last executing test programs: 11m1.153869428s ago: executing program 32 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 10m43.435018689s ago: executing program 33 (id=599): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) 10m42.94316285s ago: executing program 34 (id=612): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000640)=[{0x7, 0x1000, 0x0, &(0x7f0000000200)}, {0x5, 0x400, 0x0, 0x0}], 0x2}) 9m7.324272664s ago: executing program 4 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050004770000000000000a0000000900020073797a30000001000500010007000000050005000a0000000c00078008000b400000cb57050004000000000011000300686173683a69702c6d61"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 9m6.341798881s ago: executing program 4 (id=768): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe80000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 9m6.254868111s ago: executing program 7 (id=618): openat$hwrng(0xffffffffffffff9c, &(0x7f000000c180), 0x20001, 0x0) 9m6.086328274s ago: executing program 4 (id=769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r1, 0x0) 9m5.847938394s ago: executing program 7 (id=771): connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 9m5.690004155s ago: executing program 4 (id=773): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "0bffcdcf3ff56bae902ca2bfbe994ad169ead745562665de56aefc4bab38ba11426ed74c58ab678016e2447edba3f49599a0d89987d655e231b211936f998c5d", 0x33}, 0x48, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) 9m4.697777575s ago: executing program 7 (id=775): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = gettid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="140100002700010000000000000000000101008024d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c664395a3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a052d0000008bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27"], 0x114}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 8m50.288873306s ago: executing program 35 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 8m49.799132094s ago: executing program 36 (id=773): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "0bffcdcf3ff56bae902ca2bfbe994ad169ead745562665de56aefc4bab38ba11426ed74c58ab678016e2447edba3f49599a0d89987d655e231b211936f998c5d", 0x33}, 0x48, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) 8m49.639641549s ago: executing program 37 (id=774): io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="eb", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0xa, r1, 0x0, 0x0, 0x1000}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m48.964683376s ago: executing program 38 (id=775): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x505, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = gettid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="140100002700010000000000000000000101008024d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c664395a3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a052d0000008bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27"], 0x114}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 8m12.370036853s ago: executing program 8 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 8m11.914542541s ago: executing program 8 (id=831): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'cpu'}]}, 0x5) 8m10.750186922s ago: executing program 8 (id=837): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) utimes(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b5, 0x0, &(0x7f0000000500), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140), 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x35}, @remote}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 8m10.328515221s ago: executing program 8 (id=842): creat(&(0x7f0000000000)='./file0\x00', 0x60) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2) 8m8.891905651s ago: executing program 8 (id=850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000800010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c00000014"], 0xe0}}, 0x0) 8m8.511632876s ago: executing program 0 (id=853): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x44010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m7.585468014s ago: executing program 8 (id=855): semget(0x3, 0xc09ee4e50298ddff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) time(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, 0x0) 8m7.087933119s ago: executing program 0 (id=860): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000e00)=ANY=[], 0x958) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "574af3849be33785b8533755d135a661c49e5813ce6cfad6af590cb0ae34861ff44550bf90618d864e6debacc0748cc674188f2f0dd20d9d17c5edc4d864d92c1f9782a699abf5ff815710f5907799384387b5a895899d2b4cdcb26918fbc900a98a96c50516d539832ebb50fc32fc4d3540cb0cb8795254090919fc69d60e9b2de868dd40ffc156"}, 0x93) 8m6.94283515s ago: executing program 6 (id=862): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) 8m6.713861014s ago: executing program 0 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32]) 8m6.709026135s ago: executing program 6 (id=864): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2001c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 8m4.687890542s ago: executing program 6 (id=866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) 8m4.53027711s ago: executing program 6 (id=867): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xfd, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="93bffce623851797a8dc7901f0048678cd35ef833c350900f94a94770a6845b091e69f243dea0d604754e90104e3568b89a3427c84c305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d559276068cce1609b9c4f8424b9da760270a470f95b99ebb600000000000000000000000000000000000000000067caa06a2b2ccf02b3d089b12882f6864748b1cf834a601951e2bc5733170785186e1aa79659b77744192481199f3c3c18f0be35c520203b00600d55322dd6a22eebb99898db", 0xc6}, {0x0}], 0x2}}], 0x1, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 8m4.403188923s ago: executing program 0 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x1, &(0x7f00000002c0)=""/59, &(0x7f0000000400)=0x3b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/140, 0x8c}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local, 'vlan0\x00'}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 8m3.324173607s ago: executing program 0 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000000000000", 0xc}, {&(0x7f0000000280)="0b6d16", 0x3}], 0x3) 8m3.176538204s ago: executing program 6 (id=872): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f"], 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) close_range(r0, 0xffffffffffffffff, 0x0) 8m2.223567945s ago: executing program 0 (id=874): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 8m2.058809781s ago: executing program 6 (id=876): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2001c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m47.536031987s ago: executing program 39 (id=855): semget(0x3, 0xc09ee4e50298ddff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) time(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, 0x0) 7m46.90467891s ago: executing program 40 (id=874): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 7m46.778956698s ago: executing program 41 (id=876): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2001c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m53.339390912s ago: executing program 4 (id=882): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) read$char_usb(r2, &(0x7f0000000000)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 6m49.700784319s ago: executing program 4 (id=977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r4, r4, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6m34.12151948s ago: executing program 42 (id=977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r4, r4, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 13.483550012s ago: executing program 2 (id=2463): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0x2, 0x8000000, 0x2}}, "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", "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"}) syz_usb_disconnect(0xffffffffffffffff) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) r5 = syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x67, &(0x7f0000000380)={0x5, 0xf, 0x67, 0x3, [@generic={0x4b, 0x10, 0x4, "1f92ec1474530770b3585c7a692c24b71f48dc872ccc45ed759229fad27c6ac9bb356af13ee2030add1da98059c5f2735ed6e6c19a53a049a2b3e3d7f27322194df984239dcce58f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f7e36b6818e1b7c1094ead98f8ef6f40"}]}, 0x5, [{0x0, 0x0}, {0x3d, &(0x7f00000004c0)=@string={0x3d, 0x3, "bce8c4bdfaf9b44f940024f192a15cfea0402bae503bd4fd3c4be2c1a2ecb0da184158b923becfef471526be463a033e734f61185311bbbccf8e2c"}}, {0x86, &(0x7f00000005c0)=@string={0x86, 0x3, "c186591f73efd3a918b492d1ffa613143b24000b94337a472c2639e75640cd6304f31984ca55295a80e6e246cca6ceff19beb6371bbab5975bf956ede21dee7167bd82db31bb862259d8bf12df5ce1f0215a739c704289671b0187cc901c4c62a78dbc6ef730bc28e0ce331a778c7bc503d648784531fc07d26e6db973bc9cfc8aca8ad2"}}, {0x0, 0x0}, {0x1e, &(0x7f00000006c0)=@string={0x1e, 0x3, "50de9c2106c60e633193c69d02aebb2cf364bc3710fb4ee9df5f1d56"}}]}) syz_usb_disconnect(r5) syz_usb_disconnect(r0) syz_usb_ep_write(r0, 0x3, 0x3b, &(0x7f00000007c0)="8f0b813789e32b7b45503fa91f2aa34a1b4365728a1674a5f6bf8679cd7e4ad694446b54dc74b28aea06af4719588eb89de4f80cc8309f1553fab0") syz_usb_ep_write(r0, 0x4, 0x0, &(0x7f00000001c0)) 12.041433758s ago: executing program 1 (id=2470): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffff5b81) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x10, 0x0, 0xff, 0x0, 0xfe, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x8}}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x40005, 0x5, 0x4, 0x7, 0x14d4, 0xfd, 0x2, 0x1, 0x1, 0xfffffffd, 0xfffffffd, 0x66, 0x0, 0x7f, 0x3, 0x40000003, 0x15a000bc, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0x2000e6a, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 10.54265418s ago: executing program 1 (id=2473): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000140) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) 10.531806517s ago: executing program 5 (id=2474): syz_usb_connect(0x0, 0x73, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x8, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x9, 0xf7, 0x3}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x5, 0xde}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.073727367s ago: executing program 3 (id=2476): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = dup(r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4040) 9.393792121s ago: executing program 2 (id=2477): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x101, 0xffffffffffffffff, 0x0, 0x100000008, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 9.36862122s ago: executing program 3 (id=2479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 9.10307912s ago: executing program 1 (id=2480): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mq_notify(0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, 0x0, 0x13) 8.380946913s ago: executing program 3 (id=2482): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0x7, 0x0, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x80000000, 0x10001, 0x8, 0x92f, 0x7, 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='oom_adj\x00') fchdir(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r2, 0x0, 0x1) r3 = fcntl$getown(r1, 0x9) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000180)={0xa, @raw_data="c91be32f66cf10db862d1a39722e36efe3f4ea0dc380868981eb5fa82f41195719bba20e4f7f6c5f32784031a3a5f64d9c4887968a4bb147e99d228f9b7cbf2c2ca3c842891d5f965ce223795052aee5fdb3b97ce002cee6b046ff58a7006545dee041e378c851a038eefa54773f34b001e45ee4602a04443daa0a8bf572f213eab66b412e286dfea47c8e02bc060ec1df83e67dfa03a2e85b3ec9177d43e07ab3e5822a38fb770caa9fc5d520bd33d24177f95ae2a0990b2efc9e04d4f54fefa4fb4db277b4c679"}) capget(&(0x7f0000000340)={0x20080522, r3}, &(0x7f0000000380)={0xa, 0x8000, 0x7, 0x3, 0xd, 0x4}) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='overlay\x00', 0x1021004, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) r8 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f00000000c0)='fd/3\x00') r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) r10 = syz_open_pts(r5, 0x0) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000400)={0x8, 0x4, 0x1000, 0x5, 0x0, "9089ed1cea74dfe5"}) 8.186926596s ago: executing program 1 (id=2484): arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffff5b81) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x10, 0x0, 0xff, 0x0, 0xfe, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x8}}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020"], 0x80}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x40005, 0x5, 0x4, 0x7, 0x14d4, 0xfd, 0x2, 0x1, 0x1, 0xfffffffd, 0xfffffffd, 0x66, 0x0, 0x7f, 0x3, 0x40000003, 0x15a000bc, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0x2000e6a, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 7.198498599s ago: executing program 2 (id=2486): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000080000, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x426, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x18000000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1085, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="20ff0000010a01080000000000000000030000070900010073797a3a4d000000f5531d6b2a4d1765fba0d1928fcb8a1c169252f93f7eb7436df0f8a8481f517f8a0c355d7a4c09a41f08285a1930d7dbd0fce0ea7b01ab103e555f23e74abbdba84d0eee2489d2c5813948c452b5b5f148a25bb555539f260f37387e61877f4f80eda07b8884be4cbb98e7efee6db3234a869574453761fe7a7ecb4dcb1823d34b894cbd2268c5832fda767a8f1d3fcd26d5a94f2bfa347052a784492daf9eb0c51222273bb1ed7c281247"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket(0x1a, 0x80000, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@empty}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 6.371862891s ago: executing program 5 (id=2487): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000140) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) 6.312544211s ago: executing program 1 (id=2488): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4048aecb, &(0x7f00000034c0)={{0x2, 0x0, 0x80, {0x2, 0x8000000, 0x2}}, "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", "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"}) syz_usb_disconnect(0xffffffffffffffff) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) r5 = syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x67, &(0x7f0000000380)={0x5, 0xf, 0x67, 0x3, [@generic={0x4b, 0x10, 0x4, "1f92ec1474530770b3585c7a692c24b71f48dc872ccc45ed759229fad27c6ac9bb356af13ee2030add1da98059c5f2735ed6e6c19a53a049a2b3e3d7f27322194df984239dcce58f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "f7e36b6818e1b7c1094ead98f8ef6f40"}]}, 0x5, [{0x0, 0x0}, {0x3d, &(0x7f00000004c0)=@string={0x3d, 0x3, "bce8c4bdfaf9b44f940024f192a15cfea0402bae503bd4fd3c4be2c1a2ecb0da184158b923becfef471526be463a033e734f61185311bbbccf8e2c"}}, {0x8f, &(0x7f00000005c0)=@string={0x8f, 0x3, "c186591f73efd3a918b492d1ffa613143b24000b94337a472c2639e75640cd6304f31984ca55295a80e6e246cca6ceff19beb6371bbab5975bf956ede21dee7167bd82db31bb862259d8bf12df5ce1f0215a739c704289671b0187cc901c4c62a78dbc6ef730bc28e0ce331a778c7bc503d648784531fc07d26e6db973bc9cfc8aca8ad2711be594c7bee89439"}}, {0x0, 0x0}, {0x1e, &(0x7f00000006c0)=@string={0x1e, 0x3, "50de9c2106c60e633193c69d02aebb2cf364bc3710fb4ee9df5f1d56"}}]}) syz_usb_disconnect(r5) syz_usb_disconnect(r0) syz_usb_ep_write(r0, 0x3, 0x3b, &(0x7f00000007c0)="8f0b813789e32b7b45503fa91f2aa34a1b4365728a1674a5f6bf8679cd7e4ad694446b54dc74b28aea06af4719588eb89de4f80cc8309f1553fab0") syz_usb_ep_write(r0, 0x4, 0x0, &(0x7f00000001c0)) 5.315887756s ago: executing program 9 (id=2489): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000900)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb) 5.217101048s ago: executing program 5 (id=2490): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 4.433457892s ago: executing program 3 (id=2491): socket(0x1e, 0x4, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.1912896s ago: executing program 9 (id=2492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r6, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) 4.119515429s ago: executing program 5 (id=2493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000002000000000000000000000000000000ffffffffffffffff0002000000000000fffffffffffffffe03000000000000000000000000000000000000000000000001000000000d0000060000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) 3.973423785s ago: executing program 2 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.09933288s ago: executing program 3 (id=2495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) close(0x3) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfa9, @mcast2, 0x9}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xf) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r4, 0x409, 0x9) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, 0x0, 0x0) 3.094374113s ago: executing program 9 (id=2496): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 2.319447071s ago: executing program 9 (id=2497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 2.183148736s ago: executing program 5 (id=2498): socket(0x1e, 0x4, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='macvlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002cbd7010f5ffffff040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.991298514s ago: executing program 9 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 797.274633ms ago: executing program 2 (id=2500): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 793.769396ms ago: executing program 5 (id=2501): capset(&(0x7f0000000080)={0x20080522}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) capget(&(0x7f00000002c0)={0x20071026, r0}, &(0x7f0000000300)={0x80000000, 0x10001, 0x8, 0x92f, 0x7, 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) r2 = syz_open_procfs(r0, &(0x7f00000003c0)='oom_adj\x00') fchdir(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) lseek(r3, 0x0, 0x1) r4 = fcntl$getown(r2, 0x9) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000180)={0xa, @raw_data="c91be32f66cf10db862d1a39722e36efe3f4ea0dc380868981eb5fa82f41195719bba20e4f7f6c5f32784031a3a5f64d9c4887968a4bb147e99d228f9b7cbf2c2ca3c842891d5f965ce223795052aee5fdb3b97ce002cee6b046ff58a7006545dee041e378c851a038eefa54773f34b001e45ee4602a04443daa0a8bf572f213eab66b412e286dfea47c8e02bc060ec1df83e67dfa03a2e85b3ec9177d43e07ab3e5822a38fb770caa9fc5d520bd33d24177f95ae2a0990b2efc9e04d4f54fefa4fb4db277b4c679"}) capget(&(0x7f0000000340)={0x20080522, r4}, &(0x7f0000000380)={0xa, 0x8000, 0x7, 0x3, 0xd, 0x4}) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='overlay\x00', 0x1021004, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) r9 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r9, &(0x7f00000000c0)='fd/3\x00') r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r10, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, 0x0, 0x0) r11 = syz_open_pts(r6, 0x0) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000400)={0x8, 0x4, 0x1000, 0x5, 0x0, "9089ed1cea74dfe5"}) 410.550097ms ago: executing program 1 (id=2502): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 134.443511ms ago: executing program 3 (id=2503): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mq_notify(0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 3.500321ms ago: executing program 2 (id=2504): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) getpid() r1 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 0s ago: executing program 9 (id=2505): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x101, 0xffffffffffffffff, 0x0, 0x100000008, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1763623755.105:369): avc: denied { write } for pid=10547 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.523859][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.744217][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.517285][T10568] syzkaller0: entered promiscuous mode [ 515.552899][T10568] syzkaller0: entered allmulticast mode [ 515.996461][T10579] tipc: Started in network mode [ 516.001330][T10579] tipc: Node identity 4, cluster identity 4711 [ 516.008151][T10579] tipc: Node number set to 4 [ 516.087793][T10096] veth0_vlan: entered promiscuous mode [ 516.129682][T10096] veth1_vlan: entered promiscuous mode [ 516.198136][T10096] veth0_macvtap: entered promiscuous mode [ 516.254011][T10096] veth1_macvtap: entered promiscuous mode [ 516.306371][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.361074][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.536214][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.687765][ T30] audit: type=1400 audit(1763623757.255:370): avc: denied { mount } for pid=10590 comm="syz.9.1092" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 516.742848][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.782273][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.795540][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.220095][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.366620][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.479132][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.519835][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.306439][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 518.448146][T10640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.754367][ T5896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 519.383967][ T5896] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 519.393975][ T5896] usb 6-1: config 0 has no interface number 1 [ 519.458344][ T5896] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 519.506518][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.564300][ T5896] usb 6-1: config 0 descriptor?? [ 519.595250][ T5896] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.792897][ T5896] usb 6-1: MIDIStreaming interface descriptor not found [ 520.476914][ T5896] gspca_main: spca561-2.14.0 probing abcd:cdee [ 520.606219][ T5896] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 520.618950][T10678] tipc: Started in network mode [ 520.645273][T10678] tipc: Node identity 4, cluster identity 4711 [ 520.663496][ T5896] usb 6-1: USB disconnect, device number 2 [ 520.680623][T10678] tipc: Node number set to 4 [ 521.038514][T10695] syzkaller0: entered promiscuous mode [ 521.045550][T10695] syzkaller0: entered allmulticast mode [ 521.055344][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 521.230706][T10706] syz_tun: entered allmulticast mode [ 521.619317][T10702] syz_tun: left allmulticast mode [ 521.762575][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 521.772038][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 522.346437][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 522.864433][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 524.007642][T10748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.209754][T10742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1121'. [ 524.242880][ T30] audit: type=1400 audit(1763623764.895:371): avc: denied { create } for pid=10741 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.313053][ T30] audit: type=1400 audit(1763623764.905:372): avc: denied { connect } for pid=10741 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.703089][ T5929] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 524.888655][ T5929] usb 10-1: Using ep0 maxpacket: 16 [ 524.962511][ T5929] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 525.121498][ T5929] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.241309][ T5929] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.264694][ T5929] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.293877][ T5929] usb 10-1: Product: syz [ 525.324264][ T5929] usb 10-1: Manufacturer: syz [ 525.383214][ T5929] usb 10-1: SerialNumber: syz [ 525.394107][ T5929] usb 10-1: config 0 descriptor?? [ 525.404268][ T5929] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.425025][ T5929] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 525.567718][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 525.597659][ T5185] udevd[5185]: worker [10688] terminated by signal 33 (Unknown signal 33) [ 525.619165][ T5185] udevd[5185]: worker [10688] failed while handling '/devices/virtual/block/loop5' [ 525.782842][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 525.880574][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 525.890692][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 525.904208][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 525.914230][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 525.925513][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 525.935544][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 525.946536][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 525.956798][T10816] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 525.966917][T10816] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 526.623549][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 526.635947][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.654186][ T5929] em28xx 10-1:0.0: chip ID is em2874 [ 526.671907][ T55] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 526.707064][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.729836][ T55] usb 6-1: config 0 descriptor?? [ 526.912567][ T30] audit: type=1400 audit(1763623767.585:373): avc: denied { mount } for pid=10759 comm="syz.9.1126" name="/" dev="ramfs" ino=34405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 527.340431][ T55] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 528.326035][ T1640] usb 6-1: USB disconnect, device number 3 [ 528.336352][ T30] audit: type=1800 audit(1763623769.005:374): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1126" name="bus" dev="ramfs" ino=34406 res=0 errno=0 [ 528.416150][ T55] usb 10-1: USB disconnect, device number 4 [ 528.427100][ T55] em28xx 10-1:0.0: Disconnecting em28xx [ 528.513898][ T55] em28xx 10-1:0.0: Freeing device [ 528.682362][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.076765][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 529.087188][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 529.099795][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 529.109908][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 529.123340][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 529.133409][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 529.144926][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 529.154914][T10855] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 529.164480][T10855] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 529.348016][T10858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1145'. [ 531.082811][ T1640] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 531.282865][ T1640] usb 4-1: Using ep0 maxpacket: 8 [ 531.292610][ T1640] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.881946][ T1640] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.900627][ T1640] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 531.925675][ T1640] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 531.938107][ T1640] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.951401][ T1640] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.977208][ T1640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.174539][T10906] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 532.317762][ T1640] usb 4-1: GET_CAPABILITIES returned 0 [ 532.434981][ T1640] usbtmc 4-1:16.0: can't read capabilities [ 532.516331][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.579630][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.862852][ T1640] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 533.120428][ T1640] usb 6-1: Using ep0 maxpacket: 8 [ 533.182631][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 533.358974][ T1640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.366313][ T5929] usb 4-1: USB disconnect, device number 4 [ 533.381975][ T1640] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.402040][ T1640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.455912][ T1640] usb 6-1: config 0 descriptor?? [ 533.538217][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 533.714290][ T1640] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 533.777788][ T5876] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 533.820755][ T1640] usb 6-1: USB disconnect, device number 4 [ 533.860609][ T30] audit: type=1400 audit(1763623774.535:375): avc: denied { setopt } for pid=10940 comm="syz.9.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.292803][ T8898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 535.753180][ T8898] usb 2-1: Using ep0 maxpacket: 8 [ 536.023066][ T8898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.102824][ T8898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.173999][ T8898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 536.260472][ T8898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 536.353746][ T8898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.408346][ T8898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.432812][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 536.480810][ T8898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.612800][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 536.648615][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.666165][ T5929] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 536.678218][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.688313][ T5929] usb 3-1: config 0 descriptor?? [ 536.770613][ T8898] usb 2-1: GET_CAPABILITIES returned 0 [ 536.801444][T10997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.819507][ T8898] usbtmc 2-1:16.0: can't read capabilities [ 536.881134][T10997] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1179'. [ 536.913339][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 536.969284][ T5929] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 537.114413][T10968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.123946][T10968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.129032][ T5929] usb 3-1: USB disconnect, device number 12 [ 537.146459][ T5896] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 537.159348][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.170208][ T5896] usb 4-1: Product: syz [ 537.174429][ T5896] usb 4-1: Manufacturer: syz [ 537.183856][ T5896] usb 4-1: SerialNumber: syz [ 537.204641][ T5896] usb 4-1: config 0 descriptor?? [ 537.725598][ T5896] usb 2-1: USB disconnect, device number 17 [ 537.735239][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1181'. [ 537.744804][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1181'. [ 537.953622][ T5810] usb 4-1: USB disconnect, device number 5 [ 538.028009][T11024] fuse: Bad value for 'user_id' [ 538.034117][T11024] fuse: Bad value for 'user_id' [ 539.464569][ T5876] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 539.693260][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 539.750557][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 539.809728][ T5876] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 539.832761][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 539.936946][ T5876] usb 3-1: Product: syz [ 539.943160][ T5876] usb 3-1: Manufacturer: syz [ 539.954655][ T5876] usb 3-1: SerialNumber: syz [ 540.034835][T11048] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1193'. [ 540.391463][ T5876] usb 3-1: config 0 descriptor?? [ 540.405510][T11035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 540.423017][ T5876] hub 3-1:0.0: bad descriptor, ignoring hub [ 540.441657][ T5876] hub 3-1:0.0: probe with driver hub failed with error -5 [ 540.732814][ T5896] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 540.939707][ T5896] usb 10-1: Using ep0 maxpacket: 8 [ 540.964705][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.988343][ T5896] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 541.000492][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.018293][ T5896] usb 10-1: config 0 descriptor?? [ 541.180247][T11062] fuse: Bad value for 'user_id' [ 541.197358][T11062] fuse: Bad value for 'user_id' [ 541.227852][ T5896] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 541.541661][ T1640] usb 10-1: USB disconnect, device number 6 [ 541.595797][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 541.662985][ T5896] usb 3-1: USB disconnect, device number 13 [ 542.264100][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 542.273997][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 542.574837][T11077] netlink: 'syz.2.1202': attribute type 23 has an invalid length. [ 543.162952][T11092] siw: device registration error -23 [ 544.012041][T11109] bridge_slave_0: left allmulticast mode [ 544.023938][T11109] bridge_slave_0: left promiscuous mode [ 544.044727][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.163920][T11109] bridge_slave_1: left allmulticast mode [ 544.211973][T11109] bridge_slave_1: left promiscuous mode [ 544.241856][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.329001][T11114] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1206'. [ 544.679441][T11109] bond0: (slave bond_slave_0): Releasing backup interface [ 544.997723][T11109] bond0: (slave bond_slave_1): Releasing backup interface [ 545.082086][T11109] team0: Port device team_slave_0 removed [ 545.108110][T11109] team0: Port device team_slave_1 removed [ 545.129778][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.159724][T11109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.185489][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.202837][T11109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.294912][T11109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.227331][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.254816][T11141] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1217'. [ 546.583961][T11150] fuse: Bad value for 'fd' [ 547.026245][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'. [ 547.070707][T11164] bridge_slave_0: left allmulticast mode [ 547.126689][T11164] bridge_slave_0: left promiscuous mode [ 547.206345][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.301687][T11164] bridge_slave_1: left allmulticast mode [ 547.314354][T11164] bridge_slave_1: left promiscuous mode [ 547.328639][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.367005][T11164] bond0: (slave bond_slave_0): Releasing backup interface [ 547.730040][T11164] bond0: (slave bond_slave_1): Releasing backup interface [ 548.258674][T11164] team0: Port device team_slave_0 removed [ 548.331963][T11164] team0: Port device team_slave_1 removed [ 548.363702][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.482919][T11164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.918576][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.996066][T11164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.123381][T11164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.197399][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 549.209213][T11180] Bluetooth: hci1: command 0x0406 tx timeout [ 549.358028][T11176] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1229'. [ 549.458393][T11184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.470585][T11184] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1230'. [ 549.699082][T11193] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 549.699082][T11193] program syz.5.1234 not setting count and/or reply_len properly [ 550.545178][T11196] fuse: Bad value for 'fd' [ 550.822547][T11207] netlink: 'syz.2.1238': attribute type 23 has an invalid length. [ 551.048670][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1240'. [ 551.143767][T11217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.511438][T11226] syzkaller0: entered promiscuous mode [ 551.522756][T11226] syzkaller0: entered allmulticast mode [ 553.812872][ T5896] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 553.815875][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1247'. [ 554.023393][ T5896] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 554.035308][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.043452][ T5896] usb 2-1: Product: syz [ 554.047676][ T5896] usb 2-1: Manufacturer: syz [ 554.052264][ T5896] usb 2-1: SerialNumber: syz [ 554.070833][ T5896] usb 2-1: config 0 descriptor?? [ 554.392846][ T5896] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 554.572923][ T5896] usb 10-1: Using ep0 maxpacket: 16 [ 554.592553][ T5896] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 554.615010][ T8898] usb 2-1: USB disconnect, device number 18 [ 554.644100][ T5896] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.678205][ T5896] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.691819][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.715275][ T5896] usb 10-1: Product: syz [ 554.764492][ T5896] usb 10-1: Manufacturer: syz [ 554.778507][ T5896] usb 10-1: SerialNumber: syz [ 554.798434][ T5896] usb 10-1: config 0 descriptor?? [ 555.289671][ T5896] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 555.315179][ T5896] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 555.994114][ T5896] em28xx 10-1:0.0: chip ID is em2874 [ 556.443201][ T1208] usb 10-1: USB disconnect, device number 7 [ 556.449667][ T1208] em28xx 10-1:0.0: Disconnecting em28xx [ 556.455926][ T1208] em28xx 10-1:0.0: Freeing device [ 556.502086][T11273] fuse: Bad value for 'fd' [ 556.963597][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 556.984974][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 557.400524][T11283] syzkaller0: entered promiscuous mode [ 557.406153][T11283] syzkaller0: entered allmulticast mode [ 559.180048][T11312] netlink: 'syz.1.1264': attribute type 23 has an invalid length. [ 559.603145][ T8898] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 559.670174][T11317] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 559.670174][T11317] program syz.9.1267 not setting count and/or reply_len properly [ 559.788153][T11324] fuse: Invalid rootmode [ 559.805876][ T8898] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 559.827171][ T8898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.861291][ T8898] usb 2-1: Product: syz [ 559.961317][ T8898] usb 2-1: Manufacturer: syz [ 559.967774][ T8898] usb 2-1: SerialNumber: syz [ 560.003298][ T8898] usb 2-1: config 0 descriptor?? [ 560.622818][ T5897] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 560.776450][ T5897] usb 10-1: config 0 has an invalid interface number: 156 but max is 1 [ 560.794300][ T5897] usb 10-1: config 0 has no interface number 1 [ 560.801381][ T5897] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 560.816924][ T55] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 560.825332][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.838647][ T5897] usb 10-1: config 0 descriptor?? [ 560.852102][ T5897] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.860132][ T5897] usb 10-1: MIDIStreaming interface descriptor not found [ 561.030613][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 561.041197][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 561.053999][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 561.064083][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 561.077439][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 561.087424][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 561.099289][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 561.108951][T11340] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 561.118453][T11340] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 561.223314][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 561.265647][ T55] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 561.303448][ T5897] gspca_main: spca561-2.14.0 probing abcd:cdee [ 561.338181][ T55] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 561.368758][ T5897] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 561.402397][ T55] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 561.420559][ T5897] usb 10-1: USB disconnect, device number 8 [ 561.428371][ T55] usb 4-1: Product: syz [ 561.432628][ T55] usb 4-1: Manufacturer: syz [ 561.458180][ T55] usb 4-1: SerialNumber: syz [ 561.476938][ T55] usb 4-1: config 0 descriptor?? [ 561.493980][T11332] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 561.502350][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 561.509861][ T55] hub 4-1:0.0: probe with driver hub failed with error -5 [ 561.537935][ T1208] usb 2-1: USB disconnect, device number 19 [ 561.552834][ T1640] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 561.739620][ T1640] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 561.758013][ T1640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.766296][ T1640] usb 6-1: Product: syz [ 561.770470][ T1640] usb 6-1: Manufacturer: syz [ 561.775170][ T1640] usb 6-1: SerialNumber: syz [ 561.787725][ T1640] usb 6-1: config 0 descriptor?? [ 562.288523][T11347] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 562.304216][T11347] block device autoloading is deprecated and will be removed. [ 562.477081][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.177488][ T1208] usb 4-1: USB disconnect, device number 6 [ 563.191646][T11367] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 563.191646][T11367] program syz.9.1279 not setting count and/or reply_len properly [ 563.479379][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 563.488534][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 563.612019][ T1640] usb 6-1: USB disconnect, device number 5 [ 563.695717][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 563.705917][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 566.698338][T11397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.848753][T11405] netlink: 'syz.9.1291': attribute type 4 has an invalid length. [ 567.566990][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 567.576121][T11411] netlink: 'syz.5.1292': attribute type 14 has an invalid length. [ 567.584060][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1292'. [ 567.629096][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 567.638177][T11411] netlink: 'syz.5.1292': attribute type 14 has an invalid length. [ 567.646087][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1292'. [ 567.700455][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.782841][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.836874][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.876395][T11418] overlayfs: failed to resolve './bus': -2 [ 567.880475][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.147945][T11422] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.857340][T11467] syz_tun: entered allmulticast mode [ 569.878309][T11467] pimreg: entered allmulticast mode [ 569.886637][T11464] syz_tun: left allmulticast mode [ 570.432808][ T55] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 570.590478][T11478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.752889][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 570.785534][T11477] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1310'. [ 570.827306][ T55] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 570.887961][ T55] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 570.979855][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1311'. [ 571.152820][ T55] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 571.161080][ T55] usb 6-1: Product: syz [ 571.181459][ T55] usb 6-1: Manufacturer: syz [ 571.201579][ T55] usb 6-1: SerialNumber: syz [ 571.251595][ T55] usb 6-1: config 0 descriptor?? [ 571.271918][T11472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.375583][ T55] hub 6-1:0.0: bad descriptor, ignoring hub [ 571.391034][ T55] hub 6-1:0.0: probe with driver hub failed with error -5 [ 572.340459][ T30] audit: type=1326 audit(1763623812.805:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.9.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e338f749 code=0x7ffc0000 [ 572.684510][ T30] audit: type=1326 audit(1763623812.805:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.9.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e338f749 code=0x7ffc0000 [ 572.745799][ T30] audit: type=1326 audit(1763623812.805:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.9.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f95e338f749 code=0x7ffc0000 [ 573.027084][T11514] lo: entered allmulticast mode [ 573.033709][T11513] lo: left allmulticast mode [ 574.053149][ T8898] usb 6-1: USB disconnect, device number 6 [ 577.192321][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1332'. [ 577.201720][T11580] netlink: 'syz.9.1332': attribute type 14 has an invalid length. [ 577.209625][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1332'. [ 577.298592][ T9688] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.299824][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1332'. [ 577.316723][T11580] netlink: 'syz.9.1332': attribute type 14 has an invalid length. [ 577.324664][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1332'. [ 577.441954][ T9688] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.479931][ T36] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.489347][ T36] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.761374][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1337'. [ 577.770524][T11586] netlink: 'syz.9.1337': attribute type 14 has an invalid length. [ 577.778405][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1337'. [ 577.790867][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1337'. [ 577.800573][T11586] netlink: 'syz.9.1337': attribute type 14 has an invalid length. [ 577.809292][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1337'. [ 577.923118][ T5896] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 578.094285][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 578.101070][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 578.113662][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 578.854968][ T5896] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.865132][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.883577][ T5896] usb 6-1: Product: syz [ 578.889460][ T5896] usb 6-1: Manufacturer: syz [ 578.913357][ T5896] usb 6-1: SerialNumber: syz [ 578.946692][ T5896] usb 6-1: config 0 descriptor?? [ 578.979171][ T5896] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 579.072673][ T5896] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 579.792963][ T5896] em28xx 6-1:0.0: chip ID is em2874 [ 579.962855][ T55] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 580.213129][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 580.257656][ T55] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 580.290571][ T55] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 580.332876][ T55] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 580.341080][ T55] usb 4-1: Product: syz [ 580.356571][ T55] usb 4-1: Manufacturer: syz [ 580.361287][ T55] usb 4-1: SerialNumber: syz [ 580.380184][ T55] usb 4-1: config 0 descriptor?? [ 580.419693][T11606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 580.437682][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 580.524702][ T55] hub 4-1:0.0: probe with driver hub failed with error -5 [ 580.905449][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 581.301152][T11633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1349'. [ 581.379635][ T5876] usb 6-1: USB disconnect, device number 7 [ 581.386181][ T5876] em28xx 6-1:0.0: Disconnecting em28xx [ 581.480461][ T5876] em28xx 6-1:0.0: Freeing device [ 582.466226][ T5810] usb 4-1: USB disconnect, device number 7 [ 582.756791][ T30] audit: type=1400 audit(1763623823.435:379): avc: denied { name_connect } for pid=11647 comm="syz.9.1354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 583.185853][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 583.600274][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 583.610070][T11661] netlink: 'syz.3.1359': attribute type 14 has an invalid length. [ 583.618119][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 583.686386][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 583.695883][T11661] netlink: 'syz.3.1359': attribute type 14 has an invalid length. [ 583.696402][T11662] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.715608][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 583.727900][T11662] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.791964][T11662] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.859611][T11663] netlink: 'syz.2.1358': attribute type 4 has an invalid length. [ 583.867581][T11662] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.946911][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'. [ 584.262853][ T8898] IPVS: starting estimator thread 0... [ 584.383681][T11672] IPVS: using max 36 ests per chain, 86400 per kthread [ 584.593568][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 584.602521][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 584.890936][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 584.900946][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 585.243097][ T5897] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 585.416112][T11696] siw: device registration error -23 [ 585.463076][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 585.512053][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 586.133277][ T5897] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.172472][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.200560][ T5897] usb 3-1: Product: syz [ 586.212814][ T5897] usb 3-1: Manufacturer: syz [ 586.223768][ T5897] usb 3-1: SerialNumber: syz [ 586.240139][ T5897] usb 3-1: config 0 descriptor?? [ 586.253096][T11687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 586.268512][ T5897] hub 3-1:0.0: bad descriptor, ignoring hub [ 586.283614][ T5897] hub 3-1:0.0: probe with driver hub failed with error -5 [ 587.045117][T11727] siw: device registration error -23 [ 587.754072][ T55] usb 3-1: USB disconnect, device number 14 [ 589.565875][T11753] netlink: 'syz.3.1388': attribute type 23 has an invalid length. [ 590.767638][ T5897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 590.997969][ T5897] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 591.038779][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.094252][ T5897] usb 2-1: Product: syz [ 591.108624][ T5897] usb 2-1: Manufacturer: syz [ 591.132800][ T5897] usb 2-1: SerialNumber: syz [ 591.150867][ T5897] usb 2-1: config 0 descriptor?? [ 592.115396][ T8898] usb 2-1: USB disconnect, device number 20 [ 593.504004][ T8898] IPVS: starting estimator thread 0... [ 593.593231][T11821] IPVS: using max 36 ests per chain, 86400 per kthread [ 594.620192][ T55] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 594.748965][T11850] __nla_validate_parse: 1 callbacks suppressed [ 594.748980][T11850] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1418'. [ 594.782191][T11850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 594.798381][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 594.814000][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 594.836469][ T55] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 594.849110][ T55] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 594.898812][ T55] usb 2-1: Product: syz [ 594.903133][ T55] usb 2-1: Manufacturer: syz [ 594.907833][ T55] usb 2-1: SerialNumber: syz [ 594.914627][ T55] usb 2-1: config 0 descriptor?? [ 594.920281][T11836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 594.928620][ T55] hub 2-1:0.0: bad descriptor, ignoring hub [ 594.940485][ T55] hub 2-1:0.0: probe with driver hub failed with error -5 [ 596.377276][T11870] sock: sock_timestamping_bind_phc: sock not bind to device [ 597.613901][ T55] usb 2-1: USB disconnect, device number 21 [ 598.538480][T11898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1431'. [ 598.631015][ T30] audit: type=1400 audit(1763623839.305:380): avc: denied { create } for pid=11900 comm="syz.2.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 598.636133][T11898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.038318][T11921] sock: sock_timestamping_bind_phc: sock not bind to device [ 601.769420][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1443'. [ 601.778652][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1443'. [ 602.132513][ T5810] IPVS: starting estimator thread 0... [ 602.384650][T11943] IPVS: using max 78 ests per chain, 187200 per kthread [ 602.392164][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1443'. [ 602.404507][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1443'. [ 604.048206][T11957] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1448'. [ 604.536573][T11957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 605.958719][T11994] syzkaller0: entered promiscuous mode [ 605.964588][T11994] syzkaller0: entered allmulticast mode [ 607.033339][ T5810] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 607.104020][ T8898] IPVS: starting estimator thread 0... [ 607.148075][T12012] fuse: Unknown parameter 'user_id00000000000000000000' [ 607.193073][T12006] IPVS: using max 45 ests per chain, 108000 per kthread [ 607.294673][ T5810] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 607.464203][ T5810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.472576][ T5810] usb 10-1: Product: syz [ 607.480128][ T5810] usb 10-1: Manufacturer: syz [ 607.498173][ T5810] usb 10-1: SerialNumber: syz [ 607.513392][ T5810] usb 10-1: config 0 descriptor?? [ 607.590726][T12018] netlink: 'syz.3.1468': attribute type 4 has an invalid length. [ 607.800803][ T5810] lo speed is unknown, defaulting to 1000 [ 607.809552][ T5810] syz2: Port: 1 Link DOWN [ 607.895146][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1463'. [ 608.203466][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 608.815409][ T5876] usb 10-1: USB disconnect, device number 9 [ 608.931073][T12044] syzkaller0: entered promiscuous mode [ 608.955007][T12044] syzkaller0: entered allmulticast mode [ 608.967142][T12048] fuse: Unknown parameter 'user_id00000000000000000000' [ 609.955758][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 612.701941][ T30] audit: type=1400 audit(1763623852.995:381): avc: denied { getopt } for pid=12080 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 614.443346][T12107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1496'. [ 618.980418][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 621.165171][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 622.232867][ T55] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 622.508109][ T55] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 622.630922][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.725840][ T55] usb 2-1: Product: syz [ 622.766988][ T55] usb 2-1: Manufacturer: syz [ 622.808842][ T55] usb 2-1: SerialNumber: syz [ 622.832926][ T55] usb 2-1: config 0 descriptor?? [ 623.141988][ T55] usb 2-1: USB disconnect, device number 22 [ 623.915133][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.692626][T12262] fuse: Unknown parameter '0x0000000000000004' [ 628.721523][T12332] syzkaller0: entered promiscuous mode [ 628.738483][T12332] syzkaller0: entered allmulticast mode [ 629.870026][T12343] fuse: Unknown parameter '0x0000000000000004' [ 630.349944][T12362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1575'. [ 631.327287][T12378] fuse: Unknown parameter '0x0000000000000004' [ 631.923675][ T30] audit: type=1400 audit(1763623872.595:382): avc: denied { connect } for pid=12393 comm="syz.5.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.007846][ T8898] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 632.168751][ T8898] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 632.397093][ T8898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.406185][ T8898] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 632.415594][ T30] audit: type=1400 audit(1763623873.095:383): avc: denied { bind } for pid=12393 comm="syz.5.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 632.440211][ T8898] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 632.456239][ T8898] usb 2-1: Product: syz [ 632.475061][ T8898] usb 2-1: Manufacturer: syz [ 632.485016][ T8898] usb 2-1: SerialNumber: syz [ 632.510387][ T8898] usb 2-1: config 0 descriptor?? [ 632.533807][ T8898] usb 2-1: selecting invalid altsetting 0 [ 632.957615][T12408] netlink: 'syz.9.1589': attribute type 10 has an invalid length. [ 632.965668][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1589'. [ 632.993680][T12408] batman_adv: batadv0: Adding interface: virt_wifi0 [ 633.000342][T12408] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.026225][T12408] batman_adv: batadv0: Interface activated: virt_wifi0 [ 633.326874][ T5810] usb 2-1: USB disconnect, device number 23 [ 633.592961][ T5897] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 633.752933][ T5897] usb 6-1: device descriptor read/64, error -71 [ 634.157197][ T5897] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 634.294532][ T5897] usb 6-1: device descriptor read/64, error -71 [ 634.413037][ T5897] usb usb6-port1: attempt power cycle [ 634.643262][T12427] fuse: Unknown parameter 'fd0x0000000000000004' [ 634.842933][ T5897] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 634.873858][ T5897] usb 6-1: device descriptor read/8, error -71 [ 635.132948][ T5897] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 635.174218][ T5897] usb 6-1: device descriptor read/8, error -71 [ 635.288811][ T5897] usb usb6-port1: unable to enumerate USB device [ 636.632665][T12454] fuse: Unknown parameter 'fd0x0000000000000004' [ 636.973451][ T55] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 637.150881][ T55] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 637.367392][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 637.384583][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.402820][ T55] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.430008][ T55] usb 6-1: Product: syz [ 637.467850][ T55] usb 6-1: Manufacturer: syz [ 637.491298][ T55] usb 6-1: SerialNumber: syz [ 637.514016][ T55] usb 6-1: config 0 descriptor?? [ 637.549072][ T55] usb 6-1: selecting invalid altsetting 0 [ 637.670888][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1616'. [ 637.871955][ T55] usb 6-1: USB disconnect, device number 12 [ 639.505388][T12503] netlink: 'syz.5.1623': attribute type 1 has an invalid length. [ 640.282949][ T5810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 640.455257][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 640.468106][ T5810] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 640.493879][ T5810] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.526608][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 640.536977][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.545641][ T5810] usb 4-1: Product: syz [ 640.550248][ T5810] usb 4-1: Manufacturer: syz [ 640.555038][ T5810] usb 4-1: SerialNumber: syz [ 640.698128][ T5810] hub 4-1:1.0: bad descriptor, ignoring hub [ 640.706283][ T5810] hub 4-1:1.0: probe with driver hub failed with error -5 [ 640.911298][ T5810] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 640.962865][ T8898] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 641.176838][ T8898] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.187455][ T8898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 641.204886][ T8898] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.224617][ T8898] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 641.233314][ T5897] usb 4-1: USB disconnect, device number 8 [ 641.250038][ T8898] usb 6-1: Product: syz [ 641.253349][ T5897] usblp0: removed [ 641.258767][ T8898] usb 6-1: Manufacturer: syz [ 641.278664][ T8898] usb 6-1: SerialNumber: syz [ 641.462650][ T8898] usb 6-1: config 0 descriptor?? [ 641.472585][ T8898] usb 6-1: selecting invalid altsetting 0 [ 642.363176][ T5810] IPVS: starting estimator thread 0... [ 642.492204][ T5810] usb 6-1: USB disconnect, device number 13 [ 642.512794][T12555] IPVS: using max 38 ests per chain, 91200 per kthread [ 647.808439][T12626] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 647.816352][T12626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1665'. [ 648.114118][T12626] batman_adv: batadv0: Adding interface: virt_wifi0 [ 648.121083][T12626] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.147327][T12626] batman_adv: batadv0: Interface activated: virt_wifi0 [ 650.646303][T12652] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 650.654188][T12652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1674'. [ 650.664953][T12652] batman_adv: batadv0: Adding interface: virt_wifi0 [ 650.672666][T12652] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.698424][T12652] batman_adv: batadv0: Interface activated: virt_wifi0 [ 651.482814][ T1640] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 652.529359][ T1640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.516607][ T1640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.526378][ T1640] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.550153][ T1640] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.559205][ T1640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.604481][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1685'. [ 653.617878][ T1640] usb 2-1: config 0 descriptor?? [ 654.380866][T12692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.455314][ T1640] usbhid 2-1:0.0: can't add hid device: -71 [ 654.529566][ T1640] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 654.583035][ T1640] usb 2-1: USB disconnect, device number 24 [ 657.012793][ T30] audit: type=1400 audit(1763623897.675:384): avc: denied { setopt } for pid=12707 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 657.380540][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1695'. [ 658.526426][T12727] 9pnet_virtio: no channels available for device syz [ 660.636795][T12748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.341079][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 661.480886][T12764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.754068][ T5897] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 662.686657][ T5897] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 662.983345][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.009002][ T5897] usb 6-1: Product: syz [ 663.023149][ T5897] usb 6-1: Manufacturer: syz [ 663.033148][ T5897] usb 6-1: SerialNumber: syz [ 663.046732][ T5897] usb 6-1: config 0 descriptor?? [ 663.232763][ T8898] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 663.515368][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1704'. [ 663.526734][ T8898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 663.559832][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1718'. [ 663.582804][ T8898] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 663.855402][ T8898] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.905828][ T8898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.932328][ T8898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.099159][ T5810] usb 6-1: USB disconnect, device number 14 [ 664.256737][ T8898] usb 3-1: Product: syz [ 664.746500][ T8898] usb 3-1: Manufacturer: syz [ 664.751163][ T8898] usb 3-1: SerialNumber: syz [ 664.774262][ T8898] hub 3-1:1.0: bad descriptor, ignoring hub [ 664.788055][ T8898] hub 3-1:1.0: probe with driver hub failed with error -5 [ 664.835009][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1722'. [ 665.305395][T12829] 9pnet_virtio: no channels available for device syz [ 666.039259][ T8898] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 666.080704][ T8898] usb 3-1: USB disconnect, device number 15 [ 666.098499][ T8898] usblp0: removed [ 668.040906][T12848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1730'. [ 668.772357][T12872] overlayfs: failed lookup in lower (newroot/156, name='file1', err=-40): overlapping layers [ 669.362049][T12884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.541031][T12906] nbd: must specify at least one socket [ 673.514543][ T5810] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 674.391135][ T5810] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 674.525907][ T5810] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 674.567224][ T5810] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 674.585040][ T5810] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.602773][ T5810] usb 10-1: Product: syz [ 674.612763][ T5810] usb 10-1: Manufacturer: syz [ 674.627378][ T5810] usb 10-1: SerialNumber: syz [ 674.645116][ T5810] usb 10-1: config 0 descriptor?? [ 674.932875][ T55] usb 10-1: USB disconnect, device number 10 [ 674.991569][T12929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 675.623348][ T30] audit: type=1804 audit(1763623916.295:385): pid=12946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1762" name="/newroot/161/bus/file1" dev="overlay" ino=907 res=1 errno=0 [ 675.902754][ T55] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 676.102734][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 676.136847][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.305484][ T55] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 676.487703][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.497920][ T55] usb 10-1: Product: syz [ 676.502175][ T55] usb 10-1: Manufacturer: syz [ 676.507277][ T55] usb 10-1: SerialNumber: syz [ 676.526590][ T55] usb 10-1: config 0 descriptor?? [ 676.946080][T12969] overlayfs: failed lookup in lower (newroot/133, name='file1', err=-40): overlapping layers [ 677.435138][T12982] nbd: must specify at least one socket [ 677.505550][ T30] audit: type=1804 audit(1763623918.175:386): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1775" name="/newroot/135/bus/file1" dev="overlay" ino=758 res=1 errno=0 [ 677.893894][T12995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.844131][T13008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.481765][ T30] audit: type=1800 audit(1763623920.155:387): pid=12996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.1763" name="bus" dev="ramfs" ino=44045 res=0 errno=0 [ 680.350401][ T30] audit: type=1804 audit(1763623921.015:388): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1788" name="/newroot/212/bus/file1" dev="overlay" ino=1141 res=1 errno=0 [ 680.375366][ T5810] usb 10-1: USB disconnect, device number 11 [ 680.463943][T13027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.827214][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 681.691760][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 681.708563][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 681.720343][ T5876] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 681.736029][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 681.753014][ T5876] usb 2-1: Product: syz [ 681.769004][ T5876] usb 2-1: Manufacturer: syz [ 681.777504][ T5876] usb 2-1: SerialNumber: syz [ 681.813595][ T5876] usb 2-1: config 0 descriptor?? [ 682.473033][T13025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 682.491404][ T5876] hub 2-1:0.0: bad descriptor, ignoring hub [ 682.575059][ T5876] hub 2-1:0.0: probe with driver hub failed with error -5 [ 684.433278][ T55] usb 2-1: USB disconnect, device number 25 [ 684.698733][T13067] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 684.779037][T13067] Illegal XDP return value 4294967294 on prog (id 275) dev N/A, expect packet loss! [ 685.804571][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.266437][T13083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.582148][T13086] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 688.205258][T13094] netlink: 'syz.9.1809': attribute type 4 has an invalid length. [ 689.312149][T13088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.122345][T13132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.156614][T13131] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 693.364937][T13147] netlink: 'syz.5.1823': attribute type 4 has an invalid length. [ 694.346588][T13162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.098497][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 695.110550][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 695.642817][ T8898] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 696.124680][T13175] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 696.133381][T13174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.163338][ T8898] usb 6-1: Using ep0 maxpacket: 8 [ 696.178155][ T8898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.197318][ T8898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.229267][ T8898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 696.667700][ T8898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 696.678015][ T8898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.691175][ T8898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.705240][ T30] audit: type=1400 audit(1763623937.365:389): avc: denied { name_bind } for pid=13179 comm="syz.3.1835" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 696.755146][ T8898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.094007][ T8898] usb 6-1: GET_CAPABILITIES returned 0 [ 697.427368][T13186] hub 9-0:1.0: USB hub found [ 697.433902][T13186] hub 9-0:1.0: 1 port detected [ 697.468932][T13168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.686460][ T8898] usbtmc 6-1:16.0: can't read capabilities [ 697.703803][T13168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.031346][T13209] 9pnet_virtio: no channels available for device syz [ 698.953320][ T1640] usb 6-1: USB disconnect, device number 15 [ 699.312884][T13211] hub 9-0:1.0: USB hub found [ 699.330802][T13211] hub 9-0:1.0: 1 port detected [ 699.385879][T13215] overlayfs: failed lookup in lower (newroot/225, name='file1', err=-40): overlapping layers [ 699.627228][T13225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.658301][ T8898] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 700.904672][ T8898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.931819][ T8898] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.946421][ T8898] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 701.212799][ T8898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.231939][ T8898] usb 10-1: config 0 descriptor?? [ 701.781485][ T30] audit: type=1400 audit(1763623942.455:390): avc: denied { ioctl } for pid=13247 comm="syz.3.1853" path="socket:[44542]" dev="sockfs" ino=44542 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 702.356108][ T8898] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 702.659215][ T8898] usb 2-1: Using ep0 maxpacket: 16 [ 702.773448][ T8898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.781926][ T8898] usb 2-1: config 15 has an invalid interface number: 174 but max is 1 [ 702.793647][ T8898] usb 2-1: config 15 has an invalid interface number: 5 but max is 1 [ 702.801769][ T8898] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping [ 702.817656][ T8898] usb 2-1: config 15 has no interface number 0 [ 702.824599][ T8898] usb 2-1: config 15 has no interface number 1 [ 702.831116][ T8898] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.859472][ T8898] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 702.879834][ T8898] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 702.911408][ T8898] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 702.939294][ T8898] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 702.964575][ T8898] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 702.983270][ T8898] usb 2-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 702.999667][ T8898] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 703.010945][ T8898] usb 2-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 703.025494][ T8898] usb 2-1: config 15 interface 174 has no altsetting 0 [ 703.167217][T13270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.472630][ T8898] usb 2-1: config 15 interface 5 has no altsetting 0 [ 703.566014][ T5897] usb 10-1: USB disconnect, device number 12 [ 703.608547][T13276] hub 9-0:1.0: USB hub found [ 703.615452][T13276] hub 9-0:1.0: 1 port detected [ 703.668227][T13278] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1866'. [ 703.722736][T13269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.796746][ T30] audit: type=1400 audit(1763623944.475:391): avc: denied { setopt } for pid=13277 comm="syz.9.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 703.813878][ T8898] usb 2-1: language id specifier not provided by device, defaulting to English [ 703.827850][ T8898] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 703.852707][ T8898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.876384][ T8898] usb 2-1: Product: syz [ 703.880579][ T8898] usb 2-1: Manufacturer: syz [ 703.891214][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13283 comm=syz.2.1868 [ 703.895603][ T8898] usb 2-1: SerialNumber: syz [ 704.295434][ T8898] sierra 2-1:15.174: Sierra USB modem converter detected [ 704.313145][ T5810] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 704.322523][ T8898] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 704.517550][ T8898] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 704.597964][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 704.621705][ T8898] sierra 2-1:15.5: Sierra USB modem converter detected [ 704.639594][ T5810] usb 6-1: unable to get BOS descriptor or descriptor too short [ 704.649402][ T5810] usb 6-1: config 15 has an invalid interface number: 174 but max is 0 [ 704.658625][ T5810] usb 6-1: config 15 has no interface number 0 [ 704.664928][ T8898] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 704.678427][ T5810] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 704.689971][ T8898] usb 2-1: USB disconnect, device number 26 [ 704.698582][ T5810] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.714039][ T8898] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 704.726315][ T5810] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 704.745636][ T8898] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 704.755356][ T5810] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 704.767615][ T8898] sierra 2-1:15.174: device disconnected [ 704.787524][ T8898] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 704.803939][ T5810] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 705.707543][ T8898] sierra 2-1:15.5: device disconnected [ 705.721641][ T5810] usb 6-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 705.736523][ T5810] usb 6-1: config 15 interface 174 has no altsetting 0 [ 705.755324][ T5810] usb 6-1: language id specifier not provided by device, defaulting to English [ 705.885613][ T5810] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 705.911264][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.931488][ T5810] usb 6-1: Product: syz [ 706.035759][T13308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.363727][ T5810] usb 6-1: Manufacturer: syz [ 706.368339][ T5810] usb 6-1: SerialNumber: syz [ 706.659711][ T5810] sierra 6-1:15.174: Sierra USB modem converter detected [ 706.880088][ T5810] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 707.003094][ T5810] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 707.038379][ T5810] usb 6-1: USB disconnect, device number 16 [ 707.517437][ T5810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 707.536283][ T5810] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 707.594069][ T5810] sierra 6-1:15.174: device disconnected [ 708.128602][T13323] hub 9-0:1.0: USB hub found [ 708.135864][T13323] hub 9-0:1.0: 1 port detected [ 709.351953][T13351] overlayfs: failed lookup in lower (newroot/214, name='file1', err=-40): overlapping layers [ 709.405640][T13351] overlayfs: failed lookup in lower (newroot/214, name='file1', err=-40): overlapping layers [ 709.446334][T13352] overlayfs: failed lookup in lower (newroot/214, name='file1', err=-40): overlapping layers [ 709.645833][ T30] audit: type=1400 audit(1763623950.295:392): avc: denied { mount } for pid=13353 comm="syz.1.1888" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 709.993480][ T30] audit: type=1400 audit(1763623950.295:393): avc: denied { search } for pid=13353 comm="syz.1.1888" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 710.017637][ T30] audit: type=1400 audit(1763623950.305:394): avc: denied { setattr } for pid=13353 comm="syz.1.1888" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 711.142746][ T5810] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 711.500163][ T5810] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 711.514914][ T5810] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 711.542738][ T5810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.563497][ T5810] usb 10-1: config 0 descriptor?? [ 711.913853][T13378] 9pnet_virtio: no channels available for device syz [ 713.859128][T13390] overlayfs: failed lookup in lower (newroot/184, name='file1', err=-40): overlapping layers [ 713.869977][T13390] overlayfs: failed lookup in lower (newroot/184, name='file1', err=-40): overlapping layers [ 713.880853][T13390] overlayfs: failed lookup in lower (newroot/184, name='file1', err=-40): overlapping layers [ 714.220762][T13399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 714.598796][ T5896] usb 10-1: USB disconnect, device number 13 [ 714.909757][T13407] 9pnet_virtio: no channels available for device syz [ 716.116193][T13409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.503321][T13411] siw: device registration error -23 [ 716.833015][ T5897] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 716.992853][ T5810] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 717.291929][T13425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.407066][T13427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.543003][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 717.562223][ T5810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 717.573904][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 717.592551][ T5810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 717.661187][ T5897] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 717.664347][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 717.670698][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.689018][ T5897] usb 10-1: Product: syz [ 717.692999][ T5810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.693362][ T5897] usb 10-1: Manufacturer: syz [ 717.711128][ T5897] usb 10-1: SerialNumber: syz [ 717.731576][ T5810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 717.753270][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.795517][ T5897] usb 10-1: config 0 descriptor?? [ 717.977608][ T5810] usb 4-1: GET_CAPABILITIES returned 0 [ 718.842868][ T5810] usbtmc 4-1:16.0: can't read capabilities [ 718.853796][T13415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.889990][T13415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.932422][T13440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.127660][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1904'. [ 720.200216][ T5876] usb 4-1: USB disconnect, device number 9 [ 720.352580][ T5896] usb 10-1: USB disconnect, device number 14 [ 720.923401][T13467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.146716][T13468] hub 9-0:1.0: USB hub found [ 721.152203][T13468] hub 9-0:1.0: 1 port detected [ 721.797612][T13474] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 721.824235][T13474] CIFS: Unable to determine destination address [ 722.194254][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 722.417973][ T5896] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 722.562947][ T5896] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 722.699425][ T5896] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 723.579815][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.645069][ T5896] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 723.876177][ T5896] gspca_sn9c2028: read1 error -71 [ 723.893081][ T5896] gspca_sn9c2028: read1 error -71 [ 724.209763][ T1208] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 724.219549][ T5896] gspca_sn9c2028: read1 error -71 [ 724.231386][ T5896] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 724.242302][ T5896] usb 4-1: USB disconnect, device number 10 [ 724.362822][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 724.370265][ T1208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 724.379699][ T1208] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 724.391607][ T1208] usb 2-1: config 15 has no interface number 0 [ 724.400116][ T1208] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 724.410749][ T1208] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 724.421063][ T1208] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 724.432512][ T1208] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 724.443749][ T1208] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 724.455076][ T1208] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 724.466927][ T1208] usb 2-1: config 15 interface 174 has no altsetting 0 [ 724.474657][ T1208] usb 2-1: language id specifier not provided by device, defaulting to English [ 724.494582][ T1208] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 724.615977][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.676379][ T1208] usb 2-1: Product: syz [ 724.695459][ T1208] usb 2-1: Manufacturer: syz [ 724.733301][ T1208] usb 2-1: SerialNumber: syz [ 725.064257][ T1208] sierra 2-1:15.174: Sierra USB modem converter detected [ 725.082518][ T1208] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 725.170875][ T1208] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 725.283127][ T1208] usb 2-1: USB disconnect, device number 27 [ 725.477391][ T1208] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 725.497257][ T1208] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 725.506386][ T1208] sierra 2-1:15.174: device disconnected [ 727.502206][T13572] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1950'. [ 727.765517][T13568] CIFS: Unable to determine destination address [ 728.048981][ T30] audit: type=1400 audit(1763623968.725:395): avc: denied { ioctl } for pid=13576 comm="syz.5.1952" path="/dev/ttyqf" dev="devtmpfs" ino=390 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 728.217000][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1953'. [ 728.250825][ T5896] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 728.603989][ T5896] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 728.614093][ T5896] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 728.646255][ T5896] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 728.747987][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.044401][ T5896] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 729.126023][T13588] IPVS: Scheduler module ip_vs_sip not found [ 729.233789][ T5896] gspca_sn9c2028: read1 error -71 [ 729.247255][ T5896] gspca_sn9c2028: read1 error -71 [ 729.261001][ T5896] gspca_sn9c2028: read1 error -71 [ 729.371913][ T5896] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 729.382278][ T5896] usb 4-1: USB disconnect, device number 11 [ 729.591266][T13604] 9pnet_virtio: no channels available for device syz [ 730.392777][ T5810] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 730.507107][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1963'. [ 730.564337][ T5810] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 730.592916][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.639029][ T5810] usb 2-1: config 0 descriptor?? [ 730.655315][ T5810] cp210x 2-1:0.0: cp210x converter detected [ 731.097314][ T5810] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 731.119991][ T5810] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 731.227941][ T5810] usb 2-1: cp210x converter now attached to ttyUSB0 [ 731.250806][ T5810] usb 2-1: USB disconnect, device number 28 [ 731.261677][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 731.270370][ T5810] cp210x 2-1:0.0: device disconnected [ 732.139615][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1967'. [ 734.562928][ T5876] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 734.812724][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 734.823983][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 734.848591][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 734.864601][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.296041][ T5876] usb 3-1: Product: syz [ 735.300239][ T5876] usb 3-1: Manufacturer: syz [ 735.305053][ T5876] usb 3-1: SerialNumber: syz [ 735.312758][ T5876] usb 3-1: config 0 descriptor?? [ 736.839629][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1984'. [ 737.302797][ T1208] usb 3-1: USB disconnect, device number 16 [ 743.814353][T13734] IPVS: Scheduler module ip_vs_sip not found [ 743.938613][T13751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 746.572917][ T5896] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 746.810779][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.163983][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 747.175647][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 747.190404][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 747.213870][ T5896] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 747.252766][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.260783][ T5896] usb 6-1: Product: syz [ 747.283189][ T5896] usb 6-1: Manufacturer: syz [ 747.461895][ T5896] usb 6-1: SerialNumber: syz [ 747.494458][ T1208] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 747.608232][ T5896] usb 6-1: config 0 descriptor?? [ 747.618889][ T5896] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 747.678843][ T1208] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 747.694514][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.713010][ T1208] usb 3-1: Product: syz [ 747.718365][ T1208] usb 3-1: Manufacturer: syz [ 747.723212][ T1208] usb 3-1: SerialNumber: syz [ 747.729843][ T1208] usb 3-1: config 0 descriptor?? [ 749.197008][ T1208] usb 3-1: USB disconnect, device number 17 [ 750.291843][ T5810] usb 6-1: USB disconnect, device number 17 [ 750.429916][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 750.649716][ T30] audit: type=1400 audit(1763623991.305:396): avc: denied { read write } for pid=13835 comm="syz.1.2029" name="mouse0" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 750.802940][ T30] audit: type=1400 audit(1763623991.305:397): avc: denied { open } for pid=13835 comm="syz.1.2029" path="/dev/input/mouse0" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 752.934417][T13891] hub 9-0:1.0: USB hub found [ 752.941746][T13891] hub 9-0:1.0: 1 port detected [ 753.832823][ T1208] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 754.107025][T13915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.251794][ T1208] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 754.413922][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.433586][ T1208] usb 4-1: Product: syz [ 754.441962][ T1208] usb 4-1: Manufacturer: syz [ 754.454275][ T1208] usb 4-1: SerialNumber: syz [ 754.464848][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 754.473545][ T1208] usb 4-1: config 0 descriptor?? [ 754.743222][T13924] IPVS: Scheduler module ip_vs_sip not found [ 755.153990][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2041'. [ 757.832982][ T55] usb 4-1: USB disconnect, device number 12 [ 758.319779][T13963] hub 9-0:1.0: USB hub found [ 758.333005][T13963] hub 9-0:1.0: 1 port detected [ 758.833097][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 759.283797][ T55] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 759.470274][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 759.485603][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 759.505959][ T55] usb 3-1: config 15 has an invalid interface number: 174 but max is 0 [ 759.527889][ T55] usb 3-1: config 15 has no interface number 0 [ 759.674346][ T55] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 759.688901][ T55] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.699009][ T55] usb 3-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 759.709971][ T55] usb 3-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 759.721207][ T55] usb 3-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 759.733730][ T55] usb 3-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 759.745635][ T55] usb 3-1: config 15 interface 174 has no altsetting 0 [ 759.753522][ T55] usb 3-1: language id specifier not provided by device, defaulting to English [ 760.722204][ T55] usb 3-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 760.732732][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.740743][ T55] usb 3-1: Product: syz [ 760.745087][ T55] usb 3-1: Manufacturer: syz [ 760.751076][ T55] usb 3-1: SerialNumber: syz [ 761.043843][ T55] sierra 3-1:15.174: Sierra USB modem converter detected [ 761.082900][ T55] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 761.285520][ T55] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 761.305794][ T55] usb 3-1: USB disconnect, device number 18 [ 761.641451][ T55] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 761.881687][ T55] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 761.897662][ T55] sierra 3-1:15.174: device disconnected [ 762.623485][T14004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.273479][ T1640] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 763.529710][ T1640] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 763.775562][ T1640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.784072][ T1640] usb 3-1: Product: syz [ 763.792734][ T1640] usb 3-1: Manufacturer: syz [ 763.802566][ T1640] usb 3-1: SerialNumber: syz [ 763.820001][ T1640] usb 3-1: config 0 descriptor?? [ 764.651082][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 764.669596][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 765.049391][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'. [ 765.136173][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2086'. [ 765.145581][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2086'. [ 765.295886][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2086'. [ 765.305129][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2086'. [ 766.052334][ T5876] usb 3-1: USB disconnect, device number 19 [ 766.210449][T14063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2089'. [ 767.177797][T14075] overlayfs: failed to resolve './file0': -2 [ 768.844842][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 768.907448][T14092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14092 comm=syz.3.2097 [ 768.921046][ T5810] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 769.138565][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2100'. [ 769.156355][T14095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14095 comm=syz.9.2100 [ 769.304372][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 769.969342][ T5810] usb 2-1: unable to get BOS descriptor or descriptor too short [ 770.016305][ T5810] usb 2-1: config 15 has an invalid interface number: 174 but max is 1 [ 770.032791][ T5810] usb 2-1: config 15 has an invalid interface number: 5 but max is 1 [ 770.040998][ T5810] usb 2-1: config 15 has an invalid interface descriptor of length 2, skipping [ 770.052882][ T5810] usb 2-1: config 15 has no interface number 0 [ 770.060199][ T5810] usb 2-1: config 15 has no interface number 1 [ 770.071220][ T5810] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.092790][ T5810] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 770.112900][ T5810] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 770.124126][ T5810] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 770.146930][ T5810] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 770.158041][ T5810] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 770.170556][ T5810] usb 2-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 770.182848][ T5810] usb 2-1: config 15 interface 5 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 770.193870][ T5810] usb 2-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 770.207243][ T5810] usb 2-1: config 15 interface 174 has no altsetting 0 [ 770.223361][ T5810] usb 2-1: config 15 interface 5 has no altsetting 0 [ 770.240006][ T5810] usb 2-1: language id specifier not provided by device, defaulting to English [ 770.280591][ T5810] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 770.306570][T14107] netlink: 'syz.2.2104': attribute type 21 has an invalid length. [ 770.307152][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.323220][ T5810] usb 2-1: Product: syz [ 770.327639][ T5810] usb 2-1: Manufacturer: syz [ 770.332353][ T5810] usb 2-1: SerialNumber: syz [ 770.335241][T14107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2104'. [ 770.414167][T14111] overlayfs: failed to resolve './file0': -2 [ 770.522957][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 770.580464][ T5810] sierra 2-1:15.174: Sierra USB modem converter detected [ 770.610124][ T5810] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 770.687998][ T5810] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 770.753966][T14118] fuse: Bad value for 'group_id' [ 770.758965][T14118] fuse: Bad value for 'group_id' [ 770.838736][ T5810] sierra 2-1:15.5: Sierra USB modem converter detected [ 770.939543][ T5810] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 771.034332][ T5810] usb 2-1: USB disconnect, device number 29 [ 771.072548][ T5810] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 771.083782][ T5810] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 771.093987][ T5810] sierra 2-1:15.174: device disconnected [ 771.102327][ T5810] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 771.112824][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 771.118542][ T5810] sierra 2-1:15.5: device disconnected [ 771.149071][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 771.227350][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 771.625107][ T5876] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 771.652957][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.671176][ T5876] usb 4-1: Product: syz [ 771.681289][ T5876] usb 4-1: Manufacturer: syz [ 771.692864][ T5876] usb 4-1: SerialNumber: syz [ 771.712320][ T5876] usb 4-1: config 0 descriptor?? [ 771.816723][ T5876] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 771.826009][ T5876] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 771.955250][T14139] 9pnet_virtio: no channels available for device syz [ 772.887003][ T5876] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 773.636019][T14147] overlayfs: failed to resolve './file0': -2 [ 774.092883][ T30] audit: type=1800 audit(1763624014.755:398): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2103" name="bus" dev="ramfs" ino=48145 res=0 errno=0 [ 774.279335][ T5876] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 774.288197][ T5876] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 774.306436][ T5876] em28xx 4-1:0.0: No AC97 audio processor [ 774.350725][ T5876] usb 4-1: USB disconnect, device number 13 [ 774.358108][ T5876] em28xx 4-1:0.0: Disconnecting em28xx [ 774.375484][ T5876] em28xx 4-1:0.0: Freeing device [ 774.603033][ T55] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 775.031484][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.071534][ T55] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 775.083745][ T55] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 775.093602][ T55] usb 10-1: Product: syz [ 775.097953][ T55] usb 10-1: Manufacturer: syz [ 775.102737][ T55] usb 10-1: SerialNumber: syz [ 775.166748][ T55] usb 10-1: config 0 descriptor?? [ 775.198234][ T55] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 775.702794][ T5896] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 775.873140][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 775.999754][ T55] usb 10-1: USB disconnect, device number 15 [ 776.156156][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 776.209409][ T5896] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 776.222356][ T5896] usb 2-1: config 15 has no interface number 0 [ 776.229801][ T5896] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.241888][ T5896] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 776.255881][ T5896] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 776.293540][ T5896] usb 2-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 776.320835][ T5896] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 776.332134][ T5896] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 776.344581][ T5896] usb 2-1: config 15 interface 174 has no altsetting 0 [ 776.351878][ T5896] usb 2-1: language id specifier not provided by device, defaulting to English [ 776.362090][ T5896] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 776.371336][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.385815][ T5896] usb 2-1: Product: syz [ 776.389997][ T5896] usb 2-1: Manufacturer: syz [ 776.396550][ T5896] usb 2-1: SerialNumber: syz [ 776.542722][ T55] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 776.610862][ T5896] sierra 2-1:15.174: Sierra USB modem converter detected [ 776.619567][ T5896] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 776.629072][ T5896] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 776.640082][ T5896] usb 2-1: USB disconnect, device number 30 [ 776.649970][ T5896] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 776.660273][ T5896] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 776.669108][ T5896] sierra 2-1:15.174: device disconnected [ 776.692903][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 776.699707][ T55] usb 3-1: config 127 interface 0 has no altsetting 0 [ 776.709828][ T55] usb 3-1: config 127 interface 1 has no altsetting 0 [ 776.719601][ T55] usb 3-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 776.722952][ T1640] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 776.737075][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.750026][ T55] usb 3-1: Product: syz [ 776.754507][ T55] usb 3-1: Manufacturer: syz [ 776.759168][ T55] usb 3-1: SerialNumber: syz [ 776.892726][ T1640] usb 4-1: Using ep0 maxpacket: 16 [ 776.900049][ T1640] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 776.912000][ T1640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.927262][ T1640] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 776.936862][ T1640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.944907][ T1640] usb 4-1: Product: syz [ 776.949054][ T1640] usb 4-1: Manufacturer: syz [ 776.953687][ T1640] usb 4-1: SerialNumber: syz [ 776.959866][ T1640] usb 4-1: config 0 descriptor?? [ 776.967617][ T1640] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 776.977313][ T1640] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 776.985308][ T55] usb 3-1: unknown number of interfaces: 2 [ 776.994083][ T55] usb 3-1: USB disconnect, device number 20 [ 777.032717][ T5810] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 777.184105][ T5810] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.194491][ T5810] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 777.207677][ T5810] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.216935][ T5810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.254071][ T5810] usb 10-1: config 0 descriptor?? [ 777.262447][ T5810] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 777.403148][T14202] overlayfs: failed to resolve './file0': -2 [ 778.001456][ T1640] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 779.063033][ T1640] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 779.071366][ T1640] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 779.078488][ T1640] em28xx 4-1:0.0: No AC97 audio processor [ 779.711769][ T30] audit: type=1800 audit(1763624020.385:399): pid=14186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2131" name="bus" dev="ramfs" ino=48075 res=0 errno=0 [ 779.888847][ T5876] usb 4-1: USB disconnect, device number 14 [ 779.918020][ T5876] em28xx 4-1:0.0: Disconnecting em28xx [ 780.086911][ T5876] em28xx 4-1:0.0: Freeing device [ 780.226290][T14240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.576123][ T55] usb 10-1: USB disconnect, device number 16 [ 781.991658][T14272] hub 9-0:1.0: USB hub found [ 781.996969][T14272] hub 9-0:1.0: 1 port detected [ 782.353026][ T55] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 782.356028][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 782.369817][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 782.415817][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 782.425182][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 782.835070][ T55] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.873119][ T55] usb 10-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.599859][ T55] usb 10-1: config 0 interface 0 has no altsetting 0 [ 783.624516][ T55] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 783.651217][ T55] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 783.662064][ T30] audit: type=1400 audit(1763624024.335:400): avc: denied { ioctl } for pid=14294 comm="syz.3.2165" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 783.775796][ T55] usb 10-1: Product: syz [ 783.780073][ T55] usb 10-1: Manufacturer: syz [ 783.823247][ T55] usb 10-1: SerialNumber: syz [ 783.846633][ T55] usb 10-1: config 0 descriptor?? [ 784.008114][ T55] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 784.112999][ T1208] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 784.388651][ T1208] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 784.442896][ T1640] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 784.465721][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.474257][ T55] usb 10-1: USB disconnect, device number 17 [ 784.481695][ T1208] usb 6-1: config 0 descriptor?? [ 784.490086][ T1208] cp210x 6-1:0.0: cp210x converter detected [ 784.602761][ T1640] usb 2-1: Using ep0 maxpacket: 16 [ 784.617030][ T1640] usb 2-1: config 127 interface 0 has no altsetting 0 [ 784.631219][ T1640] usb 2-1: config 127 interface 1 has no altsetting 0 [ 784.652098][ T1640] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 784.671823][ T1640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.708185][ T1208] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 784.717179][ T1640] usb 2-1: Product: syz [ 784.719023][ T1208] cp210x 6-1:0.0: querying part number failed [ 784.730638][ T1640] usb 2-1: Manufacturer: syz [ 784.739686][ T1208] usb 6-1: cp210x converter now attached to ttyUSB0 [ 784.743767][ T1640] usb 2-1: SerialNumber: syz [ 784.768043][ T1208] usb 6-1: USB disconnect, device number 18 [ 784.781767][ T1208] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 784.791243][ T1208] cp210x 6-1:0.0: device disconnected [ 785.093382][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 785.102379][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 785.186107][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 785.200615][ T1640] usb 2-1: unknown number of interfaces: 2 [ 785.207831][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 785.221379][ T1640] usb 2-1: USB disconnect, device number 31 [ 787.128830][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.999898][T14349] CIFS: Unable to determine destination address [ 788.611316][ T5876] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 788.774490][ T5876] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 788.853308][T14364] hub 9-0:1.0: USB hub found [ 788.859315][T14364] hub 9-0:1.0: 1 port detected [ 789.592734][ T5876] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 789.602018][ T5876] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 789.615628][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.764910][ T5876] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 790.139727][ T5876] gspca_sn9c2028: read1 error -71 [ 790.153164][ T5876] gspca_sn9c2028: read1 error -71 [ 790.258657][ T5876] gspca_sn9c2028: read1 error -71 [ 790.265447][ T5876] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -71 [ 790.276445][ T5876] usb 6-1: USB disconnect, device number 19 [ 790.411060][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2191'. [ 790.426905][T14378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14378 comm=syz.1.2191 [ 792.764022][T14389] 9pnet_virtio: no channels available for device syz [ 794.068286][T14393] autofs: Unknown parameter '00000000000000000000' [ 794.938512][T14406] 9pnet_virtio: no channels available for device syz [ 800.922714][ T1208] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 801.172724][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 801.213192][ T1208] usb 2-1: config 16 has an invalid interface number: 48 but max is 0 [ 801.240781][ T1208] usb 2-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 801.257111][ T1208] usb 2-1: config 16 has no interface number 0 [ 801.263673][ T1208] usb 2-1: too many endpoints for config 16 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 801.281166][ T1208] usb 2-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 801.294787][ T55] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 801.310415][ T1208] usb 2-1: config 16 interface 48 has no altsetting 0 [ 801.322557][ T1208] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 801.344355][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.347746][T14478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.521379][ T5896] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 801.557300][ T55] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 801.566713][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.062853][ T55] usb 10-1: Product: syz [ 802.067178][ T55] usb 10-1: Manufacturer: syz [ 802.071911][ T55] usb 10-1: SerialNumber: syz [ 802.087781][ T55] usb 10-1: config 0 descriptor?? [ 802.157801][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.314498][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.368205][ T5896] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.411003][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 802.425115][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 802.455365][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 802.474890][ T5896] usb 3-1: Product: syz [ 802.482701][ T5896] usb 3-1: Manufacturer: syz [ 802.488184][ T5896] usb 3-1: SerialNumber: syz [ 802.497249][ T5896] usb 3-1: config 0 descriptor?? [ 802.521064][ T5896] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 802.606668][ T5896] usb 10-1: USB disconnect, device number 18 [ 802.747531][ T55] usb 3-1: USB disconnect, device number 21 [ 802.825174][T14493] netlink: 'syz.3.2222': attribute type 10 has an invalid length. [ 802.853906][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2222'. [ 802.893393][T14493] batman_adv: batadv0: Adding interface: virt_wifi0 [ 802.921643][T14493] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.923782][ T1208] usb 2-1: string descriptor 0 read error: -71 [ 802.992868][T14493] batman_adv: batadv0: Interface activated: virt_wifi0 [ 803.696241][ T1208] usb 2-1: USB disconnect, device number 32 [ 805.518083][T14519] fuse: Unknown parameter 'grou00000000000000000000' [ 806.977604][T14539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.381543][ T5869] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 807.562924][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 807.599294][ T5869] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 808.326726][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.351506][ T5869] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.367033][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.376428][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.414520][ T5869] usbtmc 3-1:16.0: bulk endpoints not found [ 809.233582][T14569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.293239][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.552835][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.818531][ T1640] usb 3-1: USB disconnect, device number 22 [ 811.283314][T14605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.928795][T14610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.158310][T14636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2261'. [ 813.975039][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2265'. [ 814.510211][T14655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.990145][T14667] overlayfs: missing 'lowerdir' [ 816.217801][T14681] fuse: Unknown parameter 'group_i00000000000000000000' [ 817.404471][T14694] netlink: 'syz.1.2274': attribute type 23 has an invalid length. [ 818.234134][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2278'. [ 818.264176][T14704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14704 comm=syz.3.2278 [ 818.948490][ C1] hrtimer: interrupt took 34000 ns [ 819.606194][T14721] overlayfs: missing 'lowerdir' [ 821.411643][ T55] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 821.509528][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2287'. [ 821.524545][T14742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14742 comm=syz.1.2287 [ 821.892788][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 821.904501][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 821.964151][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 822.083351][ T55] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.233000][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.303797][T14747] netlink: 'syz.3.2291': attribute type 23 has an invalid length. [ 822.335184][ T55] usb 3-1: Product: syz [ 822.356928][ T55] usb 3-1: Manufacturer: syz [ 822.362492][ T55] usb 3-1: SerialNumber: syz [ 822.397274][ T55] usb 3-1: config 0 descriptor?? [ 822.427719][ T55] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 822.447166][ T55] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 822.997553][T14766] overlayfs: missing 'lowerdir' [ 823.200504][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2298'. [ 823.217095][T14772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14772 comm=syz.9.2298 [ 824.157178][ T55] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 824.191679][ T55] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 824.246858][ T55] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 824.630549][ T55] em28xx 3-1:0.0: No AC97 audio processor [ 824.763161][ T55] usb 3-1: USB disconnect, device number 23 [ 824.797173][ T55] em28xx 3-1:0.0: Disconnecting em28xx [ 824.949632][ T55] em28xx 3-1:0.0: Freeing device [ 825.648301][T14795] netlink: 'syz.5.2306': attribute type 10 has an invalid length. [ 825.896948][T14795] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 825.973601][T14800] hub 9-0:1.0: USB hub found [ 825.981569][T14800] hub 9-0:1.0: 1 port detected [ 828.718696][ T1208] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 828.972819][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 828.999888][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.033293][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.114830][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.472159][ T1208] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 829.481434][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.515245][ T1208] usb 4-1: config 0 descriptor?? [ 830.174172][ T1208] HID 045e:07da: Invalid code 65791 type 1 [ 830.205783][ T1208] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input13 [ 830.246609][ T1208] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 830.550145][ T1208] usb 4-1: USB disconnect, device number 15 [ 830.881538][T14883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.235859][T14896] hub 9-0:1.0: USB hub found [ 832.241259][T14896] hub 9-0:1.0: 1 port detected [ 833.582963][ T5896] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 833.745682][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 833.758557][ T5896] usb 4-1: config 127 has an invalid interface number: 102 but max is 1 [ 833.781244][ T5896] usb 4-1: config 127 has no interface number 0 [ 833.794908][ T5896] usb 4-1: config 127 interface 1 has no altsetting 0 [ 833.811484][ T5896] usb 4-1: config 127 interface 102 has no altsetting 0 [ 833.825844][ T5896] usb 4-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 833.851409][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.868856][ T5896] usb 4-1: Product: syz [ 833.876322][ T5896] usb 4-1: Manufacturer: syz [ 833.886837][ T5896] usb 4-1: SerialNumber: syz [ 834.124014][ T5896] usb 4-1: unknown number of interfaces: 2 [ 834.192516][ T5896] usb 4-1: unknown number of interfaces: 2 [ 834.228381][ T5896] usb 4-1: USB disconnect, device number 16 [ 836.052234][T14963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.124978][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2353'. [ 837.137323][T14962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=14962 comm=syz.1.2353 [ 838.872229][T15005] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 838.881523][T15005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'. [ 839.829488][T15011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.026846][T15015] netlink: 'syz.2.2365': attribute type 10 has an invalid length. [ 840.034890][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2365'. [ 841.633418][T15035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'. [ 841.651916][T15035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=15035 comm=syz.2.2371 [ 842.774857][T15041] siw: device registration error -23 [ 842.862711][ T1640] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 842.871806][T15043] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 842.974598][T15043] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 843.027861][ T1640] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 843.045663][ T1640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.089675][ T1640] usb 6-1: Product: syz [ 843.116213][ T1640] usb 6-1: Manufacturer: syz [ 843.152786][ T1640] usb 6-1: SerialNumber: syz [ 843.213403][ T1640] usb 6-1: config 0 descriptor?? [ 843.836455][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2373'. [ 843.850418][T15061] hub 9-0:1.0: USB hub found [ 843.855832][T15061] hub 9-0:1.0: 1 port detected [ 844.649138][T15066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.699763][ T5896] usb 6-1: USB disconnect, device number 20 [ 845.747339][T15088] siw: device registration error -23 [ 849.920886][T15146] fuse: Bad value for 'fd' [ 850.245645][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 850.263577][T15147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=15147 comm=syz.3.2400 [ 850.282744][ T1640] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 851.483782][ T1640] usb 3-1: Using ep0 maxpacket: 16 [ 851.546672][ T1640] usb 3-1: unable to get BOS descriptor or descriptor too short [ 851.560829][ T1640] usb 3-1: config 15 has an invalid interface number: 174 but max is 0 [ 851.597998][ T1640] usb 3-1: config 15 has no interface number 0 [ 851.631857][ T1640] usb 3-1: config 15 interface 174 has no altsetting 0 [ 851.746139][ T1640] usb 3-1: language id specifier not provided by device, defaulting to English [ 852.273908][ T1640] usb 3-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 852.301842][ T1640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.396642][ T1640] usb 3-1: Product: syz [ 852.459974][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2405'. [ 852.475739][T15165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=15165 comm=syz.5.2405 [ 853.343232][ T1640] usb 3-1: Manufacturer: syz [ 853.808403][ T1640] usb 3-1: SerialNumber: syz [ 853.838040][ T1640] usb 3-1: can't set config #15, error -71 [ 853.875014][ T1640] usb 3-1: USB disconnect, device number 24 [ 857.472731][ T5869] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 857.537134][T15212] siw: device registration error -23 [ 858.142803][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 858.160571][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 858.188123][ T5869] usb 4-1: config 15 has an invalid interface number: 174 but max is 0 [ 858.216595][ T5869] usb 4-1: config 15 has no interface number 0 [ 858.227012][ T5869] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.239784][ T5869] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 858.250022][ T5869] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 858.261382][ T5869] usb 4-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 858.272523][ T5869] usb 4-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 858.871072][ T5869] usb 4-1: config 15 interface 174 has no altsetting 0 [ 858.879473][ T5869] usb 4-1: language id specifier not provided by device, defaulting to English [ 858.891293][ T5869] usb 4-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 858.900424][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.908714][ T5869] usb 4-1: Product: syz [ 858.915424][ T5869] usb 4-1: Manufacturer: syz [ 858.920097][ T5869] usb 4-1: SerialNumber: syz [ 859.332166][ T5869] sierra 4-1:15.174: Sierra USB modem converter detected [ 859.396981][ T5869] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 859.448813][ T5869] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 859.716553][ T5869] usb 4-1: USB disconnect, device number 17 [ 859.739667][ T5869] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 859.821263][ T5869] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 859.836196][ T5869] sierra 4-1:15.174: device disconnected [ 860.495800][T15251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.067611][T15255] hub 9-0:1.0: USB hub found [ 861.076042][T15255] hub 9-0:1.0: 1 port detected [ 862.266875][T15264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.347123][T15296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.696648][T15315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2446'. [ 865.953077][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 866.216009][ T5869] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 866.235717][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.245192][ T5869] usb 4-1: Product: syz [ 866.250482][ T5869] usb 4-1: Manufacturer: syz [ 866.255577][ T5869] usb 4-1: SerialNumber: syz [ 866.263302][ T5869] usb 4-1: config 0 descriptor?? [ 866.494646][T15321] hub 9-0:1.0: USB hub found [ 866.500024][T15321] hub 9-0:1.0: 1 port detected [ 867.370563][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2445'. [ 868.131190][ T5869] usb 4-1: USB disconnect, device number 18 [ 868.245901][T15339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.677791][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.862564][T15363] overlayfs: missing 'lowerdir' [ 871.380009][ T1640] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 871.560365][ T1640] usb 3-1: Using ep0 maxpacket: 32 [ 871.567381][ T1640] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 871.579654][ T1640] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 871.599071][ T1640] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 872.153059][ T1640] usb 3-1: Product: syz [ 872.158359][ T1640] usb 3-1: Manufacturer: syz [ 872.163577][ T1640] usb 3-1: SerialNumber: syz [ 872.172303][ T1640] usb 3-1: config 0 descriptor?? [ 872.192774][T15381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 872.354377][ T1640] hub 3-1:0.0: bad descriptor, ignoring hub [ 872.360271][ T1640] hub 3-1:0.0: probe with driver hub failed with error -5 [ 873.710285][T15422] netlink: 'syz.5.2472': attribute type 10 has an invalid length. [ 873.718290][T15422] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2472'. [ 873.743943][T15422] batman_adv: batadv0: Adding interface: virt_wifi0 [ 873.755319][T15422] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.781826][T15422] batman_adv: batadv0: Interface activated: virt_wifi0 [ 874.075274][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2471'. [ 874.084823][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2471'. [ 874.158617][ T5869] usb 3-1: USB disconnect, device number 25 [ 874.918450][ T5869] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 875.103320][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 875.110230][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 875.123215][ T5869] usb 6-1: config 15 has an invalid interface number: 174 but max is 0 [ 875.133455][ T5869] usb 6-1: config 15 has no interface number 0 [ 875.139743][ T5869] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 875.160367][ T5869] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.212695][ T5869] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 875.255416][ T5869] usb 6-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 875.383426][ T5869] usb 6-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 875.412678][ T5869] usb 6-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 875.479065][T15448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.611739][ T5869] usb 6-1: config 15 interface 174 has no altsetting 0 [ 875.627578][ T5869] usb 6-1: language id specifier not provided by device, defaulting to English [ 875.743179][ T5869] usb 6-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 875.774374][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.841658][ T5869] usb 6-1: Product: syz [ 876.134893][ T5869] usb 6-1: Manufacturer: syz [ 876.139495][ T5869] usb 6-1: SerialNumber: syz [ 876.249174][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2481'. [ 876.376033][ T5869] sierra 6-1:15.174: Sierra USB modem converter detected [ 877.329327][ T5869] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 877.355792][ T5869] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 877.393073][ T5869] usb 6-1: USB disconnect, device number 21 [ 877.419883][ T5869] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 877.441017][ T5869] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 877.460342][ T5869] sierra 6-1:15.174: device disconnected [ 877.533389][ T1640] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 877.707878][ T1640] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 878.118631][ T1640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.273611][ T1640] usb 4-1: Product: syz [ 878.277777][ T1640] usb 4-1: Manufacturer: syz [ 878.282338][ T1640] usb 4-1: SerialNumber: syz [ 878.343610][ T1640] usb 4-1: config 0 descriptor?? [ 879.162720][ T5810] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 879.342697][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 879.413918][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 879.455038][ T5810] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 879.604211][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 879.619817][ T1640] usb 4-1: USB disconnect, device number 19 [ 880.050696][ T5810] usb 2-1: Product: syz [ 880.108599][ T5810] usb 2-1: Manufacturer: syz [ 880.137031][ T5810] usb 2-1: SerialNumber: syz [ 880.197610][ T5810] usb 2-1: config 0 descriptor?? [ 880.250812][T15480] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 880.344978][ T5810] hub 2-1:0.0: bad descriptor, ignoring hub [ 880.350913][ T5810] hub 2-1:0.0: probe with driver hub failed with error -5 [ 881.252940][T15505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.027897][ T5869] usb 2-1: USB disconnect, device number 33 [ 883.115450][T15523] hub 9-0:1.0: USB hub found [ 883.121222][T15523] hub 9-0:1.0: 1 port detected [ 884.333023][ T5869] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 885.032646][ C0] ------------[ cut here ]------------ [ 885.038427][ C0] ODEBUG: free active (active state 0) object: ffff88804bfaa490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 885.051628][ C0] WARNING: CPU: 0 PID: 15534 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 885.054891][ T5869] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 885.061215][ C0] Modules linked in: [ 885.074318][ C0] CPU: 0 UID: 0 PID: 15534 Comm: syz.1.2502 Not tainted syzkaller #0 PREEMPT(full) [ 885.083710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.093630][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.093797][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 885.107521][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 84 f0 8b 4c 89 e6 48 c7 c7 20 79 f0 8b e8 bf a7 ce fc 90 <0f> 0b 90 90 58 83 05 d6 d3 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 885.114640][ T5869] usb 6-1: Product: syz [ 885.127278][ C0] RSP: 0000:ffffc9000ff5f958 EFLAGS: 00010282 [ 885.127301][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 885.127314][ C0] RDX: ffff888027a6c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 885.144487][ T5869] usb 6-1: Manufacturer: syz [ 885.145454][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 885.165956][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf07fc0 [ 885.173954][ C0] R13: ffffffff8b9021e0 R14: ffffffff8a4dbdc0 R15: ffffc9000ff5fa58 [ 885.181933][ C0] FS: 00005555643eb500(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 885.184421][ T5869] usb 6-1: SerialNumber: syz [ 885.190902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.202219][ C0] CR2: 00007f3ef86603ba CR3: 0000000074483000 CR4: 00000000003526f0 [ 885.210227][ C0] Call Trace: [ 885.213522][ C0] [ 885.216450][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 885.222092][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 885.227953][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 885.233545][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 885.239632][ C0] ? mark_held_locks+0x49/0x80 [ 885.244441][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 885.249822][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.255147][ C0] kfree+0x291/0x6d0 [ 885.259055][ C0] ? rose_timer_expiry+0x53f/0x630 [ 885.264197][ C0] ? rose_timer_expiry+0x53f/0x630 [ 885.269316][ C0] rose_timer_expiry+0x53f/0x630 [ 885.274284][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.279753][ C0] call_timer_fn+0x19a/0x620 [ 885.284434][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 885.289557][ C0] ? rcu_is_watching+0x12/0xc0 [ 885.294350][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.299827][ C0] __run_timers+0x6ef/0x960 [ 885.304350][ C0] ? __pfx___run_timers+0x10/0x10 [ 885.309390][ C0] run_timer_base+0x114/0x190 [ 885.314078][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 885.319271][ C0] ? rcu_is_watching+0x12/0xc0 [ 885.324061][ C0] run_timer_softirq+0x1a/0x40 [ 885.328823][ C0] handle_softirqs+0x219/0x8e0 [ 885.333618][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 885.338906][ C0] __irq_exit_rcu+0x109/0x170 [ 885.343579][ C0] irq_exit_rcu+0x9/0x30 [ 885.347795][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 885.353414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 885.359364][ C0] RIP: 0033:0x7f891b06f00c [ 885.363518][ T5869] usb 6-1: config 0 descriptor?? [ 885.363770][ C0] Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 [ 885.388255][ C0] RSP: 002b:00007ffd2cc038a0 EFLAGS: 00000202 [ 885.394305][ C0] RAX: 0000000000000001 RBX: 00007f891bf15720 RCX: ffffffff8208d2ac [ 885.402247][ C0] RDX: 00000000000012ac RSI: ffffffff8208d2ac RDI: 0000000000000009 [ 885.410200][ C0] RBP: ffffffff8208d2ac R08: 00007f891b3e6128 R09: 00007f891b3d2000 [ 885.418154][ C0] R10: 00007f891a7fd008 R11: 0000000000000009 R12: 0000000000000009 [ 885.426105][ C0] R13: 0000000000000000 R14: ffffffff8208d14c R15: 0000000000071949 [ 885.434071][ C0] ? __might_fault+0xbc/0x190 [ 885.438726][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.443995][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.449254][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.454534][ C0] [ 885.457526][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 885.464784][ C0] CPU: 0 UID: 0 PID: 15534 Comm: syz.1.2502 Not tainted syzkaller #0 PREEMPT(full) [ 885.474121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.484153][ C0] Call Trace: [ 885.487402][ C0] [ 885.490304][ C0] dump_stack_lvl+0x3d/0x1f0 [ 885.494865][ C0] vpanic+0x640/0x6f0 [ 885.498821][ C0] ? debug_print_object+0x1a2/0x2b0 [ 885.503990][ C0] panic+0xca/0xd0 [ 885.507684][ C0] ? __pfx_panic+0x10/0x10 [ 885.512079][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 885.517159][ C0] check_panic_on_warn+0xab/0xb0 [ 885.522064][ C0] __warn+0xf6/0x3c0 [ 885.525927][ C0] ? debug_print_object+0x1a2/0x2b0 [ 885.531098][ C0] report_bug+0x3c3/0x580 [ 885.535403][ C0] ? debug_print_object+0x1a2/0x2b0 [ 885.540585][ C0] handle_bug+0x184/0x210 [ 885.544938][ C0] exc_invalid_op+0x17/0x50 [ 885.549411][ C0] asm_exc_invalid_op+0x1a/0x20 [ 885.554242][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 885.560030][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 84 f0 8b 4c 89 e6 48 c7 c7 20 79 f0 8b e8 bf a7 ce fc 90 <0f> 0b 90 90 58 83 05 d6 d3 d5 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 885.579614][ C0] RSP: 0000:ffffc9000ff5f958 EFLAGS: 00010282 [ 885.585669][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b1cd8 [ 885.593621][ C0] RDX: ffff888027a6c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 885.601569][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 885.609511][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf07fc0 [ 885.617453][ C0] R13: ffffffff8b9021e0 R14: ffffffff8a4dbdc0 R15: ffffc9000ff5fa58 [ 885.625398][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 885.631008][ C0] ? __warn_printk+0x198/0x350 [ 885.635748][ C0] ? __warn_printk+0x1a5/0x350 [ 885.640488][ C0] ? debug_print_object+0x1a1/0x2b0 [ 885.645674][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 885.651276][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 885.657078][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 885.662617][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 885.668668][ C0] ? mark_held_locks+0x49/0x80 [ 885.673406][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 885.678751][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 885.683926][ C0] kfree+0x291/0x6d0 [ 885.687797][ C0] ? rose_timer_expiry+0x53f/0x630 [ 885.692884][ C0] ? rose_timer_expiry+0x53f/0x630 [ 885.697969][ C0] rose_timer_expiry+0x53f/0x630 [ 885.702879][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.708317][ C0] call_timer_fn+0x19a/0x620 [ 885.712896][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 885.717990][ C0] ? rcu_is_watching+0x12/0xc0 [ 885.722741][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 885.728175][ C0] __run_timers+0x6ef/0x960 [ 885.732661][ C0] ? __pfx___run_timers+0x10/0x10 [ 885.737663][ C0] run_timer_base+0x114/0x190 [ 885.742310][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 885.747476][ C0] ? rcu_is_watching+0x12/0xc0 [ 885.752212][ C0] run_timer_softirq+0x1a/0x40 [ 885.756945][ C0] handle_softirqs+0x219/0x8e0 [ 885.761685][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 885.766955][ C0] __irq_exit_rcu+0x109/0x170 [ 885.771603][ C0] irq_exit_rcu+0x9/0x30 [ 885.775814][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 885.781433][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 885.787382][ C0] RIP: 0033:0x7f891b06f00c [ 885.791765][ C0] Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 [ 885.811342][ C0] RSP: 002b:00007ffd2cc038a0 EFLAGS: 00000202 [ 885.817379][ C0] RAX: 0000000000000001 RBX: 00007f891bf15720 RCX: ffffffff8208d2ac [ 885.825319][ C0] RDX: 00000000000012ac RSI: ffffffff8208d2ac RDI: 0000000000000009 [ 885.833260][ C0] RBP: ffffffff8208d2ac R08: 00007f891b3e6128 R09: 00007f891b3d2000 [ 885.841199][ C0] R10: 00007f891a7fd008 R11: 0000000000000009 R12: 0000000000000009 [ 885.849146][ C0] R13: 0000000000000000 R14: ffffffff8208d14c R15: 0000000000071949 [ 885.857445][ C0] ? __might_fault+0xbc/0x190 [ 885.862107][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.867367][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.872630][ C0] ? set_ptes.constprop.0+0x7c/0x1c0 [ 885.877899][ C0] [ 885.881121][ C0] Kernel Offset: disabled [ 885.885423][ C0] Rebooting in 86400 seconds..