last executing test programs: 2m45.813942142s ago: executing program 3 (id=297): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x26, 0x1, 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517a40d2811d488c60c4380bc23b5142c64280a9c0f4eb500", 0x0, 0x0, 0x0, 0xffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2m42.699153479s ago: executing program 3 (id=315): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$inet6(0xa, 0x802, 0x0) unshare(0x2c020400) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x64e10, 0x16201}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x7, 0x0, &(0x7f00000002c0)="00001a00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) (async) dup(r8) (async, rerun: 32) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r10, &(0x7f0000000000)={0xfffffffffffffdc8, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r10, 0x0, 0x0) (rerun: 64) 2m42.682128696s ago: executing program 3 (id=317): r0 = socket(0x2, 0x3, 0xff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x2d140780, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x1000000}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x1ed}], 0x3}}], 0x4000000000001ee, 0x0) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4008000) 2m41.781482518s ago: executing program 3 (id=319): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10088a8086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 2m41.633165227s ago: executing program 3 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000005d319eafba42570a5202ce57000000002000fa030a0000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000080ff0000fffffffff7ffffff00000000000000000d000000000000000400000000000000fcffffffffffffff00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008003000000020001064700000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 2m41.584560658s ago: executing program 3 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x582) 2m26.301057405s ago: executing program 32 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x582) 12.151437039s ago: executing program 0 (id=938): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x13, 0x0, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x40400c0}, 0x24004052) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff43, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r8}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 7.691210928s ago: executing program 0 (id=952): ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x5102, 0x8785, 0x3e, &(0x7f0000000480)={[0xf]}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ff690b00482ffffc000000000000000000000000000001ff02000000000000000000000000000124208100000000000005040100000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000000000080065580000001a"], 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) 6.6659907s ago: executing program 0 (id=954): r0 = socket$inet(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x8, 0x0, 0x1, 0x80, 0x6, @remote}, 0x23) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="790adbdd1f1ff1ca3236dfb99374ba49bdec2443a315f59cd8df6a842868462d81d49e90ba7856f1625447ecb6a0ae00786813997e869072bd86bf66fdb1f08991827b15af63232416aa428bb9325b49b20ddfa4b8a57ba2df63f2aa5255cc6414eb8cba9db852aadd393e7f1d84bd732cc48cb04377d69805d986b439b7b9ad0c7121f2f9493cf4325fa213691a01bf5ecff43279a5b17db17d7a54e1f1fe63da7bb3a4ec1fa8081e314f"], 0x44}}, 0x0) 6.579664918s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x8, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x9, 0x2, {0x3, 0x1, 0xfffffc00, 0x3, 0x1}, 0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0xc, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000900018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.463305355s ago: executing program 0 (id=956): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r6, 0xffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}}, 0x0) 6.090055308s ago: executing program 1 (id=958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000005d319eafba42570a5202ce57000000002000fa030a0000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000080ff000d000000000000000400000000000000fcffffffffffffff00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008003000000020001064700000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 6.015199596s ago: executing program 1 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140003007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) 5.72843269s ago: executing program 5 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000030c741401e04684056e6000001ef0902120001000000000904"], 0x0) 5.550595853s ago: executing program 2 (id=961): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x6}, 0x1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="07b695600300000000001f1f870b09000400000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = gettid() fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r3) tkill(r4, 0xb) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r6}, 0x14) syz_extract_tcp_res(0x0, 0x400003, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000760ec97001230"], 0xfdef) 4.75499564s ago: executing program 1 (id=962): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000003000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e2e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 4.691299658s ago: executing program 4 (id=963): socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000000000011, 0x4000000000080002, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x19d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x7, 0x9, 0x24, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x7, 0x4}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.676555473s ago: executing program 1 (id=964): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, 0xffffffffffffffff, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) personality(0x500006) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3000009, 0x13, r4, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, &(0x7f0000000440)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701}, 0x14}, 0x1, 0x2403}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000011140100900000000000000008004b0013"], 0x30}}, 0x40) socket(0x2000000000000021, 0x2, 0x10000000000002) 4.495823836s ago: executing program 2 (id=965): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000ec0)=0x9, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0xffb0}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x26020480) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3.727321798s ago: executing program 2 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140003007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) 3.424045664s ago: executing program 5 (id=967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000005d319eafba42570a5202ce57000000002000fa030a0000005c001800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff00000000000000000d000000000000000400000000000000fcffffffffffffff00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008003000000020001064700000000000000480003006465666c61746500"], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 3.326847617s ago: executing program 0 (id=968): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x26, 0x1, 0x3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 3.267271424s ago: executing program 5 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = accept4$x25(r1, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000380)={0x2, 'geneve0\x00', {0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r8, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r7, &(0x7f0000000180)="024dfc7b58623401", 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.494159132s ago: executing program 2 (id=970): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x1c, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 2.045914831s ago: executing program 5 (id=971): pipe(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eab556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20181, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000400)=@other={'lock', ' ', 'io+mem'}, 0xc) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x1f00000000000000}, 0x0) 1.951408694s ago: executing program 4 (id=972): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000002fc0)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.393147018s ago: executing program 4 (id=973): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x8, 0xff, 0x26, 0x100}, {0x7, 0x6, 0x4, 0x7}, {0xfff, 0x6, 0x7f, 0x80}, {0xe, 0x4, 0x3}, {0x4, 0x0, 0x3, 0x9}, {0x0, 0x2, 0xf, 0x377d}, {0x4, 0x4, 0x4, 0x7}, {0x401, 0x6, 0x8, 0x5bd482db}]}, 0x10) (async) r1 = syz_usb_connect$cdc_ecm(0x4, 0x67, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x9, 0xd0, 0x6b, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x55, {{0xa, 0x24, 0x6, 0x0, 0x0, "667ef0b93f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x9e, 0x7}, [@obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0xff90}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x40, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xc, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xcb, 0x1, 0x7f}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x2, 0x7, 0x0, 0x2}, 0x30, &(0x7f00000001c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "21bc6f4ddf08879872368bcafe11c079"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5f9718d86ce55557f90a10816d0073a1"}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xcd, &(0x7f0000000240)=@string={0xcd, 0x3, "21bdb4a1c2a4b4ba641ac13904b73f6cce1290789be0fc9914e3e41bdf0f890d2139008f00e3542313cce0245c31978060ac1a2b7f27e61daaa92ce74c1ddeef838139de74de9e1c70ef267696b8d5389830c30e98fddf59c31145de207c310bd6eb47c375018c718049869b808975197631a05cc96206c10000735baf28fecd12541ea7aa843d30ca5b23f637a3c5238b0fecb1ee08e058f1504bb398c940c1fed591a73f8798e71ec19e9a1e40483d06ecf48792a5bb7e0b8e4bdebdde7ec2c4121533213d45e0f3b370"}}, {0xda, &(0x7f0000000340)=@string={0xda, 0x3, "e39941d3693c582a52c05ddb98dfd9592b33d4242c34ab51fc60756b525ecad6814ffddd355be54bcce4f4d5626ab8e9ab55e37bd5344c6ae4ce31cee510d53dce765fb3562ec50d59369fe352e0830d8c2d86e4f6061e39573d0398b33f7059757b7e8ca6c3c1242c2983adf84505ab4fcdb83142de069721f89dcd39122fbf091265b75c8ed1020f3311a87e184840548baf4811b2b22acc7231db6d3d221e797b2f1d3bc7edfbaf6a441af077b721b51fe66ef6e48e60c8ede22b8e7738859c79b6ae861c74def56ed2a08a74285c05df9959f31d3396"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x20, 0x6, 0xe2, {0xe2, 0x24, "bbb7898abe481396a0cf9e582c3c9111162534ea7a7f97832215c2fb59560313b2f410287a38a680d384ab4ea41ea6be6e2b43ce5557cf78d7565bd4b14b4819fb5d3df0e61e50ee312abd49163cb2c9f21b81db03fc146b6aadc8eba5c9fc7b66ec7d9e906fe20801a973b9854102b507222028dc83c4425b1add9a5ca55ade3a9f4251a7f30fc264e2353942e1c7c7067a00438c672af44aad3657b40f661c27e3f1ae4c3eb0574cba7cc62f3fb37bbf1d1e1b110e7c4a6876210e3882613911ee1ecbab0b7119ca78ab5528081eb3942265bb914fe5944837424a60f535a2"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000780)={0x0, 0x8, 0x48, "a1ee3ea0e8c57ee07ac4c4ad00fe82d14a41c52033e1af3a8a28ef5dc635565ba080de653bc6bb88a3378dd772637bb84c7dc3042d14436bd0e237bade03bc572b94bbf17ba81099"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}}) (async) preadv(r0, &(0x7f0000001d00)=[{&(0x7f00000008c0)=""/94, 0x5e}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000b80)=""/106, 0x6a}, {&(0x7f0000000c00)=""/175, 0xaf}, {&(0x7f0000000cc0)=""/50, 0x32}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x8, 0x2, 0x7f) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001d80), 0x208000, 0x0) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001dc0), 0x101000, 0x0) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd) (async) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002000)={0x0}, &(0x7f0000002040)=0xc) (async) r5 = syz_clone(0x80040000, &(0x7f0000002080)="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", 0x1000, &(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100)="3fd6b3ac433de3d38b33d401e31900a90a49b652f4c0c89ae1f3f17618e3164ee0b03349faf94448932c93b039768c6185ee07886867e4636004c6c613c959bd38636b0b4858baf54fa3c37a2804b468aaa24b2df8c9897fd4509e9f233bbc2ba40d8370d75604c48708c7f1043ac358d0ede98ad220081f9618b8dda2c6d7cbc03d12733f6d94a1b662a5b430a7c6748fd42582140759b89aa1acca9d74046f7a4b659a98ce33d548ada44b72a6cc0a5d141ed57eefa169905abae681c70832904e077722c9ccc68fdcc49b9adad501258b0788c05a65b7e322e63c10d26ef8") (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003200)={0x0}, &(0x7f0000003240)=0xc) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003280)=0x0) (async) r8 = fcntl$getown(r2, 0x9) (async) r9 = getpgrp(0xffffffffffffffff) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000032c0)={0x0}, &(0x7f0000003300)=0xc) syz_clone3(&(0x7f0000003380)={0xc7402cb79e811273, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80), {0x41}, &(0x7f0000001ec0)=""/43, 0x2b, &(0x7f0000001f00)=""/228, &(0x7f0000003340)=[r4, r5, r6, r7, 0x0, r8, r9, r10], 0x8, {r2}}, 0x58) r11 = syz_usb_connect$cdc_ncm(0x0, 0xb6, &(0x7f0000003400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x2, 0x1, 0xbf, 0x80, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "74c625"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6e, 0x3, 0xedb, 0xfd}, {0x6, 0x24, 0x1a, 0x5}, [@country_functional={0x12, 0x24, 0x7, 0x8, 0x2, [0x3, 0x9, 0x3, 0x3, 0xd, 0x6]}, @mbim={0xc, 0x24, 0x1b, 0xf801, 0xfff, 0x30, 0x0, 0x8, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8001}, @obex={0x5, 0x24, 0x15, 0xbaf2}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x0, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0xa, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x4}}}}}}}]}}, &(0x7f0000003900)={0xa, &(0x7f00000034c0)={0xa, 0x6, 0x300, 0x7, 0x0, 0x7, 0xff, 0x2}, 0x17, &(0x7f0000003500)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x0, 0xfd, 0xd7, 0xf2}]}, 0x8, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0xf0d6}}, {0x4, &(0x7f0000003600)=@lang_id={0x4, 0x3, 0x422}}, {0x2b, &(0x7f0000003640)=@string={0x2b, 0x3, "a091d7d983185d60a400f14ff5676efc5c15c08ea5e35868b8c1eab36ab5ad2a0f34adbeb38b949f40"}}, {0x100, &(0x7f0000003680)=@string={0x100, 0x3, "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"}}, {0x9f, &(0x7f0000003780)=@string={0x9f, 0x3, "ed709de4e8f7214e81afb3a84bb2f873db82973881ef6ea892699f7e7e45c5e89a95b791ae27216f21e98dc68e9fa1e26210f764a5143683974857c836a550d67644da3d0de0fe86f2c91a61bc6aa24401d18d7787327700cba7462ccfc44b27e521d0daac6f0a1fe8a571350375c42d276e52f3bc49ac5e7b2394f9a3b80231ecb174e0c8b3cfa392ea6240c8b32dad7d20e7f2338133ccea28a0ecc1"}}, {0x8b, &(0x7f0000003840)=@string={0x8b, 0x3, "34dbbb28baa82fba3bff4412bddc20bfbfd4a949b3bd24b528eae08db7694ddab6d12853f99cbd23ea94898433fb809c43b0ce72583ec268cda37f809278188ecbdf9c2b77447bf154b44bd95041c314da0cfd15636a038f24f3f045c26df450b65bfbf118306d9a50bc8af42649edb4c258e1f6cae4bfb83534b5504ec2f9a4f9e1db92810d6d46ff"}}]}) syz_usb_control_io$cdc_ncm(r11, &(0x7f0000003a80)={0x14, &(0x7f0000003980)={0x40, 0x22, 0xb9, {0xb9, 0x2a, "3b59330a32ec527be6aaf198f199759ec7c736406d05817e3381002984065df0c97667b5b3e602de4da05ce50e1e5d0cbacfea765978637c263fe9f5434f273d9226ac044334c560dc52f75bdae9a62cbd73653ec7789a87830a0f2c023d1013ba61bfd2ee7d80ad1089f4b4fe9575b27dfdb1f1d110796cb1af53e5255b8562beafd82884b9f5fe1012a8ee0673b65fd45d64fc8a79b749ae4342b7e1b74e6fb43b2e69c7133ad7534ff7dc850e117ea5afc231698b50"}}, &(0x7f0000003a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003cc0)={0x44, &(0x7f0000003ac0)={0x40, 0x17, 0xf, "032abf607632d37403c91833a25427"}, &(0x7f0000003b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003b40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003b80)={0x20, 0x80, 0x1c, {0x1, 0x7, 0x2, 0xb, 0x800, 0x0, 0x7, 0x6, 0x1, 0x2f, 0x7732, 0xfffb}}, &(0x7f0000003bc0)={0x20, 0x85, 0x4, 0xfffffff9}, &(0x7f0000003c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003c40)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000003c80)={0x20, 0x89, 0x2}}) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003d80), 0x20, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003dc0)=@o_path={&(0x7f0000003d40)='./file0\x00', r3, 0x4000, r12}, 0x18) (async) r13 = open_tree(r2, &(0x7f0000003e00)='./file0/file0\x00', 0x1901) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000003e40)=0x3) r14 = shmget(0x2, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) shmat(r14, &(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) sched_setscheduler(r8, 0x0, &(0x7f0000003e80)) (async) socket$igmp6(0xa, 0x3, 0x2) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000003ec0), 0x40, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000003f00)={0x73, 0x0, 0x0, 0x9, 0x5, 0x0, [{0x5, 0x4, 0xfffffffffffffffe, '\x00', 0x2000}, {0x7ed, 0x2, 0x0, '\x00', 0x808}, {0x4, 0x0, 0x2, '\x00', 0x2803}, {0x8, 0x8, 0x9, '\x00', 0x100}, {0x8, 0x9, 0x6a, '\x00', 0xe98f24432bcb00ee}]}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000004040)="3256ecb0a6e7c835a7e0cd5a4802d3bcaf7465a54b3fa93f7ac238b349283e9a5727176ef4f784") 1.135517442s ago: executing program 4 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.059992349s ago: executing program 1 (id=975): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x6}, 0x1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="07b695600300000000001f1f870b09000400000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = gettid() fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r2) tkill(r3, 0xb) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_extract_tcp_res(0x0, 0x400003, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000760ec97001230"], 0xfdef) 973.02499ms ago: executing program 4 (id=976): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x1, 0x2, 0x3, 0x40, 'syz1\x00', 0xba}, 0x0, 0x20000000, 0xfffffffc, 0x0, 0x0, 0x7, 'syz1\x00', 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) 771.446015ms ago: executing program 5 (id=977): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000070ada959bb452fcd00060a0b04000000000000000002000000200004801c00018009"], 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000300, 0x0, 0x0, 0x0, 0x0, 0x0) 710.104552ms ago: executing program 4 (id=978): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x6, 0x3, 0x8011) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0xd}) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000000000011, 0x4000000000080002, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x19d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 357.717656ms ago: executing program 0 (id=979): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r6, 0xffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001004155444954"], 0xb4}}, 0x0) 355.695477ms ago: executing program 5 (id=980): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000180)='syzkaller\x00', 0xff, 0xa5, &(0x7f0000000300)=""/165, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x5, 0x5f04}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x5, 0x3, 0x0, 0x3}, {0x2, 0x4, 0x10, 0x7}, {0x1, 0x3, 0xa, 0x8}, {0x2, 0x5, 0x4, 0x6}, {0x0, 0x3, 0xd, 0xc}, {0x0, 0x2, 0xb, 0x4}, {0x4, 0x4, 0x10, 0x7}, {0x4, 0x3, 0xb, 0x3}, {0x4, 0x5, 0x2, 0x4}], 0x10, 0x71, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0)=r4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcsa(0xffffffffffffff9c, 0x0, 0x404081, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x5, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @generic={0x5, 0xf, 0xe, 0x3ff, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x20000f, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 329.376936ms ago: executing program 2 (id=981): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x7, 0x6}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x80000000, 0x20200) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x1, {0x0, 0x1000, 0xffffffff, 0x4}}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x43}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2004080d}, 0x88) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x4}}}]}, 0x38}}, 0x20040080) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x48}}, 0x20040054) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9, @vifc_lcl_ifindex=r6, @remote}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 1 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000d000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 208.470798][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 208.496374][ T5862] usb 6-1: device descriptor read/8, error -71 [ 208.765556][ T5862] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 208.888063][ T5862] usb 6-1: device descriptor read/8, error -71 [ 209.026831][ T5862] usb usb6-port1: unable to enumerate USB device [ 209.197832][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.207749][ T30] audit: type=1400 audit(1748801289.848:991): avc: denied { connect } for pid=7657 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.227419][ T30] audit: type=1400 audit(1748801289.848:992): avc: denied { name_connect } for pid=7657 comm="syz.2.506" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 209.275197][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 209.286360][ T10] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 209.297098][ T10] usb 5-1: Product: syz [ 209.306189][ T10] usb 5-1: Manufacturer: syz [ 209.397113][ T10] usb 5-1: config 0 descriptor?? [ 209.722386][ T7673] vim2m vim2m.0: vidioc_s_fmt queue busy [ 210.118846][ T10] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 210.175273][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 210.197845][ T30] audit: type=1400 audit(1748801291.488:993): avc: denied { create } for pid=7680 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.313924][ T30] audit: type=1400 audit(1748801291.498:994): avc: denied { connect } for pid=7680 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.333783][ T30] audit: type=1400 audit(1748801291.498:995): avc: denied { bind } for pid=7680 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.446752][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.459156][ T7685] qrtr: Invalid version 0 [ 210.464293][ T7685] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[7685] [ 210.515758][ T7648] netlink: 'syz.4.502': attribute type 11 has an invalid length. [ 210.524741][ T5863] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 210.556654][ T10] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 211.025262][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.026951][ T10] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 211.040470][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.051260][ T5863] usb 6-1: config 0 descriptor?? [ 211.168274][ T10] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 211.403020][ T10] usb 5-1: USB disconnect, device number 21 [ 211.581506][ T7701] kernel profiling enabled (shift: 0) [ 211.602369][ T5863] arvo 0003:1E7D:30D4.0008: item fetching failed at offset 5/7 [ 211.702001][ T5863] arvo 0003:1E7D:30D4.0008: parse failed [ 211.837879][ T5863] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -22 [ 212.162814][ T7703] fido_id[7703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.386369][ T5862] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 212.541709][ T7701] syz.4.521: vmalloc error: size 704966656, failed to allocated page array size 1376888, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.565177][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.4.521 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 212.565203][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.565213][ T7701] Call Trace: [ 212.565220][ T7701] [ 212.565226][ T7701] dump_stack_lvl+0x16c/0x1f0 [ 212.565254][ T7701] warn_alloc+0x248/0x3a0 [ 212.565277][ T7701] ? __pfx_warn_alloc+0x10/0x10 [ 212.565311][ T7701] ? profile_init+0xd5/0x130 [ 212.565333][ T7701] ? __vmalloc_node_noprof+0xad/0xf0 [ 212.565366][ T7701] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 212.565406][ T7701] ? profile_init+0xd5/0x130 [ 212.565430][ T7701] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.565459][ T7701] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 212.565482][ T7701] ? rcu_is_watching+0x12/0xc0 [ 212.565505][ T7701] ? profile_init+0xd5/0x130 [ 212.565520][ T7701] __vmalloc_node_noprof+0xad/0xf0 [ 212.565547][ T7701] ? profile_init+0xd5/0x130 [ 212.565566][ T7701] ? __pfx_profiling_store+0x10/0x10 [ 212.565588][ T7701] profile_init+0xd5/0x130 [ 212.565605][ T7701] profiling_store+0x73/0xf0 [ 212.565629][ T7701] kobj_attr_store+0x55/0x80 [ 212.565651][ T7701] ? __pfx_kobj_attr_store+0x10/0x10 [ 212.565674][ T7701] sysfs_kf_write+0xf2/0x150 [ 212.565697][ T7701] kernfs_fop_write_iter+0x354/0x510 [ 212.565713][ T7701] ? __pfx_sysfs_kf_write+0x10/0x10 [ 212.565735][ T7701] iter_file_splice_write+0x91f/0x1150 [ 212.565774][ T7701] ? __pfx_iter_file_splice_write+0x10/0x10 [ 212.565799][ T7701] ? __pfx_copy_splice_read+0x10/0x10 [ 212.565833][ T7701] ? __pfx_iter_file_splice_write+0x10/0x10 [ 212.565856][ T7701] direct_splice_actor+0x192/0x6c0 [ 212.565878][ T7701] splice_direct_to_actor+0x342/0xa30 [ 212.565899][ T7701] ? __pfx_direct_splice_actor+0x10/0x10 [ 212.565924][ T7701] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 212.565950][ T7701] do_splice_direct+0x174/0x240 [ 212.565969][ T7701] ? __pfx_do_splice_direct+0x10/0x10 [ 212.565988][ T7701] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 212.566011][ T7701] ? rw_verify_area+0xcf/0x680 [ 212.566042][ T7701] do_sendfile+0xb06/0xe50 [ 212.566066][ T7701] ? __pfx_do_sendfile+0x10/0x10 [ 212.566088][ T7701] ? __x64_sys_futex+0x1e0/0x4c0 [ 212.566109][ T7701] ? __x64_sys_futex+0x1e9/0x4c0 [ 212.566134][ T7701] __x64_sys_sendfile64+0x1d8/0x220 [ 212.566158][ T7701] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 212.566182][ T7701] ? fput+0x70/0xf0 [ 212.566210][ T7701] do_syscall_64+0xcd/0x4c0 [ 212.566236][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.566254][ T7701] RIP: 0033:0x7fbd78b8e969 [ 212.566269][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.566287][ T7701] RSP: 002b:00007fbd799db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 212.566305][ T7701] RAX: ffffffffffffffda RBX: 00007fbd78db5fa0 RCX: 00007fbd78b8e969 [ 212.566321][ T7701] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 212.566331][ T7701] RBP: 00007fbd78c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 212.566341][ T7701] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 212.566352][ T7701] R13: 0000000000000000 R14: 00007fbd78db5fa0 R15: 00007ffe370260e8 [ 212.566380][ T7701] [ 212.566387][ T7701] Mem-Info: [ 212.889999][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 212.896195][ T7701] active_anon:14555 inactive_anon:0 isolated_anon:0 [ 212.896195][ T7701] active_file:12260 inactive_file:40626 isolated_file:0 [ 212.896195][ T7701] unevictable:768 dirty:327 writeback:0 [ 212.896195][ T7701] slab_reclaimable:11561 slab_unreclaimable:102932 [ 212.896195][ T7701] mapped:38868 shmem:4252 pagetables:1681 [ 212.896195][ T7701] sec_pagetables:0 bounce:0 [ 212.896195][ T7701] kernel_misc_reclaimable:0 [ 212.896195][ T7701] free:1255481 free_pcp:20343 free_cma:0 [ 212.948773][ T7701] Node 0 active_anon:58220kB inactive_anon:0kB active_file:49040kB inactive_file:162296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155472kB dirty:1108kB writeback:0kB shmem:15472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12284kB pagetables:6544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.983116][ T7701] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.036744][ T5862] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.045057][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.064961][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.066001][ T7701] Node 0 [ 213.084826][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.088801][ T7701] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.162277][ T7701] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 213.199154][ T7701] Node 0 DMA32 free:1109272kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51396kB inactive_anon:0kB active_file:49040kB inactive_file:160980kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2540836kB mlocked:0kB bounce:0kB free_pcp:69364kB local_pcp:40776kB free_cma:0kB [ 213.246357][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.259637][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.269082][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.283227][ T7701] lowmem_reserve[]: 0 0 1 1 1 [ 213.289355][ T7701] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 213.318546][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 213.323312][ T7701] Node 1 Normal free:3897272kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19044kB local_pcp:12096kB free_cma:0kB [ 213.357018][ T7701] lowmem_reserve[]: 0 0 0 0 0 [ 213.361776][ T7701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.375485][ T7701] Node 0 DMA32: 2*4kB (ME) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 178*64kB (UME) 94*128kB (ME) 43*256kB (ME) 27*512kB (M) 18*1024kB (UME) 3*2048kB (UM) 253*4096kB (M) = 1109208kB [ 213.393194][ T7701] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 213.397930][ T10] usb 6-1: USB disconnect, device number 8 [ 213.407452][ T7701] Node 1 Normal: 174*4kB (U) 54*8kB (UME) 47*16kB (UME) 93*32kB (UME) 21*64kB (UME) 7*128kB (UME) 4*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3897272kB [ 213.429306][ T5863] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 213.482679][ T5862] usb 2-1: GET_CAPABILITIES returned 0 [ 213.488413][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 213.494620][ T7701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.509752][ T7701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.520105][ T7701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.529813][ T7701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.542222][ T7701] 54302 total pagecache pages [ 213.547804][ T7701] 5 pages in swap cache [ 213.555709][ T7701] Free swap = 118856kB [ 213.900575][ T7701] Total swap = 124996kB [ 213.904776][ T7701] 2097051 pages RAM [ 213.935185][ T7701] 0 pages HighMem/MovableOnly [ 213.939954][ T7701] 429864 pages reserved [ 214.116010][ T7701] 0 pages cma reserved [ 214.842493][ T5863] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.416135][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.635906][ T5863] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 215.747659][ T30] audit: type=1400 audit(1748801296.968:996): avc: denied { map } for pid=7725 comm="syz.0.527" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 215.918096][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.016058][ T1207] usb 2-1: USB disconnect, device number 25 [ 216.059131][ T5863] usb 3-1: config 0 descriptor?? [ 216.511393][ T5863] usb 3-1: can't set config #0, error -71 [ 216.574276][ T7739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7739 comm=syz.0.530 [ 216.795238][ T5813] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 216.843671][ T5863] usb 3-1: USB disconnect, device number 24 [ 217.167481][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.537'. [ 217.176397][ T5863] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 217.220810][ T30] audit: type=1400 audit(1748801298.508:997): avc: denied { ioctl } for pid=7754 comm="syz.0.536" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.247575][ T7756] input: syz0 as /devices/virtual/input/input14 [ 217.318265][ T30] audit: type=1400 audit(1748801298.598:998): avc: denied { create } for pid=7754 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 217.365487][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 217.379265][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.405627][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.424718][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.439550][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.448631][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.458362][ T5863] usb 3-1: config 0 descriptor?? [ 217.465340][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 217.565202][ T5890] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.565309][ T1207] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 217.585342][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.615180][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 217.621873][ T42] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.633974][ T42] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.647903][ T42] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.660861][ T42] usb 6-1: config 1 interface 0 has no altsetting 0 [ 217.672198][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.681266][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.689384][ T42] usb 6-1: Product: syz [ 217.693529][ T42] usb 6-1: Manufacturer: syz [ 217.698178][ T42] usb 6-1: SerialNumber: syz [ 217.728615][ T5890] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.737764][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.746793][ T1207] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 217.747345][ T5890] usb 1-1: Product: syz [ 217.760120][ T5890] usb 1-1: Manufacturer: syz [ 217.760152][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 217.764717][ T5890] usb 1-1: SerialNumber: syz [ 217.774510][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.784734][ T9] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.791386][ T5890] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.798426][ T9] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 217.813615][ T1207] usb 2-1: config 0 descriptor?? [ 217.828343][ T5862] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.833115][ T9] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.865096][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 217.872212][ T7744] tmpfs: Unknown parameter 'nr_' [ 217.873674][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 217.887798][ T7744] overlayfs: missing 'lowerdir' [ 217.892858][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.902266][ T9] usb 5-1: Product: syz [ 217.916524][ T5863] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 217.922543][ T42] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 217.923802][ T9] usb 5-1: Manufacturer: syz [ 217.939934][ T5863] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 217.948919][ T5863] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 217.956443][ T9] usb 5-1: SerialNumber: syz [ 217.961112][ T5863] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 217.969113][ T5863] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 217.999560][ T5863] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input15 [ 218.018708][ T5863] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 218.265300][ T42] usb 3-1: USB disconnect, device number 25 [ 218.293533][ T9] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 218.329012][ T30] audit: type=1326 audit(1748801299.628:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 218.947630][ T5862] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 218.956739][ T5862] ath9k_htc: Failed to initialize the device [ 218.962847][ T30] audit: type=1326 audit(1748801299.628:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 218.976580][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 218.987600][ T30] audit: type=1326 audit(1748801299.628:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 219.031294][ T30] audit: type=1326 audit(1748801299.628:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 219.441450][ T5864] usb 6-1: USB disconnect, device number 9 [ 219.493288][ T30] audit: type=1326 audit(1748801299.628:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 219.517906][ T30] audit: type=1326 audit(1748801299.628:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 219.543848][ T30] audit: type=1326 audit(1748801300.248:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 219.622201][ T7753] usblp0: removed [ 219.644615][ T5862] usb 1-1: ath9k_htc: USB layer deinitialized [ 219.788540][ T5864] usb 5-1: USB disconnect, device number 22 [ 220.091216][ T5864] usblp1: removed [ 220.118045][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 220.333828][ T1207] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.471340][ T1207] [drm:udl_init] *ERROR* Selecting channel failed [ 220.604147][ T1207] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 220.752333][ T5864] usb 1-1: USB disconnect, device number 17 [ 220.765688][ T1207] [drm] Initialized udl on minor 2 [ 220.885178][ T7781] evm: overlay not supported [ 220.928618][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 220.928646][ T30] audit: type=1400 audit(1748801302.208:1039): avc: denied { create } for pid=7778 comm="syz.1.542" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.184420][ T30] audit: type=1400 audit(1748801302.208:1040): avc: denied { link } for pid=7778 comm="syz.1.542" name="#b" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.206796][ T1207] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.235627][ T1207] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 221.244877][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.268200][ T1207] usb 2-1: USB disconnect, device number 26 [ 221.274340][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 221.287179][ T30] audit: type=1400 audit(1748801302.218:1041): avc: denied { rename } for pid=7778 comm="syz.1.542" name="#c" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.310092][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 222.300682][ T1207] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 222.523446][ T30] audit: type=1400 audit(1748801303.798:1042): avc: denied { ioctl } for pid=7796 comm="syz.1.546" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.585218][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 222.585234][ T55] block nbd3: Possible stuck request ffff888027030000: control (read@0,4096B). Runtime 60 seconds [ 222.618005][ T30] audit: type=1400 audit(1748801303.798:1043): avc: denied { set_context_mgr } for pid=7796 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 222.658186][ T1207] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.681971][ T1207] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.785071][ T30] audit: type=1800 audit(1748801304.048:1044): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.551" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 223.117584][ T1207] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.253458][ T1207] usb 5-1: config 1 interface 0 has no altsetting 0 [ 223.377787][ T1207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.399214][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.416885][ T1207] usb 5-1: Product: syz [ 223.421465][ T1207] usb 5-1: Manufacturer: syz [ 223.645333][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 223.858862][ T1207] usb 5-1: SerialNumber: syz [ 224.026521][ T5890] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 224.035747][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.046426][ T5890] usb 2-1: config 0 descriptor?? [ 224.074139][ T1207] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 224.191690][ T7817] netlink: 'syz.5.555': attribute type 2 has an invalid length. [ 224.215473][ T42] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 224.291798][ T30] audit: type=1326 audit(1748801305.588:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 224.327086][ T30] audit: type=1326 audit(1748801305.588:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 224.353906][ T30] audit: type=1326 audit(1748801305.618:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 224.377198][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.225183][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 225.287595][ T30] audit: type=1326 audit(1748801305.618:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 225.310890][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.312052][ T42] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.318706][ T5864] usb 5-1: USB disconnect, device number 23 [ 225.382438][ T7791] usblp0: removed [ 225.392838][ T42] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.415993][ T42] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.445212][ T42] usb 3-1: config 1 interface 0 has no altsetting 0 [ 225.469708][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.479847][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.489305][ T42] usb 3-1: Product: syz [ 225.494002][ T42] usb 3-1: Manufacturer: syz [ 225.499107][ T7822] netlink: 76 bytes leftover after parsing attributes in process `syz.5.556'. [ 225.509121][ T42] usb 3-1: SerialNumber: syz [ 225.527961][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'. [ 225.745285][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.777063][ T42] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 225.946458][ T7833] netlink: 68 bytes leftover after parsing attributes in process `syz.5.558'. [ 225.955821][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 226.393320][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 226.393336][ T30] audit: type=1326 audit(1748801307.688:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.423760][ T30] audit: type=1326 audit(1748801307.688:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.539937][ T5890] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 226.548392][ T30] audit: type=1326 audit(1748801307.688:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548435][ T30] audit: type=1326 audit(1748801307.688:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548473][ T30] audit: type=1326 audit(1748801307.688:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548511][ T30] audit: type=1326 audit(1748801307.718:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548551][ T30] audit: type=1326 audit(1748801307.718:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548589][ T30] audit: type=1326 audit(1748801307.788:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548628][ T30] audit: type=1326 audit(1748801307.798:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.548667][ T30] audit: type=1326 audit(1748801307.798:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.2.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 226.793420][ T7836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.560'. [ 226.835848][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 226.918236][ T5864] usb 3-1: USB disconnect, device number 26 [ 227.072415][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 227.123767][ T5864] usblp0: removed [ 227.294639][ T5890] [drm:udl_init] *ERROR* Selecting channel failed [ 227.385093][ T5890] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 227.449226][ T5890] [drm] Initialized udl on minor 2 [ 227.495566][ T5890] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.503702][ T5890] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.511161][ T42] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.525836][ T5890] usb 2-1: USB disconnect, device number 27 [ 227.531870][ T42] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.544557][ T42] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.875905][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 228.143542][ T5862] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 228.174167][ T5890] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.779679][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.018989][ T5890] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 229.028117][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.060061][ T5890] usb 2-1: config 0 descriptor?? [ 230.323667][ T5862] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 230.407394][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 230.413518][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 230.517291][ T5862] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 230.527525][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.564922][ T5862] usb 3-1: config 0 descriptor?? [ 230.705987][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 230.715817][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 231.755902][ T10] libceph: connect (1)[c::]:6789 error -101 [ 231.765320][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 232.233757][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 232.241341][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.270712][ T7892] ceph: No mds server is up or the cluster is laggy [ 232.275539][ T5890] usb 2-1: USB disconnect, device number 28 [ 232.440875][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 233.200564][ T5862] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 233.365232][ T5862] [drm:udl_init] *ERROR* Selecting channel failed [ 233.494802][ T5862] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 233.502433][ T5862] [drm] Initialized udl on minor 2 [ 233.513527][ T5862] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 233.531415][ T5862] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 233.558457][ T5865] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 233.581702][ T5862] usb 3-1: USB disconnect, device number 28 [ 233.588616][ T5865] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 233.815304][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 233.815332][ T30] audit: type=1400 audit(1748801315.028:1078): avc: denied { map } for pid=7919 comm="syz.2.581" path="socket:[17397]" dev="sockfs" ino=17397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 233.961011][ T1207] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 234.208479][ T1207] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 234.223311][ T7928] trusted_key: syz.5.584 sent an empty control message without MSG_MORE. [ 234.238006][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.306964][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 234.320237][ T7930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.583'. [ 234.770923][ T1207] usb 5-1: config 0 descriptor?? [ 235.764394][ T30] audit: type=1326 audit(1748801316.138:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 235.787872][ T30] audit: type=1326 audit(1748801316.138:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.037630][ T7939] bridge1: entered promiscuous mode [ 236.042895][ T7939] bridge1: entered allmulticast mode [ 236.063319][ T7939] team0: Port device bridge1 added [ 236.287943][ T30] audit: type=1326 audit(1748801316.138:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.313854][ T7936] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 236.320468][ T7936] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.328299][ T7936] vhci_hcd vhci_hcd.0: Device attached [ 236.346102][ T30] audit: type=1326 audit(1748801316.138:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.415917][ T30] audit: type=1326 audit(1748801316.138:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.448378][ T30] audit: type=1326 audit(1748801316.138:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.466382][ T7940] vhci_hcd: connection closed [ 236.483909][ T1207] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.500766][ T6882] vhci_hcd: stop threads [ 236.505022][ T6882] vhci_hcd: release socket [ 236.524901][ T30] audit: type=1326 audit(1748801316.138:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.555592][ T6882] vhci_hcd: disconnect device [ 236.560469][ T1207] [drm:udl_init] *ERROR* Selecting channel failed [ 236.577367][ T1207] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 236.605191][ T30] audit: type=1326 audit(1748801316.138:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.637928][ T1207] [drm] Initialized udl on minor 2 [ 236.673485][ T1207] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.682640][ T1207] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 236.691703][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.702998][ T30] audit: type=1326 audit(1748801316.138:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c18e969 code=0x7ffc0000 [ 236.730354][ T1207] usb 5-1: USB disconnect, device number 24 [ 236.736458][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 236.744957][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 236.875374][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 237.045309][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 237.073273][ T7966] ======================================================= [ 237.073273][ T7966] WARNING: The mand mount option has been deprecated and [ 237.073273][ T7966] and is ignored by this kernel. Remove the mand [ 237.073273][ T7966] option from the mount to silence this warning. [ 237.073273][ T7966] ======================================================= [ 237.130827][ T24] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.168177][ T24] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.190070][ T24] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.230062][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 237.257602][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.303810][ T7970] 9pnet_fd: Insufficient options for proto=fd [ 237.317534][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.335257][ T24] usb 3-1: Product: syz [ 237.339773][ T24] usb 3-1: Manufacturer: syz [ 237.344440][ T24] usb 3-1: SerialNumber: syz [ 237.563439][ T7972] netlink: 76 bytes leftover after parsing attributes in process `syz.1.596'. [ 237.608871][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 237.667556][ T7975] netlink: 'syz.5.595': attribute type 4 has an invalid length. [ 238.098487][ T10] usb 3-1: USB disconnect, device number 29 [ 238.352840][ T7983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7983 comm=syz.0.598 [ 238.371967][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'. [ 238.388507][ T7947] usblp0: removed [ 238.396365][ T5813] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 240.015311][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 240.024119][ T8007] netlink: 'syz.0.607': attribute type 5 has an invalid length. [ 240.041608][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'. [ 240.054173][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 240.054185][ T30] audit: type=1400 audit(1748801321.348:1160): avc: denied { write } for pid=8004 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 240.612506][ T8031] fuse: Bad value for 'group_id' [ 240.734275][ T8031] fuse: Bad value for 'group_id' [ 240.753587][ T8031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.753612][ T8031] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 240.985563][ T30] audit: type=1400 audit(1748801322.288:1161): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.248016][ T30] audit: type=1400 audit(1748801322.308:1162): avc: denied { connect } for pid=8039 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 241.760209][ T1207] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 241.923129][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'. [ 241.932106][ T8067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 242.045636][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 242.157158][ T1207] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.200122][ T1207] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.456056][ T1207] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.480941][ T30] audit: type=1800 audit(1748801323.768:1163): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.624" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 242.502190][ T1207] usb 3-1: config 1 interface 0 has no altsetting 0 [ 242.511228][ T1207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.535182][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.565343][ T1207] usb 3-1: Product: syz [ 242.569563][ T1207] usb 3-1: Manufacturer: syz [ 242.574149][ T1207] usb 3-1: SerialNumber: syz [ 242.825643][ T1207] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 243.160670][ T8089] fuse: Bad value for 'group_id' [ 243.165715][ T8089] fuse: Bad value for 'group_id' [ 243.447136][ T8091] fuse: Unknown parameter '0x0000000000000006' [ 243.461953][ T8091] netlink: 'syz.4.629': attribute type 15 has an invalid length. [ 243.658251][ T30] audit: type=1326 audit(1748801324.958:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 243.892494][ T30] audit: type=1326 audit(1748801324.958:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 243.916500][ T30] audit: type=1326 audit(1748801324.958:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 243.993644][ T5864] usb 3-1: USB disconnect, device number 30 [ 244.126118][ T30] audit: type=1326 audit(1748801324.958:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 244.168331][ T8096] vim2m vim2m.0: vidioc_s_fmt queue busy [ 244.178594][ T30] audit: type=1326 audit(1748801324.958:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 244.449557][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.5.631'. [ 244.545361][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.5.631'. [ 244.655085][ T30] audit: type=1326 audit(1748801324.958:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 244.678433][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.807991][ T8107] tipc: Started in network mode [ 244.812929][ T8107] tipc: Node identity ac1414aa, cluster identity 4711 [ 244.820793][ T8107] tipc: Enabled bearer , priority 10 [ 244.839838][ T8106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8106 comm=syz.1.632 [ 244.869493][ T8106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 245.055239][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 245.055254][ T30] audit: type=1326 audit(1748801324.958:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.055299][ T5813] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 245.061277][ T30] audit: type=1326 audit(1748801324.958:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.144597][ T8049] usblp0: removed [ 245.203196][ T8101] bond1: entered promiscuous mode [ 245.215595][ T8101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.225200][ T30] audit: type=1326 audit(1748801325.388:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.248591][ T30] audit: type=1326 audit(1748801325.388:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.272182][ T30] audit: type=1400 audit(1748801325.648:1181): avc: denied { bind } for pid=8097 comm="syz.4.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 245.293486][ T30] audit: type=1400 audit(1748801326.438:1182): avc: denied { create } for pid=8098 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 245.313751][ T30] audit: type=1326 audit(1748801326.438:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f196258d2d0 code=0x7ffc0000 [ 245.346176][ T30] audit: type=1326 audit(1748801326.438:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.412278][ T30] audit: type=1326 audit(1748801326.438:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.458072][ T30] audit: type=1326 audit(1748801326.438:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f196258e969 code=0x7ffc0000 [ 245.481274][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.575778][ T8121] kvm: pic: non byte write [ 245.580914][ T8121] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 245.593661][ T8121] kvm: pic: non byte write [ 245.599154][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 245.608146][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 245.635216][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 245.656379][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 245.667486][ T8131] netlink: 'syz.0.640': attribute type 5 has an invalid length. [ 245.676157][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 245.798847][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.809503][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.821435][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 245.839598][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 245.849363][ T24] usb 2-1: Manufacturer: syz [ 245.888889][ T5864] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 245.897094][ T1207] tipc: Node number set to 2886997162 [ 245.992676][ T24] usb 2-1: config 0 descriptor?? [ 246.100850][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.206504][ T5864] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.238575][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.268262][ T5864] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.280746][ T5864] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.289721][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.292972][ T5864] usb 5-1: Manufacturer: syz [ 246.316048][ T5864] usb 5-1: config 0 descriptor?? [ 246.354417][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.398500][ T24] rc_core: IR keymap rc-hauppauge not found [ 246.408349][ T5864] rc_core: IR keymap rc-hauppauge not found [ 246.417717][ T5864] Registered IR keymap rc-empty [ 246.419166][ T24] Registered IR keymap rc-empty [ 246.434406][ T5864] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 246.444875][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 246.455305][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.468380][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 246.479468][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input17 [ 246.492604][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.537471][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 246.573355][ T5864] usb 5-1: USB disconnect, device number 25 [ 246.848131][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 246.871122][ T5863] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 246.902696][ T1207] usb 2-1: USB disconnect, device number 29 [ 247.045184][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 247.051635][ T5863] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.064826][ T5863] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.077343][ T5863] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.087141][ T5863] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 247.096675][ T5863] usb 3-1: Product: syz [ 247.100830][ T5863] usb 3-1: Manufacturer: syz [ 247.109583][ T5863] hub 3-1:4.0: USB hub found [ 247.215206][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 247.325185][ T8156] No source specified [ 247.365242][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 247.544698][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 247.565500][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.578325][ T8168] netlink: 68 bytes leftover after parsing attributes in process `syz.1.650'. [ 247.593781][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 247.605389][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.616293][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.624327][ T10] usb 6-1: Product: syz [ 247.629070][ T10] usb 6-1: Manufacturer: syz [ 247.633705][ T10] usb 6-1: SerialNumber: syz [ 247.654107][ T5863] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 247.665393][ T10] usb 6-1: config 0 descriptor?? [ 247.677820][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 247.692930][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 247.710136][ T5863] usb 3-1: USB disconnect, device number 31 [ 249.015806][ T8163] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 249.280904][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 249.432719][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 249.624783][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 249.640530][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 249.655821][ T8198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.660'. [ 249.785351][ T1207] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 249.873033][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 249.880993][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 249.898388][ T10] usb 6-1: USB disconnect, device number 10 [ 249.919807][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 249.928444][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 249.934498][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 249.948336][ T10] em28xx 6-1:0.0: Freeing device [ 249.965582][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 249.972583][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.987525][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.000997][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.022047][ T1207] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.032198][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.046566][ T1207] usb 5-1: config 0 descriptor?? [ 250.444654][ T8192] ceph: No mds server is up or the cluster is laggy [ 250.464306][ T8190] tmpfs: Unknown parameter 'nr_' [ 250.469940][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 250.517368][ T8190] overlayfs: missing 'lowerdir' [ 250.525347][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 250.585315][ T8210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8210 comm=syz.5.663 [ 250.612245][ T1207] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 250.661176][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'. [ 250.831383][ T1207] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 250.874793][ T1207] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 250.895853][ T1207] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 250.929475][ T1207] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 250.968799][ T8214] netlink: 68 bytes leftover after parsing attributes in process `syz.2.664'. [ 251.022197][ T1207] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input18 [ 251.067085][ T1207] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 251.299659][ T1207] usb 5-1: USB disconnect, device number 26 [ 251.923496][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 251.953924][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 252.446133][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 252.452335][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 252.510233][ T8224] ceph: No mds server is up or the cluster is laggy [ 253.136652][ T55] block nbd3: Possible stuck request ffff888027030000: control (read@0,4096B). Runtime 90 seconds [ 253.409339][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'. [ 254.021255][ T8270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.100319][ T5863] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 254.158844][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 254.545318][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.090647][ T1207] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.116319][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 255.155288][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 255.208585][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.211985][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220604][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.230791][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.236525][ T5864] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.290495][ T5864] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.308416][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 255.322306][ T1207] usb 1-1: Using ep0 maxpacket: 16 [ 255.331346][ T5864] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.347923][ T5863] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 255.357041][ T5864] usb 6-1: config 1 interface 0 has no altsetting 0 [ 255.376059][ T1207] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.388815][ T1207] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.399661][ T5864] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.413724][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.421846][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.432545][ T1207] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.447679][ T5863] usb 3-1: config 0 descriptor?? [ 255.452775][ T5864] usb 6-1: Product: syz [ 255.458048][ T5864] usb 6-1: Manufacturer: syz [ 255.462706][ T1207] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.471313][ T5864] usb 6-1: SerialNumber: syz [ 255.480278][ T1207] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 255.491544][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.499571][ T1207] usb 1-1: Product: syz [ 255.503732][ T1207] usb 1-1: Manufacturer: syz [ 255.508397][ T1207] usb 1-1: SerialNumber: syz [ 255.667811][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 255.689625][ T5864] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 255.720105][ T1207] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 255.838492][ T5890] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 255.847007][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.859966][ T5890] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 255.869066][ T5890] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 255.877438][ T5890] usb 2-1: Manufacturer: syz [ 255.884221][ T5890] usb 2-1: config 0 descriptor?? [ 255.930009][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 255.930023][ T30] audit: type=1326 audit(1748801337.228:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 256.356636][ T5890] rc_core: IR keymap rc-hauppauge not found [ 256.397679][ T5890] Registered IR keymap rc-empty [ 256.489715][ T30] audit: type=1326 audit(1748801337.228:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fcb8e969 code=0x7ffc0000 [ 256.490312][ T1207] usb 1-1: USB disconnect, device number 18 [ 256.530055][ T5864] usb 6-1: USB disconnect, device number 11 [ 256.531380][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 256.635919][ T5864] usblp0: removed [ 256.687746][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 256.698681][ T30] audit: type=1326 audit(1748801337.258:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 256.716121][ T1207] usblp1: removed [ 256.721937][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.753232][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 256.783527][ T30] audit: type=1326 audit(1748801337.258:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 256.986116][ T30] audit: type=1326 audit(1748801337.258:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 257.009712][ T30] audit: type=1326 audit(1748801337.258:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 257.033003][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.077650][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 257.083627][ T5863] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.613298][ T30] audit: type=1326 audit(1748801337.258:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 257.637098][ T30] audit: type=1326 audit(1748801337.258:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 257.651028][ T5863] usb 3-1: USB disconnect, device number 32 [ 257.662430][ T30] audit: type=1326 audit(1748801337.258:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 257.694684][ T30] audit: type=1326 audit(1748801337.258:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.0.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 258.512844][ T8312] Driver unsupported XDP return value 0 on prog (id 190) dev N/A, expect packet loss! [ 258.625532][ T5865] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 259.388056][ T5863] usb 2-1: USB disconnect, device number 30 [ 259.521577][ T5865] usb 5-1: device descriptor read/64, error -71 [ 259.533940][ T8321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 259.546980][ T8321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 259.865179][ T5865] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 260.076086][ T5865] usb 5-1: device descriptor read/64, error -71 [ 260.306016][ T5865] usb usb5-port1: attempt power cycle [ 260.454719][ T5890] libceph: connect (1)[c::]:6789 error -13 [ 260.461783][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 260.645943][ T5865] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 260.695781][ T5865] usb 5-1: device descriptor read/8, error -71 [ 260.784434][ T24] libceph: connect (1)[c::]:6789 error -13 [ 260.826177][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 260.975668][ T5865] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 261.035713][ T5865] usb 5-1: device descriptor read/8, error -71 [ 261.146358][ T5865] usb usb5-port1: unable to enumerate USB device [ 261.184223][ T8336] ceph: No mds server is up or the cluster is laggy [ 261.354139][ T8354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8354 comm=syz.0.707 [ 261.399111][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 261.813455][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 261.954604][ T8369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'. [ 261.959222][ T8367] geneve3: entered promiscuous mode [ 261.972122][ T8367] geneve3: entered allmulticast mode [ 261.985204][ T1207] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 262.014183][ T8370] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.063518][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 262.155421][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 262.160243][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 262.160255][ T30] audit: type=1400 audit(1748801343.458:1285): avc: denied { ioctl } for pid=8366 comm="syz.4.712" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 262.205672][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.242084][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.440110][ T1207] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 262.450407][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.475566][ T1207] usb 2-1: Product: syz [ 262.479913][ T1207] usb 2-1: Manufacturer: syz [ 262.484790][ T1207] usb 2-1: SerialNumber: syz [ 262.564784][ T1207] usb 2-1: config 0 descriptor?? [ 262.888557][ T1207] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 262.916964][ T1207] usb 2-1: USB disconnect, device number 31 [ 263.262212][ T8385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.718'. [ 263.266182][ T5863] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 263.361211][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 263.371383][ T8387] netlink: 'syz.2.719': attribute type 30 has an invalid length. [ 263.388290][ T8387] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.397209][ T8387] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.406221][ T8387] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.415935][ T8387] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.431327][ T30] audit: type=1400 audit(1748801344.708:1286): avc: denied { getopt } for pid=8388 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.452959][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 263.463446][ T8387] netlink: 'syz.2.719': attribute type 30 has an invalid length. [ 263.475823][ T5863] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 263.484467][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.499339][ T5863] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 263.509319][ T5863] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 263.523027][ T5863] usb 6-1: Manufacturer: syz [ 263.564021][ T5863] usb 6-1: config 0 descriptor?? [ 263.765356][ T5863] rc_core: IR keymap rc-hauppauge not found [ 263.774597][ T5863] Registered IR keymap rc-empty [ 263.782776][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 263.810734][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 263.883359][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 264.396960][ T8409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8409 comm=syz.4.726 [ 264.417982][ T8409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'. [ 265.047004][ T5863] usb 6-1: USB disconnect, device number 12 [ 265.888838][ T30] audit: type=1400 audit(1748801347.188:1287): avc: denied { mount } for pid=8424 comm="syz.1.731" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 265.928904][ T8425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 266.108217][ T5865] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 266.145253][ T1207] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 266.281272][ T30] audit: type=1400 audit(1748801347.428:1288): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 266.735418][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 266.766179][ T5865] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 266.773149][ T8434] netlink: 'syz.5.734': attribute type 5 has an invalid length. [ 266.783236][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 266.790831][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.802362][ T1207] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 266.811866][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.822586][ T5865] usb 5-1: config 0 descriptor?? [ 266.843585][ T8434] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 266.847154][ T8443] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 266.860358][ T8443] netlink: 'syz.1.736': attribute type 2 has an invalid length. [ 266.862436][ T8434] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 266.886191][ T8434] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 266.900351][ T8443] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 266.908799][ T1207] usb 1-1: config 0 descriptor?? [ 266.930150][ T8434] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 266.945825][ T8443] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.736'. [ 266.964977][ T8434] geneve2: entered promiscuous mode [ 266.970964][ T8434] geneve2: entered allmulticast mode [ 268.692028][ T8478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.745'. [ 268.952459][ T1207] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 268.960779][ T5865] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 268.993326][ T5865] [drm:udl_init] *ERROR* Selecting channel failed [ 269.001042][ T1207] [drm:udl_init] *ERROR* Selecting channel failed [ 269.037296][ T5865] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 269.062001][ T1207] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 269.079724][ T1207] [drm] Initialized udl on minor 3 [ 269.124471][ T1207] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 269.147653][ T1207] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 269.178165][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 269.186389][ T1207] usb 1-1: USB disconnect, device number 19 [ 269.203525][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 269.244764][ T5865] [drm] Initialized udl on minor 2 [ 269.258764][ T5865] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 269.267368][ T5865] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 269.282969][ T5890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 269.295879][ T5865] usb 5-1: USB disconnect, device number 31 [ 269.320143][ T5890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 269.573231][ T5890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 270.020812][ T30] audit: type=1400 audit(1748801351.318:1289): avc: denied { connect } for pid=8506 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.053744][ T30] audit: type=1400 audit(1748801351.338:1290): avc: denied { write } for pid=8506 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.072932][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.116932][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 270.122960][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 270.345218][ T5865] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 270.385648][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 270.391684][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 270.476141][ T1207] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 270.525211][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 270.533047][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.545734][ T5865] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 270.554789][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.564109][ T5865] usb 5-1: Product: syz [ 270.568375][ T5865] usb 5-1: Manufacturer: syz [ 270.572985][ T5865] usb 5-1: SerialNumber: syz [ 270.580916][ T5865] usb 5-1: config 0 descriptor?? [ 270.588761][ T5865] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 270.594865][ T5865] usb 5-1: selecting invalid altsetting 1 [ 270.630083][ T1207] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 270.652439][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.674969][ T1207] usb 6-1: config 0 descriptor?? [ 270.789925][ T5865] gspca_stk014: reg_r err -71 [ 270.802758][ T5865] stk014 5-1:0.0: probe with driver stk014 failed with error -71 [ 270.814903][ T5865] usb 5-1: USB disconnect, device number 32 [ 270.898667][ T5890] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 270.907136][ T24] libceph: connect (1)[c::]:6789 error -101 [ 270.914186][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 271.028401][ T8511] ceph: No mds server is up or the cluster is laggy [ 272.036385][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.045179][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.056031][ T8533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.062214][ T8533] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 272.143832][ T8533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.149925][ T8533] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 272.178680][ T8533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.184725][ T8533] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 272.219945][ T8533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.226108][ T8533] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 272.251562][ T8533] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.257600][ T8533] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 273.155379][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 273.275516][ T30] audit: type=1400 audit(1748801354.558:1291): avc: denied { bind } for pid=8556 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.314198][ T1207] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 273.326771][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 273.335636][ T1207] [drm:udl_init] *ERROR* Selecting channel failed [ 273.351781][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.367049][ T30] audit: type=1400 audit(1748801354.558:1292): avc: denied { name_bind } for pid=8556 comm="syz.0.770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 273.397464][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.404609][ T1207] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 273.421365][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 273.430518][ T1207] [drm] Initialized udl on minor 2 [ 273.432738][ T1207] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.439781][ T30] audit: type=1400 audit(1748801354.558:1293): avc: denied { node_bind } for pid=8556 comm="syz.0.770" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 273.454708][ T1207] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 273.485694][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.511852][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.524963][ T24] usb 2-1: config 0 descriptor?? [ 273.533020][ T1207] usb 6-1: USB disconnect, device number 13 [ 273.544656][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 273.678274][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 273.693275][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 273.711576][ T5890] usb 3-1: can't read configurations, error -71 [ 273.855430][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 273.966032][ T24] playstation 0003:054C:05C4.000B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 274.017007][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 274.023455][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.038425][ T10] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 274.048372][ T10] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.063135][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.071505][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 274.080651][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.088706][ T10] usb 5-1: Product: syz [ 274.092912][ T10] usb 5-1: Manufacturer: syz [ 274.097591][ T10] usb 5-1: SerialNumber: syz [ 274.349904][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 274.363122][ T24] playstation 0003:054C:05C4.000B: Failed to retrieve feature with reportID 163: -32 [ 274.382112][ T24] playstation 0003:054C:05C4.000B: Failed to retrieve DualShock4 firmware info: -32 [ 274.392415][ T24] playstation 0003:054C:05C4.000B: Failed to get firmware info from DualShock4 [ 274.403705][ T24] playstation 0003:054C:05C4.000B: HW/FW version data in sysfs will be invalid. [ 274.857051][ T30] audit: type=1326 audit(1748801356.158:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 274.888177][ T30] audit: type=1326 audit(1748801356.158:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.229915][ T10] usb 5-1: USB disconnect, device number 33 [ 275.242862][ T24] input: HID 054c:05c4 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.000B/input/input21 [ 275.261173][ T24] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.000B/input/input22 [ 275.297570][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 275.298407][ T30] audit: type=1326 audit(1748801356.178:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.417970][ T30] audit: type=1326 audit(1748801356.178:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.441254][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.464076][ T30] audit: type=1326 audit(1748801356.178:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.468344][ T8579] netlink: 68 bytes leftover after parsing attributes in process `syz.2.778'. [ 275.487388][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.518687][ T30] audit: type=1326 audit(1748801356.178:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.541961][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.558859][ T24] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.000B/input/input23 [ 275.596683][ T8561] usblp0: removed [ 275.676067][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 275.681386][ T30] audit: type=1326 audit(1748801356.198:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.704667][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.715398][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.732964][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.741589][ T30] audit: type=1326 audit(1748801356.198:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.770504][ T30] audit: type=1326 audit(1748801356.208:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.782332][ T24] playstation 0003:054C:05C4.000B: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 275.802696][ T30] audit: type=1326 audit(1748801356.208:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 275.808878][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.865370][ T5890] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 276.119687][ T30] audit: type=1326 audit(1748801356.208:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 276.125392][ T24] usb 2-1: USB disconnect, device number 32 [ 276.142961][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.155926][ T30] audit: type=1326 audit(1748801356.208:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd78b8d2d0 code=0x7ffc0000 [ 276.158122][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.203655][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.267705][ T5890] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 276.276229][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.291218][ T42] usb 1-1: config 0 descriptor?? [ 276.300031][ T5890] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 276.324967][ T5890] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 276.359077][ T5890] usb 6-1: Manufacturer: syz [ 276.378686][ T5890] usb 6-1: config 0 descriptor?? [ 276.665327][ T5890] rc_core: IR keymap rc-hauppauge not found [ 276.675286][ T5890] Registered IR keymap rc-empty [ 276.685399][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 276.718295][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 276.736248][ T8574] tmpfs: Unknown parameter 'nr_' [ 276.759488][ T8574] overlayfs: missing 'lowerdir' [ 276.787210][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 276.794436][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 276.808003][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 276.858661][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 276.874974][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 276.885360][ T5864] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 276.893020][ T1207] usb 6-1: USB disconnect, device number 14 [ 276.902665][ T42] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 276.991404][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input25 [ 277.025437][ T5864] usb 5-1: device descriptor read/64, error -71 [ 277.179769][ T42] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 277.208272][ T42] usb 1-1: USB disconnect, device number 20 [ 277.285779][ T5864] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 277.292845][ T8602] fido_id[8602]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 277.445216][ T5864] usb 5-1: device descriptor read/64, error -71 [ 277.575564][ T5864] usb usb5-port1: attempt power cycle [ 277.912698][ T8611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.788'. [ 277.927463][ T5864] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 277.955834][ T5864] usb 5-1: device descriptor read/8, error -71 [ 278.183635][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 278.197775][ T8615] netlink: 128 bytes leftover after parsing attributes in process `syz.0.789'. [ 278.800223][ T5864] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 279.400791][ T5864] usb 5-1: device descriptor read/8, error -71 [ 279.540192][ T5864] usb usb5-port1: unable to enumerate USB device [ 279.956771][ T8638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8638 comm=syz.1.795 [ 279.993746][ T8638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 281.159227][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 281.159242][ T30] audit: type=1400 audit(1748801362.458:1337): avc: denied { block_suspend } for pid=8652 comm="syz.5.799" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.186613][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.488227][ T30] audit: type=1800 audit(1748801362.778:1338): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.800" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 281.654739][ T8666] netlink: 68 bytes leftover after parsing attributes in process `syz.0.802'. [ 281.704492][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 281.885291][ T42] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 282.056527][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 282.202406][ T30] audit: type=1400 audit(1748801363.498:1339): avc: denied { getopt } for pid=8670 comm="syz.4.804" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.222559][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.377726][ T42] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.451489][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.464678][ T42] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 282.479217][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.592135][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 282.610045][ T42] usb 2-1: config 0 descriptor?? [ 283.253811][ T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 283.255729][ T8686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.810'. [ 283.273688][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.328185][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 283.353842][ T55] block nbd3: Possible stuck request ffff888027030000: control (read@0,4096B). Runtime 120 seconds [ 283.367684][ T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 283.488973][ T10] usb 6-1: Manufacturer: syz [ 283.644042][ T10] usb 6-1: config 0 descriptor?? [ 283.735222][ T10] rc_core: IR keymap rc-hauppauge not found [ 283.741198][ T10] Registered IR keymap rc-empty [ 284.246231][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 284.320416][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 284.447905][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 285.615184][ T5862] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 285.840663][ T5862] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 285.850446][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.863364][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 285.874345][ T5862] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.897958][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 285.910223][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.918926][ T5862] usb 1-1: Product: syz [ 285.923321][ T5862] usb 1-1: Manufacturer: syz [ 285.952922][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 285.959937][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 285.971039][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 285.979231][ T5862] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 286.294934][ T5862] usb 6-1: USB disconnect, device number 15 [ 286.360454][ T1207] usb 1-1: USB disconnect, device number 21 [ 286.532464][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 286.543046][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 286.561782][ T42] usb 2-1: USB disconnect, device number 33 [ 286.736847][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 286.763255][ T8725] netlink: 128 bytes leftover after parsing attributes in process `syz.5.818'. [ 287.519434][ T8734] netlink: 68 bytes leftover after parsing attributes in process `syz.5.824'. [ 288.112227][ T8748] netlink: 11 bytes leftover after parsing attributes in process `syz.5.825'. [ 289.041401][ T8760] netlink: 'syz.5.830': attribute type 2 has an invalid length. [ 289.563024][ T30] audit: type=1400 audit(1748801370.858:1340): avc: denied { read } for pid=8754 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.738275][ T8774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.835'. [ 289.795275][ T5862] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 289.986557][ T5862] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.053811][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.068809][ T5862] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 290.079458][ T5862] usb 5-1: config 1 has no interface number 1 [ 290.089081][ T5862] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 290.102415][ T5862] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.130616][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.151788][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.166824][ T5862] usb 5-1: Product: syz [ 290.180962][ T5862] usb 5-1: Manufacturer: syz [ 290.188046][ T5862] usb 5-1: SerialNumber: syz [ 290.537129][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 290.772953][ T5862] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 290.780758][ T5862] usb 5-1: MIDIStreaming interface descriptor not found [ 290.882025][ T5862] usb 5-1: USB disconnect, device number 38 [ 290.885148][ T30] audit: type=1400 audit(1748801372.178:1341): avc: denied { write } for pid=8792 comm="syz.1.840" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 290.890312][ T8795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.012692][ T24] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.044000][ T30] audit: type=1400 audit(1748801372.178:1342): avc: denied { open } for pid=8792 comm="syz.1.840" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.093325][ T30] audit: type=1400 audit(1748801372.178:1343): avc: denied { ioctl } for pid=8792 comm="syz.1.840" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.131217][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.448961][ T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 291.503078][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.538037][ T8793] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 291.564904][ T8808] netlink: 68 bytes leftover after parsing attributes in process `syz.4.844'. [ 291.607934][ T24] usb 3-1: config 0 descriptor?? [ 292.005254][ T5864] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 292.602611][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.850'. [ 292.775246][ T1207] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 292.815710][ T5864] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.850272][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.883466][ T5864] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 293.047533][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 293.699268][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.734126][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 293.744333][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 293.745215][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.788744][ T8838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.853'. [ 293.807939][ T5864] usb 1-1: config 0 descriptor?? [ 293.881922][ T1207] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 293.891554][ T24] usb 3-1: USB disconnect, device number 35 [ 293.997708][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.008249][ T1207] usb 2-1: Product: syz [ 294.012469][ T1207] usb 2-1: Manufacturer: syz [ 294.019259][ T1207] usb 2-1: SerialNumber: syz [ 294.092603][ T1207] usb 2-1: config 0 descriptor?? [ 294.115159][ T30] audit: type=1400 audit(1748801375.408:1344): avc: denied { write } for pid=8841 comm="syz.4.854" path="socket:[21329]" dev="sockfs" ino=21329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 294.434723][ T5865] usb 2-1: USB disconnect, device number 34 [ 295.063982][ T8861] netlink: 68 bytes leftover after parsing attributes in process `syz.2.859'. [ 295.073383][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 296.188804][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 296.429365][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 296.473718][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 296.502870][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.543410][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.569700][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 296.582568][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.643049][ T24] usb 5-1: Manufacturer: syz [ 296.651929][ T5864] usb 1-1: USB disconnect, device number 22 [ 296.674544][ T24] usb 5-1: config 0 descriptor?? [ 297.428326][ T24] rc_core: IR keymap rc-hauppauge not found [ 297.481955][ T24] Registered IR keymap rc-empty [ 297.506057][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 297.644908][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 297.675824][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 297.730498][ T24] usb 5-1: USB disconnect, device number 39 [ 298.010412][ T30] audit: type=1400 audit(1748801379.308:1345): avc: denied { setopt } for pid=8883 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 298.135213][ T5890] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 298.305882][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 298.324110][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.376237][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.404539][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.458356][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.473467][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.488050][ T30] audit: type=1400 audit(1748801379.778:1346): avc: denied { append } for pid=8897 comm="syz.2.870" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.525953][ T5890] usb 2-1: config 0 descriptor?? [ 298.553650][ T30] audit: type=1400 audit(1748801379.788:1347): avc: denied { setattr } for pid=8897 comm="syz.2.870" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.664549][ T8901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.871'. [ 298.773948][ T8903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.872'. [ 298.803237][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 298.956999][ T8890] tmpfs: Unknown parameter 'nr_' [ 298.963910][ T8890] overlayfs: missing 'lowerdir' [ 298.987981][ T5890] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 299.008534][ T5890] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 299.022910][ T5890] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 299.038191][ T5890] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 299.049391][ T5890] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 299.077668][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input28 [ 299.173921][ T5890] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 299.265487][ T5890] usb 2-1: USB disconnect, device number 35 [ 299.562268][ T8927] fido_id[8927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 299.833987][ T30] audit: type=1326 audit(1748801381.128:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 299.944152][ T30] audit: type=1326 audit(1748801381.128:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.133829][ T30] audit: type=1326 audit(1748801381.128:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.275060][ T30] audit: type=1326 audit(1748801381.128:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.298518][ T30] audit: type=1326 audit(1748801381.128:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.324246][ T30] audit: type=1326 audit(1748801381.158:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.354213][ T30] audit: type=1326 audit(1748801381.158:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8931 comm="syz.4.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd78b8e969 code=0x7ffc0000 [ 300.401894][ T8940] netlink: 96 bytes leftover after parsing attributes in process `syz.5.883'. [ 300.637865][ T8944] qrtr: Invalid version 4 [ 301.748086][ T8963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.802944][ T8963] netlink: 'syz.2.890': attribute type 21 has an invalid length. [ 301.817891][ T8963] netlink: 156 bytes leftover after parsing attributes in process `syz.2.890'. [ 301.836835][ T8968] netlink: 76 bytes leftover after parsing attributes in process `syz.5.891'. [ 303.095239][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 303.305196][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 303.315562][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.334479][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.363000][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.419086][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.432130][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.454242][ T5890] usb 2-1: config 0 descriptor?? [ 303.775248][ T5862] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 303.830995][ T9003] vim2m vim2m.0: vidioc_s_fmt queue busy [ 303.999042][ T8988] tmpfs: Unknown parameter 'nr_' [ 304.015356][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 304.016386][ T8988] overlayfs: missing 'lowerdir' [ 304.193340][ T5890] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 304.208918][ T5890] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 304.217559][ T5890] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 304.225913][ T5890] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 304.233468][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.245802][ T5890] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 304.253146][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.274413][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.469747][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input29 [ 304.503164][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.530179][ T5890] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 304.545206][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.608514][ T5862] usb 5-1: config 0 descriptor?? [ 304.642056][ T5890] usb 2-1: USB disconnect, device number 36 [ 304.771979][ T9011] fido_id[9011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 304.799499][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 304.799532][ T30] audit: type=1400 audit(1748801386.098:1357): avc: denied { connect } for pid=9012 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.825881][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 305.067210][ T8993] tmpfs: Unknown parameter 'nr_' [ 305.074262][ T8993] overlayfs: missing 'lowerdir' [ 305.091238][ T5862] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 305.105485][ T5862] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 305.122946][ T5862] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 305.138260][ T5862] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 305.155192][ T5862] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 305.209031][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input30 [ 305.249678][ T30] audit: type=1400 audit(1748801386.518:1358): avc: denied { create } for pid=9025 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 305.269415][ T9028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.913'. [ 305.275511][ T5863] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 305.294226][ T5862] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 305.328611][ T5862] usb 5-1: USB disconnect, device number 40 [ 305.345333][ T30] audit: type=1400 audit(1748801386.528:1359): avc: denied { ioctl } for pid=9025 comm="syz.5.912" path="socket:[22984]" dev="sockfs" ino=22984 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 305.516579][ T5863] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 305.535187][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.563616][ T5863] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 305.593232][ T5863] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 305.632081][ T5863] usb 2-1: Manufacturer: syz [ 305.650630][ T9030] fido_id[9030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 305.676000][ T5863] usb 2-1: config 0 descriptor?? [ 305.712699][ T9037] bridge0: port 3(gretap0) entered blocking state [ 305.727358][ T9037] bridge0: port 3(gretap0) entered disabled state [ 305.746905][ T9037] gretap0: entered allmulticast mode [ 305.756379][ T9037] gretap0: entered promiscuous mode [ 305.771945][ T9037] bridge0: port 3(gretap0) entered blocking state [ 305.778691][ T9037] bridge0: port 3(gretap0) entered forwarding state [ 305.794373][ T9041] gretap0: left allmulticast mode [ 305.795926][ T5863] rc_core: IR keymap rc-hauppauge not found [ 305.800437][ T9041] gretap0: left promiscuous mode [ 305.807387][ T5863] Registered IR keymap rc-empty [ 305.824070][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 305.838598][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 305.843588][ T9041] bridge0: port 3(gretap0) entered disabled state [ 305.903338][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 306.443690][ T9050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.919'. [ 306.452831][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 307.174349][ T9059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.921'. [ 307.184119][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 307.488235][ T30] audit: type=1326 audit(1748801388.758:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 307.590002][ T30] audit: type=1326 audit(1748801388.758:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 307.665302][ T5864] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 307.757500][ T30] audit: type=1326 audit(1748801388.758:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd57018d2d0 code=0x7ffc0000 [ 307.861479][ T5864] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.876516][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 307.884919][ T30] audit: type=1326 audit(1748801388.758:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd57018d2d0 code=0x7ffc0000 [ 307.888674][ T5864] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 307.908214][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.927443][ T30] audit: type=1326 audit(1748801388.758:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 307.960011][ T30] audit: type=1326 audit(1748801388.758:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 308.079247][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.138506][ T10] usb 2-1: USB disconnect, device number 37 [ 308.203917][ T30] audit: type=1326 audit(1748801388.758:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.0.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd57018e969 code=0x7ffc0000 [ 308.227223][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.258678][ T5864] usb 5-1: config 0 descriptor?? [ 308.537086][ T24] libceph: connect (1)[c::]:6789 error -101 [ 308.546092][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 308.836869][ T24] libceph: connect (1)[c::]:6789 error -101 [ 309.457741][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 309.543609][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 309.851379][ T9103] netlink: 68 bytes leftover after parsing attributes in process `syz.5.932'. [ 309.860492][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'. [ 310.162241][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 310.173813][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 310.182191][ T9089] ceph: No mds server is up or the cluster is laggy [ 310.192483][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 310.201732][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.231876][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 310.244486][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 310.262452][ T10] usb 3-1: Manufacturer: syz [ 310.283766][ T10] usb 3-1: config 0 descriptor?? [ 310.600284][ T10] rc_core: IR keymap rc-hauppauge not found [ 310.612240][ T10] Registered IR keymap rc-empty [ 310.635561][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 310.635570][ T30] audit: type=1326 audit(1748801391.898:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9110 comm="syz.5.935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4fcb8e969 code=0x0 [ 310.696214][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 310.739805][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 310.793978][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 310.815823][ T5890] usb 3-1: USB disconnect, device number 36 [ 310.871929][ T5864] usbhid 5-1:0.0: can't add hid device: -71 [ 310.888543][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 310.943278][ T5864] usb 5-1: USB disconnect, device number 41 [ 311.295336][ T5890] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 311.505297][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 311.638487][ T5890] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.648240][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.666591][ T5890] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.677308][ T5890] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.690939][ T5890] usb 1-1: Manufacturer: syz [ 311.698758][ T9132] xt_nat: multiple ranges no longer supported [ 312.168630][ T5890] usb 1-1: config 0 descriptor?? [ 312.813997][ T9142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9142 comm=syz.5.941 [ 312.839411][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.941'. [ 313.459901][ T55] block nbd3: Possible stuck request ffff888027030000: control (read@0,4096B). Runtime 150 seconds [ 313.953050][ T5890] rc_core: IR keymap rc-hauppauge not found [ 313.959200][ T5890] Registered IR keymap rc-empty [ 313.966229][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 313.982047][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 314.019685][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 314.025937][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 314.035141][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 314.310623][ T9165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.946'. [ 314.319786][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 314.438591][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 314.614738][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 315.023203][ T9155] ceph: No mds server is up or the cluster is laggy [ 315.222201][ T5862] usb 1-1: USB disconnect, device number 23 [ 315.273575][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 315.318373][ T9178] netlink: 'syz.1.950': attribute type 5 has an invalid length. [ 315.337377][ T30] audit: type=1400 audit(1748801396.628:1386): avc: denied { read } for pid=9176 comm="syz.4.949" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.385303][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'. [ 315.464114][ T9178] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 315.512416][ T9178] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 315.539863][ T9178] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 315.559283][ T9178] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 315.628180][ T9178] geneve2: entered promiscuous mode [ 315.746031][ T9178] geneve2: entered allmulticast mode [ 315.880961][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 315.962939][ T9189] block device autoloading is deprecated and will be removed. [ 316.229424][ T5864] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 316.405591][ T5864] usb 5-1: Invalid ep0 maxpacket: 32 [ 316.603230][ T5864] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 316.633795][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.642790][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.732097][ T9197] vim2m vim2m.0: vidioc_s_fmt queue busy [ 316.788049][ T5864] usb 5-1: Invalid ep0 maxpacket: 32 [ 316.795676][ T5864] usb usb5-port1: attempt power cycle [ 317.025243][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 317.365268][ T5864] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 317.388744][ T5890] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 317.397822][ T5864] usb 5-1: Invalid ep0 maxpacket: 32 [ 317.405607][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.434854][ T5890] usb 1-1: config 0 descriptor?? [ 317.525249][ T5864] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 317.556691][ T5864] usb 5-1: Invalid ep0 maxpacket: 32 [ 317.571170][ T5864] usb usb5-port1: unable to enumerate USB device [ 317.692585][ T10] libceph: connect (1)[c::]:6789 error -101 [ 317.703156][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 317.845262][ T5862] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 317.976848][ T10] libceph: connect (1)[c::]:6789 error -101 [ 318.402384][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 318.540805][ T9211] ceph: No mds server is up or the cluster is laggy [ 318.597654][ T5862] usb 6-1: too many configurations: 239, using maximum allowed: 8 [ 318.619899][ T5862] usb 6-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice=e6.56 [ 318.629301][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.668342][ T5862] usb 6-1: SerialNumber: syz [ 318.707188][ T5862] usb 6-1: config 0 descriptor?? [ 318.740566][ T5862] gspca_main: 041e:4068 too many config [ 318.795389][ T42] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 319.040057][ T10] usb 6-1: USB disconnect, device number 16 [ 319.075930][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 319.203569][ T42] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 319.216787][ T42] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.226689][ T42] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.235718][ T42] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.272086][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.313559][ T42] usb 2-1: config 0 has no interface number 0 [ 319.363723][ T42] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 319.401629][ T42] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.465961][ T42] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.482195][ T42] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.657895][ T42] usb 2-1: config 0 interface 125 has no altsetting 0 [ 319.665150][ T42] usb 2-1: config 0 interface 125 has no altsetting 2 [ 319.682506][ T42] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 319.691660][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.701854][ T42] usb 2-1: Product: syz [ 319.706262][ T42] usb 2-1: Manufacturer: syz [ 319.710936][ T42] usb 2-1: SerialNumber: syz [ 319.758407][ T42] usb 2-1: config 0 descriptor?? [ 319.776275][ T42] usb 2-1: selecting invalid altsetting 2 [ 319.831152][ T9236] netlink: 76 bytes leftover after parsing attributes in process `syz.5.967'. [ 319.876420][ T5890] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 319.884494][ T5890] [drm:udl_init] *ERROR* Selecting channel failed [ 319.932313][ T5890] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 319.942345][ T5890] [drm] Initialized udl on minor 2 [ 319.959622][ T5890] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 319.970142][ T5890] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 319.981068][ T5862] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 319.991380][ T5862] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 320.010254][ T5890] usb 1-1: USB disconnect, device number 24 [ 320.448671][ T30] audit: type=1804 audit(1748801401.598:1387): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.969" name="/newroot/116/file0" dev="tmpfs" ino=610 res=1 errno=0 [ 320.793405][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.964'. [ 321.145857][ T42] get_1284_register timeout [ 321.165683][ C1] usb 2-1: async_complete: urb error -104 [ 321.171539][ C1] usb 2-1: async_complete: urb error -104 [ 321.177364][ C1] usb 2-1: async_complete: urb error -104 [ 321.195257][ T5890] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 321.202859][ T42] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 321.308590][ T9247] netlink: 'syz.5.971': attribute type 2 has an invalid length. [ 321.326740][ T42] usb 2-1: USB disconnect, device number 38 [ 321.390163][ T5890] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.398811][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.548154][ T9255] netlink: 'syz.4.972': attribute type 10 has an invalid length. [ 321.570705][ T9255] team0: Device ipvlan1 failed to register rx_handler [ 321.764602][ T5890] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.811571][ T5890] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.839232][ T5890] usb 1-1: Manufacturer: syz [ 321.861294][ T5890] usb 1-1: config 0 descriptor?? [ 322.007224][ T5890] rc_core: IR keymap rc-hauppauge not found [ 322.023364][ T5890] Registered IR keymap rc-empty [ 322.044354][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 322.083617][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 322.161098][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 322.165635][ T5864] libceph: connect (1)[c::]:6789 error -13 [ 322.177366][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 322.228827][ T5862] usb 1-1: USB disconnect, device number 25 [ 322.435815][ T5864] libceph: connect (1)[c::]:6789 error -13 [ 322.455269][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 322.495403][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.977'. [ 322.504417][ T9278] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 322.512281][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.977'. [ 322.985558][ T10] libceph: connect (1)[c::]:6789 error -13 [ 322.991659][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 323.089533][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 323.132896][ T9266] ceph: No mds server is up or the cluster is laggy [ 323.163117][ T5864] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.181309][ T9292] vxlan2: entered promiscuous mode [ 323.399148][ T5864] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 323.415309][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.345509][ T31] INFO: task syz.3.321:7031 blocked for more than 144 seconds. [ 324.355700][ T5864] usb 1-1: config 0 descriptor?? [ 324.387062][ T31] Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 [ 324.422775][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.456258][ T31] task:syz.3.321 state:D stack:28504 pid:7031 tgid:7030 ppid:5811 task_flags:0x400140 flags:0x00004004 [ 324.482106][ T31] Call Trace: [ 324.495310][ T31] [ 324.498276][ T31] __schedule+0x116a/0x5de0 [ 324.502817][ T31] ? __lock_acquire+0x622/0x1c90 [ 324.535145][ T31] ? __pfx___schedule+0x10/0x10 [ 324.540055][ T31] ? find_held_lock+0x2b/0x80 [ 324.555489][ T31] ? schedule+0x2d7/0x3a0 [ 324.560066][ T31] schedule+0xe7/0x3a0 [ 324.669431][ T31] schedule_preempt_disabled+0x13/0x30 [ 324.675477][ T31] __mutex_lock+0x6c7/0xb90 [ 324.680094][ T31] ? nbd_ioctl+0x30a/0xda0 [ 324.685005][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 324.690137][ T31] ? nbd_ioctl+0x30a/0xda0 [ 324.694692][ T31] nbd_ioctl+0x30a/0xda0 [ 324.699031][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 324.703914][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 324.710912][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 324.717517][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 324.722407][ T31] blkdev_ioctl+0x274/0x6d0 [ 324.726994][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 324.732137][ T31] ? selinux_file_ioctl+0x180/0x270 [ 324.740172][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 324.745361][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 324.751542][ T31] __x64_sys_ioctl+0x18b/0x210 [ 324.760394][ T31] do_syscall_64+0xcd/0x4c0 [ 324.764933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.778508][ T31] RIP: 0033:0x7f5c1dd8e969 [ 324.788243][ T31] RSP: 002b:00007f5c1ebdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.802309][ T31] RAX: ffffffffffffffda RBX: 00007f5c1dfb5fa0 RCX: 00007f5c1dd8e969 [ 324.820039][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 324.835262][ T31] RBP: 00007f5c1de10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 324.859580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.874768][ T31] R13: 0000000000000000 R14: 00007f5c1dfb5fa0 R15: 00007ffd98cf6148 [ 324.882868][ T31] [ 324.886284][ T31] INFO: task syz.3.321:7034 blocked for more than 144 seconds. [ 324.893889][ T31] Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 [ 324.901441][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.910314][ T31] task:syz.3.321 state:D stack:28888 pid:7034 tgid:7030 ppid:5811 task_flags:0x480140 flags:0x00004004 [ 324.926424][ T31] Call Trace: [ 324.931787][ T31] [ 324.937226][ T31] __schedule+0x116a/0x5de0 [ 324.949176][ T31] ? __lock_acquire+0x622/0x1c90 [ 324.970584][ T31] ? __pfx___schedule+0x10/0x10 [ 324.978974][ T31] ? find_held_lock+0x2b/0x80 [ 324.983828][ T31] ? schedule+0x2d7/0x3a0 [ 324.991134][ T31] schedule+0xe7/0x3a0 [ 324.995581][ T31] blk_mq_freeze_queue_wait+0x143/0x1b0 [ 325.001750][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 325.008171][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 325.014427][ T31] ? blk_freeze_queue_start+0xec/0x140 [ 325.020114][ T31] queue_limits_commit_update_frozen+0x93/0x110 [ 325.026710][ T31] nbd_set_size+0x4e7/0x730 [ 325.031465][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 325.036781][ T31] ? __mutex_lock+0x1ca/0xb90 [ 325.041738][ T31] ? cap_capable+0xb3/0x250 [ 325.046538][ T31] ? bpf_lsm_capable+0x9/0x10 [ 325.051476][ T31] nbd_ioctl+0xd34/0xda0 [ 325.058327][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 325.065188][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 325.071965][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 325.077050][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 325.084197][ T31] ? rcu_is_watching+0x12/0xc0 [ 325.090372][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 325.097865][ T31] blkdev_ioctl+0x274/0x6d0 [ 325.102615][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 325.109152][ T31] ? selinux_file_ioctl+0x180/0x270 [ 325.114591][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 325.122410][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 325.128980][ T31] __x64_sys_ioctl+0x18b/0x210 [ 325.134011][ T31] do_syscall_64+0xcd/0x4c0 [ 325.141117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.147546][ T31] RIP: 0033:0x7f5c1dd8e969 [ 325.152459][ T31] RSP: 002b:00007f5c1ebbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.164846][ T31] RAX: ffffffffffffffda RBX: 00007f5c1dfb6080 RCX: 00007f5c1dd8e969 [ 325.173117][ T31] RDX: 0000000000000582 RSI: 000000000000ab07 RDI: 0000000000000004 [ 325.181444][ T31] RBP: 00007f5c1de10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 325.190288][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.198571][ T31] R13: 0000000000000001 R14: 00007f5c1dfb6080 R15: 00007ffd98cf6148 [ 325.206866][ T31] [ 325.210224][ T31] [ 325.210224][ T31] Showing all locks held in the system: [ 325.220925][ T31] 1 lock held by khungtaskd/31: [ 325.228775][ T31] #0: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 325.241230][ T31] 2 locks held by kworker/u8:8/4589: [ 325.248275][ T31] #0: ffff88814046a948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 325.260436][ T31] #1: ffffc9000f657d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 325.276787][ T31] 2 locks held by getty/5578: [ 325.281796][ T31] #0: ffff8880327090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 325.308459][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 325.329456][ T31] 5 locks held by kworker/0:4/5864: [ 325.335331][ T31] #0: ffff888140eca548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 325.350036][ T31] #1: ffffc9000473fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 325.364167][ T31] #2: ffff8881447be198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 325.376653][ T31] #3: ffff8880310e7198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 325.387829][ T31] #4: ffff888076b7c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 325.398989][ T31] 1 lock held by udevd/6322: [ 325.403634][ T31] #0: ffff888026b0b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 325.414865][ T31] 1 lock held by syz.3.321/7031: [ 325.424905][ T31] #0: ffff888026b10a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x30a/0xda0 [ 325.452047][ T31] 4 locks held by syz.3.321/7034: [ 325.457154][ T31] #0: ffff888026b10a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x150/0xda0 [ 325.471316][ T31] #1: ffff888141b710c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2c3/0x730 [ 325.480839][ T31] #2: ffff888141b70a70 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 325.495171][ T31] #3: ffff888141b70aa8 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 325.510593][ T31] 2 locks held by syz.5.977/9282: [ 325.515770][ T31] [ 325.518141][ T31] ============================================= [ 325.518141][ T31] [ 325.532396][ T31] NMI backtrace for cpu 0 [ 325.532410][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 325.532429][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.532441][ T31] Call Trace: [ 325.532448][ T31] [ 325.532455][ T31] dump_stack_lvl+0x116/0x1f0 [ 325.532479][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 325.532494][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 325.532514][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.532534][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 325.532553][ T31] watchdog+0xf70/0x12c0 [ 325.532583][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.532603][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.532624][ T31] ? __kthread_parkme+0x19e/0x250 [ 325.532645][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.532669][ T31] kthread+0x3c5/0x780 [ 325.532691][ T31] ? __pfx_kthread+0x10/0x10 [ 325.532714][ T31] ? rcu_is_watching+0x12/0xc0 [ 325.532732][ T31] ? __pfx_kthread+0x10/0x10 [ 325.532755][ T31] ret_from_fork+0x5d7/0x6f0 [ 325.532774][ T31] ? __pfx_kthread+0x10/0x10 [ 325.532795][ T31] ret_from_fork_asm+0x1a/0x30 [ 325.532824][ T31] [ 325.532851][ T31] Sending NMI from CPU 0 to CPUs 1: [ 325.659960][ C1] NMI backtrace for cpu 1 [ 325.659972][ C1] CPU: 1 UID: 0 PID: 9282 Comm: syz.5.977 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 325.659990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.659997][ C1] RIP: 0010:rcu_is_watching+0x71/0xc0 [ 325.660015][ C1] Code: a0 5d f1 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 <8b> 03 c1 e8 02 83 e0 01 65 ff 0d 90 65 2a 12 74 07 5b 5d c3 cc cc [ 325.660027][ C1] RSP: 0018:ffffc9001cb86f30 EFLAGS: 00000246 [ 325.660038][ C1] RAX: 0000000000000003 RBX: ffff8880b85331e8 RCX: 0000000000000002 [ 325.660046][ C1] RDX: 0000000000000000 RSI: ffffffff8c154460 RDI: ffffffff8df15da8 [ 325.660055][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 325.660062][ C1] R10: 0000000000000000 R11: 0000000000013be8 R12: 0000000000000000 [ 325.660072][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.660079][ C1] FS: 0000000000000000(0000) GS:ffff888124865000(0000) knlGS:0000000000000000 [ 325.660092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.660101][ C1] CR2: 00007f062c380178 CR3: 000000001f2b6000 CR4: 00000000003526f0 [ 325.660109][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.660116][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 325.660124][ C1] Call Trace: [ 325.660129][ C1] [ 325.660134][ C1] lock_acquire+0x2cd/0x350 [ 325.660150][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 325.660168][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.660183][ C1] unwind_next_frame+0xd1/0x20a0 [ 325.660198][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 325.660215][ C1] ? dput+0x1f/0x30 [ 325.660234][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.660248][ C1] arch_stack_walk+0x94/0x100 [ 325.660266][ C1] ? dput+0x1f/0x30 [ 325.660284][ C1] stack_trace_save+0x8e/0xc0 [ 325.660296][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 325.660310][ C1] ? __lock_acquire+0x622/0x1c90 [ 325.660327][ C1] save_stack+0x160/0x1f0 [ 325.660342][ C1] ? __pfx_save_stack+0x10/0x10 [ 325.660355][ C1] ? free_unref_folios+0xa65/0x1800 [ 325.660368][ C1] ? folios_put_refs+0x56f/0x740 [ 325.660382][ C1] ? shmem_undo_range+0x58f/0x1150 [ 325.660394][ C1] ? shmem_evict_inode+0x3a1/0xbe0 [ 325.660406][ C1] ? evict+0x3e3/0x920 [ 325.660421][ C1] ? iput+0x521/0x880 [ 325.660436][ C1] ? dentry_unlink_inode+0x29c/0x480 [ 325.660452][ C1] ? __dentry_kill+0x1d0/0x600 [ 325.660468][ C1] ? dput.part.0+0x4b1/0x9b0 [ 325.660485][ C1] ? dput+0x1f/0x30 [ 325.660503][ C1] ? page_ext_put+0x3e/0xd0 [ 325.660519][ C1] __reset_page_owner+0x84/0x1a0 [ 325.660533][ C1] free_unref_folios+0xa65/0x1800 [ 325.660547][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.660561][ C1] folios_put_refs+0x56f/0x740 [ 325.660576][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 325.660597][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 325.660618][ C1] shmem_undo_range+0x58f/0x1150 [ 325.660634][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 325.660654][ C1] ? find_held_lock+0x2b/0x80 [ 325.660667][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 325.660679][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 325.660701][ C1] ? stack_trace_save+0x8e/0xc0 [ 325.660716][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 325.660730][ C1] ? kasan_save_stack+0x42/0x60 [ 325.660746][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 325.660760][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 325.660780][ C1] ? find_held_lock+0x2b/0x80 [ 325.660792][ C1] ? evict+0x3a2/0x920 [ 325.660812][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 325.660825][ C1] evict+0x3e3/0x920 [ 325.660841][ C1] ? __pfx_evict+0x10/0x10 [ 325.660859][ C1] ? iput+0x519/0x880 [ 325.660877][ C1] iput+0x521/0x880 [ 325.660895][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 325.660909][ C1] dentry_unlink_inode+0x29c/0x480 [ 325.660925][ C1] __dentry_kill+0x1d0/0x600 [ 325.660943][ C1] dput.part.0+0x4b1/0x9b0 [ 325.660960][ C1] dput+0x1f/0x30 [ 325.660976][ C1] __fput+0x51c/0xb70 [ 325.660993][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.661008][ C1] task_work_run+0x14d/0x240 [ 325.661027][ C1] ? __pfx_task_work_run+0x10/0x10 [ 325.661047][ C1] do_exit+0x864/0x2bd0 [ 325.661063][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 325.661078][ C1] ? __pfx_do_exit+0x10/0x10 [ 325.661094][ C1] do_group_exit+0xd3/0x2a0 [ 325.661108][ C1] get_signal+0x2673/0x26d0 [ 325.661122][ C1] ? force_sig_fault+0xc4/0x100 [ 325.661134][ C1] ? __pfx_get_signal+0x10/0x10 [ 325.661149][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 325.661168][ C1] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 325.661188][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 325.661212][ C1] irqentry_exit_to_user_mode+0x12a/0x270 [ 325.661228][ C1] asm_exc_page_fault+0x26/0x30 [ 325.661240][ C1] RIP: 0033:0x7fe4fcb8e969 [ 325.661251][ C1] Code: Unable to access opcode bytes at 0x7fe4fcb8e93f. [ 325.661257][ C1] RSP: 002b:00007fe4fdad2fe8 EFLAGS: 00010206 [ 325.661267][ C1] RAX: 0000000000000000 RBX: 00007fe4fcdb5fa0 RCX: 00007fe4fcb8e969 [ 325.661275][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000200 [ 325.661283][ C1] RBP: 00007fe4fcc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 325.661291][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 325.661300][ C1] R13: 0000000000000000 R14: 00007fe4fcdb5fa0 R15: 00007ffff96f4188 [ 325.661313][ C1] [ 325.662279][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 325.662291][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 325.662310][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.662319][ T31] Call Trace: [ 325.662325][ T31] [ 325.662331][ T31] dump_stack_lvl+0x3d/0x1f0 [ 325.662354][ T31] panic+0x71c/0x800 [ 325.662376][ T31] ? __pfx_panic+0x10/0x10 [ 325.662393][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 325.662415][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.662432][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 325.662452][ T31] ? watchdog+0xdda/0x12c0 [ 325.662474][ T31] ? watchdog+0xdcd/0x12c0 [ 325.662500][ T31] watchdog+0xdeb/0x12c0 [ 325.662526][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.662547][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.662567][ T31] ? __kthread_parkme+0x19e/0x250 [ 325.662586][ T31] ? __pfx_watchdog+0x10/0x10 [ 325.662609][ T31] kthread+0x3c5/0x780 [ 325.662630][ T31] ? __pfx_kthread+0x10/0x10 [ 325.662652][ T31] ? rcu_is_watching+0x12/0xc0 [ 325.662667][ T31] ? __pfx_kthread+0x10/0x10 [ 325.662687][ T31] ret_from_fork+0x5d7/0x6f0 [ 325.662704][ T31] ? __pfx_kthread+0x10/0x10 [ 325.662724][ T31] ret_from_fork_asm+0x1a/0x30 [ 325.662755][ T31] [ 326.327292][ T31] Kernel Offset: disabled [ 326.331593][ T31] Rebooting in 86400 seconds..