz [ 2394.515572][T25402] usb 2-1: SerialNumber: syz [ 2394.532012][T25402] usb 2-1: config 0 descriptor?? [ 2394.590281][T32483] netlink: 'syz.4.5761': attribute type 11 has an invalid length. [ 2394.788466][T25402] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 2394.813395][ T30] audit: type=1400 audit(2000000982.495:4150): avc: denied { map } for pid=32494 comm="syz.4.5765" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2394.903260][T25454] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2395.063096][T25454] usb 1-1: Using ep0 maxpacket: 32 [ 2395.075438][T25454] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2395.094768][T25454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.105896][T25402] rc_core: IR keymap rc-imon-pad not found [ 2395.111812][T25402] Registered IR keymap rc-empty [ 2395.120541][T25454] usb 1-1: config 0 descriptor?? [ 2395.127745][T25402] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2395.139575][T25402] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2395.144161][T25454] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2395.188176][T32512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 2395.194716][T32512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2395.212707][T25402] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2395.238112][T27405] libceph: connect (1)[c::]:6789 error -13 [ 2395.248405][T32512] vhci_hcd vhci_hcd.0: Device attached [ 2395.248591][T27405] libceph: mon0 (1)[c::]:6789 connect error [ 2395.287416][T25402] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 2395.287751][T32514] vhci_hcd: connection closed [ 2395.312292][T32510] ceph: No mds server is up or the cluster is laggy [ 2395.330161][T24443] vhci_hcd: stop threads [ 2395.408643][T24443] vhci_hcd: release socket [ 2395.413593][T24443] vhci_hcd: disconnect device [ 2395.425235][T21902] vhci_hcd: vhci_device speed not set [ 2395.425462][T25402] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:65> initialized [ 2395.621587][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2395.681148][T25454] gspca_vc032x: reg_r err -32 [ 2395.718573][T25402] usb 2-1: USB disconnect, device number 65 [ 2395.732753][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.811760][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.827415][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.846733][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.852303][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.862994][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.868448][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.912838][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.950126][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.970387][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.987142][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2395.997492][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.004418][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.010777][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.021357][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.029191][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.036029][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.268752][T25454] gspca_vc032x: I2c Bus Busy Wait 00 [ 2396.274447][T25454] gspca_vc032x: Unknown sensor... [ 2396.279546][T25454] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 2396.518162][T25454] usb 1-1: USB disconnect, device number 56 [ 2396.724742][T32536] vimc link validate: Scaler:src:16x16 (0x33424752, 1, 2, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2396.991037][ T30] audit: type=1400 audit(2000000984.677:4151): avc: denied { watch_mount } for pid=32542 comm="syz.6.5780" path="/806" dev="tmpfs" ino=4299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2397.122299][T32549] netlink: 'syz.4.5783': attribute type 4 has an invalid length. [ 2397.208197][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2397.225391][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2397.499578][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2397.702180][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2398.114989][T32557] ceph: No mds server is up or the cluster is laggy [ 2398.231728][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2398.270932][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2398.927059][T32587] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2399.211041][T27405] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2399.361515][T27405] usb 2-1: Using ep0 maxpacket: 8 [ 2399.368599][T27405] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2399.397061][T27405] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2399.418231][T27405] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2399.445562][T27405] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2399.462338][T27405] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2399.491117][T27405] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2399.518559][T27405] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2399.541220][T27405] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2399.571594][T27405] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2399.659191][T27405] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2399.675971][T27405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.687074][T27405] usb 2-1: Product: syz [ 2399.691669][T27405] usb 2-1: Manufacturer: syz [ 2399.697181][T27405] usb 2-1: SerialNumber: syz [ 2399.884333][T32608] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2400.119832][T27405] adutux 2-1:168.0: interrupt endpoints not found [ 2400.192838][T27405] usb 2-1: USB disconnect, device number 66 [ 2401.050133][T27405] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2401.130185][T25454] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2401.203673][T27405] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2401.212242][T27405] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2401.221412][T27405] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.231919][T27405] usb 2-1: config 220 has no interface number 2 [ 2401.238253][T27405] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2401.248375][T27405] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2401.262417][T27405] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2401.269284][T27405] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2401.276398][T27405] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2401.285699][T27405] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2401.294924][T27405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.303120][T27405] usb 2-1: Product: syz [ 2401.307300][T27405] usb 2-1: Manufacturer: syz [ 2401.309966][T25454] usb 3-1: Using ep0 maxpacket: 16 [ 2401.313023][T27405] usb 2-1: SerialNumber: syz [ 2401.319605][T25454] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2401.329209][T25454] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2401.339512][T25454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.350339][T25454] usb 3-1: config 0 descriptor?? [ 2401.544771][T27405] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2401.552633][T27405] uvcvideo 2-1:220.0: No valid video chain found. [ 2401.559258][T27405] usb 2-1: selecting invalid altsetting 0 [ 2401.573300][T27405] usb 2-1: selecting invalid altsetting 0 [ 2401.579156][T27405] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2401.602125][T27405] usb 2-1: USB disconnect, device number 67 [ 2401.769232][T25454] hid (null): unknown global tag 0xd [ 2401.775035][T25454] hid (null): invalid report_size 22610 [ 2401.782683][T25454] hid (null): report_id 0 is invalid [ 2401.788007][T25454] hid (null): invalid report_count -737697329 [ 2401.985733][T25454] usb 3-1: USB disconnect, device number 64 [ 2401.999728][T21902] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2402.082441][T32630] misc userio: Invalid payload size [ 2402.149597][T21902] usb 1-1: Using ep0 maxpacket: 16 [ 2402.156772][T21902] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 2402.165109][T21902] usb 1-1: config 0 has no interface number 0 [ 2402.171276][T21902] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2402.181253][T21902] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2402.193438][T21902] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2402.202611][T21902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.210647][T21902] usb 1-1: Product: syz [ 2402.214834][T21902] usb 1-1: Manufacturer: syz [ 2402.219670][T21902] usb 1-1: SerialNumber: syz [ 2402.225963][T21902] usb 1-1: config 0 descriptor?? [ 2402.231783][T32628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2402.239080][T32628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2402.455525][T32628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2402.462971][T32628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2402.741093][T32637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2403.080758][T21902] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2403.096685][T21902] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2403.114324][T21902] asix 1-1:0.251: probe with driver asix failed with error -71 [ 2403.132949][T21902] usb 1-1: USB disconnect, device number 57 [ 2403.200177][T20605] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2403.252087][T32653] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5824'. [ 2403.368922][T20605] usb 3-1: Using ep0 maxpacket: 32 [ 2403.515498][T32656] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2404.229566][T20605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.243907][T20605] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2404.257839][T20605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.266015][T20605] usb 3-1: Product: syz [ 2404.270224][T20605] usb 3-1: Manufacturer: syz [ 2404.274823][T20605] usb 3-1: SerialNumber: syz [ 2404.282096][T20605] usb 3-1: config 0 descriptor?? [ 2404.290290][T20605] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2404.520856][T21902] libceph: connect (1)[c::]:6789 error -13 [ 2404.532967][T21902] libceph: mon0 (1)[c::]:6789 connect error [ 2404.585194][T32669] ceph: No mds server is up or the cluster is laggy [ 2404.603944][T32676] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2404.613791][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5830'. [ 2404.818752][T25454] libceph: connect (1)[c::]:6789 error -13 [ 2405.071646][T20605] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2405.079012][T25454] libceph: mon0 (1)[c::]:6789 connect error [ 2405.091030][T20605] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2405.281381][T32687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5819'. [ 2406.079669][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2406.089346][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.037230][T27405] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2407.267251][T27405] usb 1-1: Using ep0 maxpacket: 32 [ 2407.354122][T27405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2407.473325][T27405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2407.567556][T27405] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2407.646037][T27405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2407.691505][T27405] usb 1-1: config 0 descriptor?? [ 2407.714703][T20605] usb 3-1: USB disconnect, device number 65 [ 2408.029861][T32712] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2408.163089][T27405] koneplus 0003:1E7D:2D51.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 2408.655608][T27405] usb 1-1: USB disconnect, device number 58 [ 2409.250802][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2409.300291][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2409.553290][T32749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5844'. [ 2409.589582][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2409.597427][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2409.630664][T20605] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 2410.149281][T25402] libceph: connect (1)[c::]:6789 error -13 [ 2410.195592][T20605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2410.206755][T20605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2410.217139][T32734] ceph: No mds server is up or the cluster is laggy [ 2410.223927][T20605] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2410.245692][T25402] libceph: mon0 (1)[c::]:6789 connect error [ 2410.262852][T32731] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 2410.305509][T20605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.335485][T20605] usb 3-1: config 0 descriptor?? [ 2410.701774][T16393] vivid-007: reconnect [ 2410.729424][ T301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5852'. [ 2410.794036][T20605] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 2410.801699][ T301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5852'. [ 2410.828307][T20605] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 2411.048969][T27405] usb 3-1: USB disconnect, device number 66 [ 2411.195082][T20605] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2411.349427][ T319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2411.359990][T20605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2411.360138][ T319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2411.371633][T20605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2411.386042][ T319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2411.395538][T20605] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2411.396266][ T319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2411.409105][T20605] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2411.417404][ T319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2411.425312][T20605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.441345][T17930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2411.442981][T20605] usb 1-1: config 0 descriptor?? [ 2411.455088][T17930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2411.464034][T17930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2411.472141][T17930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2411.486166][T17930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2411.513177][ T30] audit: type=1400 audit(2000000999.214:4152): avc: denied { mounton } for pid=317 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2411.556414][ T317] lo speed is unknown, defaulting to 1000 [ 2411.709555][ T317] lo speed is unknown, defaulting to 1000 [ 2411.713224][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 2411.874518][T20605] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 2411.877501][ T317] chnl_net:caif_netlink_parms(): no params data found [ 2411.917224][T20605] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2412.013827][ T338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5863'. [ 2412.035282][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.050334][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.060977][ T317] bridge_slave_0: entered allmulticast mode [ 2412.133461][ T317] bridge_slave_0: entered promiscuous mode [ 2412.220389][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.236352][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 2412.248166][ T317] bridge_slave_1: entered allmulticast mode [ 2412.277324][ T317] bridge_slave_1: entered promiscuous mode [ 2412.395189][T20605] usb 1-1: USB disconnect, device number 59 [ 2412.556350][ T317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2412.581511][ T317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2412.632342][ T317] team0: Port device team_slave_0 added [ 2412.642282][ T317] team0: Port device team_slave_1 added [ 2412.667402][ T317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2412.674518][ T317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2412.700975][ T317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2412.712864][ T317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2412.720080][ T317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2412.747152][ T317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2412.786091][ T317] hsr_slave_0: entered promiscuous mode [ 2412.792284][ T317] hsr_slave_1: entered promiscuous mode [ 2412.798517][ T317] debugfs: 'hsr0' already exists in 'hsr' [ 2412.804500][ T317] Cannot create hsr debugfs directory [ 2412.874277][T32631] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 2412.958614][ T317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2412.971565][ T317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2412.982591][ T317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2412.995825][ T317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2412.995844][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'. [ 2413.027657][ T345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5865'. [ 2413.040082][T32631] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2413.049166][ T30] audit: type=1400 audit(2000001000.765:4153): avc: denied { read } for pid=344 comm="syz.0.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2413.049819][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2413.103558][T32631] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2413.128160][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2413.129327][ T317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2413.158142][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2413.171375][T32631] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2413.173227][ T317] 8021q: adding VLAN 0 to HW filter on device team0 [ 2413.187905][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2413.201352][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2413.208491][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2413.218217][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2413.219875][T32631] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2413.225394][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2413.245632][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2413.261161][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2413.261776][ T30] audit: type=1400 audit(2000001000.975:4154): avc: denied { egress } for pid=25402 comm="kworker/1:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2413.275254][T32631] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2413.297043][ T30] audit: type=1400 audit(2000001000.975:4155): avc: denied { sendto } for pid=25402 comm="kworker/1:0" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2413.311533][ T317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2413.336989][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2413.351381][T32631] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2413.363289][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2413.375978][T32631] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2413.390993][T32631] usb 3-1: string descriptor 0 read error: -22 [ 2413.397707][T32631] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2413.407226][T32631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.429615][T32631] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2413.497711][ T317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.578074][ T319] Bluetooth: hci0: command tx timeout [ 2413.686495][ T317] veth0_vlan: entered promiscuous mode [ 2413.702006][T25402] usb 3-1: USB disconnect, device number 67 [ 2413.702136][ T317] veth1_vlan: entered promiscuous mode [ 2413.744980][ T317] veth0_macvtap: entered promiscuous mode [ 2413.754166][ T317] veth1_macvtap: entered promiscuous mode [ 2413.775844][ T317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.788705][ T317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.801915][ T6146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.811183][ T6146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.832508][ T6146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.842279][ T6146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.955887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.971442][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.020378][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2414.030371][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2414.054973][ T30] audit: type=1400 audit(2000001001.765:4156): avc: denied { mounton } for pid=317 comm="syz-executor" path="/root/syzkaller.uqftih/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2414.093245][ T30] audit: type=1400 audit(2000001001.805:4157): avc: denied { mounton } for pid=317 comm="syz-executor" path="/root/syzkaller.uqftih/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2414.120546][ T30] audit: type=1400 audit(2000001001.805:4158): avc: denied { mounton } for pid=317 comm="syz-executor" path="/root/syzkaller.uqftih/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=104775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2414.167812][ T30] audit: type=1400 audit(2000001001.875:4159): avc: denied { mounton } for pid=317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2414.191141][ T30] audit: type=1400 audit(2000001001.885:4160): avc: denied { mount } for pid=317 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2414.301055][ T369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5858'. [ 2414.312436][ T369] veth0_macvtap: left promiscuous mode [ 2415.654394][ T319] Bluetooth: hci0: command 0x041b tx timeout [ 2417.731894][T17930] Bluetooth: hci0: command 0x041b tx timeout [ 2419.820952][T17930] Bluetooth: hci0: command 0x041b tx timeout [ 2421.889825][T17930] Bluetooth: hci0: command 0x041b tx timeout [ 2467.469055][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2467.478283][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.489169][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 2467.495417][ C0] CPU: 0 UID: 0 PID: 1296 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 2467.504415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2467.514452][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 2467.520557][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 2467.540140][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 2467.546181][ C0] RAX: 0000000000000001 RBX: ffffc90003f51000 RCX: ffffffff88cc359f [ 2467.554126][ C0] RDX: 0000000000000000 RSI: ffffffff88c9ddc0 RDI: 0000000000000004 [ 2467.562076][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 2467.570028][ C0] R10: 0000000000000001 R11: ffff88801e6a263c R12: ffff88801e6a2600 [ 2467.577974][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88cc34e0 [ 2467.585920][ C0] FS: 0000000000000000(0000) GS:ffff8881249d8000(0000) knlGS:0000000000000000 [ 2467.594827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2467.601397][ C0] CR2: 0000560655e2c168 CR3: 000000000e182000 CR4: 00000000003526f0 [ 2467.609354][ C0] Call Trace: [ 2467.612613][ C0] [ 2467.615447][ C0] comedi_buf_write_samples+0x3fc/0x640 [ 2467.620994][ C0] das16m1_handler+0x203/0x5a0 [ 2467.625750][ C0] das16m1_interrupt+0xb7/0x1c0 [ 2467.630584][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 2467.636031][ C0] __handle_irq_event_percpu+0x236/0x920 [ 2467.641649][ C0] handle_irq_event+0xab/0x1e0 [ 2467.646486][ C0] handle_edge_irq+0x3ca/0x9e0 [ 2467.651239][ C0] __common_interrupt+0xd0/0x2f0 [ 2467.656177][ C0] common_interrupt+0xba/0xe0 [ 2467.660849][ C0] [ 2467.663760][ C0] [ 2467.666681][ C0] asm_common_interrupt+0x26/0x40 [ 2467.671885][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2467.678297][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 c7 2f f6 48 89 df e8 8e 1b 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 26 20 f6 65 8b 05 7e 25 3b 08 85 c0 74 16 5b [ 2467.697980][ C0] RSP: 0018:ffffc9000489f808 EFLAGS: 00000246 [ 2467.704031][ C0] RAX: 0000000000000002 RBX: ffffffff9ae09360 RCX: 0000000000000002 [ 2467.711991][ C0] RDX: 0000000000000000 RSI: ffffffff8db032f7 RDI: ffffffff8bf1dec0 [ 2467.719961][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 2467.727916][ C0] R10: ffffffff908313d7 R11: 0000000000000001 R12: 0000000000000022 [ 2467.735869][ C0] R13: ffffffff9ae09468 R14: 0000000000000000 R15: 0000000000000003 [ 2467.743831][ C0] uart_write+0x2a4/0xb30 [ 2467.748150][ C0] ? __pfx_uart_write+0x10/0x10 [ 2467.752982][ C0] sl_xmit+0x6d1/0xf30 [ 2467.757037][ C0] ? __pfx_sl_xmit+0x10/0x10 [ 2467.761610][ C0] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 2467.767749][ C0] dev_hard_start_xmit+0x97/0x740 [ 2467.772757][ C0] sch_direct_xmit+0x1b2/0xcf0 [ 2467.777503][ C0] ? lock_acquire+0x179/0x350 [ 2467.782163][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 2467.787433][ C0] ? do_raw_spin_lock+0x230/0x2b0 [ 2467.792450][ C0] ? __dev_queue_xmit+0xaf1/0x4490 [ 2467.797544][ C0] __dev_queue_xmit+0x144d/0x4490 [ 2467.802553][ C0] ? console_unlock+0x184/0x210 [ 2467.807402][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2467.812591][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2467.817946][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2467.822867][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2467.827792][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2467.832806][ C0] ? rcu_is_watching+0x12/0xc0 [ 2467.837549][ C0] tx+0xcc/0x190 [ 2467.841078][ C0] ? __pfx_tx+0x10/0x10 [ 2467.845209][ C0] kthread+0x1e4/0x3e0 [ 2467.849257][ C0] ? find_held_lock+0x2b/0x80 [ 2467.853914][ C0] ? __pfx_kthread+0x10/0x10 [ 2467.858488][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 2467.864282][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2467.869466][ C0] ? __kthread_parkme+0x19e/0x250 [ 2467.874472][ C0] ? __pfx_kthread+0x10/0x10 [ 2467.879040][ C0] kthread+0x3c5/0x780 [ 2467.883102][ C0] ? __pfx_kthread+0x10/0x10 [ 2467.887677][ C0] ? rcu_is_watching+0x12/0xc0 [ 2467.892421][ C0] ? __pfx_kthread+0x10/0x10 [ 2467.896995][ C0] ret_from_fork+0x675/0x7d0 [ 2467.901590][ C0] ? __pfx_kthread+0x10/0x10 [ 2467.906163][ C0] ret_from_fork_asm+0x1a/0x30 [ 2467.910915][ C0] [ 2467.914087][ C0] Modules linked in: [ 2467.917967][ C0] ---[ end trace 0000000000000000 ]--- [ 2467.923401][ C0] RIP: 0010:comedi_buf_write_free+0x414/0x720 [ 2467.929463][ C0] Code: 02 00 00 31 d2 f7 74 24 1c 48 8b 54 24 30 48 c1 ea 03 0f b6 14 2a 41 03 44 24 38 84 d2 74 09 80 fa 03 0f 8e 66 02 00 00 31 d2 <41> f7 b4 24 80 00 00 00 48 8b 44 24 48 48 c1 e8 03 41 89 54 24 38 [ 2467.949065][ C0] RSP: 0018:ffffc90000007d20 EFLAGS: 00010046 [ 2467.955122][ C0] RAX: 0000000000000001 RBX: ffffc90003f51000 RCX: ffffffff88cc359f [ 2467.963103][ C0] RDX: 0000000000000000 RSI: ffffffff88c9ddc0 RDI: 0000000000000004 [ 2467.971055][ C0] RBP: dffffc0000000000 R08: 0000000000000004 R09: 0000000000000001 [ 2467.979007][ C0] R10: 0000000000000001 R11: ffff88801e6a263c R12: ffff88801e6a2600 [ 2467.986962][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffffffff88cc34e0 [ 2467.994928][ C0] FS: 0000000000000000(0000) GS:ffff8881249d8000(0000) knlGS:0000000000000000 [ 2468.003861][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2468.010440][ C0] CR2: 0000560655e2c168 CR3: 000000000e182000 CR4: 00000000003526f0 [ 2468.018401][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2468.025784][ C0] Kernel Offset: disabled [ 2468.030082][ C0] Rebooting in 86400 seconds..