last executing test programs: 13.323638324s ago: executing program 3 (id=5526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6c203, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000001fffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1eb0, 0x1c881, 0x8, 0xd1}) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x24, 0x523}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r8 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd4, 0x0, r7}) io_uring_enter(r8, 0x40221b, 0x7723, 0x36, 0x0, 0x0) 12.59897824s ago: executing program 1 (id=5529): msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000440)=0x7, 0x4) r0 = inotify_init1(0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xb, "81"}], 0x18}, 0x40) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000005c0)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = dup(r0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f00000000c0)) fchmod(r5, 0xd7) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000500)={{0x3, 0x1, 0xe, 0x9}, 0x86, [0x9, 0x80000001, 0x9, 0x6, 0x7, 0x8, 0x2, 0x0, 0x2, 0x8001, 0x3, 0x968, 0x62, 0x7, 0x0, 0x1, 0x1, 0xa72, 0x82, 0x5, 0xfff, 0x0, 0x10, 0x0, 0x0, 0x4, 0x4, 0x9, 0x8, 0x81, 0x5, 0x7fff, 0x8, 0x80000001, 0x101, 0x6, 0x1, 0x400, 0x40, 0x8c6e, 0x8, 0x6, 0x175, 0x6, 0x200, 0xfffffffe, 0xab8, 0xe1, 0x80, 0x1ff, 0x5, 0x5, 0x35, 0x8, 0xd, 0x0, 0x80, 0x0, 0xffff8000, 0x0, 0x1ff, 0x1, 0x1, 0x4, 0x3, 0xfffffffe, 0x9, 0x10001, 0x800, 0x2, 0x7, 0x4, 0x4, 0x3ac7, 0x1000, 0x79f2, 0x7, 0xffffffff, 0x5, 0x7f, 0x9, 0x8100000, 0xea15, 0xba, 0x3, 0x4, 0x9, 0x10000, 0x6, 0x6, 0xad8, 0x9, 0x42a, 0xfffffff7, 0xb, 0x40, 0x5, 0x3, 0x593ef46b, 0x13, 0x8, 0x5, 0x80, 0x53d, 0x7, 0x129da4f4, 0x50e, 0x40, 0x4, 0x0, 0x9, 0x5, 0x5, 0x5, 0xa45d, 0x9, 0x2, 0x3, 0x4, 0x6002, 0x7, 0x86a, 0x5, 0x8, 0x2, 0x99, 0x9, 0x1, 0x6, 0x200, 0x4, 0x1, 0xde, 0x3, 0x8e8, 0x7a5a, 0x7, 0x3, 0x80000001, 0x7f, 0x6, 0x1, 0x575, 0x9, 0x81, 0x0, 0x6, 0x4, 0x7, 0x674f, 0x625, 0xa, 0x9, 0x4, 0x69, 0xa, 0x2, 0x6, 0x7, 0x9, 0xfffffffa, 0x6, 0x8, 0x1, 0xd83, 0xffffffff, 0xffffffff, 0x8, 0x1, 0x9, 0x8, 0x2, 0x6, 0xaf, 0x7fffffff, 0x8, 0x0, 0x7, 0x2d52, 0x6, 0x2f8, 0x0, 0x9, 0xfffffffb, 0x8, 0x6, 0x2, 0x6, 0x2, 0x51, 0x0, 0x1, 0x7b, 0x83, 0x7fff, 0x57b6, 0xa8, 0x7, 0xf0e00000, 0x7, 0xc, 0x6, 0xfff, 0x4, 0x10000, 0x35, 0x6, 0x1000, 0xffffffff, 0x0, 0x8, 0x4, 0xffffff7f, 0xa, 0x7ff80000, 0x6, 0xc1, 0xa, 0x3, 0x3, 0x1, 0x0, 0x4, 0x9, 0x8, 0x5, 0x10001, 0x0, 0x3, 0xb36, 0x9, 0x5, 0x7fffffff, 0x3, 0x100, 0x9, 0x5, 0x8, 0x6, 0x0, 0x9, 0xffff8001, 0x7, 0x400, 0xff, 0x80, 0x6, 0x80, 0x1b, 0x0, 0x3, 0x1, 0x200, 0xffffff4f, 0xfff, 0x0, 0x8, 0x3, 0xfffffffe, 0x8, 0x0, 0x0, 0x101, 0x5, 0xc8, 0x9, 0x7, 0x8, 0x564, 0x2, 0x3, 0x9, 0x7, 0xf, 0x10001, 0x10001, 0x5, 0x2, 0xffffffff, 0x0, 0x10001, 0x4, 0x2424, 0x0, 0x6, 0x8, 0x8, 0x9, 0x3, 0x1, 0x81, 0x1, 0x3, 0x0, 0x7, 0xafa, 0x6, 0x3, 0x4765, 0x6, 0x200, 0x0, 0x8, 0x404e, 0xc000, 0xffff, 0x3, 0x9a30, 0xffff, 0x1ae3, 0x3, 0xe89, 0x3, 0x1, 0x3, 0x61c, 0x7ff, 0x7, 0x7ce8, 0x8, 0x2, 0x1, 0xc29, 0x80000000, 0x968c, 0x257a, 0x7, 0x28da7644, 0x5, 0xe, 0xfffffffd, 0x4, 0x5, 0x1, 0xf, 0x1, 0x9, 0xf, 0x99e79b34, 0x8001, 0x5, 0xfffffff2, 0x7, 0x5, 0x7, 0x1, 0x1, 0x9, 0x8001, 0x4, 0x6f7, 0x9, 0x0, 0xfff, 0xffffff01, 0x4, 0x8000, 0x7, 0xfffffffb, 0x3, 0x2, 0x5, 0x7f, 0x80, 0x803a, 0x3, 0x5, 0xaa2, 0x0, 0x7, 0x1, 0xfffff1ef, 0x80000000, 0x0, 0x3, 0x101, 0x7f, 0xfffffffe, 0xffffffff, 0x2, 0x2, 0xeb6b, 0x10001, 0x8, 0x1, 0x3, 0xffffff0f, 0x4, 0x10, 0x0, 0x7fffffff, 0x4, 0x0, 0xfffffff7, 0x27, 0x5, 0x3, 0xc, 0x0, 0x6, 0x8, 0x6, 0x401, 0x7, 0x10, 0x2, 0x100, 0x5, 0x5, 0xfffffffd, 0xff, 0x30e6000, 0x0, 0xe, 0x9, 0x7, 0x6, 0x2, 0x0, 0x1c000, 0xffff, 0x9127, 0x400, 0x6, 0x200, 0xa69, 0x8, 0xe, 0xc5e1e83a, 0x4, 0x2, 0x7, 0x80000000, 0x2, 0x9, 0xe8, 0xe6, 0x7, 0xa98a, 0x4, 0x8, 0x2, 0xfffffffa, 0xe, 0x8, 0x81, 0x3, 0x8, 0x7, 0x7, 0x5, 0xf, 0xc, 0x8462, 0x9, 0x16, 0x8000, 0x4, 0x2, 0xffffffff, 0x7, 0x699e, 0x3, 0xfffffffd, 0x2, 0x0, 0x3, 0xf, 0x2, 0x8, 0x7, 0x57, 0x6, 0x3d7, 0x6, 0x8, 0x4, 0x4, 0x9, 0x6, 0x4, 0x101, 0x7, 0x400, 0x6d, 0x4, 0x1, 0x80000000, 0x68, 0x228, 0x1, 0x7, 0xb, 0x7, 0xf, 0x4, 0x8, 0xfffffffa, 0x3, 0x1, 0x7fff, 0x3, 0xa, 0x6, 0xffff8000, 0x9, 0x0, 0x87a, 0x9, 0x0, 0x4, 0x0, 0x3f42, 0x7, 0x3ff, 0x2654, 0x800, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff7, 0xfffffff8, 0xfffffffc, 0x8000, 0x9, 0x7, 0x8000, 0x10001, 0xddf, 0x0, 0x2, 0x5, 0xd, 0x0, 0x4, 0xff, 0x0, 0x18, 0x40, 0x5, 0x1000, 0x300000, 0x87d, 0x0, 0x6, 0x1612, 0x2, 0x8, 0xdade, 0x1, 0x1, 0x5, 0x7, 0x26, 0x400, 0x9, 0x9, 0xa0d, 0x3, 0x3, 0xf0, 0x10001, 0x6, 0x1, 0x1, 0x1ff, 0x3, 0x288, 0x8, 0x9, 0x40, 0x4, 0x5, 0x10001, 0x80000000, 0x6, 0x2, 0xa, 0x3, 0xa9b6, 0x0, 0x0, 0x400, 0xf70e, 0x1, 0x1, 0x58, 0x7, 0x10000, 0xfffffffc, 0x1, 0x16, 0x4, 0x5, 0xfffffffa, 0x2, 0x7b8, 0x81, 0x9, 0x0, 0x5, 0x81, 0x8, 0x7, 0x6e61, 0x5, 0x10000, 0x6, 0x40, 0x2, 0x1, 0xfc, 0x1, 0x0, 0x8, 0x2, 0x0, 0xcf, 0x202f0d05, 0x6, 0x3f, 0x7fffffff, 0xff0, 0xfffffffa, 0x3, 0x400, 0x6, 0x1ff, 0x5, 0x4, 0x6, 0x2, 0x2877519b, 0x9, 0xffffff85, 0x9, 0x8, 0x10000, 0x5, 0x8, 0x1b9, 0x6, 0x4, 0xfffffffb, 0x4, 0xffffffff, 0x7, 0x401, 0x7ff, 0xfffffffd, 0x3, 0x6, 0x1, 0x4, 0x5, 0x8, 0x1ff, 0x6, 0x4, 0x80000000, 0x84c, 0x8, 0x4, 0x5, 0x1, 0xcc, 0x8001, 0x9, 0xc, 0x80, 0x10000, 0xfffffff7, 0x9ac, 0x8, 0xffff, 0x86d, 0xce4a, 0xa7d7, 0x6, 0x11, 0x8, 0xfff, 0x6, 0x6, 0x8001, 0x6, 0x2, 0x13, 0x9, 0xfffffffa, 0x4, 0x32, 0xa8c, 0x20cc, 0xa03, 0x1000, 0xfffffffb, 0x8001, 0x182, 0x8, 0xc9d, 0x716, 0x5, 0xf, 0xfffffff8, 0x9, 0x1, 0x9, 0x6, 0x3, 0x821, 0x8, 0x0, 0x1, 0x8, 0x10001, 0x1ff, 0x4, 0x3, 0x10, 0x3, 0x4, 0x7, 0x5, 0x10001, 0x2, 0x5, 0x4979, 0x10000, 0x26000, 0x2, 0x9, 0x7ff, 0x0, 0x5, 0x800, 0x2, 0x401, 0x10000, 0x2, 0x5, 0x7, 0x5, 0x2, 0x2, 0x87e2, 0xcf0, 0x1ff, 0x5, 0x9, 0x6bd9, 0x7, 0x7, 0x4, 0x6, 0x8, 0x52e, 0x76, 0x1, 0x1, 0x5070, 0xfffffffd, 0x100, 0x1000, 0x6, 0x2, 0xfffffff8, 0x5, 0x9, 0x31, 0xe, 0x2, 0xffff, 0x55e4, 0xf8, 0x10000, 0x9e, 0x3ff, 0x81, 0x8, 0xc, 0x4, 0x10001, 0x2, 0x0, 0xc9b, 0x7172, 0x6, 0x2, 0x4, 0xe, 0x5, 0xfffffffd, 0x3, 0x0, 0x80, 0x2, 0xf, 0x56, 0x1, 0x5, 0x0, 0xd, 0x80000001, 0x3, 0x3, 0x6, 0x99e, 0x1, 0xfffffff8, 0x4, 0x186, 0x3, 0x10001, 0xfffffffc, 0x3, 0x7, 0x0, 0x0, 0x2, 0x11c8, 0x8, 0xfffffff6, 0xbb, 0xa77b, 0xded, 0x7ff, 0x101, 0x7, 0x2, 0x9, 0xc1e6, 0x2, 0x1, 0x7d, 0x7, 0x1000, 0xee, 0x7, 0xb6, 0x5, 0x3, 0xb, 0x8000, 0x7, 0x8, 0xc, 0xac9, 0x9, 0x7, 0xe, 0x2, 0x3, 0xa, 0x4, 0x6, 0x1, 0x2, 0x6, 0x280000, 0x8, 0x3, 0x2, 0x3, 0x3ff, 0x10000, 0x1, 0x3, 0x9, 0x280a, 0x1, 0x5, 0x4, 0x5, 0x800, 0x4, 0x4, 0x5, 0x1, 0x135, 0x4, 0xd, 0x2, 0x9, 0x69d8, 0x4, 0xed9, 0x8001, 0x4, 0xd, 0x7, 0x10, 0x4, 0x3, 0x7c, 0x2, 0x5, 0xac72, 0x490, 0x6, 0x8001, 0x1, 0x8, 0x3, 0x8001, 0x6, 0x2, 0x3, 0x7, 0x7, 0x97, 0x7ff, 0x7, 0x4, 0x6, 0xe8, 0x98, 0x3779, 0x100, 0xb, 0x0, 0x40, 0x5, 0x10, 0x81, 0x0, 0xaafb, 0x2, 0x9, 0x0, 0xe85, 0x2, 0x9072, 0xfffffff8, 0x8, 0x1, 0x7, 0x5, 0x0, 0x3, 0x6, 0x0, 0x6, 0x7f, 0x400, 0x5, 0x2, 0x8, 0x3, 0x2, 0x3, 0x8, 0x9, 0x24, 0x8000, 0x7, 0x900, 0x5, 0x9c, 0x43d, 0xee, 0xb74c, 0xa, 0xfff, 0x1, 0x5a65, 0x200, 0x453, 0x5, 0x7, 0xc3, 0x100, 0x0, 0x4, 0x146a, 0x10, 0x40d4, 0x66c, 0x10000, 0x0, 0x5fb3, 0x8, 0xffff, 0x6, 0x7, 0x1, 0x6, 0x5, 0x0, 0x2, 0x2, 0x8, 0xfffeffff, 0x2, 0x56ba, 0x8, 0x2, 0xe3, 0x9, 0x8, 0xafa5, 0x101, 0x135ce9aa, 0x0, 0x0, 0x401, 0xfffffffd, 0x2, 0x9d8, 0xf, 0x4, 0x2, 0xc56f, 0x0, 0x3ff, 0x0, 0xdc, 0x1, 0x8, 0x400, 0x5, 0x1, 0x2]}) readv(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000340)=""/147, 0x93}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') lseek(r9, 0xae7d, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r11 = syz_genetlink_get_family_id$devlink(0x0, r9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000400)) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="84000000", @ANYRES8, @ANYBLOB="01042dbd7000fcdbdf2525000000080001007063690011000200303030303a30303a31", @ANYRES32=r9, @ANYBLOB="08000100706369300000000008008b000000000000000000000000000000000001d4a9880749a97370008920f077df72b0fd6020ed157160f676272c6b0ec8491a43c50491e8d6b649af992c6a6c8c19313acd09869227d208", @ANYRES16=r11, @ANYRES32=r9, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200c000}, 0x20040801) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 11.603928408s ago: executing program 3 (id=5534): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'trusted.', '\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 10.622461698s ago: executing program 3 (id=5537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.564343452s ago: executing program 1 (id=5541): setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) timerfd_create(0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1f}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x10}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x6, 0x6, 0xac11, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80, 0x400, 0x1, {0x0, r6}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.362511584s ago: executing program 3 (id=5542): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 5.71939376s ago: executing program 1 (id=5547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005600010600"], 0x1c}], 0x1}, 0x0) 4.802335041s ago: executing program 1 (id=5551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (fail_nth: 1) 4.107905152s ago: executing program 1 (id=5552): r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 2.970749399s ago: executing program 0 (id=5556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x3, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x3, 0xed0, 0x4}, {0x4, 0x400, 0x3a}, {0x1, 0x800, 0x80000000}], "668b13"}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0x2, [{0xe, 0x4, 0x100000}]}, @restrict={0x10}, @const={0x3, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000300)=""/181, 0x97, 0xb5, 0x0, 0x4, 0x10000}, 0x28) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000860000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.809002896s ago: executing program 0 (id=5558): r0 = fanotify_init(0x2, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8300, 0x48) fanotify_mark(r0, 0x444, 0x8000038, r2, 0x0) fanotify_mark(r0, 0x44d, 0x20, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket(0xa, 0x3, 0x3a) recvmmsg(r4, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000008bc0)=""/240, 0xf0}], 0x1}, 0x10}], 0x1, 0x2, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a0000000000000000000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.65931619s ago: executing program 4 (id=5559): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xffffffff}, 0x48) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg(r0, &(0x7f000000fdc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000008900)=""/206, 0xce}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 2.613995908s ago: executing program 3 (id=5560): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x40043d14, &(0x7f0000000040)) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4e, 0xa2, 0x8, 0x10, 0x55d, 0x9002, 0x235e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0x84, 0xb4}}]}}]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r1, 0x0, 0x200002) 2.451907637s ago: executing program 0 (id=5561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0857f9f582f03", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.417181904s ago: executing program 0 (id=5562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 2.314683239s ago: executing program 0 (id=5563): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r3, 0x0, 0x2000) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0x6}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) (async) fsopen(&(0x7f0000000000)='udf\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) read(r3, 0x0, 0x2000) (async) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0x6}) (async) 2.219943936s ago: executing program 4 (id=5564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.182126688s ago: executing program 4 (id=5565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/116, 0x74}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000500)=""/79, 0x4f}], 0x3, &(0x7f0000000640)=""/78, 0x4e}, 0xffff9afd}], 0x1, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0xc8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000024, 0x7ffffffe, 0x3fffffd, 0x8100000000000000, 0x0, 0x0, 0xc9}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0004040000010000ff010000002f060d00080180c2000002be0000e2c62ac38a1ad4060418689aaf34ad15c4bc56"], 0x33) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000879d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xfffffffffffffe61, 0x40040011, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c0c4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r3, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x20044810}, 0x4000090) epoll_create(0x1) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x7, 0x30, 0x3, 0x6, r4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8905, &(0x7f00000006c0)) 2.087827515s ago: executing program 0 (id=5566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x3, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0xfffffffffffffff9, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32, @ANYBLOB="0000000002000100240012800b0001006572737061ee00001400027a76e297b900b1252621673ebd7a5e"], 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416", @ANYRES32], 0x58) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.078657616s ago: executing program 2 (id=5567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x2, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.236341881s ago: executing program 2 (id=5568): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x5, 0x10000042, 0x9, 0xf7d1, 0x81, 0x2, 0x1, 0x9, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500800000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000002040)={{{@in=@multicast2, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x203d) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000780)={@default, @default, @bcast, 0x9, 0x7, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.151846705s ago: executing program 4 (id=5569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r1, 0x0, 0x0}, 0x10) 1.035937399s ago: executing program 4 (id=5570): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) 994.213984ms ago: executing program 4 (id=5571): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f0000000280)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 878.067645ms ago: executing program 2 (id=5572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0857f9f582f03", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 743.877543ms ago: executing program 2 (id=5573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 308.980903ms ago: executing program 3 (id=5574): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x88, 0xb, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x4c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xa, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x95, 0x7, 0x5b}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0x8, 0x7f, 0x20, 0x8}, 0xe3, &(0x7f0000000140)={0x5, 0xf, 0xe3, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x6, 0x9}, @generic={0x51, 0x10, 0x1, "3c29714203673e26cd7d0b99501824f2a640a8e48a7c2d8264b2f23ada2120e1b4152988094790afd67ff31481301dae8704e9e49a7fd51240b80017476161b6d6808a55a357abea266436ed315f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x27, 0x3, 0x0, 0x6}, @generic={0x61, 0x10, 0x4, "0455f5ead8e502b8ad97906c3b95fda5f1914b45cc71fb867ee948fdd1b0ecd9dada8d59116952dfcd3ab093fab94e043157e6b918b607cfedc3c14c8d5ea9622dcdf45828f2f55ff40a4172bbc88fc98427d58f0cbc15fc926089e387b1"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7fff, 0xff00, 0x5, [0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x8, 0x7}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x80, &(0x7f0000000240)=@string={0x80, 0x3, "7e9c8cfbf4968505552c5368cf31c5ec9d5c1e6d8c81301916b90abc838416d74bf4a1f00e0ed21d9cd02384d7c814b3b7d418b17e5324bf6addb91818b82e18dd349247537a9975de4b20fa9f444d8d655d23feb925a81ba849aa5fde140e6dd1a0fe3d8590ee9e1d08edaf8cd523e3b922ad7652dbb46c30add4880a1f"}}, {0xbd, &(0x7f0000000380)=@string={0xbd, 0x3, "72f8989c5a21902d7399a92a223ee60cca944a2ca2915ecdf112de8d2b7d0829698077573f72351f7a91ebcaebb577f478f0125569926ac7ab3746f79b83c9fb66ed41c0c11804c33f9037c864fea416256d289b43ec7bcd66ee162e797690789a640fb9f65f5ab3143994d724e21bdb6e139547402c0a5c37fc38be576ccc0df88dc932a6adc7112984593d0aba13fe26e29f4c416f2bba63419a2f9db0c20b672fe9c1ff2050a1413827ed60cd83d3993dc326140fd7300ea7ce"}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0xb, 0x0, 0x7, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000640)='syzkaller\x00', 0x9, 0x96, &(0x7f0000000700)=""/150, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x5, 0xf}, {0x0, 0x3, 0xb, 0x9}, {0x0, 0x5, 0xc, 0xd0a5a037dfe09ddb}, {0x1, 0x2, 0xf, 0x3}, {0x4, 0x1, 0x5, 0xc}, {0x4, 0x3, 0xb, 0x9}, {0x0, 0x5, 0x2, 0x5}, {0x5, 0x5, 0x8, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000080)='cachefiles_vfs_error\x00', r4, 0x0, 0x2}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000000065"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x0, 0xb, 0xa, {0xa, 0x5, "830dc80c774a0b27"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000540)={0x20, 0xe, 0x36, "2ab26790645e294eb103a7fd91077ac9723a637e21c9782d7c3b32316d4d8202593865edf791656202e83b2872af4a14751887a946bf"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xd}}) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "afdb0b26"}]}}, 0x0}, 0x0) 210.505713ms ago: executing program 2 (id=5575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff1f, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000050248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 200.951133ms ago: executing program 1 (id=5576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 2 (id=5577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "4c823d0426cf6b850e0f818201006dfb3aaafc99228cd0fd2af81e472f43ddb3fc33509ae39ab2776705c8431c3a7cf775"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) kernel console output (not intermixed with test programs): m state. [ 1033.009187][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1033.049461][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1033.116607][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1033.129353][ T10] usb 5-1: media controller created [ 1033.145548][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1033.209005][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1033.286709][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1033.792106][T22038] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1034.277832][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 1034.290548][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1034.297478][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1034.836189][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1034.845565][ T10] dvb-usb: error while querying for an remote control event. [ 1035.012592][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.051055][ T10] dvb-usb: error while querying for an remote control event. [ 1035.296038][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1035.449959][ T10] dvb-usb: error while querying for an remote control event. [ 1035.699266][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1036.200956][ T10] dvb-usb: error while querying for an remote control event. [ 1036.273348][T11491] usb 5-1: USB disconnect, device number 63 [ 1036.314968][T11491] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1037.143195][T22080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4646'. [ 1037.153069][T22080] openvswitch: netlink: Flow key attr not present in new flow. [ 1037.277165][T22089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4651'. [ 1037.333264][T22090] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1037.339402][T22090] syzkaller1: Linktype set failed because interface is up [ 1037.349573][ T10] syzkaller1: tun_net_xmit 90 [ 1037.901653][T13782] Bluetooth: Error in BCSP hdr checksum [ 1038.093924][T11491] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1038.163419][ T13] syzkaller1: tun_net_xmit 86 [ 1038.304234][ T10] syzkaller1: tun_net_xmit 90 [ 1038.499059][T11491] usb 3-1: Using ep0 maxpacket: 32 [ 1038.526603][T11491] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.647697][T11491] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1038.677992][T11491] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1038.755909][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1039.140417][T11491] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1039.161974][T11491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.179868][T11491] usb 3-1: config 0 descriptor?? [ 1039.559289][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1039.616920][T11491] wacom 0003:056A:0094.001D: unknown main item tag 0x0 [ 1039.631574][T11491] wacom 0003:056A:0094.001D: unknown main item tag 0x0 [ 1039.638854][T11491] wacom 0003:056A:0094.001D: unknown main item tag 0x0 [ 1039.650191][T11491] wacom 0003:056A:0094.001D: unknown main item tag 0x0 [ 1039.657054][T11491] wacom 0003:056A:0094.001D: unknown main item tag 0x0 [ 1039.666723][T11491] wacom 0003:056A:0094.001D: Using device in hidraw-only mode [ 1039.686510][T11491] wacom 0003:056A:0094.001D: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 1039.832445][T11491] usb 3-1: USB disconnect, device number 45 [ 1041.737614][T22178] syzkaller0: entered promiscuous mode [ 1041.746191][T22178] syzkaller0: entered allmulticast mode [ 1042.680891][T22197] tipc: Enabling of bearer rejected, failed to enable media [ 1042.857240][T22197] syzkaller0: entered promiscuous mode [ 1042.932970][T22197] syzkaller0: entered allmulticast mode [ 1043.981824][T22213] ceph: No mds server is up or the cluster is laggy [ 1044.034942][T22210] ceph: No mds server is up or the cluster is laggy [ 1044.438144][ T30] audit: type=1400 audit(1759035352.489:1534): avc: granted { setsecparam } for pid=22226 comm="syz.4.4690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1046.933575][T22276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.215213][T22284] tc_dump_action: action bad kind [ 1047.242803][T22266] ceph: No mds server is up or the cluster is laggy [ 1047.242850][T22264] ceph: No mds server is up or the cluster is laggy [ 1048.681199][T22306] syzkaller0: entered promiscuous mode [ 1048.697185][T22306] syzkaller0: entered allmulticast mode [ 1048.708239][ T30] audit: type=1400 audit(1759035356.759:1535): avc: granted { setsecparam } for pid=22310 comm="syz.4.4714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1049.104559][T22322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1049.236097][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1049.244076][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1049.251493][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1049.257912][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1049.286709][T22331] ceph: No mds server is up or the cluster is laggy [ 1049.300302][ T5932] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1049.517266][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.529252][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1049.539098][ T5932] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1049.551060][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.571564][ T5932] usb 1-1: config 0 descriptor?? [ 1049.595294][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1049.603617][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 1049.626748][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1049.637960][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1049.646091][ T5932] usb 1-1: media controller created [ 1049.653032][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1049.672124][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 1049.683990][T22338] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1049.692653][T22338] syzkaller1: Linktype set failed because interface is up [ 1049.692985][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1049.700385][ T5910] syzkaller1: tun_net_xmit 90 [ 1049.746319][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 1049.776670][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 1049.780027][T11803] syzkaller1: tun_net_xmit 86 [ 1049.801346][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1049.959176][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 1049.978104][ T5932] dvb-usb: error while querying for an remote control event. [ 1050.149525][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 1050.193454][ T5932] dvb-usb: error while querying for an remote control event. [ 1050.429303][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1050.438410][ T10] dvb-usb: error while querying for an remote control event. [ 1050.749906][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1050.787407][ T10] dvb-usb: error while querying for an remote control event. [ 1050.999288][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1051.033220][ T10] dvb-usb: error while querying for an remote control event. [ 1051.255120][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1051.480630][ T10] dvb-usb: error while querying for an remote control event. [ 1051.846735][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1051.911398][ T10] dvb-usb: error while querying for an remote control event. [ 1052.127721][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1052.134109][ T10] dvb-usb: error while querying for an remote control event. [ 1052.311192][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1052.349345][ T10] dvb-usb: error while querying for an remote control event. [ 1052.396755][ T10] usb 1-1: USB disconnect, device number 61 [ 1052.418113][ T30] audit: type=1400 audit(1759035360.469:1536): avc: granted { setsecparam } for pid=22368 comm="syz.0.4730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1052.457196][T22366] syzkaller0: entered promiscuous mode [ 1052.469096][T22366] syzkaller0: entered allmulticast mode [ 1052.799906][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1053.937822][T22397] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4738'. [ 1053.954428][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.960939][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.991179][T22397] SQUASHFS error: Failed to read block 0x0: -5 [ 1053.997766][T22397] unable to read squashfs_super_block [ 1056.088238][ T30] audit: type=1400 audit(1759035364.139:1537): avc: granted { setsecparam } for pid=22419 comm="syz.1.4744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1057.324216][T22432] syzkaller0: entered promiscuous mode [ 1057.329851][T22432] syzkaller0: entered allmulticast mode [ 1057.417308][T22437] syzkaller0: entered promiscuous mode [ 1057.424588][T22437] syzkaller0: entered allmulticast mode [ 1057.756641][T22447] overlayfs: failed to resolve './file1': -2 [ 1059.395589][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4755'. [ 1060.209295][T22474] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1060.541537][T22461] SQUASHFS error: Failed to read block 0x0: -5 [ 1060.547711][T22461] unable to read squashfs_super_block [ 1060.553277][ T30] audit: type=1400 audit(1759035368.599:1538): avc: granted { setsecparam } for pid=22478 comm="syz.3.4759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1061.953049][T22492] syzkaller0: entered promiscuous mode [ 1061.958753][T22492] syzkaller0: entered allmulticast mode [ 1063.228392][T22505] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4765'. [ 1063.759273][T22505] SQUASHFS error: Failed to read block 0x0: -5 [ 1063.766013][T22505] unable to read squashfs_super_block [ 1064.342821][ T30] audit: type=1400 audit(1759035372.399:1539): avc: granted { setsecparam } for pid=22530 comm="syz.1.4773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1064.528446][T22537] overlayfs: failed to resolve './file0': -2 [ 1065.165048][T22550] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1065.187226][T22550] SQUASHFS error: Failed to read block 0x0: -5 [ 1065.196246][T22550] unable to read squashfs_super_block [ 1065.448441][T22547] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1065.457302][T22547] syzkaller1: Linktype set failed because interface is up [ 1065.469419][ T5917] syzkaller1: tun_net_xmit 90 [ 1065.589711][ T5917] syzkaller1: tun_net_xmit 90 [ 1066.879129][T13819] syzkaller1: tun_net_xmit 86 [ 1068.169184][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1068.419603][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1068.427290][ T10] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.442572][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1068.457000][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1068.483656][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1068.493801][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.625081][ T10] usb 3-1: config 0 descriptor?? [ 1069.565658][ T10] wacom 0003:056A:0094.001E: unknown main item tag 0x0 [ 1069.576068][ T10] wacom 0003:056A:0094.001E: unknown main item tag 0x0 [ 1069.583259][ T10] wacom 0003:056A:0094.001E: unknown main item tag 0x0 [ 1069.590383][ T10] wacom 0003:056A:0094.001E: unknown main item tag 0x0 [ 1069.598818][ T10] wacom 0003:056A:0094.001E: unknown main item tag 0x0 [ 1069.606442][ T10] wacom 0003:056A:0094.001E: Using device in hidraw-only mode [ 1069.623876][ T10] wacom 0003:056A:0094.001E: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 1069.647819][ T10] usb 3-1: USB disconnect, device number 46 [ 1069.719825][T22616] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1069.725642][T22616] syzkaller1: Linktype set failed because interface is up [ 1069.739279][ T5917] syzkaller1: tun_net_xmit 90 [ 1069.765239][T13822] syzkaller1: tun_net_xmit 86 [ 1069.778563][T22615] fido_id[22615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1069.983740][T22620] syzkaller0: entered promiscuous mode [ 1070.042835][T22620] syzkaller0: entered allmulticast mode [ 1070.679375][ T10] syzkaller1: tun_net_xmit 90 [ 1071.804853][ T5910] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1072.383056][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.414333][T22659] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4808'. [ 1072.436004][ T5910] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1072.437515][T22659] SQUASHFS error: Failed to read block 0x0: -5 [ 1072.454483][T22659] unable to read squashfs_super_block [ 1072.460250][ T5910] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1072.469842][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.629379][ T5910] usb 3-1: config 0 descriptor?? [ 1072.688025][ T5910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1072.813299][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 1073.011379][ T5910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1073.034299][ T5910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1074.312900][ T5910] usb 3-1: media controller created [ 1074.354728][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1074.450011][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 1074.483987][ T5910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1074.500590][T22673] tipc: Enabled bearer , priority 0 [ 1074.531376][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 1074.550390][T22673] syzkaller0: entered promiscuous mode [ 1074.583720][T22673] syzkaller0: entered allmulticast mode [ 1074.628764][ T5910] dvb-usb: schedule remote query interval to 150 msecs. [ 1074.668202][ T5910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1074.676782][T22673] tipc: Resetting bearer [ 1074.699304][T22679] syzkaller0: entered promiscuous mode [ 1074.709570][T22679] syzkaller0: entered allmulticast mode [ 1074.819825][T11494] dvb-usb: bulk message failed: -22 (1/0) [ 1074.990621][T11494] dvb-usb: error while querying for an remote control event. [ 1075.014322][ T5910] usb 3-1: USB disconnect, device number 47 [ 1075.046742][T22672] tipc: Resetting bearer [ 1075.077628][ T5910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1075.108595][T22672] tipc: Disabling bearer [ 1075.482741][ T30] audit: type=1400 audit(1759035383.519:1540): avc: granted { setsecparam } for pid=22693 comm="syz.0.4819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1076.818161][T22706] ceph: No mds server is up or the cluster is laggy [ 1076.825845][T22709] ceph: No mds server is up or the cluster is laggy [ 1077.050381][T22711] SQUASHFS error: Failed to read block 0x0: -5 [ 1077.056559][T22711] unable to read squashfs_super_block [ 1077.324087][T22730] tipc: Enabled bearer , priority 0 [ 1077.348287][T22730] tipc: Resetting bearer [ 1077.442594][T22729] tipc: Disabling bearer [ 1077.528832][T22733] syzkaller0: entered promiscuous mode [ 1077.552964][T22733] syzkaller0: entered allmulticast mode [ 1077.617712][T22737] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4830'. [ 1077.678721][T22737] SQUASHFS error: Failed to read block 0x0: -5 [ 1077.694193][T22737] unable to read squashfs_super_block [ 1078.179628][ T30] audit: type=1400 audit(1759035386.239:1541): avc: granted { setsecparam } for pid=22744 comm="syz.2.4832" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1078.725627][T22760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.991473][T22768] tipc: Enabling of bearer rejected, failed to enable media [ 1079.152393][T22771] syzkaller0: entered promiscuous mode [ 1079.177023][T22771] syzkaller0: entered allmulticast mode [ 1079.336816][T22763] SQUASHFS error: Failed to read block 0x0: -5 [ 1079.343076][T22763] unable to read squashfs_super_block [ 1079.534639][T22778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4842'. [ 1079.571854][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4841'. [ 1079.636059][T22778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1081.279436][ T30] audit: type=1400 audit(1759035389.329:1542): avc: granted { setsecparam } for pid=22795 comm="syz.1.4847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1082.349258][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1082.699230][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1082.710380][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1082.748182][ T10] usb 3-1: config 0 has no interface number 0 [ 1082.768381][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.776156][T22825] tipc: Enabling of bearer rejected, failed to enable media [ 1082.804384][T22825] syzkaller0: entered promiscuous mode [ 1082.806053][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1082.817984][T22825] syzkaller0: entered allmulticast mode [ 1082.864659][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.885804][ T10] usb 3-1: Product: syz [ 1082.894465][ T10] usb 3-1: Manufacturer: syz [ 1082.905474][ T10] usb 3-1: SerialNumber: syz [ 1082.922798][ T10] usb 3-1: config 0 descriptor?? [ 1082.947328][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1082.970260][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 1083.022404][T22828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1083.589295][T11488] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1083.839128][T11488] usb 5-1: Using ep0 maxpacket: 32 [ 1084.011569][T11488] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1084.029820][T11488] usb 5-1: config 0 has no interface number 0 [ 1084.037203][T11488] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.069498][T11488] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1084.078694][T11488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.103310][T11488] usb 5-1: Product: syz [ 1084.216503][T11488] usb 5-1: Manufacturer: syz [ 1084.255167][T11488] usb 5-1: SerialNumber: syz [ 1084.279592][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1084.307678][T11488] usb 5-1: config 0 descriptor?? [ 1084.436542][T11488] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1084.482536][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1084.500611][T11488] em28xx 5-1:0.132: Video interface 132 found: [ 1084.504734][T22844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4860'. [ 1084.508882][ T10] em28xx 3-1:0.132: board has no eeprom [ 1084.589487][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1084.614766][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 1084.622696][ T5917] em28xx 3-1:0.132: Registering V4L2 extension [ 1084.792907][T11494] usb 3-1: USB disconnect, device number 48 [ 1084.813524][T11494] em28xx 3-1:0.132: Disconnecting em28xx [ 1085.736890][T11488] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1085.815677][T11488] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1085.855626][T11488] em28xx 5-1:0.132: board has no eeprom [ 1085.949243][T11488] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1086.127738][T11488] em28xx 5-1:0.132: analog set to bulk mode. [ 1086.733381][ T5917] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1086.761655][T11488] usb 5-1: USB disconnect, device number 64 [ 1086.776857][ T5917] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1086.833189][T11488] em28xx 5-1:0.132: Disconnecting em28xx [ 1086.843632][ T5917] em28xx 3-1:0.132: No AC97 audio processor [ 1086.892314][ T5917] usb 3-1: Decoder not found [ 1086.896911][ T5917] em28xx 3-1:0.132: failed to create media graph [ 1086.976296][ T5917] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1087.089506][ T5917] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1087.132799][ T5932] em28xx 5-1:0.132: Registering V4L2 extension [ 1087.835536][ T5917] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1088.054975][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.112310][T22878] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1088.139475][ T5917] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1088.625539][ T5932] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1088.639132][ T5932] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1088.647429][ T5932] em28xx 5-1:0.132: No AC97 audio processor [ 1088.653895][ T5917] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1088.679140][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.699504][ T5932] usb 5-1: Decoder not found [ 1088.704096][ T5932] em28xx 5-1:0.132: failed to create media graph [ 1088.738719][ T5917] usb 2-1: config 0 descriptor?? [ 1088.783730][ T5932] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1088.802332][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1088.808944][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 1088.846242][ T5932] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1088.928600][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1088.938478][T11488] em28xx 5-1:0.132: Closing input extension [ 1088.979282][T11494] em28xx 3-1:0.132: Closing input extension [ 1088.982583][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1089.000235][T11494] em28xx 3-1:0.132: Freeing device [ 1089.000618][T11488] em28xx 5-1:0.132: Freeing device [ 1089.048086][ T5917] usb 2-1: media controller created [ 1089.071580][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.185221][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 1089.207436][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1089.250089][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 1089.288822][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 1089.339995][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1089.420409][ T5917] usb 2-1: USB disconnect, device number 60 [ 1089.495606][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1090.775413][T11494] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1091.009149][T11494] usb 1-1: Using ep0 maxpacket: 32 [ 1091.020740][T11494] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1091.059185][T11494] usb 1-1: config 0 has no interface number 0 [ 1091.065300][T11494] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1091.104899][T11494] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1091.129986][T11494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.137973][T11494] usb 1-1: Product: syz [ 1091.256458][T11494] usb 1-1: Manufacturer: syz [ 1091.265960][T11494] usb 1-1: SerialNumber: syz [ 1091.274018][T11494] usb 1-1: config 0 descriptor?? [ 1091.282812][T11494] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1091.309126][T11494] em28xx 1-1:0.132: Video interface 132 found: [ 1091.379169][T11491] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1091.543450][T11491] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.570955][T11491] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1091.604688][T11491] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1091.640366][T11491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.704400][T11491] usb 5-1: config 0 descriptor?? [ 1091.728732][T11491] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1091.756128][T11491] dvb-usb: bulk message failed: -22 (3/0) [ 1091.785810][T11491] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1091.806086][T11491] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1091.815106][T11491] usb 5-1: media controller created [ 1091.847034][T11491] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.901390][T11491] dvb-usb: bulk message failed: -22 (6/0) [ 1091.923876][T11491] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1091.971653][T11491] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 1092.048022][T11491] dvb-usb: schedule remote query interval to 150 msecs. [ 1092.082133][T11491] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1092.239220][T11491] dvb-usb: bulk message failed: -22 (1/0) [ 1092.267855][T11491] dvb-usb: error while querying for an remote control event. [ 1092.459482][T11491] dvb-usb: bulk message failed: -22 (1/0) [ 1092.600072][T11494] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1092.735517][T11491] dvb-usb: error while querying for an remote control event. [ 1092.894158][T11494] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1092.906066][T11494] em28xx 1-1:0.132: board has no eeprom [ 1092.939368][T11491] dvb-usb: bulk message failed: -22 (1/0) [ 1092.945493][T11491] dvb-usb: error while querying for an remote control event. [ 1092.997963][T11494] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1093.073583][T11494] em28xx 1-1:0.132: analog set to bulk mode. [ 1093.115517][T11491] em28xx 1-1:0.132: Registering V4L2 extension [ 1093.219285][T11489] dvb-usb: bulk message failed: -22 (1/0) [ 1093.248352][T11494] usb 1-1: USB disconnect, device number 62 [ 1093.310461][T11489] dvb-usb: error while querying for an remote control event. [ 1093.448989][T11494] em28xx 1-1:0.132: Disconnecting em28xx [ 1093.461997][T22945] syzkaller0: entered promiscuous mode [ 1093.481515][T22945] syzkaller0: entered allmulticast mode [ 1093.629207][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1093.634956][ T5910] dvb-usb: error while querying for an remote control event. [ 1094.022704][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1094.028437][ T5910] dvb-usb: error while querying for an remote control event. [ 1095.138651][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1095.207887][ T5910] dvb-usb: error while querying for an remote control event. [ 1095.293689][ T5932] usb 5-1: USB disconnect, device number 65 [ 1095.460181][ T5932] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1095.494943][T11491] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1095.530209][T22956] ceph: No mds server is up or the cluster is laggy [ 1095.544691][T11491] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1095.564059][T11491] em28xx 1-1:0.132: No AC97 audio processor [ 1095.608551][T22958] ceph: No mds server is up or the cluster is laggy [ 1095.660983][T11491] usb 1-1: Decoder not found [ 1095.696739][T11491] em28xx 1-1:0.132: failed to create media graph [ 1095.743521][T11491] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1095.777830][T11491] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1095.803045][T11494] em28xx 1-1:0.132: Closing input extension [ 1095.832528][T11494] em28xx 1-1:0.132: Freeing device [ 1096.979252][T11494] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1097.182608][ T5852] Bluetooth: hci0: ISO packet for unknown connection handle 4041 [ 1097.379509][T11494] usb 5-1: Using ep0 maxpacket: 32 [ 1097.435131][T11494] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1098.056234][T11494] usb 5-1: config 0 has no interface number 0 [ 1098.063192][T11494] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1098.069240][ T5932] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1098.076051][T11494] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1098.090150][T11494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.098133][T11494] usb 5-1: Product: syz [ 1098.106053][T11494] usb 5-1: Manufacturer: syz [ 1098.110830][T11494] usb 5-1: SerialNumber: syz [ 1098.117529][T11494] usb 5-1: config 0 descriptor?? [ 1098.136452][T11494] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1098.146386][T11494] em28xx 5-1:0.132: Video interface 132 found: [ 1098.440463][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 1098.541387][ T5910] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1098.780209][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.839540][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1098.848578][ T5932] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1098.862058][ T5932] usb 1-1: config 0 has no interface number 0 [ 1098.874975][ T5910] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1098.875515][ T5932] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1098.884864][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.905990][ T5910] usb 4-1: config 0 descriptor?? [ 1098.917326][ T5910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1098.926521][ T5932] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1098.936552][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 1098.944914][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.958378][ T5910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1098.961312][ T5932] usb 1-1: Product: syz [ 1098.970998][ T5932] usb 1-1: Manufacturer: syz [ 1098.971627][ T5910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1098.975680][ T5932] usb 1-1: SerialNumber: syz [ 1098.999867][ T5932] usb 1-1: config 0 descriptor?? [ 1099.003390][ T5910] usb 4-1: media controller created [ 1099.012830][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.012847][ T5932] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1099.114279][ T5932] em28xx 1-1:0.132: Video interface 132 found: [ 1099.244121][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 1099.430912][ T5910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1099.445281][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 1099.476888][ T5910] dvb-usb: schedule remote query interval to 150 msecs. [ 1099.489599][T11494] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1099.499269][ T5917] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1099.537403][ T5910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1099.636670][T11494] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1099.689296][T11491] dvb-usb: bulk message failed: -22 (1/0) [ 1099.741624][ T5910] usb 4-1: USB disconnect, device number 65 [ 1099.774567][T11491] dvb-usb: error while querying for an remote control event. [ 1099.815458][T11494] em28xx 5-1:0.132: board has no eeprom [ 1100.040806][ T5910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1100.079539][T11494] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1100.105385][T11494] em28xx 5-1:0.132: analog set to bulk mode. [ 1100.153770][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.178472][ T5917] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1100.189699][T11491] em28xx 5-1:0.132: Registering V4L2 extension [ 1100.208195][T11494] usb 5-1: USB disconnect, device number 66 [ 1100.218917][T11494] em28xx 5-1:0.132: Disconnecting em28xx [ 1100.359643][ T5932] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1100.413254][ T5917] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1101.720625][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.754510][ T5932] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1101.763812][ T5917] usb 2-1: config 0 descriptor?? [ 1101.768920][ T5932] em28xx 1-1:0.132: board has no eeprom [ 1101.775830][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1101.782628][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 1101.797803][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1101.841312][ T5932] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1102.132435][ T5932] em28xx 1-1:0.132: analog set to bulk mode. [ 1102.149486][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1102.181922][ T5932] usb 1-1: USB disconnect, device number 63 [ 1102.187863][ T5917] usb 2-1: media controller created [ 1102.194137][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 1102.195082][ T5932] em28xx 1-1:0.132: Disconnecting em28xx [ 1102.200370][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 1102.217427][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1102.243608][T23041] ceph: No mds server is up or the cluster is laggy [ 1102.253243][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 1102.259017][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1102.270012][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 1102.441245][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 1102.448184][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1102.528428][ T5917] usb 2-1: USB disconnect, device number 61 [ 1102.554716][T11491] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1102.757103][T11491] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1102.792841][T11491] em28xx 5-1:0.132: No AC97 audio processor [ 1102.943615][T11491] usb 5-1: Decoder not found [ 1103.428265][T11491] em28xx 5-1:0.132: failed to create media graph [ 1103.469011][T11491] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1103.478724][T11491] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1103.489619][T11488] em28xx 1-1:0.132: Registering V4L2 extension [ 1103.519133][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1104.651466][T11488] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1104.710799][T11488] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1104.739279][T11488] em28xx 1-1:0.132: No AC97 audio processor [ 1104.803372][T11488] usb 1-1: Decoder not found [ 1104.807979][T11488] em28xx 1-1:0.132: failed to create media graph [ 1104.814361][T23076] ceph: No mds server is up or the cluster is laggy [ 1104.821170][T11488] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1104.851089][T11488] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1104.860738][ T5932] em28xx 1-1:0.132: Closing input extension [ 1104.866640][T11494] em28xx 5-1:0.132: Closing input extension [ 1104.869202][ T5932] em28xx 1-1:0.132: Freeing device [ 1104.914392][T11494] em28xx 5-1:0.132: Freeing device [ 1105.166363][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4917'. [ 1105.699531][ T30] audit: type=1400 audit(1759035413.749:1543): avc: granted { setsecparam } for pid=23094 comm="syz.0.4919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1107.083199][T23117] SQUASHFS error: Failed to read block 0x0: -5 [ 1107.096953][T23117] unable to read squashfs_super_block [ 1111.110578][T23178] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1111.223404][T23178] SQUASHFS error: Failed to read block 0x0: -5 [ 1111.237359][T23178] unable to read squashfs_super_block [ 1112.784061][T23199] ceph: No mds server is up or the cluster is laggy [ 1112.787915][T23201] ceph: No mds server is up or the cluster is laggy [ 1114.842067][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1115.323283][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.330118][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.258971][T23262] tc_dump_action: action bad kind [ 1117.636802][T23271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1117.652981][T23271] syzkaller1: Linktype set failed because interface is up [ 1117.669513][T11488] syzkaller1: tun_net_xmit 90 [ 1117.789340][T11488] syzkaller1: tun_net_xmit 90 [ 1117.984644][ T13] syzkaller1: tun_net_xmit 86 [ 1119.003256][T13795] syzkaller1: tun_net_xmit 90 [ 1119.008097][T13795] syzkaller1: tun_net_xmit 70 [ 1120.375884][T23309] SQUASHFS error: Failed to read block 0x0: -5 [ 1120.380401][T23311] SQUASHFS error: Failed to read block 0x0: -5 [ 1120.389050][T23309] unable to read squashfs_super_block [ 1120.389843][T23311] unable to read squashfs_super_block [ 1120.689275][T23292] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4975'. [ 1120.707324][T23308] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4978'. [ 1120.873141][T23319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1121.333712][T23334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4986'. [ 1121.961581][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1122.030277][T23332] ceph: No mds server is up or the cluster is laggy [ 1122.031472][T11491] libceph: connect (1)[b::]:6789 error -101 [ 1122.044617][T11491] libceph: mon0 (1)[b::]:6789 connect error [ 1122.068375][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1122.071894][T23336] ceph: No mds server is up or the cluster is laggy [ 1123.685289][T23357] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1123.691906][T23357] syzkaller1: Linktype set failed because interface is up [ 1123.775666][ T5988] syzkaller1: tun_net_xmit 90 [ 1123.799150][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1123.952519][T23366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4994'. [ 1123.982097][T23364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1124.016294][T23364] SQUASHFS error: Failed to read block 0x0: -5 [ 1124.025947][T23364] unable to read squashfs_super_block [ 1124.408726][T13803] syzkaller1: tun_net_xmit 86 [ 1124.645747][T23373] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1124.661904][T23373] SQUASHFS error: Failed to read block 0x0: -5 [ 1124.668081][T23373] unable to read squashfs_super_block [ 1126.960492][T11494] libceph: connect (1)[c::]:6789 error -101 [ 1126.966541][T11494] libceph: mon0 (1)[c::]:6789 connect error [ 1128.047848][T23399] ceph: No mds server is up or the cluster is laggy [ 1128.690762][ T5932] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1128.862928][T23427] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1128.863716][T23421] SQUASHFS error: Failed to read block 0x0: -5 [ 1128.878262][T23421] unable to read squashfs_super_block [ 1128.901600][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.914268][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1128.961640][ T5932] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1128.994190][T23429] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1129.007082][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.009133][T23429] syzkaller1: Linktype set failed because interface is up [ 1129.029518][T11488] syzkaller1: tun_net_xmit 90 [ 1129.039577][ T5932] usb 1-1: config 0 descriptor?? [ 1129.060148][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1129.066764][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 1129.140313][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1129.203132][T13803] syzkaller1: tun_net_xmit 86 [ 1129.762953][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1129.816154][ T5925] syzkaller1: tun_net_xmit 90 [ 1129.885650][ T5932] usb 1-1: media controller created [ 1129.925733][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1129.948204][T11494] libceph: connect (1)[c::]:6789 error -101 [ 1130.041293][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 1130.078570][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1130.109296][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64 [ 1130.131032][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 1130.140512][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1130.140659][T11494] libceph: mon0 (1)[c::]:6789 connect error [ 1130.221303][ T5932] usb 1-1: USB disconnect, device number 64 [ 1130.241200][T23440] ceph: No mds server is up or the cluster is laggy [ 1130.248009][T11494] libceph: connect (1)[c::]:6789 error -101 [ 1130.274679][T11494] libceph: mon0 (1)[c::]:6789 connect error [ 1130.365235][ T5932] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1133.544199][T23480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5023'. [ 1134.132088][T23479] ceph: No mds server is up or the cluster is laggy [ 1134.280852][T23489] syzkaller0: entered promiscuous mode [ 1134.286560][T23489] syzkaller0: entered allmulticast mode [ 1134.661303][T23487] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5026'. [ 1134.674054][T23487] SQUASHFS error: Failed to read block 0x0: -5 [ 1134.680268][T23487] unable to read squashfs_super_block [ 1134.755475][T23495] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1134.767272][T23495] syzkaller1: Linktype set failed because interface is up [ 1134.779213][ T5910] syzkaller1: tun_net_xmit 90 [ 1135.373328][T23524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1135.399021][T13819] syzkaller1: tun_net_xmit 86 [ 1135.479684][ T5910] syzkaller1: tun_net_xmit 90 [ 1136.662351][T23532] tc_dump_action: action bad kind [ 1137.608241][T23534] ceph: No mds server is up or the cluster is laggy [ 1137.615516][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 1137.633677][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 1138.899013][T23567] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1138.939111][T23567] syzkaller1: Linktype set failed because interface is up [ 1139.089358][T13795] syzkaller1: tun_net_xmit 86 [ 1139.110607][ T5988] syzkaller1: tun_net_xmit 90 [ 1139.632597][T23579] overlayfs: failed to resolve './file1': -2 [ 1139.635814][T23582] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1141.206908][T23595] ceph: No mds server is up or the cluster is laggy [ 1141.248228][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 1141.259315][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 1141.667981][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1145.005362][T23634] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1145.021984][T23634] SQUASHFS error: Failed to read block 0x0: -5 [ 1145.028291][T23634] unable to read squashfs_super_block [ 1145.363837][T23638] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1145.392597][T11494] syzkaller1: tun_net_xmit 90 [ 1145.451701][T23638] syzkaller1: Linktype set failed because interface is up [ 1146.199317][T13795] syzkaller1: tun_net_xmit 86 [ 1146.506031][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1146.512197][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1146.569939][T23659] ceph: No mds server is up or the cluster is laggy [ 1148.150559][T23689] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5076'. [ 1148.160586][T23689] SQUASHFS error: Failed to read block 0x0: -5 [ 1148.166734][T23689] unable to read squashfs_super_block [ 1148.396328][ T30] audit: type=1400 audit(1759035456.449:1544): avc: granted { setsecparam } for pid=23691 comm="syz.3.5078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1149.924520][T23717] overlayfs: failed to resolve './file0': -2 [ 1150.241947][T23710] ceph: No mds server is up or the cluster is laggy [ 1150.280323][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 1150.286313][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 1152.723180][T23737] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5088'. [ 1152.841777][T23735] SQUASHFS error: Failed to read block 0x0: -5 [ 1152.848226][T23735] unable to read squashfs_super_block [ 1155.703775][T23755] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5093'. [ 1155.715617][T23755] SQUASHFS error: Failed to read block 0x0: -5 [ 1155.721818][T23755] unable to read squashfs_super_block [ 1157.226029][T23770] tipc: Enabled bearer , priority 0 [ 1157.279463][T23773] syzkaller0: entered promiscuous mode [ 1157.291828][T23773] syzkaller0: entered allmulticast mode [ 1157.316182][T23770] tipc: Resetting bearer [ 1157.363111][ T30] audit: type=1400 audit(1759035465.419:1545): avc: granted { setsecparam } for pid=23775 comm="syz.0.5100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1157.389474][T23769] tipc: Resetting bearer [ 1157.410078][T23769] tipc: Disabling bearer [ 1157.877167][T23778] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1157.899884][T23778] SQUASHFS error: Failed to read block 0x0: -5 [ 1157.906036][T23778] unable to read squashfs_super_block [ 1158.435585][T23810] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1159.459143][ T5917] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1160.051813][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1160.113966][T23822] tipc: Enabled bearer , priority 0 [ 1160.124216][T23822] syzkaller0: entered promiscuous mode [ 1160.129959][T23822] syzkaller0: entered allmulticast mode [ 1160.144183][ T5917] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1160.179480][T23822] tipc: Resetting bearer [ 1160.194278][ T5917] usb 1-1: config 0 has no interface number 0 [ 1160.208713][T23817] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5111'. [ 1160.222461][T23821] tipc: Resetting bearer [ 1160.243511][ T5917] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1160.254609][T23817] SQUASHFS error: Failed to read block 0x0: -5 [ 1160.260814][T23817] unable to read squashfs_super_block [ 1160.278005][ T5917] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1160.309498][T23821] tipc: Disabling bearer [ 1160.324836][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.336462][ T5917] usb 1-1: Product: syz [ 1160.336875][ T30] audit: type=1400 audit(1759035468.389:1546): avc: granted { setsecparam } for pid=23830 comm="syz.4.5114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1160.340891][ T5917] usb 1-1: Manufacturer: syz [ 1160.379802][ T5917] usb 1-1: SerialNumber: syz [ 1160.713481][ T5917] usb 1-1: config 0 descriptor?? [ 1160.782921][ T5917] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1160.809087][ T5917] em28xx 1-1:0.132: Video interface 132 found: [ 1161.003675][T23846] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1161.009273][T11494] syzkaller1: tun_net_xmit 90 [ 1161.018493][T23846] syzkaller1: Linktype set failed because interface is up [ 1161.190822][T11803] syzkaller1: tun_net_xmit 86 [ 1161.549881][T11494] syzkaller1: tun_net_xmit 90 [ 1161.592070][T23851] ceph: No mds server is up or the cluster is laggy [ 1161.930079][T23858] ceph: No mds server is up or the cluster is laggy [ 1161.952200][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1161.958644][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1162.119342][ T5917] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1162.199408][ T13] syzkaller1: tun_net_xmit 90 [ 1162.280228][ T13] syzkaller1: tun_net_xmit 70 [ 1162.290303][ T5917] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1162.345267][ T5917] em28xx 1-1:0.132: board has no eeprom [ 1162.480920][ T5917] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1162.589072][ T5917] em28xx 1-1:0.132: analog set to bulk mode. [ 1162.620917][ T5932] em28xx 1-1:0.132: Registering V4L2 extension [ 1162.664400][ T5917] usb 1-1: USB disconnect, device number 65 [ 1162.670822][ T5917] em28xx 1-1:0.132: Disconnecting em28xx [ 1162.886732][T23870] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5123'. [ 1162.912639][T23870] SQUASHFS error: Failed to read block 0x0: -5 [ 1162.918920][T23870] unable to read squashfs_super_block [ 1163.276289][ T5932] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1163.307466][ T5932] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1163.369104][ T5932] em28xx 1-1:0.132: No AC97 audio processor [ 1163.398571][ T5932] usb 1-1: Decoder not found [ 1163.412237][ T5932] em28xx 1-1:0.132: failed to create media graph [ 1163.418732][ T5932] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1163.425643][ T30] audit: type=1400 audit(1759035471.459:1547): avc: granted { setsecparam } for pid=23880 comm="syz.0.5127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1163.427250][ T5932] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1163.790702][ T5917] em28xx 1-1:0.132: Closing input extension [ 1164.031295][ T5917] em28xx 1-1:0.132: Freeing device [ 1164.228111][T23896] tipc: Enabled bearer , priority 0 [ 1164.278819][T23896] tipc: Resetting bearer [ 1164.643761][T23902] ceph: No mds server is up or the cluster is laggy [ 1164.696861][T23895] tipc: Disabling bearer [ 1164.859294][T23906] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1164.869329][ T5932] syzkaller1: tun_net_xmit 90 [ 1165.760696][ T5917] syzkaller1: tun_net_xmit 90 [ 1165.769283][T23906] syzkaller1: Linktype set failed because interface is up [ 1165.800827][T23916] ceph: No mds server is up or the cluster is laggy [ 1165.808329][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 1165.947699][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 1165.953757][T13819] syzkaller1: tun_net_xmit 86 [ 1166.310695][T23925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5137'. [ 1166.401325][T23925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1166.872674][T23921] ceph: No mds server is up or the cluster is laggy [ 1167.079770][T23943] overlayfs: failed to resolve './file0': -2 [ 1167.171246][T23935] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1167.203583][T23935] SQUASHFS error: Failed to read block 0x0: -5 [ 1167.209773][T23935] unable to read squashfs_super_block [ 1167.631787][T23952] tipc: Enabled bearer , priority 0 [ 1167.652565][T23952] tipc: Resetting bearer [ 1167.682361][T23951] tipc: Disabling bearer [ 1168.607094][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5149'. [ 1168.743937][T23960] ceph: No mds server is up or the cluster is laggy [ 1168.831323][T23973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1169.151911][T23973] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1169.209615][T23972] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1169.221201][T23972] SQUASHFS error: Failed to read block 0x0: -5 [ 1169.227363][T23972] unable to read squashfs_super_block [ 1170.050283][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5162'. [ 1170.810596][T24024] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1170.912986][T24024] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5166'. [ 1171.837082][T24047] SQUASHFS error: Failed to read block 0x0: -5 [ 1171.845943][T24047] unable to read squashfs_super_block [ 1171.934922][T24045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1172.250352][T24064] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1172.754198][T24059] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1172.780481][T24059] SQUASHFS error: Failed to read block 0x0: -5 [ 1172.792750][T24059] unable to read squashfs_super_block [ 1175.154657][T24100] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5189'. [ 1175.164109][T24101] SQUASHFS error: Failed to read block 0x0: -5 [ 1175.164149][T24101] unable to read squashfs_super_block [ 1175.398158][ T30] audit: type=1400 audit(1759035483.449:1548): avc: granted { setsecparam } for pid=24108 comm="syz.1.5191" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1176.761292][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.767851][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.830832][T24133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1176.875360][T24133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1179.318308][T24172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5208'. [ 1179.327531][T24172] openvswitch: netlink: Flow key attr not present in new flow. [ 1180.456752][T24192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5213'. [ 1180.488087][T24192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1181.072085][T24200] fuse: Bad value for 'group_id' [ 1181.077029][T24200] fuse: Bad value for 'group_id' [ 1182.073645][T24218] tc_dump_action: action bad kind [ 1183.751350][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 1183.758468][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1183.789114][T24242] ceph: No mds server is up or the cluster is laggy [ 1183.903170][T24256] syzkaller0: entered promiscuous mode [ 1183.908738][T24256] syzkaller0: entered allmulticast mode [ 1185.387465][T11494] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1185.559199][T11494] usb 1-1: Using ep0 maxpacket: 32 [ 1185.566626][T11494] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1185.586314][T11494] usb 1-1: config 0 has no interface number 0 [ 1185.592845][T11494] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1185.702708][T11494] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1185.742879][T11494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.752971][T11494] usb 1-1: Product: syz [ 1185.774597][T11494] usb 1-1: Manufacturer: syz [ 1185.792383][T11494] usb 1-1: SerialNumber: syz [ 1185.830944][T11494] usb 1-1: config 0 descriptor?? [ 1185.851420][T11494] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1185.879337][T11494] em28xx 1-1:0.132: Video interface 132 found: [ 1185.910856][T24280] ceph: No mds server is up or the cluster is laggy [ 1187.156475][ T30] audit: type=1400 audit(1759035495.209:1549): avc: granted { setsecparam } for pid=24293 comm="syz.1.5237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1187.178776][T11494] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1187.522147][T11494] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1187.538974][T11494] em28xx 1-1:0.132: board has no eeprom [ 1187.612406][T11494] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1187.628746][T11494] em28xx 1-1:0.132: analog set to bulk mode. [ 1187.637275][ T5910] em28xx 1-1:0.132: Registering V4L2 extension [ 1187.929099][T11494] usb 1-1: USB disconnect, device number 66 [ 1187.948653][T11494] em28xx 1-1:0.132: Disconnecting em28xx [ 1189.506219][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 1189.542584][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 1189.622728][T24313] ceph: No mds server is up or the cluster is laggy [ 1189.715501][T24308] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5240'. [ 1189.726585][T24308] SQUASHFS error: Failed to read block 0x0: -5 [ 1189.732800][T24308] unable to read squashfs_super_block [ 1189.857408][ T5988] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1190.039185][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 1190.054807][ T5988] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1190.074786][ T5910] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1190.136105][ T5910] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1190.155894][ T5988] usb 2-1: config 0 has no interface number 0 [ 1190.173162][ T5910] em28xx 1-1:0.132: No AC97 audio processor [ 1190.187397][ T5988] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1190.252818][ T5910] usb 1-1: Decoder not found [ 1190.261636][ T5988] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1190.284553][ T5910] em28xx 1-1:0.132: failed to create media graph [ 1190.295949][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.305038][ T5910] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1190.352981][ T5910] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1190.362370][ T5988] usb 2-1: Product: syz [ 1190.366662][ T5988] usb 2-1: Manufacturer: syz [ 1190.438568][T24339] tipc: Enabling of bearer rejected, failed to enable media [ 1190.529070][ T5988] usb 2-1: SerialNumber: syz [ 1190.534157][T11494] em28xx 1-1:0.132: Closing input extension [ 1190.543281][ T5988] usb 2-1: config 0 descriptor?? [ 1190.551881][T11494] em28xx 1-1:0.132: Freeing device [ 1190.561003][ T5988] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1190.670901][ T5988] em28xx 2-1:0.132: Video interface 132 found: [ 1190.673198][T24339] syzkaller0: entered promiscuous mode [ 1190.985266][T24339] syzkaller0: entered allmulticast mode [ 1191.340595][T24355] syzkaller0: entered promiscuous mode [ 1191.346176][T24355] syzkaller0: entered allmulticast mode [ 1191.541148][T24361] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1191.598521][T24361] SQUASHFS error: Failed to read block 0x0: -5 [ 1191.611993][T24361] unable to read squashfs_super_block [ 1191.795786][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5253'. [ 1191.809167][ T5932] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1191.845901][T24366] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1191.969117][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 1191.988342][ T5932] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1192.191591][ T5988] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1192.385734][ T5988] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1192.389050][ T5932] usb 5-1: config 0 has no interface number 0 [ 1192.411937][ T5988] em28xx 2-1:0.132: board has no eeprom [ 1192.418098][ T5932] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.450827][ T5932] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1192.479184][ T5988] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1192.494925][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.501067][ T5988] em28xx 2-1:0.132: analog set to bulk mode. [ 1192.533146][T11494] em28xx 2-1:0.132: Registering V4L2 extension [ 1192.553396][ T5988] usb 2-1: USB disconnect, device number 62 [ 1192.581556][ T5988] em28xx 2-1:0.132: Disconnecting em28xx [ 1192.633720][ T5932] usb 5-1: Product: syz [ 1192.674119][ T5932] usb 5-1: Manufacturer: syz [ 1192.740944][ T5932] usb 5-1: SerialNumber: syz [ 1192.757204][ T5932] usb 5-1: config 0 descriptor?? [ 1192.773227][ T5932] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1192.816305][ T5932] em28xx 5-1:0.132: Video interface 132 found: [ 1193.048793][T11494] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1193.068536][T11494] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1193.114244][T11494] em28xx 2-1:0.132: No AC97 audio processor [ 1193.138329][T11494] usb 2-1: Decoder not found [ 1193.145594][T11494] em28xx 2-1:0.132: failed to create media graph [ 1193.162186][T11494] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1193.185903][T11494] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1193.217205][ T5988] em28xx 2-1:0.132: Closing input extension [ 1193.534755][ T5988] em28xx 2-1:0.132: Freeing device [ 1193.871929][T24405] overlayfs: failed to resolve './file0': -2 [ 1194.134298][ T5932] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1194.213165][ T5932] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1194.228795][ T5932] em28xx 5-1:0.132: board has no eeprom [ 1194.289552][ T5932] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1194.324658][ T5932] em28xx 5-1:0.132: analog set to bulk mode. [ 1194.341757][ T5917] em28xx 5-1:0.132: Registering V4L2 extension [ 1194.450174][ T5988] usb 5-1: USB disconnect, device number 67 [ 1194.501081][ T5988] em28xx 5-1:0.132: Disconnecting em28xx [ 1194.606824][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1194.726567][T24428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1194.874542][ T5917] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1194.898672][ T5917] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1194.961035][ T5917] em28xx 5-1:0.132: No AC97 audio processor [ 1195.014136][ T5917] usb 5-1: Decoder not found [ 1195.044071][ T5917] em28xx 5-1:0.132: failed to create media graph [ 1195.068796][ T5917] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1195.112007][ T5917] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1195.158224][ T5988] em28xx 5-1:0.132: Closing input extension [ 1195.215394][ T5988] em28xx 5-1:0.132: Freeing device [ 1197.939136][ T5932] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1198.089087][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 1198.108407][ T5932] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1198.132839][ T5932] usb 3-1: config 0 has no interface number 0 [ 1198.140702][ T5932] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1198.153703][ T5932] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1198.164258][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.173046][ T5932] usb 3-1: Product: syz [ 1198.189311][ T5932] usb 3-1: Manufacturer: syz [ 1198.196056][ T5932] usb 3-1: SerialNumber: syz [ 1198.241797][ T5932] usb 3-1: config 0 descriptor?? [ 1198.307330][ T5932] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1198.482440][ T5932] em28xx 3-1:0.132: Video interface 132 found: [ 1198.719226][T24462] ceph: No mds server is up or the cluster is laggy [ 1198.875827][ T30] audit: type=1400 audit(1759035506.929:1550): avc: granted { setsecparam } for pid=24486 comm="syz.4.5282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1200.164453][ T5932] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1200.214005][T24492] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5283'. [ 1200.226459][T24492] SQUASHFS error: Failed to read block 0x0: -5 [ 1200.232678][T24492] unable to read squashfs_super_block [ 1200.244029][ T5932] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1200.279356][ T5932] em28xx 3-1:0.132: board has no eeprom [ 1200.382788][ T5932] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1200.405839][ T5932] em28xx 3-1:0.132: analog set to bulk mode. [ 1200.412278][ T5917] em28xx 3-1:0.132: Registering V4L2 extension [ 1200.822283][ T5925] usb 3-1: USB disconnect, device number 49 [ 1200.828736][ T5925] em28xx 3-1:0.132: Disconnecting em28xx [ 1201.218686][T24514] ceph: No mds server is up or the cluster is laggy [ 1201.943477][ T5917] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1202.450506][ T5917] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1202.489882][ T5917] em28xx 3-1:0.132: No AC97 audio processor [ 1202.499302][ T5917] usb 3-1: Decoder not found [ 1202.504985][ T5917] em28xx 3-1:0.132: failed to create media graph [ 1202.512773][ T5917] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1202.526087][ T5917] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1202.534767][ T5925] em28xx 3-1:0.132: Closing input extension [ 1202.545668][ T5925] em28xx 3-1:0.132: Freeing device [ 1203.939745][T24555] ceph: No mds server is up or the cluster is laggy [ 1204.379226][ T5925] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1204.609096][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1205.756268][ T5925] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1205.800096][ T5925] usb 4-1: config 0 has no interface number 0 [ 1205.816779][ T5925] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1205.950140][ T5925] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1205.980220][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.021003][ T5925] usb 4-1: Product: syz [ 1206.053326][ T5925] usb 4-1: Manufacturer: syz [ 1206.083413][ T5925] usb 4-1: SerialNumber: syz [ 1206.134865][ T5925] usb 4-1: config 0 descriptor?? [ 1206.187319][ T5925] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1206.228673][ T5925] em28xx 4-1:0.132: Video interface 132 found: [ 1206.930970][T24596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5310'. [ 1207.097837][T24596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1207.344782][T24603] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5312'. [ 1207.938384][ T5925] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1208.092476][ T5925] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1208.114151][ T5925] em28xx 4-1:0.132: board has no eeprom [ 1208.189220][ T5925] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1208.205954][ T5925] em28xx 4-1:0.132: analog set to bulk mode. [ 1208.212351][ T5917] em28xx 4-1:0.132: Registering V4L2 extension [ 1208.244797][ T5925] usb 4-1: USB disconnect, device number 66 [ 1208.277078][ T5925] em28xx 4-1:0.132: Disconnecting em28xx [ 1208.358358][T24624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5320'. [ 1208.414005][T24624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1208.923928][ T5917] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1208.932973][ T5917] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1208.940237][ T5917] em28xx 4-1:0.132: No AC97 audio processor [ 1208.947523][ T5917] usb 4-1: Decoder not found [ 1208.953182][ T5917] em28xx 4-1:0.132: failed to create media graph [ 1208.959579][ T5917] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1208.971205][ T5917] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1208.981555][ T5925] em28xx 4-1:0.132: Closing input extension [ 1208.991975][ T5925] em28xx 4-1:0.132: Freeing device [ 1209.605394][T24650] syzkaller0: entered promiscuous mode [ 1209.612203][T24650] syzkaller0: entered allmulticast mode [ 1210.041694][T24654] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1210.158651][T24654] SQUASHFS error: Failed to read block 0x0: -5 [ 1210.165003][T24654] unable to read squashfs_super_block [ 1210.562218][T24663] tipc: Enabled bearer , priority 0 [ 1211.028008][T24665] syzkaller0: entered promiscuous mode [ 1211.033565][T24665] syzkaller0: entered allmulticast mode [ 1211.043530][T24663] tipc: Resetting bearer [ 1211.064409][T24661] tipc: Resetting bearer [ 1211.097739][T24661] tipc: Disabling bearer [ 1212.368909][ T30] audit: type=1400 audit(1759035520.419:1551): avc: granted { setsecparam } for pid=24685 comm="syz.3.5335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1214.189143][ T30] audit: type=1400 audit(1759035522.239:1552): avc: granted { setsecparam } for pid=24706 comm="syz.0.5341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1217.213608][T24746] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1217.910884][T24748] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1217.926294][T24748] syzkaller1: Linktype set failed because interface is up [ 1217.992319][T13803] syzkaller1: tun_net_xmit 86 [ 1218.759576][ T5910] syzkaller1: tun_net_xmit 90 [ 1219.722595][T11803] syzkaller1: tun_net_xmit 90 [ 1219.841169][T11803] syzkaller1: tun_net_xmit 70 [ 1221.453799][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5361'. [ 1221.833971][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1222.197349][T24797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1222.907077][T24812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1223.350800][T24812] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1223.610158][T24828] SQUASHFS error: Failed to read block 0x0: -5 [ 1223.617217][T24828] unable to read squashfs_super_block [ 1223.625568][T24827] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5367'. [ 1223.746548][T24819] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5366'. [ 1223.765593][T24819] SQUASHFS error: Failed to read block 0x0: -5 [ 1223.771839][T24819] unable to read squashfs_super_block [ 1225.808165][T24849] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1226.587875][T24846] SQUASHFS error: Failed to read block 0x0: -5 [ 1226.594211][T24846] unable to read squashfs_super_block [ 1227.499709][T24875] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5379'. [ 1227.580101][T24875] SQUASHFS error: Failed to read block 0x0: -5 [ 1227.587502][T24875] unable to read squashfs_super_block [ 1228.315128][T24879] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5381'. [ 1228.857851][T24879] SQUASHFS error: Failed to read block 0x0: -5 [ 1228.864062][T24879] unable to read squashfs_super_block [ 1229.670147][T24899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5387'. [ 1230.055956][T24899] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1232.025853][ T30] audit: type=1400 audit(1759035539.179:1553): avc: denied { bind } for pid=24918 comm="syz.3.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1232.119687][ T30] audit: type=1400 audit(1759035539.179:1554): avc: denied { name_bind } for pid=24918 comm="syz.3.5392" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1232.355037][T24931] overlayfs: failed to resolve './file0': -2 [ 1232.560368][ T30] audit: type=1400 audit(1759035539.179:1555): avc: denied { node_bind } for pid=24918 comm="syz.3.5392" saddr=ff02::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1232.679146][T11494] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1232.718243][ T30] audit: type=1400 audit(1759035540.049:1556): avc: denied { read append } for pid=24921 comm="syz.1.5391" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1232.741770][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.751651][ T30] audit: type=1400 audit(1759035540.049:1557): avc: denied { open } for pid=24921 comm="syz.1.5391" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1232.775350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1232.819194][ T30] audit: type=1400 audit(1759035540.159:1558): avc: denied { ioctl } for pid=24921 comm="syz.1.5391" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1232.849227][T11494] usb 5-1: Using ep0 maxpacket: 16 [ 1232.874448][T11494] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 1232.885672][T11494] usb 5-1: config 0 has no interface number 0 [ 1232.959355][T11494] usb 5-1: config 0 interface 163 has no altsetting 0 [ 1232.979362][T11494] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 1232.990201][T11494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.018865][T11494] usb 5-1: Product: syz [ 1233.035836][T11494] usb 5-1: Manufacturer: syz [ 1233.045525][T11494] usb 5-1: SerialNumber: syz [ 1233.067492][T11494] usb 5-1: config 0 descriptor?? [ 1233.083812][T24942] ceph: No mds server is up or the cluster is laggy [ 1233.281760][ T30] audit: type=1400 audit(1759035541.339:1559): avc: denied { map } for pid=24927 comm="syz.4.5395" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1233.425275][ T30] audit: type=1400 audit(1759035541.479:1560): avc: denied { create } for pid=24947 comm="syz.1.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1233.622543][ T5925] usb 5-1: USB disconnect, device number 68 [ 1233.631909][ T5925] f81534a_ctrl 5-1:0.163: failed to set register 0x116: -19 [ 1233.656053][ T5925] f81534a_ctrl 5-1:0.163: failed to enable ports: -19 [ 1233.878682][T24955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1236.093907][ T30] audit: type=1400 audit(1759035544.149:1561): avc: denied { mounton } for pid=24975 comm="syz.3.5407" path="/415/file0/file0" dev="afs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1236.737241][T24998] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1236.757022][T24998] syzkaller1: Linktype set failed because interface is up [ 1236.770722][ T5925] syzkaller1: tun_net_xmit 90 [ 1237.264187][T25012] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5413'. [ 1237.316908][ T5925] syzkaller1: tun_net_xmit 90 [ 1237.343946][T25012] SQUASHFS error: Failed to read block 0x0: -5 [ 1237.350554][T25012] unable to read squashfs_super_block [ 1237.583405][ T30] audit: type=1400 audit(1759035545.639:1562): avc: denied { getopt } for pid=25002 comm="syz.4.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1237.603903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.677910][ T30] audit: type=1400 audit(1759035545.679:1563): avc: denied { execute } for pid=25002 comm="syz.4.5411" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=93677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1237.704171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.747552][ T30] audit: type=1400 audit(1759035545.799:1564): avc: denied { create } for pid=25017 comm="syz.0.5415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1237.777338][T25019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1237.801814][ T30] audit: type=1400 audit(1759035545.799:1565): avc: denied { getopt } for pid=25017 comm="syz.0.5415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1237.842573][ T30] audit: type=1400 audit(1759035545.899:1566): avc: denied { append } for pid=25020 comm="syz.1.5416" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1237.946375][ T30] audit: type=1400 audit(1759035545.999:1567): avc: denied { create } for pid=25020 comm="syz.1.5416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1238.128731][ T5932] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1238.256105][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.409618][ T5932] usb 1-1: device descriptor read/64, error -71 [ 1238.598145][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 1238.618262][T25033] ceph: No mds server is up or the cluster is laggy [ 1240.639322][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1240.659292][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.709394][ T5932] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1242.581063][T25071] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5430'. [ 1243.745571][T25069] SQUASHFS error: Failed to read block 0x0: -5 [ 1243.751834][T25069] unable to read squashfs_super_block [ 1244.186501][T25092] ceph: No mds server is up or the cluster is laggy [ 1245.485808][T25108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1245.507495][ T30] audit: type=1400 audit(1759035553.559:1568): avc: denied { getopt } for pid=25100 comm="syz.0.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1245.999117][ T5932] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1246.123926][ T30] audit: type=1400 audit(1759035554.179:1569): avc: denied { create } for pid=25115 comm="syz.4.5442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1246.163207][ T30] audit: type=1400 audit(1759035554.219:1570): avc: denied { ioctl } for pid=25115 comm="syz.4.5442" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1246.188662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.197075][ T5932] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1246.206539][ T5932] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1246.217158][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1246.226242][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1246.238175][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1246.257488][ T5932] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1246.266557][ T5910] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1246.266648][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1246.285629][ T5932] usb 4-1: Product: syz [ 1246.289891][ T5932] usb 4-1: Manufacturer: syz [ 1246.301837][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 1246.307133][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 1246.315566][ T5932] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1246.322589][ T5932] cdc_wdm 4-1:1.0: Unknown control protocol [ 1246.430414][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1246.449204][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1246.461359][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1246.471336][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1246.486686][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1246.514568][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.552827][ T5910] usb 1-1: config 0 descriptor?? [ 1246.864131][ T30] audit: type=1400 audit(1759035554.919:1571): avc: denied { read write } for pid=25109 comm="syz.3.5439" name="cdc-wdm0" dev="devtmpfs" ino=4095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1246.888109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.930221][T25135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5446'. [ 1246.951182][ T30] audit: type=1400 audit(1759035554.959:1572): avc: denied { open } for pid=25109 comm="syz.3.5439" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1247.066106][T25137] bridge0: port 3(team0) entered blocking state [ 1247.072671][T25137] bridge0: port 3(team0) entered disabled state [ 1247.079525][T25137] team0: entered allmulticast mode [ 1247.084669][T25137] team_slave_0: entered allmulticast mode [ 1247.090458][T25137] team_slave_1: entered allmulticast mode [ 1247.103255][T25137] team0: entered promiscuous mode [ 1247.108336][T25137] team_slave_0: entered promiscuous mode [ 1247.114602][T25137] team_slave_1: entered promiscuous mode [ 1247.122798][T25137] bridge0: port 3(team0) entered blocking state [ 1247.129143][T25137] bridge0: port 3(team0) entered forwarding state [ 1247.593815][T25135] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1247.663161][ T5910] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1248.116070][T25147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.136162][T25147] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5449'. [ 1248.236171][T25150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.236560][T25149] tipc: Enabled bearer , priority 0 [ 1248.265758][T25149] syzkaller0: entered promiscuous mode [ 1248.273373][T25149] syzkaller0: entered allmulticast mode [ 1248.281843][T25150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.304173][T25149] tipc: Resetting bearer [ 1248.407413][T25148] tipc: Resetting bearer [ 1248.423571][T25148] tipc: Disabling bearer [ 1248.932469][ T5932] usb 4-1: USB disconnect, device number 67 [ 1248.988497][T25157] netlink: 'syz.4.5453': attribute type 1 has an invalid length. [ 1248.989044][ T30] audit: type=1400 audit(1759035557.039:1573): avc: denied { getopt } for pid=25155 comm="syz.4.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1249.047264][T25157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1249.084800][T25166] bond1: (slave gretap0): making interface the new active one [ 1249.093656][T25166] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 1249.264853][T25174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5457'. [ 1249.277501][T25174] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.446512][ T30] audit: type=1400 audit(1759035557.449:1574): avc: denied { write } for pid=25168 comm="syz.2.5455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1249.482526][ T5910] usb 1-1: USB disconnect, device number 69 [ 1249.533197][ T30] audit: type=1400 audit(1759035557.589:1575): avc: denied { setopt } for pid=25179 comm="syz.4.5458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1249.663020][ T30] audit: type=1400 audit(1759035557.719:1576): avc: denied { append } for pid=25179 comm="syz.4.5458" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1250.195130][T25185] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5459'. [ 1250.346917][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.354111][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.360707][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.489743][T25187] infiniband syz2: set down [ 1250.494346][T25187] infiniband syz2: added vxcan1 [ 1250.608654][T25187] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1250.612241][T25187] infiniband syz2: Couldn't open port 1 [ 1250.637354][T25187] RDS/IB: syz2: added [ 1250.642987][T25187] smc: adding ib device syz2 with port count 1 [ 1250.649241][T25187] smc: ib device syz2 port 1 has pnetid [ 1250.657858][T11494] vxcan1 speed is unknown, defaulting to 1000 [ 1250.673933][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.768000][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.848470][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1250.927097][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1251.008323][T25187] vxcan1 speed is unknown, defaulting to 1000 [ 1251.129984][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 1251.229194][T25191] FAT-fs (nbd0): unable to read boot sector [ 1252.559040][ T5988] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1253.762488][T25203] IPv6: addrconf: prefix option has invalid lifetime [ 1253.832820][ T5988] usb 4-1: Using ep0 maxpacket: 32 [ 1253.966116][T25213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5468'. [ 1254.021596][ T5988] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1254.035219][ T5988] usb 4-1: config 0 has no interface number 0 [ 1254.043333][ T5988] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1254.043497][T25213] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1254.144586][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1254.599845][ T5988] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1254.760611][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.792926][ T5988] usb 4-1: Product: syz [ 1254.900431][ T5988] usb 4-1: Manufacturer: syz [ 1254.905116][ T5988] usb 4-1: SerialNumber: syz [ 1254.910000][ T30] audit: type=1400 audit(1759035562.659:1577): avc: denied { read append } for pid=25218 comm="syz.4.5470" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1254.957867][ T5988] usb 4-1: config 0 descriptor?? [ 1255.000316][ T5988] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1255.019318][ T30] audit: type=1400 audit(1759035562.659:1578): avc: denied { open } for pid=25218 comm="syz.4.5470" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1255.048606][ T5988] em28xx 4-1:0.132: Video interface 132 found: [ 1255.225723][ T30] audit: type=1400 audit(1759035563.279:1579): avc: denied { ioctl } for pid=25226 comm="syz.4.5472" path="socket:[94086]" dev="sockfs" ino=94086 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1255.250749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.257770][ T5925] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1255.396795][ T5988] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1255.470390][ T5988] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1255.480857][ T5988] em28xx 4-1:0.132: board has no eeprom [ 1255.507861][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 1255.518730][ T5925] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1255.528360][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.536499][ T5925] usb 2-1: Product: syz [ 1255.541433][ T5925] usb 2-1: Manufacturer: syz [ 1255.546016][ T5925] usb 2-1: SerialNumber: syz [ 1255.549093][ T5988] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1255.558203][ T5925] usb 2-1: config 0 descriptor?? [ 1255.560928][ T5988] em28xx 4-1:0.132: analog set to bulk mode. [ 1255.569359][ T5910] em28xx 4-1:0.132: Registering V4L2 extension [ 1255.569677][ T5925] gspca_main: 2770:9120 too many config [ 1256.089340][ T5988] usb 4-1: USB disconnect, device number 68 [ 1256.096249][ T5988] em28xx 4-1:0.132: Disconnecting em28xx [ 1256.179043][ T5925] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1256.340541][T25248] netlink: 'syz.1.5471': attribute type 10 has an invalid length. [ 1256.373776][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 1256.380174][ T5910] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1256.387662][ T5910] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1256.404856][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.537876][ T5910] em28xx 4-1:0.132: No AC97 audio processor [ 1257.249651][ T5910] usb 4-1: Decoder not found [ 1257.254610][ T5910] em28xx 4-1:0.132: failed to create media graph [ 1257.264472][ T5910] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1257.274154][ T5910] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1257.284526][ T5988] em28xx 4-1:0.132: Closing input extension [ 1257.393746][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.431232][ T5988] em28xx 4-1:0.132: Freeing device [ 1257.442357][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.546833][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.576344][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.598919][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.647517][ T5925] usb 1-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 1257.672128][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.706676][ T5925] usb 1-1: Product: syz [ 1257.716530][ T5925] usb 1-1: Manufacturer: syz [ 1257.726714][ T5925] usb 1-1: SerialNumber: syz [ 1257.735593][T25265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1257.745688][ T5925] usb 1-1: config 0 descriptor?? [ 1257.763308][ T5925] usb 1-1: bad CDC descriptors [ 1257.772892][ T5925] cdc_acm 1-1:0.0: Zero length descriptor references [ 1257.779810][T25270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5483'. [ 1257.790958][ T5925] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1257.800783][T25270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1257.923228][T25274] FAULT_INJECTION: forcing a failure. [ 1257.923228][T25274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.928051][T25275] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5484'. [ 1257.936473][T25274] CPU: 1 UID: 0 PID: 25274 Comm: syz.4.5485 Not tainted syzkaller #0 PREEMPT(full) [ 1257.936492][T25274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1257.936501][T25274] Call Trace: [ 1257.936507][T25274] [ 1257.936513][T25274] dump_stack_lvl+0x16c/0x1f0 [ 1257.936538][T25274] should_fail_ex+0x512/0x640 [ 1257.936561][T25274] _copy_from_user+0x2e/0xd0 [ 1257.936582][T25274] move_addr_to_kernel+0x65/0x170 [ 1257.936607][T25274] __sys_bind+0x11b/0x260 [ 1257.936623][T25274] ? __pfx___sys_bind+0x10/0x10 [ 1257.936636][T25274] ? __fget_files+0x20e/0x3c0 [ 1257.936661][T25274] ? __pfx_ksys_write+0x10/0x10 [ 1257.936682][T25274] __x64_sys_bind+0x72/0xb0 [ 1257.936695][T25274] ? lockdep_hardirqs_on+0x7c/0x110 [ 1257.936719][T25274] do_syscall_64+0xcd/0x4e0 [ 1257.936740][T25274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.936755][T25274] RIP: 0033:0x7f18ce58eec9 [ 1257.936768][T25274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.936782][T25274] RSP: 002b:00007f18cf378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1257.936797][T25274] RAX: ffffffffffffffda RBX: 00007f18ce7e5fa0 RCX: 00007f18ce58eec9 [ 1257.936806][T25274] RDX: 0000000000000058 RSI: 0000200000000140 RDI: 0000000000000003 [ 1257.936816][T25274] RBP: 00007f18cf378090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.936825][T25274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.936834][T25274] R13: 00007f18ce7e6038 R14: 00007f18ce7e5fa0 R15: 00007ffd97764df8 [ 1257.936855][T25274] [ 1258.382854][T25272] SQUASHFS error: Failed to read block 0x0: -5 [ 1258.389114][T25272] unable to read squashfs_super_block [ 1258.595074][T25284] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1258.626005][T25284] SQUASHFS error: Failed to read block 0x0: -5 [ 1258.633719][T25284] unable to read squashfs_super_block [ 1258.699171][ T5988] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1258.875390][T25287] tipc: Enabled bearer , priority 0 [ 1258.885637][ T5917] usb 2-1: USB disconnect, device number 63 [ 1258.897843][T25287] syzkaller0: entered promiscuous mode [ 1258.907401][T25287] syzkaller0: entered allmulticast mode [ 1258.929241][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 1258.943173][ T5988] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1258.952077][T25287] tipc: Resetting bearer [ 1258.952549][ T5988] usb 5-1: config 0 has no interface number 0 [ 1258.967484][T25286] tipc: Resetting bearer [ 1258.967728][ T5988] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1258.992030][ T5988] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1259.004148][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.013234][ T5988] usb 5-1: Product: syz [ 1259.019000][ T5988] usb 5-1: Manufacturer: syz [ 1259.024947][ T5988] usb 5-1: SerialNumber: syz [ 1259.201717][T25293] SQUASHFS error: Failed to read block 0x0: -5 [ 1259.208089][T25293] unable to read squashfs_super_block [ 1259.280599][ T5988] usb 5-1: config 0 descriptor?? [ 1259.304264][T25286] tipc: Disabling bearer [ 1259.319366][T25292] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1259.376486][T11494] usb 1-1: USB disconnect, device number 70 [ 1259.386418][ T5988] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1259.461777][T25300] FAULT_INJECTION: forcing a failure. [ 1259.461777][T25300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.464686][ T5988] em28xx 5-1:0.132: Video interface 132 found: [ 1259.485063][T25300] CPU: 0 UID: 0 PID: 25300 Comm: syz.1.5493 Not tainted syzkaller #0 PREEMPT(full) [ 1259.485078][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1259.485084][T25300] Call Trace: [ 1259.485088][T25300] [ 1259.485092][T25300] dump_stack_lvl+0x16c/0x1f0 [ 1259.485109][T25300] should_fail_ex+0x512/0x640 [ 1259.485126][T25300] _copy_from_user+0x2e/0xd0 [ 1259.485142][T25300] raw_setsockopt+0x239/0x2a0 [ 1259.485154][T25300] ? __pfx_raw_setsockopt+0x10/0x10 [ 1259.485165][T25300] ? selinux_socket_setsockopt+0x6a/0x80 [ 1259.485179][T25300] ? sock_common_setsockopt+0x2e/0xf0 [ 1259.485194][T25300] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1259.485210][T25300] do_sock_setsockopt+0xf3/0x1d0 [ 1259.485227][T25300] __sys_setsockopt+0x1a0/0x230 [ 1259.485242][T25300] __x64_sys_setsockopt+0xbd/0x160 [ 1259.485253][T25300] ? do_syscall_64+0x91/0x4e0 [ 1259.485267][T25300] ? lockdep_hardirqs_on+0x7c/0x110 [ 1259.485281][T25300] do_syscall_64+0xcd/0x4e0 [ 1259.485296][T25300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.485307][T25300] RIP: 0033:0x7f2d8c58eec9 [ 1259.485316][T25300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.485326][T25300] RSP: 002b:00007f2d8d3e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1259.485337][T25300] RAX: ffffffffffffffda RBX: 00007f2d8c7e5fa0 RCX: 00007f2d8c58eec9 [ 1259.485343][T25300] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 1259.485350][T25300] RBP: 00007f2d8d3e5090 R08: 0000000000000057 R09: 0000000000000000 [ 1259.485356][T25300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.485362][T25300] R13: 00007f2d8c7e6038 R14: 00007f2d8c7e5fa0 R15: 00007fff2aa9ec98 [ 1259.485376][T25300] [ 1259.664793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.796269][ T30] audit: type=1400 audit(1759035567.819:1580): avc: denied { bind } for pid=25308 comm="syz.2.5498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1259.826702][ T30] audit: type=1400 audit(1759035567.819:1581): avc: denied { write } for pid=25308 comm="syz.2.5498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1259.849271][ T30] audit: type=1400 audit(1759035567.829:1582): avc: denied { ioctl } for pid=25308 comm="syz.2.5498" path="socket:[94449]" dev="sockfs" ino=94449 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1259.873922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.953684][T11494] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1259.980425][T25315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=25315 comm=syz.2.5499 [ 1260.119049][T11494] usb 1-1: Using ep0 maxpacket: 32 [ 1260.127583][T11494] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1260.210838][T11494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.229081][ T5932] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1260.244640][T11494] usb 1-1: Product: syz [ 1260.254066][T11494] usb 1-1: Manufacturer: syz [ 1260.263919][T11494] usb 1-1: SerialNumber: syz [ 1260.527906][T11494] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 1260.556213][T11494] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1260.575555][T11494] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1260.601236][T11494] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1260.662883][ T5932] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1260.671640][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.697385][T11494] usb 1-1: USB disconnect, device number 71 [ 1260.699146][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1260.730407][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.744089][ T5932] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1260.788002][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1260.788862][T11494] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1260.805468][ T5932] usb 3-1: Product: syz [ 1260.805487][ T5932] usb 3-1: Manufacturer: syz [ 1260.821652][T11494] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1260.832180][T11494] visor 1-1:1.0: device disconnected [ 1260.840050][ T5988] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1260.840589][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 1260.903174][ T5932] cdc_wdm 3-1:1.0: skipping garbage [ 1260.965935][ T5988] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1261.042565][T25330] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1261.086542][ T5988] em28xx 5-1:0.132: board has no eeprom [ 1261.091560][ T5932] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1261.112318][T25330] SQUASHFS error: Failed to read block 0x0: -5 [ 1261.119136][T25330] unable to read squashfs_super_block [ 1261.325135][ T5988] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1261.335424][ T5932] usb 3-1: USB disconnect, device number 50 [ 1261.340592][ T5988] em28xx 5-1:0.132: analog set to bulk mode. [ 1261.370424][T24389] em28xx 5-1:0.132: Registering V4L2 extension [ 1261.407830][T25339] FAULT_INJECTION: forcing a failure. [ 1261.407830][T25339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.458012][ T5988] usb 5-1: USB disconnect, device number 69 [ 1261.464146][T25339] CPU: 0 UID: 0 PID: 25339 Comm: syz.4.5504 Not tainted syzkaller #0 PREEMPT(full) [ 1261.464167][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1261.464178][T25339] Call Trace: [ 1261.464184][T25339] [ 1261.464191][T25339] dump_stack_lvl+0x16c/0x1f0 [ 1261.464215][T25339] should_fail_ex+0x512/0x640 [ 1261.464238][T25339] _copy_from_user+0x2e/0xd0 [ 1261.464260][T25339] __sys_bpf+0x21d/0x4de0 [ 1261.464283][T25339] ? __pfx___sys_bpf+0x10/0x10 [ 1261.464303][T25339] ? ksys_write+0x190/0x250 [ 1261.464322][T25339] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1261.464356][T25339] ? fput+0x9b/0xd0 [ 1261.464375][T25339] ? ksys_write+0x1ac/0x250 [ 1261.464390][T25339] ? __pfx_ksys_write+0x10/0x10 [ 1261.464409][T25339] __x64_sys_bpf+0x78/0xc0 [ 1261.464428][T25339] ? lockdep_hardirqs_on+0x7c/0x110 [ 1261.464446][T25339] do_syscall_64+0xcd/0x4e0 [ 1261.464468][T25339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.464482][T25339] RIP: 0033:0x7f18ce58eec9 [ 1261.464494][T25339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.464509][T25339] RSP: 002b:00007f18cf378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1261.464523][T25339] RAX: ffffffffffffffda RBX: 00007f18ce7e5fa0 RCX: 00007f18ce58eec9 [ 1261.464534][T25339] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1261.464543][T25339] RBP: 00007f18cf378090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.464551][T25339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.464560][T25339] R13: 00007f18ce7e6038 R14: 00007f18ce7e5fa0 R15: 00007ffd97764df8 [ 1261.464582][T25339] [ 1261.665835][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1261.675821][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1261.711766][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 1261.720646][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 1261.726688][T25345] CIFS: Unable to determine destination address [ 1261.980520][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 1261.989436][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 1261.998288][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-19) [ 1262.008132][T24389] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 1262.136951][T25354] 0ªX¹¦D: left allmulticast mode [ 1262.159673][T25354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.167401][T25354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.177216][ T5988] em28xx 5-1:0.132: Disconnecting em28xx [ 1262.180027][ T30] audit: type=1400 audit(1759035570.129:1583): avc: denied { mounton } for pid=25341 comm="syz.4.5506" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1262.205832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1262.225966][T25354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1262.277014][T24389] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1262.301130][T24389] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1262.323264][T24389] em28xx 5-1:0.132: No AC97 audio processor [ 1262.359658][T24389] usb 5-1: Decoder not found [ 1262.364518][T24389] em28xx 5-1:0.132: failed to create media graph [ 1262.688210][T24389] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1262.745485][T24389] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1262.763567][ T5988] em28xx 5-1:0.132: Closing input extension [ 1262.807433][ T5988] em28xx 5-1:0.132: Freeing device [ 1263.082119][T24389] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1263.284669][T24389] usb 1-1: config 4 has an invalid interface number: 88 but max is 1 [ 1264.432990][T24389] usb 1-1: config 4 has an invalid interface number: 29 but max is 1 [ 1264.485083][T24389] usb 1-1: config 4 has no interface number 0 [ 1264.505816][T24389] usb 1-1: config 4 has no interface number 1 [ 1264.524274][T24389] usb 1-1: config 4 interface 88 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 1264.543751][T24389] usb 1-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1264.795958][T24389] usb 1-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 1264.800242][T25390] SQUASHFS error: Failed to read block 0x0: -5 [ 1264.817853][T25390] unable to read squashfs_super_block [ 1264.851136][T24389] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.870803][T25391] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1264.890302][T25389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1264.909403][T24389] usb 1-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1264.921607][T24389] usb 1-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 255, setting to 64 [ 1264.939041][T24389] usb 1-1: config 4 interface 88 has no altsetting 0 [ 1264.950833][T24389] usb 1-1: config 4 interface 29 has no altsetting 0 [ 1264.979960][T24389] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1265.041966][T24389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.094481][T24389] usb 1-1: Product: syz [ 1265.113550][T24389] usb 1-1: Manufacturer: syz [ 1265.141127][T24389] usb 1-1: SerialNumber: syz [ 1265.192158][ T30] audit: type=1400 audit(1759035573.239:1584): avc: denied { write } for pid=25398 comm="syz.1.5519" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1265.215788][T25371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1265.924191][T24389] chaoskey 1-1:4.29: Unable to register with hwrng [ 1265.933565][T24389] usb 1-1: USB disconnect, device number 72 [ 1266.247108][T25413] FAULT_INJECTION: forcing a failure. [ 1266.247108][T25413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.297177][T25413] CPU: 1 UID: 0 PID: 25413 Comm: syz.3.5523 Not tainted syzkaller #0 PREEMPT(full) [ 1266.297202][T25413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1266.297212][T25413] Call Trace: [ 1266.297219][T25413] [ 1266.297226][T25413] dump_stack_lvl+0x16c/0x1f0 [ 1266.297254][T25413] should_fail_ex+0x512/0x640 [ 1266.297280][T25413] _copy_from_user+0x2e/0xd0 [ 1266.297306][T25413] __sys_bpf+0x21d/0x4de0 [ 1266.297332][T25413] ? __pfx___sys_bpf+0x10/0x10 [ 1266.297355][T25413] ? ksys_write+0x190/0x250 [ 1266.297377][T25413] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1266.297416][T25413] ? fput+0x9b/0xd0 [ 1266.297439][T25413] ? ksys_write+0x1ac/0x250 [ 1266.297457][T25413] ? __pfx_ksys_write+0x10/0x10 [ 1266.297480][T25413] __x64_sys_bpf+0x78/0xc0 [ 1266.297503][T25413] ? lockdep_hardirqs_on+0x7c/0x110 [ 1266.297525][T25413] do_syscall_64+0xcd/0x4e0 [ 1266.297550][T25413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.297568][T25413] RIP: 0033:0x7fccdcf8eec9 [ 1266.297582][T25413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.297598][T25413] RSP: 002b:00007fccdde25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1266.297615][T25413] RAX: ffffffffffffffda RBX: 00007fccdd1e5fa0 RCX: 00007fccdcf8eec9 [ 1266.297627][T25413] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1266.297637][T25413] RBP: 00007fccdde25090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.297647][T25413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.297657][T25413] R13: 00007fccdd1e6038 R14: 00007fccdd1e5fa0 R15: 00007ffe1fa79c78 [ 1266.297682][T25413] [ 1266.494292][T25415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1266.504681][T25415] misc userio: Invalid payload size [ 1267.438741][T25417] orangefs_mount: mount request failed with -4 [ 1267.464735][ T30] audit: type=1400 audit(1759035574.729:1585): avc: denied { mount } for pid=25414 comm="syz.3.5524" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1267.519100][ T30] audit: type=1400 audit(1759035574.739:1586): avc: denied { mounton } for pid=25414 comm="syz.3.5524" path="/442/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1267.597648][ T30] audit: type=1400 audit(1759035575.639:1587): avc: denied { unmount } for pid=17057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1268.349712][ T30] audit: type=1400 audit(1759035576.399:1588): avc: denied { write } for pid=25431 comm="syz.1.5529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1268.436425][ T30] audit: type=1400 audit(1759035576.489:1589): avc: denied { watch } for pid=25431 comm="syz.1.5529" path="/540" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1268.820716][T25440] vxcan1 speed is unknown, defaulting to 1000 [ 1268.957435][T25447] FAULT_INJECTION: forcing a failure. [ 1268.957435][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.970938][T25447] CPU: 1 UID: 0 PID: 25447 Comm: syz.4.5531 Not tainted syzkaller #0 PREEMPT(full) [ 1268.970961][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1268.970970][T25447] Call Trace: [ 1268.970977][T25447] [ 1268.970983][T25447] dump_stack_lvl+0x16c/0x1f0 [ 1268.971011][T25447] should_fail_ex+0x512/0x640 [ 1268.971036][T25447] _copy_from_user+0x2e/0xd0 [ 1268.971061][T25447] copy_msghdr_from_user+0x98/0x160 [ 1268.971083][T25447] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1268.971117][T25447] ___sys_sendmsg+0xfe/0x1d0 [ 1268.971140][T25447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.971194][T25447] __sys_sendmsg+0x16d/0x220 [ 1268.971215][T25447] ? __pfx___sys_sendmsg+0x10/0x10 [ 1268.971254][T25447] do_syscall_64+0xcd/0x4e0 [ 1268.971279][T25447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.971296][T25447] RIP: 0033:0x7f18ce58eec9 [ 1268.971310][T25447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.971326][T25447] RSP: 002b:00007f18cf378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1268.971343][T25447] RAX: ffffffffffffffda RBX: 00007f18ce7e5fa0 RCX: 00007f18ce58eec9 [ 1268.971354][T25447] RDX: 0000000024040004 RSI: 0000200000000100 RDI: 0000000000000003 [ 1268.971365][T25447] RBP: 00007f18cf378090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.971375][T25447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.971385][T25447] R13: 00007f18ce7e6038 R14: 00007f18ce7e5fa0 R15: 00007ffd97764df8 [ 1268.971411][T25447] [ 1269.335267][ T30] audit: type=1400 audit(1759035577.379:1590): avc: denied { setopt } for pid=25451 comm="syz.4.5533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1270.333764][T25469] No source specified [ 1273.184101][T25471] tipc: Enabling of bearer rejected, failed to enable media [ 1273.308492][T25495] FAULT_INJECTION: forcing a failure. [ 1273.308492][T25495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.362333][T25495] CPU: 1 UID: 0 PID: 25495 Comm: syz.2.5539 Not tainted syzkaller #0 PREEMPT(full) [ 1273.362357][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1273.362367][T25495] Call Trace: [ 1273.362373][T25495] [ 1273.362380][T25495] dump_stack_lvl+0x16c/0x1f0 [ 1273.362405][T25495] should_fail_ex+0x512/0x640 [ 1273.362430][T25495] _copy_from_user+0x2e/0xd0 [ 1273.362454][T25495] copy_msghdr_from_user+0x98/0x160 [ 1273.362474][T25495] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1273.362504][T25495] ___sys_sendmsg+0xfe/0x1d0 [ 1273.362527][T25495] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.362590][T25495] __sys_sendmsg+0x16d/0x220 [ 1273.362612][T25495] ? __pfx___sys_sendmsg+0x10/0x10 [ 1273.362650][T25495] do_syscall_64+0xcd/0x4e0 [ 1273.362675][T25495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.362693][T25495] RIP: 0033:0x7f949e38eec9 [ 1273.362707][T25495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.362723][T25495] RSP: 002b:00007f949f19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.362739][T25495] RAX: ffffffffffffffda RBX: 00007f949e5e5fa0 RCX: 00007f949e38eec9 [ 1273.362750][T25495] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1273.362761][T25495] RBP: 00007f949f19b090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.362771][T25495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.362780][T25495] R13: 00007f949e5e6038 R14: 00007f949e5e5fa0 R15: 00007ffc2b63ecb8 [ 1273.362806][T25495] [ 1273.670069][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1273.687747][T25502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1273.703508][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1274.372187][T25502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1274.417784][ T30] audit: type=1400 audit(1759035582.469:1591): avc: denied { override_creds } for pid=25497 comm="syz.1.5541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1275.866667][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5548'. [ 1275.897841][T25526] vlan0: entered allmulticast mode [ 1275.907766][T25526] bridge_slave_0: entered allmulticast mode [ 1275.983342][T25528] tipc: Enabled bearer , priority 0 [ 1276.000465][T25528] syzkaller0: entered promiscuous mode [ 1276.013505][T25528] syzkaller0: entered allmulticast mode [ 1276.052923][T25528] tipc: Resetting bearer [ 1276.064882][T25527] tipc: Resetting bearer [ 1276.151931][T25527] tipc: Disabling bearer [ 1276.185521][T25535] FAULT_INJECTION: forcing a failure. [ 1276.185521][T25535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.242738][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 1276.459966][T25535] CPU: 1 UID: 0 PID: 25535 Comm: syz.1.5551 Not tainted syzkaller #0 PREEMPT(full) [ 1276.459993][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1276.460004][T25535] Call Trace: [ 1276.460010][T25535] [ 1276.460019][T25535] dump_stack_lvl+0x16c/0x1f0 [ 1276.460047][T25535] should_fail_ex+0x512/0x640 [ 1276.460074][T25535] _copy_from_user+0x2e/0xd0 [ 1276.460101][T25535] copy_msghdr_from_user+0x98/0x160 [ 1276.460123][T25535] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1276.460149][T25535] ? lockdep_hardirqs_on+0x7c/0x110 [ 1276.460171][T25535] ? finish_task_switch.isra.0+0x221/0xc10 [ 1276.460199][T25535] ___sys_sendmsg+0xfe/0x1d0 [ 1276.460222][T25535] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.460277][T25535] __sys_sendmsg+0x16d/0x220 [ 1276.460299][T25535] ? __pfx___sys_sendmsg+0x10/0x10 [ 1276.460338][T25535] do_syscall_64+0xcd/0x4e0 [ 1276.460363][T25535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.460381][T25535] RIP: 0033:0x7f2d8c58eec9 [ 1276.460396][T25535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.460413][T25535] RSP: 002b:00007f2d8d3e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.460430][T25535] RAX: ffffffffffffffda RBX: 00007f2d8c7e5fa0 RCX: 00007f2d8c58eec9 [ 1276.460442][T25535] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1276.460453][T25535] RBP: 00007f2d8d3e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.460464][T25535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.460474][T25535] R13: 00007f2d8c7e6038 R14: 00007f2d8c7e5fa0 R15: 00007fff2aa9ec98 [ 1276.460499][T25535] [ 1277.001023][ T5917] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1277.191350][T24389] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1277.239043][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1277.369098][T24389] usb 2-1: Using ep0 maxpacket: 32 [ 1277.381466][T24389] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1277.466061][T24389] usb 2-1: config 0 has no interface number 0 [ 1277.518551][T24389] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1277.644038][T24389] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1277.671908][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 49, changing to 9 [ 1277.693738][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8265, setting to 1024 [ 1277.714031][T24389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.727290][ T5917] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1277.731533][T24389] usb 2-1: Product: syz [ 1277.748989][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.756046][T24389] usb 2-1: Manufacturer: syz [ 1277.768903][ T5917] usb 3-1: config 0 descriptor?? [ 1277.771974][T24389] usb 2-1: SerialNumber: syz [ 1277.828471][T24389] usb 2-1: config 0 descriptor?? [ 1277.871657][T24389] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1277.892627][T24389] em28xx 2-1:0.132: Video interface 132 found: [ 1278.012133][ T5917] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1278.066633][ T5917] usb 3-1: USB disconnect, device number 51 [ 1278.083541][ T30] audit: type=1400 audit(1759035586.139:1592): avc: denied { read } for pid=25556 comm="syz.4.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1278.524315][T25573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5562'. [ 1278.553932][T25573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1278.619096][ T5910] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1278.792762][ T5910] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1278.811656][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.822029][ T5910] usb 4-1: Product: syz [ 1278.839957][ T5910] usb 4-1: Manufacturer: syz [ 1278.854944][ T5910] usb 4-1: SerialNumber: syz [ 1278.871631][ T5910] usb 4-1: config 0 descriptor?? [ 1278.890031][ T5910] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1279.239866][T24389] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1279.453685][ T5910] pwc: Failed to set LED on/off time (-71) [ 1279.463259][ T5910] pwc: send_video_command error -71 [ 1279.468456][ T5910] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1279.479315][T24389] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1279.492827][ T5910] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1279.507886][T24389] em28xx 2-1:0.132: board has no eeprom [ 1279.528175][ T5910] usb 4-1: USB disconnect, device number 69 [ 1279.589063][T24389] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1279.598766][T24389] em28xx 2-1:0.132: analog set to bulk mode. [ 1279.612219][T11494] em28xx 2-1:0.132: Registering V4L2 extension [ 1279.642526][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1279.657177][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1279.745629][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1279.846864][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1279.911376][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1279.933315][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1279.946835][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1279.963428][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1280.087133][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1280.102111][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1280.153849][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1280.616976][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1280.630926][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1280.654931][T25615] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1280.656073][T11494] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1280.698521][T24389] usb 2-1: USB disconnect, device number 64 [ 1280.708881][T24389] em28xx 2-1:0.132: Disconnecting em28xx [ 1280.731285][T11494] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1280.742121][T25621] netlink: 'syz.2.5575': attribute type 2 has an invalid length. [ 1280.750798][T25621] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.5575'. [ 1280.751441][T11494] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1280.772502][T11494] em28xx 2-1:0.132: No AC97 audio processor [ 1280.780977][T11494] usb 2-1: Decoder not found [ 1280.785640][T11494] em28xx 2-1:0.132: failed to create media graph [ 1280.815844][T11494] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1280.887608][T11494] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1280.887809][T25624] ================================================================== [ 1280.896490][T24389] em28xx 2-1:0.132: Closing input extension [ 1280.904242][T25624] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1280.904271][T25624] Read of size 8 at addr ffff88807a110740 by task v4l_id/25624 [ 1280.904285][T25624] [ 1280.904294][T25624] CPU: 0 UID: 0 PID: 25624 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1280.904314][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1280.904323][T25624] Call Trace: [ 1280.904329][T25624] [ 1280.904335][T25624] dump_stack_lvl+0x116/0x1f0 [ 1280.904356][T25624] print_report+0xcd/0x630 [ 1280.904373][T25624] ? __virt_addr_valid+0x81/0x610 [ 1280.904392][T25624] ? __phys_addr+0xe8/0x180 [ 1280.904411][T25624] ? v4l2_fh_init+0x27d/0x2c0 [ 1280.904427][T25624] kasan_report+0xe0/0x110 [ 1280.904444][T25624] ? v4l2_fh_init+0x27d/0x2c0 [ 1280.904464][T25624] v4l2_fh_init+0x27d/0x2c0 [ 1280.904482][T25624] v4l2_fh_open+0x83/0xc0 [ 1280.904500][T25624] em28xx_v4l2_open+0x24e/0x7e0 [ 1280.904521][T25624] v4l2_open+0x225/0x490 [ 1280.904537][T25624] ? __pfx_v4l2_open+0x10/0x10 [ 1280.904553][T25624] chrdev_open+0x234/0x6a0 [ 1280.904571][T25624] ? __pfx_chrdev_open+0x10/0x10 [ 1280.904588][T25624] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1280.904608][T25624] do_dentry_open+0x97f/0x1530 [ 1280.904624][T25624] ? __pfx_chrdev_open+0x10/0x10 [ 1280.904643][T25624] vfs_open+0x82/0x3f0 [ 1280.904668][T25624] path_openat+0x1de4/0x2cb0 [ 1280.904689][T25624] ? __pfx_path_openat+0x10/0x10 [ 1280.904709][T25624] do_filp_open+0x20b/0x470 [ 1280.904725][T25624] ? __pfx_do_filp_open+0x10/0x10 [ 1280.904752][T25624] ? alloc_fd+0x471/0x7d0 [ 1280.904772][T25624] do_sys_openat2+0x11b/0x1d0 [ 1280.904791][T25624] ? __pfx_do_sys_openat2+0x10/0x10 [ 1280.904809][T25624] ? find_held_lock+0x2b/0x80 [ 1280.904828][T25624] ? handle_mm_fault+0x2ab/0xd10 [ 1280.904853][T25624] __x64_sys_openat+0x174/0x210 [ 1280.904873][T25624] ? __pfx___x64_sys_openat+0x10/0x10 [ 1280.904894][T25624] ? do_user_addr_fault+0x843/0x1370 [ 1280.904912][T25624] do_syscall_64+0xcd/0x4e0 [ 1280.904932][T25624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.904947][T25624] RIP: 0033:0x7ff1cd6a7407 [ 1280.904959][T25624] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1280.904974][T25624] RSP: 002b:00007ffed51976c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1280.904989][T25624] RAX: ffffffffffffffda RBX: 00007ff1cdd7e880 RCX: 00007ff1cd6a7407 [ 1280.904999][T25624] RDX: 0000000000000000 RSI: 00007ffed5197f1a RDI: ffffffffffffff9c [ 1280.905009][T25624] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1280.905018][T25624] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1280.905027][T25624] R13: 00007ffed5197910 R14: 00007ff1cdee5000 R15: 000055831f16f4d8 [ 1280.905044][T25624] [ 1280.905049][T25624] [ 1281.181914][T25624] Allocated by task 11494: [ 1281.186303][T25624] kasan_save_stack+0x33/0x60 [ 1281.190961][T25624] kasan_save_track+0x14/0x30 [ 1281.195613][T25624] __kasan_kmalloc+0xaa/0xb0 [ 1281.200179][T25624] em28xx_v4l2_init+0x114/0x4080 [ 1281.205095][T25624] em28xx_init_extension+0x13a/0x200 [ 1281.210354][T25624] request_module_async+0x61/0x70 [ 1281.215353][T25624] process_one_work+0x9cc/0x1b70 [ 1281.220267][T25624] worker_thread+0x6c8/0xf10 [ 1281.224834][T25624] kthread+0x3c2/0x780 [ 1281.228878][T25624] ret_from_fork+0x56a/0x730 [ 1281.233447][T25624] ret_from_fork_asm+0x1a/0x30 [ 1281.238189][T25624] [ 1281.240489][T25624] Freed by task 11494: [ 1281.244527][T25624] kasan_save_stack+0x33/0x60 [ 1281.249178][T25624] kasan_save_track+0x14/0x30 [ 1281.253832][T25624] kasan_save_free_info+0x3b/0x60 [ 1281.258838][T25624] __kasan_slab_free+0x60/0x70 [ 1281.263577][T25624] kfree+0x2b4/0x4d0 [ 1281.267455][T25624] em28xx_v4l2_init+0x22b5/0x4080 [ 1281.272460][T25624] em28xx_init_extension+0x13a/0x200 [ 1281.277718][T25624] request_module_async+0x61/0x70 [ 1281.282716][T25624] process_one_work+0x9cc/0x1b70 [ 1281.287629][T25624] worker_thread+0x6c8/0xf10 [ 1281.292195][T25624] kthread+0x3c2/0x780 [ 1281.296240][T25624] ret_from_fork+0x56a/0x730 [ 1281.300806][T25624] ret_from_fork_asm+0x1a/0x30 [ 1281.305548][T25624] [ 1281.307848][T25624] The buggy address belongs to the object at ffff88807a110000 [ 1281.307848][T25624] which belongs to the cache kmalloc-8k of size 8192 [ 1281.321873][T25624] The buggy address is located 1856 bytes inside of [ 1281.321873][T25624] freed 8192-byte region [ffff88807a110000, ffff88807a112000) [ 1281.335817][T25624] [ 1281.338118][T25624] The buggy address belongs to the physical page: [ 1281.344500][T25624] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a110 [ 1281.353233][T25624] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1281.361708][T25624] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1281.369660][T25624] page_type: f5(slab) [ 1281.373618][T25624] raw: 00fff00000000040 ffff88801b842280 0000000000000000 dead000000000001 [ 1281.382177][T25624] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1281.390737][T25624] head: 00fff00000000040 ffff88801b842280 0000000000000000 dead000000000001 [ 1281.399381][T25624] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1281.408028][T25624] head: 00fff00000000003 ffffea0001e84401 00000000ffffffff 00000000ffffffff [ 1281.416673][T25624] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1281.425314][T25624] page dumped because: kasan: bad access detected [ 1281.431704][T25624] page_owner tracks the page as allocated [ 1281.437392][T25624] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 24705, tgid 24698 (syz.3.5339), ts 1214212721537, free_ts 1214174497359 [ 1281.460458][T25624] post_alloc_hook+0x1c0/0x230 [ 1281.465205][T25624] get_page_from_freelist+0x132b/0x38e0 [ 1281.470726][T25624] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1281.476594][T25624] alloc_pages_mpol+0x1fb/0x550 [ 1281.481420][T25624] new_slab+0x247/0x330 [ 1281.485558][T25624] ___slab_alloc+0xcf2/0x1750 [ 1281.490216][T25624] __slab_alloc.constprop.0+0x56/0xb0 [ 1281.495569][T25624] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1281.500836][T25624] ipv4_sysctl_init_net+0x16d/0x350 [ 1281.506008][T25624] ops_init+0x1e2/0x5f0 [ 1281.510142][T25624] setup_net+0x10f/0x380 [ 1281.514363][T25624] copy_net_ns+0x2a6/0x5f0 [ 1281.518760][T25624] create_new_namespaces+0x3ea/0xa90 [ 1281.524023][T25624] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1281.529634][T25624] ksys_unshare+0x45b/0xa40 [ 1281.534118][T25624] __x64_sys_unshare+0x31/0x40 [ 1281.538861][T25624] page last free pid 16396 tgid 16396 stack trace: [ 1281.545333][T25624] __free_frozen_pages+0x7d5/0x10f0 [ 1281.550514][T25624] __put_partials+0x165/0x1c0 [ 1281.555171][T25624] qlist_free_all+0x4d/0x120 [ 1281.559736][T25624] kasan_quarantine_reduce+0x195/0x1e0 [ 1281.565168][T25624] __kasan_slab_alloc+0x69/0x90 [ 1281.569996][T25624] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 1281.575777][T25624] shmem_alloc_inode+0x25/0x50 [ 1281.580520][T25624] alloc_inode+0x64/0x240 [ 1281.584832][T25624] new_inode+0x22/0x1c0 [ 1281.588972][T25624] shmem_get_inode+0x19a/0xfb0 [ 1281.593717][T25624] shmem_mknod+0x1a8/0x450 [ 1281.598111][T25624] shmem_mkdir+0x31/0x80 [ 1281.602330][T25624] vfs_mkdir+0x593/0x8c0 [ 1281.606547][T25624] do_mkdirat+0x304/0x3e0 [ 1281.610854][T25624] __x64_sys_mkdirat+0x83/0xb0 [ 1281.615594][T25624] do_syscall_64+0xcd/0x4e0 [ 1281.620077][T25624] [ 1281.622376][T25624] Memory state around the buggy address: [ 1281.627976][T25624] ffff88807a110600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1281.636010][T25624] ffff88807a110680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1281.644045][T25624] >ffff88807a110700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1281.652076][T25624] ^ [ 1281.658199][T25624] ffff88807a110780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1281.666232][T25624] ffff88807a110800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1281.674266][T25624] ================================================================== [ 1281.682370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.698587][ T5925] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1281.714023][T25624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1281.721213][T25624] CPU: 0 UID: 0 PID: 25624 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1281.730215][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1281.740251][T25624] Call Trace: [ 1281.743510][T25624] [ 1281.746420][T25624] dump_stack_lvl+0x3d/0x1f0 [ 1281.750995][T25624] vpanic+0x6e8/0x7a0 [ 1281.754952][T25624] ? __pfx_vpanic+0x10/0x10 [ 1281.759433][T25624] ? v4l2_fh_init+0x27d/0x2c0 [ 1281.764090][T25624] panic+0xca/0xd0 [ 1281.767786][T25624] ? __pfx_panic+0x10/0x10 [ 1281.772179][T25624] ? v4l2_fh_init+0x27d/0x2c0 [ 1281.776836][T25624] ? preempt_schedule_common+0x44/0xc0 [ 1281.782276][T25624] ? preempt_schedule_thunk+0x16/0x30 [ 1281.787632][T25624] ? check_panic_on_warn+0x1f/0xb0 [ 1281.792721][T25624] check_panic_on_warn+0xab/0xb0 [ 1281.797633][T25624] end_report+0x107/0x170 [ 1281.801941][T25624] kasan_report+0xee/0x110 [ 1281.806336][T25624] ? v4l2_fh_init+0x27d/0x2c0 [ 1281.811001][T25624] v4l2_fh_init+0x27d/0x2c0 [ 1281.815483][T25624] v4l2_fh_open+0x83/0xc0 [ 1281.819794][T25624] em28xx_v4l2_open+0x24e/0x7e0 [ 1281.824627][T25624] v4l2_open+0x225/0x490 [ 1281.828848][T25624] ? __pfx_v4l2_open+0x10/0x10 [ 1281.833589][T25624] chrdev_open+0x234/0x6a0 [ 1281.837985][T25624] ? __pfx_chrdev_open+0x10/0x10 [ 1281.842905][T25624] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1281.849212][T25624] do_dentry_open+0x97f/0x1530 [ 1281.853953][T25624] ? __pfx_chrdev_open+0x10/0x10 [ 1281.858870][T25624] vfs_open+0x82/0x3f0 [ 1281.862923][T25624] path_openat+0x1de4/0x2cb0 [ 1281.867493][T25624] ? __pfx_path_openat+0x10/0x10 [ 1281.872410][T25624] do_filp_open+0x20b/0x470 [ 1281.876891][T25624] ? __pfx_do_filp_open+0x10/0x10 [ 1281.881908][T25624] ? alloc_fd+0x471/0x7d0 [ 1281.886218][T25624] do_sys_openat2+0x11b/0x1d0 [ 1281.890877][T25624] ? __pfx_do_sys_openat2+0x10/0x10 [ 1281.896058][T25624] ? find_held_lock+0x2b/0x80 [ 1281.900713][T25624] ? handle_mm_fault+0x2ab/0xd10 [ 1281.905635][T25624] __x64_sys_openat+0x174/0x210 [ 1281.910468][T25624] ? __pfx___x64_sys_openat+0x10/0x10 [ 1281.915821][T25624] ? do_user_addr_fault+0x843/0x1370 [ 1281.921084][T25624] do_syscall_64+0xcd/0x4e0 [ 1281.925571][T25624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.931438][T25624] RIP: 0033:0x7ff1cd6a7407 [ 1281.935831][T25624] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1281.955414][T25624] RSP: 002b:00007ffed51976c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1281.963803][T25624] RAX: ffffffffffffffda RBX: 00007ff1cdd7e880 RCX: 00007ff1cd6a7407 [ 1281.971754][T25624] RDX: 0000000000000000 RSI: 00007ffed5197f1a RDI: ffffffffffffff9c [ 1281.979700][T25624] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1281.987648][T25624] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1281.995599][T25624] R13: 00007ffed5197910 R14: 00007ff1cdee5000 R15: 000055831f16f4d8 [ 1282.003565][T25624] [ 1282.006737][T25624] Kernel Offset: disabled [ 1282.011034][T25624] Rebooting in 86400 seconds..