last executing test programs: 8m35.926547042s ago: executing program 2 (id=123): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000300)={0x20, 0x200, [0x7, 0x7fffffff, 0x100, 0x4, 0xffffffffffffff10, 0x40], [0x10, 0x1, 0x8, 0x1b, 0x7fff, 0x8], [0x9, 0x3ff, 0x476, 0x0, 0x3afb, 0x6d7e], '\x00', {0x3, 0x0, [{0x80000007, 0x9, 0x3, 0x1, 0x200, 0x0, 0x4}, {0x1, 0x3, 0x0, 0x6, 0x2, 0x3, 0xfffff42e}, {0x6, 0x0, 0x0, 0x7, 0xffff8001, 0x89, 0x6dcfb332}]}}}) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 8m34.019989278s ago: executing program 2 (id=129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000004b00)=""/4098, 0x1002}, {0x0}], 0x6}, 0x19}], 0x3, 0x0, 0x0) shutdown(r0, 0x2) socket$inet6(0xa, 0x1, 0x83) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) unshare(0x2c020400) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x7, [@func={0x9, 0x0, 0x0, 0xc, 0x2}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0xb, 0xffff1d33}, {0x6, 0x8}, {0x8, 0x24f2393b}, {0x1, 0x478}, {0x1, 0x179e}]}, @var={0x2, 0x0, 0x0, 0xe, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x101}}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x9, [{0x3, 0x2, 0xfd}, {0xa, 0x2, 0xf07}, {0x8, 0x0, 0x9}]}, @float={0xa, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f00000017c0)=""/4096, 0xdb, 0x1000, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)=@bloom_filter={0x1e, 0x8, 0x1, 0x7, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x1, 0x3, 0x2, 0x7}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @mcast2, 0x28}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="b2f733d6e30d98f57f1f14b8644fc179b87010da98bfef1cb7864b6f383ef1190100ad492439916ea7d24cb691dfb18c0db49ec54257461b843c217f606cdf1faa3d17eb7868e324c372e869d936911c1ae7f2ab5cb24275780fe71ef803e180040849fdc5a8a08be20a4cfd18f50645a9d40c440f583e0593ba730fd08210327d46ca9e3f7877a9206fa9471ce2800b", 0x90}, {&(0x7f0000000100)="af206f6b787f971a81bac17cef9afd418abe9e86b80b95412059df3dd9e86c86e3edeb000fa98ef16e0abfbd8903834e", 0x30}, {&(0x7f0000000140)="2e1875b59b4cf193ab2913888691175edda2fa0474ee0908519ccf413eaa2fd0c6cc7b4a", 0x24}, {&(0x7f0000000180)="08d6d44cc406edc6e549de388efd826c95f6596aac7b52a5def804d40a2486916bf3f1", 0x23}, {&(0x7f00000002c0)="304ad6da7e9b839bf729f853dd49a00f6a1decf195e4e8f994db2f70386f05d1daf33900a80533e7e7f4fa41a97603f57b5eb802174584e1f1192125ce544d014c096cc33decad7b5e7a9f9b0742b05984594e6edb51198cc2747a6209e3da0a8a2f0fb2cc44c8af771881634347c4b624b63a55e76dcae547117f4e021a41a2a382f14e9832852e97d64969f8cdb0bb7c3557be66299d315ff292038f2464f4af8e19f7b3b0400d74f1ec0a0aa8db659689bf67ad95edda0cec9041b6400ea7869358cb9a9fab", 0xc7}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1140}}], 0x1, 0x40000) close(0x3) 8m32.011641825s ago: executing program 2 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000000280)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x8003, 0x105580) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000003, 0x52424752, 0x3, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x9, 0x5}, {0x2, 0x10001}}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 8m31.057280724s ago: executing program 2 (id=140): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(r7, r7) ioprio_get$pid(0x2, r7) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r6, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8m30.735436137s ago: executing program 2 (id=141): openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5400032e) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') 8m30.568340773s ago: executing program 2 (id=143): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008bd7000fbdbdf2555000000080001006e00000008", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 8m30.455887294s ago: executing program 32 (id=143): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008bd7000fbdbdf2555000000080001006e00000008", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 11.258258964s ago: executing program 0 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a0006000802"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) r6 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r6, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abcd13ec37d94689c9dc5cae099", 0xe}, {0x0, 0xe00}, {0x0}], 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 8.220184733s ago: executing program 3 (id=1323): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x1f, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000dc0)='asymmetric\x00', 0x0, &(0x7f0000000840)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2072656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d767802319dc2879db7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479d01000000010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f05934470758f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56", 0x54e, r4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) r5 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r5}, &(0x7f0000000680)=""/195, 0xc3, &(0x7f0000000000)={&(0x7f00000004c0)={'hmac(sha1)\x00'}}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, r7, &(0x7f0000000200)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x17d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r3, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000500), 0x0, 0xcc, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xc2, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000200"/18, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0300000002000000000000000000"], 0x50) syz_open_dev$vim2m(0x0, 0xb, 0x2) syz_ublk_setup_queues(r10, r8, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 8.123679307s ago: executing program 3 (id=1324): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x40}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/162, 0xa2}, 0x4}], 0x2, 0x60010000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendto$inet6(r0, &(0x7f0000000540), 0x0, 0x40, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0xe, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x5, 0x7, 0x4, 0x81, 0x5, 0xf9, 0x40, 0x42, 0x8, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x2}}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x4, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000000540)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000004c0)={[{0xbf98, 0x3, 0x64, 0x0, 0x2, 0x80, 0x5b, 0x1, 0x8, 0x8, 0x7, 0x5, 0x4}, {0x4d84, 0x1, 0x6, 0x4, 0x8, 0xa, 0xe, 0x3, 0x8, 0x2, 0x68, 0xb, 0x613}, {0x7, 0x7, 0x8, 0x5, 0x7, 0x9, 0x3, 0xd8, 0x4, 0x2a, 0xe, 0x6, 0x800}], 0x81}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) lchown(&(0x7f0000000080)='./cgroup/file0\x00', 0x0, r4) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) 7.547537923s ago: executing program 4 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) epoll_create1(0x80000) getdents64(r5, &(0x7f0000000000)=""/134, 0x86) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, 0x12, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x6, 0xc1, 0x5, {0x4e20, 0x4e23, [0x0, 0xfffffff3, 0xff, 0xffffff01], [0x1, 0x4ec, 0x8, 0x8], r7, [0x3, 0x9]}, 0x1, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "54fa57e3dc20588b6fe822d5a349e1d053d7e96443b3cbca8113aeff064fec58c3c8af9977eec801d5605e9d0018e2570a630d380dc948de10cf05414b0e72a6e6d7c8587d8532ddad77ae7203bb8eadf663a2ed57edf883910c572e22ec3a035d1918cf13b9ddd0750219637630074f320060b2d60a1f873fa94ce8a5ef3a1558a911e10e0cf3bb5898"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000ffff7ff4ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e00500000000000008000400e005000008001b0000000000"], 0x30}}, 0x0) 7.54705011s ago: executing program 3 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', 0x0}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.531849962s ago: executing program 0 (id=1333): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7fffffff}, 0x2, 0x31, 0x1, 0x1, 0x6, 'syz0\x00', "3f3dc8de89a0fdd75584f7853c2ccba43675a00469b4e9ce561e2a5f6ee7842b", "ffbe46cc321af43e4f5809f086de62956e094a46b9b2c217b30674e842755360", [{0x167c, 0x0, {0x2, 0x6}}, {0xfffd, 0x100, {0x3, 0x8001}}, {0x8000, 0xe6d5, {0x3, 0x9}}, {0x32a1, 0x1, {0x1, 0x7}}, {0x7, 0x1000, {0x3, 0xfffffff9}}, {0x4, 0x81, {0x3, 0x5}}, {0x7ff, 0xf, {0x2, 0x8}}, {0x401, 0xe229, {0x0, 0x483}}, {0x1, 0x9, {0x2, 0x2}}, {0x401, 0xfffb, {0x3, 0x8}}, {0x1000, 0x24}, {0x8, 0x7, {0x2, 0x3}}, {0xb, 0x0, {0x2, 0x8000}}, {0x3ff, 0x7, {0x3, 0xa91}}, {0x28, 0x2, {0x0, 0x78d}}, {0x4, 0xa, {0x0, 0xa5}}, {0x5, 0x9, {0x0, 0xb7}}, {0x3, 0x1ff, {0x1, 0x401}}, {0x3, 0x2, {0x1, 0x5}}, {0xce27, 0x8}, {0x4, 0x9, {0x2, 0xfffffffc}}, {0x5c00, 0x2, {0x3, 0x4}}, {0x1000, 0x76f, {0x1, 0x81}}, {0x9, 0x401, {0x0, 0x5}}, {0x3, 0xa, {0x1, 0x2}}, {0xfff9, 0xfe78, {0x3, 0x1dde}}, {0x2b8, 0x4, {0x1, 0xcf}}, {0x8, 0x2, {0x1, 0x411}}, {0x6, 0xc, {0x2, 0x9}}, {0x3, 0x5, {0x0, 0x10000}}, {0x6, 0x6, {0x3, 0xb83}}, {0x6, 0x9, {0x2, 0x9}}, {0xef8e, 0xfffb, {0x1, 0xffff}}, {0x6, 0xd519, {0x3}}, {0x1, 0x8, {0x1, 0x4}}, {0x2, 0x6, {0x0, 0x80}}, {0x5, 0x1, {0x1, 0x969}}, {0x7, 0x9, {0x3, 0x4}}, {0xf, 0xe0b, {0x0, 0x8b}}, {0x5, 0xaa3c, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x3, 0x9, 0x4, 0x8, 0x27, 'syz0\x00', "2cbd8ff7ee1f79bc8e4e947da3c620ffca3cd9c6c84193d0327c360a6fc86a45", "ecb24079b306a40d31f6c009bd7b2576fbfd36c5a259952ac1e5f28f414cef29", [{0x4, 0x2, {0x0, 0x2}}, {0x7ff, 0x5, {0x0, 0x66}}, {0x8, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x1, 0x1}}, {0x53, 0x9, {0x3, 0x7f}}, {0x238, 0x8, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x5}}, {0xffff, 0x7fff, {0x0, 0x2}}, {0x50c, 0xfcd, {0x2, 0xffffff33}}, {0x1, 0x4, {0x3, 0x7}}, {0xf01, 0x0, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x81, {0x3}}, {0x9, 0x6e, {0x2, 0x6}}, {0x80, 0x1, {0x2, 0x7}}, {0xf, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0xfff9, 0x9, {0x3, 0x1}}, {0x5d21, 0x1e88, {0x2, 0x3}}, {0xbc15, 0x6, {0x3, 0xfffffffc}}, {0x3d04, 0x8, {0x3, 0x8000}}, {0x14, 0x40, {0x0, 0x48}}, {0xed8, 0xc, {0x0, 0x8}}, {0xfffb, 0x7}, {0x6, 0x3ff, {0x1, 0x6}}, {0x3, 0x7, {0x3, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x62b728b2}}, {0x2, 0x4, {0x3, 0x71fe}}, {0x8, 0x7, {0x1, 0xe814}}, {0x8, 0x4, {0x1, 0x8e}}, {0x6, 0x2, {0x1, 0x7fff}}, {0x0, 0x200, {0x1, 0xffff0000}}, {0xfffa, 0x0, {0x3, 0x858}}, {0x9, 0x8001, {0x1, 0x7}}, {0x0, 0x3, {0x1, 0x7}}, {0x9, 0xcfb, {0x3, 0x3341ce0a}}, {0x6, 0x73, {0x0, 0xf}}, {0x79, 0x482, {0x3, 0xe1c}}, {0x4, 0x5, {0x0, 0x3}}, {0x24, 0x5, {0x3, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x880}, 0x20004085) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9b141d1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) getdents64(r2, &(0x7f0000000000)=""/134, 0x86) 7.333210984s ago: executing program 1 (id=1327): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) capset(0x0, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28) gettid() timer_create(0x5, 0x0, &(0x7f0000000140)) listen(0xffffffffffffffff, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x100, 0x2, 0x0, 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r3, 0x7, 0x30}, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 7.173566547s ago: executing program 0 (id=1328): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7}]}) recvmmsg(r3, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r8, &(0x7f0000000a80)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a", 0xae}, {&(0x7f00000004c0)="7c2cbe025ee9322704f45bcead62e3a1a53117e0", 0x14}], 0x2, 0x4739, 0x1) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) 6.715067246s ago: executing program 3 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.227979905s ago: executing program 1 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.423661035s ago: executing program 3 (id=1331): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x3, 0x80001) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) io_submit(r1, 0x0, &(0x7f0000000280)) close_range(r2, r2, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c1}, 0x0) iopl(0x3) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r6 = getpgrp(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) ppoll(0x0, 0x0, &(0x7f0000002d00), &(0x7f0000002d40)={[0x100000001]}, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_LABELS_MASK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) 5.190847965s ago: executing program 0 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) r5 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abcd13ec37d94689c9dc5cae099", 0xe}, {0x0, 0xe00}, {0x0}], 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 5.110360442s ago: executing program 4 (id=1334): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 4.703759529s ago: executing program 1 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) r6 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r6, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abcd13ec37d94689c9dc5cae099", 0xe}, {0x0, 0xe00}, {0x0}], 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 3.934258839s ago: executing program 3 (id=1336): mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x59a, 0x4) socketpair$unix(0x1, 0xbc51861ca70c2d00, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x42060680) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x6, 0x1}) socket(0x15, 0x6, 0x5) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) userfaultfd(0x801) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x0, &(0x7f0000000600)=[{0x5, '\x00', @buffer={"638391fa1b5e124b43175553975a2561ead98593e9060ad61456e06afea3cd65", 0x20}, 0x98}, {0x20, '\x00', @st={0x4, [{0x0, @svalue=0x8}, {0x2, @uvalue=0xb50}, {0x2, @svalue=0x8}]}, 0xe}, {0x58, '\x00', @buffer={"f335f2a95f2639f06213d5007fbb7424bde5c361de6d9c57c7b5b0bc0dc4a01f", 0x20}, 0x7a7ce1c8}]}) r4 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) 3.813447984s ago: executing program 4 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.470349563s ago: executing program 4 (id=1338): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x40}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/162, 0xa2}, 0x4}], 0x2, 0x60010000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendto$inet6(r0, &(0x7f0000000540), 0x0, 0x40, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0xe, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x5, 0x7, 0x4, 0x81, 0x5, 0xf9, 0x40, 0x42, 0x8, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x2}}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x4, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe4) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000004c0)={[{0xbf98, 0x3, 0x64, 0x0, 0x2, 0x80, 0x5b, 0x1, 0x8, 0x8, 0x7, 0x5, 0x4}, {0x4d84, 0x1, 0x6, 0x4, 0x8, 0xa, 0xe, 0x3, 0x8, 0x2, 0x68, 0xb, 0x613}, {0x7, 0x7, 0x8, 0x5, 0x7, 0x9, 0x3, 0xd8, 0x4, 0x2a, 0xe, 0x6, 0x800}], 0x81}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) lchown(&(0x7f0000000080)='./cgroup/file0\x00', r4, r5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) 2.095726268s ago: executing program 0 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet6(0xa, 0x1, 0x0) close(0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.664866308s ago: executing program 4 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x5, 0xfe, 0x7, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0108ffff030000000000000000000200", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=0x0], 0x48}}, 0x4008004) r6 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x800) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002303"], 0x48}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) 1.664251274s ago: executing program 1 (id=1341): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000300)='-:_', 0x3) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000020601f70c7ebd0d1c080000000080000000000000000900020073797a300000000005000400030000000c000300686173683a6970400000000c050005000a0000000500260fc02a0000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 798.524245ms ago: executing program 1 (id=1342): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x1f, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000dc0)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x54e, r4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) r5 = add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000000480), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={'hmac(sha1)\x00'}}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x17d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r3, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000500), 0x0, 0xcc, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0xc2, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000200"/18, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0300000002000000000000000000"], 0x50) syz_open_dev$vim2m(0x0, 0xb, 0x2) syz_ublk_setup_queues(r11, r9, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 425.595657ms ago: executing program 1 (id=1343): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x40}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/162, 0xa2}, 0x4}], 0x2, 0x60010000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendto$inet6(r0, &(0x7f0000000540), 0x0, 0x40, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000100)={0xe, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x5, 0x7, 0x4, 0x81, 0x5, 0xf9, 0x40, 0x42, 0x8, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x2}}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') mmap$IORING_OFF_SQ_RING(0x0, 0x7f, 0x4, 0x10, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000004c0)={[{0xbf98, 0x3, 0x64, 0x0, 0x2, 0x80, 0x5b, 0x1, 0x8, 0x8, 0x7, 0x5, 0x4}, {0x4d84, 0x1, 0x6, 0x4, 0x8, 0xa, 0xe, 0x3, 0x8, 0x2, 0x68, 0xb, 0x613}, {0x7, 0x7, 0x8, 0x5, 0x7, 0x9, 0x3, 0xd8, 0x4, 0x2a, 0xe, 0x6, 0x800}], 0x81}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) lchown(&(0x7f0000000080)='./cgroup/file0\x00', r4, r5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x2, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) 327.384351ms ago: executing program 0 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x11) r6 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r6, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abcd13ec37d94689c9dc5cae099", 0xe}, {0x0, 0xe00}, {0x0}], 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 0s ago: executing program 4 (id=1345): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) kernel console output (not intermixed with test programs): 033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.411376][ T44] audit: type=1326 audit(1789000989.741:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.411522][ T44] audit: type=1326 audit(1789000989.741:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.411704][ T44] audit: type=1326 audit(1789000989.741:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.412061][ T44] audit: type=1326 audit(1789000989.741:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.412206][ T44] audit: type=1326 audit(1789000989.741:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.412455][ T44] audit: type=1326 audit(1789000989.741:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.424222][ T44] audit: type=1326 audit(1789000989.751:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.426006][ T44] audit: type=1326 audit(1789000989.751:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11588 comm="syz.4.1074" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 515.622773][ T3382] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.622799][ T3382] usb 8-1: config 0 has no interface number 0 [ 515.622992][ T3382] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 515.623016][ T3382] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 515.623046][ T3382] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.633816][ T3382] usb 8-1: config 0 descriptor?? [ 515.759849][T11584] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 515.767756][ T6530] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 515.767786][ T6530] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 515.767805][ T6530] usb 6-1: config 14 has no interface number 0 [ 515.767820][ T6530] usb 6-1: config 14 has no interface number 1 [ 515.767878][ T6530] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 515.767899][ T6530] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 515.767923][ T6530] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 515.767947][ T6530] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 515.767971][ T6530] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 515.767995][ T6530] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.768019][ T6530] usb 6-1: config 14 interface 57 has no altsetting 0 [ 515.768035][ T6530] usb 6-1: config 14 interface 228 has no altsetting 0 [ 515.839872][ T3382] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 515.981576][T11595] veth0: entered promiscuous mode [ 516.441557][ T6530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.441586][ T6530] usb 6-1: Product: syz [ 516.441599][ T6530] usb 6-1: Manufacturer: syz [ 516.441612][ T6530] usb 6-1: SerialNumber: syz [ 516.461555][T11595] veth0: left promiscuous mode [ 517.144550][T11602] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 517.176038][ T6530] legousbtower 6-1:14.57: interrupt endpoints not found [ 517.702549][ T6530] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 517.703877][ T6530] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 517.763370][ T816] usb 8-1: USB disconnect, device number 41 [ 518.671571][T11017] IPVS: starting estimator thread 0... [ 518.856854][ T43] usb 6-1: USB disconnect, device number 42 [ 518.918821][ T43] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 518.933207][T11621] IPVS: using max 27 ests per chain, 64800 per kthread [ 521.489464][ T6530] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 522.038150][ T6530] usb 5-1: Using ep0 maxpacket: 16 [ 522.201981][ T6530] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.665755][ T6530] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.665972][ T6530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.666000][ T6530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.666022][ T6530] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 522.690120][ T6530] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.730122][T11649] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 523.048390][ T6530] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.048433][ T6530] usb 5-1: Manufacturer: syz [ 523.108247][ T6530] usb 5-1: config 0 descriptor?? [ 523.530794][ T50] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 524.047653][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 524.047671][ T44] audit: type=1326 audit(1789000998.371:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.047917][ T44] audit: type=1326 audit(1789000998.371:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.048491][ T44] audit: type=1326 audit(1789000998.371:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.048671][ T44] audit: type=1326 audit(1789000998.371:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.048879][ T44] audit: type=1326 audit(1789000998.371:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.049296][ T44] audit: type=1326 audit(1789000998.371:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.049633][ T44] audit: type=1326 audit(1789000998.371:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.4.1091" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 524.153306][ T6530] rc_core: IR keymap rc-hauppauge not found [ 524.153363][ T6530] Registered IR keymap rc-empty [ 524.164018][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.246150][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.269136][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 524.351856][ T6530] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 524.353465][ T6530] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 524.379915][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.482173][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.626479][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.718347][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.781972][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.973693][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.974083][ T50] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 524.982172][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.005319][ T50] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 525.005379][ T50] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 525.005544][ T50] usb 6-1: config 14 has no interface number 0 [ 525.005708][ T50] usb 6-1: config 14 has no interface number 1 [ 525.006793][ T50] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 525.008951][ T50] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 525.009182][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 525.019245][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 525.019377][ T50] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 525.019438][ T50] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.019500][ T50] usb 6-1: config 14 interface 57 has no altsetting 0 [ 525.019671][ T50] usb 6-1: config 14 interface 228 has no altsetting 0 [ 525.117652][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.279251][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.345592][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.429683][ T6530] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 525.505913][ T6530] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 525.505940][ T6530] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 525.551357][ T6530] usb 5-1: USB disconnect, device number 40 [ 525.769042][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.769069][ T50] usb 6-1: Product: syz [ 525.769082][ T50] usb 6-1: Manufacturer: syz [ 525.769095][ T50] usb 6-1: SerialNumber: syz [ 526.445742][ T50] legousbtower 6-1:14.57: interrupt endpoints not found [ 526.732101][ T50] legousbtower 6-1:14.228: get version request failed: -71 [ 526.732218][ T50] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 526.736249][ T50] usb 6-1: USB disconnect, device number 43 [ 527.126968][T11675] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 527.126991][T11675] overlayfs: failed to set xattr on upper [ 527.126998][T11675] overlayfs: ...falling back to redirect_dir=nofollow. [ 527.127007][T11675] overlayfs: ...falling back to metacopy=off. [ 527.127014][T11675] overlayfs: ...falling back to index=off. [ 527.127021][T11675] overlayfs: ...falling back to uuid=null. [ 527.133529][T11688] netlink: 'syz.4.1096': attribute type 3 has an invalid length. [ 527.145735][T11688] FAULT_INJECTION: forcing a failure. [ 527.145735][T11688] name failslab, interval 1, probability 0, space 0, times 0 [ 527.145772][T11688] CPU: 0 UID: 0 PID: 11688 Comm: syz.4.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.145803][T11688] Tainted: [L]=SOFTLOCKUP [ 527.145809][T11688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.145820][T11688] Call Trace: [ 527.145827][T11688] [ 527.145838][T11688] dump_stack_lvl+0x100/0x190 [ 527.145873][T11688] should_fail_ex.cold+0x5/0xa [ 527.145904][T11688] should_failslab+0xc2/0x120 [ 527.145983][T11688] __kmalloc_noprof+0xfc/0x840 [ 527.146035][T11688] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 527.146068][T11688] kvm_io_bus_register_dev+0x1d2/0x710 [ 527.146100][T11688] kvm_pic_init+0x22f/0x380 [ 527.146134][T11688] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 527.146157][T11688] ? is_bpf_text_address+0x94/0x1a0 [ 527.146187][T11688] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 527.146217][T11688] ? __kernel_text_address+0xd/0x30 [ 527.146244][T11688] ? unwind_get_return_address+0x59/0xa0 [ 527.146272][T11688] ? __lock_acquire+0x5c0/0x1f40 [ 527.146306][T11688] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 527.146340][T11688] ? look_up_lock_class+0x55/0x120 [ 527.146404][T11688] ? register_lock_class+0x3f/0x7b0 [ 527.146436][T11688] ? find_held_lock+0x2b/0x80 [ 527.146456][T11688] ? ima_match_policy+0x8c4/0x23f0 [ 527.146492][T11688] ? __lock_acquire+0x5c0/0x1f40 [ 527.146537][T11688] ? __lock_acquire+0x5c0/0x1f40 [ 527.146578][T11688] ? __lock_acquire+0x5c0/0x1f40 [ 527.146612][T11688] ? lock_acquire+0x1d1/0x380 [ 527.146641][T11688] ? unwind_next_frame+0xbd/0x2090 [ 527.146671][T11688] ? lock_acquire+0x1d1/0x380 [ 527.146696][T11688] ? is_bpf_text_address+0x25/0x1a0 [ 527.146726][T11688] ? find_held_lock+0x2b/0x80 [ 527.146748][T11688] ? is_bpf_text_address+0x8a/0x1a0 [ 527.146774][T11688] ? is_bpf_text_address+0x8a/0x1a0 [ 527.146803][T11688] ? bpf_ksym_find+0x124/0x1c0 [ 527.146826][T11688] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.146853][T11688] ? is_bpf_text_address+0x94/0x1a0 [ 527.146882][T11688] ? kernel_text_address+0x8d/0x100 [ 527.146907][T11688] ? __pfx_widen_string+0x10/0x10 [ 527.146929][T11688] ? __kernel_text_address+0xd/0x30 [ 527.146955][T11688] ? unwind_get_return_address+0x59/0xa0 [ 527.146984][T11688] kvm_vm_ioctl+0x167d/0x42d0 [ 527.147010][T11688] ? tomoyo_path_number_perm+0x46d/0x580 [ 527.147041][T11688] ? stack_trace_save+0x8e/0xc0 [ 527.147063][T11688] ? __pfx_stack_trace_save+0x10/0x10 [ 527.147091][T11688] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 527.147111][T11688] ? __lock_acquire+0x5c0/0x1f40 [ 527.147139][T11688] ? tomoyo_path_number_perm+0x46d/0x580 [ 527.147169][T11688] ? kasan_save_stack+0x3f/0x50 [ 527.147193][T11688] ? kasan_save_stack+0x30/0x50 [ 527.147215][T11688] ? kasan_save_track+0x14/0x30 [ 527.147237][T11688] ? kasan_save_free_info+0x3b/0x70 [ 527.147260][T11688] ? __kasan_slab_free+0x5f/0x80 [ 527.147281][T11688] ? kfree+0x22b/0x6d0 [ 527.147306][T11688] ? tomoyo_path_number_perm+0x46d/0x580 [ 527.147329][T11688] ? security_file_ioctl_compat+0xd3/0x230 [ 527.147353][T11688] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 527.147381][T11688] ? __do_fast_syscall_32+0x13a/0x8b0 [ 527.147407][T11688] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 527.147435][T11688] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 527.147488][T11688] ? kasan_quarantine_put+0x104/0x240 [ 527.147509][T11688] ? lockdep_hardirqs_on+0x7d/0x110 [ 527.147534][T11688] ? find_held_lock+0x2b/0x80 [ 527.147559][T11688] ? tomoyo_path_number_perm+0x28f/0x580 [ 527.147586][T11688] ? tomoyo_path_number_perm+0x28f/0x580 [ 527.147616][T11688] ? tomoyo_path_number_perm+0x188/0x580 [ 527.147643][T11688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 527.147666][T11688] ? futex_wait+0x11e/0x370 [ 527.147696][T11688] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.147722][T11688] ? do_vfs_ioctl+0x226/0x13e0 [ 527.147749][T11688] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.147779][T11688] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 527.147799][T11688] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 527.147816][T11688] ? __fget_files+0x34/0x3d0 [ 527.147836][T11688] ? find_held_lock+0x2b/0x80 [ 527.147855][T11688] ? __fget_files+0x215/0x3d0 [ 527.147872][T11688] ? hook_file_ioctl_common+0x140/0x440 [ 527.147904][T11688] ? __fget_files+0x21f/0x3d0 [ 527.147929][T11688] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 527.147949][T11688] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 527.147980][T11688] __do_fast_syscall_32+0x13a/0x8b0 [ 527.148009][T11688] do_fast_syscall_32+0x32/0x70 [ 527.148035][T11688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.148058][T11688] RIP: 0023:0xf7fe5fec [ 527.148081][T11688] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 527.148091][T11688] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 527.148110][T11688] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000ae60 [ 527.148125][T11688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.148135][T11688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.148145][T11688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.148157][T11688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.148180][T11688] [ 527.997914][T11695] jffs2: notice: (11695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 528.119209][ T44] audit: type=1326 audit(1789001002.451:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.3.1098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 528.119394][ T44] audit: type=1326 audit(1789001002.451:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.3.1098" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 528.748627][T11702] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 528.920381][T11702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.067993][T11704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.068554][T11704] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 529.069099][T11704] bond2: (slave gre1): Error -95 calling set_mac_address [ 529.110914][T11705] gretap1: entered promiscuous mode [ 529.426287][ T5658] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 529.491517][T11705] bond2: (slave gretap1): making interface the new active one [ 529.529822][T11705] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 529.584122][T11702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 529.652358][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 529.829916][T11702] bond2: (slave bond3): Enslaving as an active interface with a down link [ 529.833232][T11715] bond2 (unregistering): (slave gretap1): Releasing active interface [ 529.930199][ T5658] usb 6-1: Using ep0 maxpacket: 32 [ 529.962581][T11715] bond2 (unregistering): (slave bond3): Releasing active interface [ 530.516053][T11721] JFS: discard option not supported on device [ 530.516443][T11721] Mount JFS Failure: -5 [ 530.516456][T11721] jfs_mount failed w/return code = -5 [ 530.701648][ T5658] usb 6-1: unable to get BOS descriptor or descriptor too short [ 530.701696][ T5658] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 530.788440][T11715] bond2 (unregistering): Released all slaves [ 531.017972][ T5658] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 531.018233][ T5658] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 531.018291][ T5658] usb 6-1: config 14 has no interface number 0 [ 531.018398][ T5658] usb 6-1: config 14 has no interface number 1 [ 531.019177][ T5658] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 531.019316][ T5658] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 531.019376][ T5658] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 531.019437][ T5658] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 531.019578][ T5658] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 531.019640][ T5658] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.019701][ T5658] usb 6-1: config 14 interface 57 has no altsetting 0 [ 531.019872][ T5658] usb 6-1: config 14 interface 228 has no altsetting 0 [ 531.666499][ T5658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.666521][ T5658] usb 6-1: Product: syz [ 531.666531][ T5658] usb 6-1: Manufacturer: syz [ 531.666541][ T5658] usb 6-1: SerialNumber: syz [ 532.730882][ T5658] legousbtower 6-1:14.57: interrupt endpoints not found [ 533.003074][ T5658] legousbtower 6-1:14.228: get version request failed: -71 [ 533.003995][ T5658] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 533.215243][ T5658] usb 6-1: USB disconnect, device number 44 [ 533.656148][T11734] Console: switching to colour dummy device 80x25 [ 534.231722][T11733] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 534.428052][T11733] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 534.428205][T11733] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 534.428458][T11733] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 534.428986][T11733] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 534.616441][T11733] pci 0000:00:01.0: Adding to iommu group 1 [ 534.638322][T11733] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 534.638385][T11733] pci 0000:00:01.0: vgaarb: bridge control possible [ 534.638401][T11733] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 534.712676][T11733] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 534.712811][T11733] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 534.714041][T11733] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 534.722450][T11733] [drm] Found bochs VGA, ID 0xb0c5. [ 534.722472][T11733] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 534.738732][T11733] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 535.139795][T11733] Console: switching to colour frame buffer device 160x50 [ 535.202864][T11733] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 536.132040][ T43] libceph: connect (1)[c::]:6789 error -99 [ 536.133430][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 536.171094][ T43] libceph: connect (1)[c::]:6789 error -99 [ 536.171244][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 536.171318][T11756] ceph: No mds server is up or the cluster is laggy [ 536.267809][ T44] audit: type=1326 audit(1789001010.591:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.1113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 536.279301][ T44] audit: type=1326 audit(1789001010.621:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.1113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 536.429187][ T43] libceph: connect (1)[c::]:6789 error -99 [ 536.429341][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 536.545001][ T44] audit: type=1326 audit(1789001010.871:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.545253][ T44] audit: type=1326 audit(1789001010.871:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.545746][ T44] audit: type=1326 audit(1789001010.871:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.545933][ T44] audit: type=1326 audit(1789001010.871:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.546266][ T44] audit: type=1326 audit(1789001010.871:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.557097][ T44] audit: type=1326 audit(1789001010.891:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.557452][ T44] audit: type=1326 audit(1789001010.891:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.557721][ T44] audit: type=1326 audit(1789001010.891:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.0.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 536.888703][T11753] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 536.946552][ T43] libceph: connect (1)[c::]:6789 error -99 [ 536.946706][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 537.036280][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 537.037709][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 537.040477][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 537.041181][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 537.041801][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 538.363413][ T43] libceph: connect (1)[c::]:6789 error -99 [ 538.363665][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 539.089666][T11778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 539.089689][T11778] overlayfs: failed to set xattr on upper [ 539.089696][T11778] overlayfs: ...falling back to redirect_dir=nofollow. [ 539.089702][T11778] overlayfs: ...falling back to metacopy=off. [ 539.089708][T11778] overlayfs: ...falling back to index=off. [ 539.089714][T11778] overlayfs: ...falling back to uuid=null. [ 540.336321][ T5756] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 540.361289][ T5658] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 540.511760][ T5756] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.570284][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.570310][ T5756] usb 8-1: Product: syz [ 540.570323][ T5756] usb 8-1: Manufacturer: syz [ 540.570336][ T5756] usb 8-1: SerialNumber: syz [ 540.869713][ T5658] usb 9-1: Using ep0 maxpacket: 8 [ 541.025808][ T5756] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 541.157418][T11809] JFS: discard option not supported on device [ 541.157653][T11809] Mount JFS Failure: -5 [ 541.157665][T11809] jfs_mount failed w/return code = -5 [ 541.186305][ T5658] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 541.432849][ T44] kauditd_printk_skb: 70 callbacks suppressed [ 541.432871][ T44] audit: type=1326 audit(1789001015.761:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.433067][ T44] audit: type=1326 audit(1789001015.761:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.433470][ T44] audit: type=1326 audit(1789001015.761:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.716319][ T5658] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 541.716348][ T5658] usb 9-1: config 0 has no interface number 0 [ 541.854346][T11792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 541.854535][T11792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.859019][T11792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.859418][ T44] audit: type=1326 audit(1789001016.151:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.859451][ T44] audit: type=1326 audit(1789001016.151:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.865681][ T44] audit: type=1326 audit(1789001016.151:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.865729][ T44] audit: type=1326 audit(1789001016.151:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.865768][ T44] audit: type=1326 audit(1789001016.151:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 541.924384][ T44] audit: type=1326 audit(1789001016.241:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 542.128827][ T5756] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 542.131443][ T5756] ath9k_htc: Failed to initialize the device [ 542.323127][ T44] audit: type=1326 audit(1789001016.571:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11790 comm="syz.3.1121" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 542.370852][ T5756] usb 8-1: ath9k_htc: USB layer deinitialized [ 542.432696][ T5658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.432720][ T5658] usb 9-1: Product: syz [ 542.432734][ T5658] usb 9-1: Manufacturer: syz [ 542.432744][ T5658] usb 9-1: SerialNumber: syz [ 542.440061][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1125'. [ 542.472350][ T5658] usb 9-1: config 0 descriptor?? [ 542.542037][ T1506] usb 8-1: USB disconnect, device number 42 [ 542.945805][ T5658] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 542.945874][ T5658] uvcvideo 9-1:0.31: No valid video chain found. [ 542.946142][ T6116] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 542.991934][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 542.993491][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 542.993732][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 543.038323][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 543.108871][ T5658] usb 9-1: USB disconnect, device number 34 [ 543.604573][ T6116] usb 6-1: Using ep0 maxpacket: 32 [ 543.616124][T11827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 543.923179][T11646] Bluetooth: hci1: command 0x0406 tx timeout [ 543.923339][T11646] Bluetooth: hci2: command 0x0406 tx timeout [ 543.923459][T11646] Bluetooth: hci3: command 0x0406 tx timeout [ 543.996117][ T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 544.416020][ T6116] usb 6-1: unable to get BOS descriptor or descriptor too short [ 544.416065][ T6116] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 544.536579][T11831] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 544.536599][T11831] overlayfs: failed to set xattr on upper [ 544.536606][T11831] overlayfs: ...falling back to redirect_dir=nofollow. [ 544.536612][T11831] overlayfs: ...falling back to metacopy=off. [ 544.536619][T11831] overlayfs: ...falling back to index=off. [ 544.536626][T11831] overlayfs: ...falling back to uuid=null. [ 544.605977][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 544.835749][ T6116] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 544.835776][ T6116] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 544.835793][ T6116] usb 6-1: config 14 has no interface number 0 [ 544.835806][ T6116] usb 6-1: config 14 has no interface number 1 [ 544.835853][ T6116] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 544.835875][ T6116] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 544.835895][ T6116] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 544.835916][ T6116] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 544.835959][ T6116] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 544.835991][ T6116] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.836015][ T6116] usb 6-1: config 14 interface 57 has no altsetting 0 [ 544.836030][ T6116] usb 6-1: config 14 interface 228 has no altsetting 0 [ 545.301374][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 545.301421][ T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 545.577290][ T6116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.577317][ T6116] usb 6-1: Product: syz [ 545.577329][ T6116] usb 6-1: Manufacturer: syz [ 545.662999][ T6116] usb 6-1: can't set config #14, error -71 [ 545.665201][ T6116] usb 6-1: USB disconnect, device number 45 [ 545.666417][ T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 545.666436][ T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 545.666450][ T9] usb 8-1: config 14 has no interface number 0 [ 545.666463][ T9] usb 8-1: config 14 has no interface number 1 [ 545.666511][ T9] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 545.666528][ T9] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 545.666547][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 545.666566][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 545.666586][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 545.666604][ T9] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.666623][ T9] usb 8-1: config 14 interface 57 has no altsetting 0 [ 545.666636][ T9] usb 8-1: config 14 interface 228 has no altsetting 0 [ 546.511387][T11843] JFS: discard option not supported on device [ 546.511602][T11843] Mount JFS Failure: -5 [ 546.511612][T11843] jfs_mount failed w/return code = -5 [ 546.678963][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.678990][ T9] usb 8-1: Product: syz [ 546.679003][ T9] usb 8-1: Manufacturer: syz [ 546.679016][ T9] usb 8-1: SerialNumber: syz [ 546.867999][ T9] usb 8-1: can't set config #14, error -71 [ 546.896145][ T9] usb 8-1: USB disconnect, device number 43 [ 547.034653][T11851] msr: Write to unrecognized MSR 0x1a0 by syz.0.1133 (pid: 11851), tainting CPU_OUT_OF_SPEC. [ 547.034675][T11851] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 547.150142][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 547.150166][ T44] audit: type=1326 audit(1789001021.441:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.3.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 547.150225][ T44] audit: type=1326 audit(1789001021.441:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.3.1134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 548.417646][T11860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 548.758983][ T7474] md_update_sb: can't update sb for read-only array md0 [ 549.199157][T11872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.199311][T11872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.199494][T11872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.394116][ T44] audit: type=1326 audit(1789001023.701:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 549.394174][ T44] audit: type=1326 audit(1789001023.701:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 550.043885][T11893] ip6gretap0: entered promiscuous mode [ 550.297055][ T44] audit: type=1326 audit(1789001024.611:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 550.297280][ T44] audit: type=1326 audit(1789001024.611:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 550.297864][ T44] audit: type=1326 audit(1789001024.611:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 550.298099][ T44] audit: type=1326 audit(1789001024.611:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 550.298529][ T44] audit: type=1326 audit(1789001024.611:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 550.299683][ T44] audit: type=1326 audit(1789001024.611:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 551.011108][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 551.284253][T11646] Bluetooth: hci2: command 0x0406 tx timeout [ 551.284295][T11646] Bluetooth: hci3: command 0x0406 tx timeout [ 551.284616][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 551.578469][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 551.774469][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 551.802325][T11913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1148'. [ 552.116314][ T43] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 552.204396][ T1506] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 552.204697][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 552.204736][ T9] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 552.282338][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 552.285856][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 552.322255][ T43] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 552.331948][ T43] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 552.331973][ T43] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 552.331989][ T43] usb 6-1: config 14 has no interface number 0 [ 552.332002][ T43] usb 6-1: config 14 has no interface number 1 [ 552.332048][ T43] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 552.332066][ T43] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 552.332084][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 552.332105][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 552.332126][ T43] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 552.332147][ T43] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.332168][ T43] usb 6-1: config 14 interface 57 has no altsetting 0 [ 552.332182][ T43] usb 6-1: config 14 interface 228 has no altsetting 0 [ 552.335174][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.335196][ T43] usb 6-1: Product: syz [ 552.335207][ T43] usb 6-1: Manufacturer: syz [ 552.335220][ T43] usb 6-1: SerialNumber: syz [ 552.532069][ T9] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 552.532094][ T9] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 552.532107][ T9] usb 9-1: config 14 has no interface number 0 [ 552.532118][ T9] usb 9-1: config 14 has no interface number 1 [ 552.532158][ T9] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 552.532174][ T9] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 552.532191][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 552.532209][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 552.532227][ T9] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 552.532244][ T9] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.532262][ T9] usb 9-1: config 14 interface 57 has no altsetting 0 [ 552.532275][ T9] usb 9-1: config 14 interface 228 has no altsetting 0 [ 552.755672][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 552.755689][ T44] audit: type=1326 audit(1789001027.061:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 552.755852][ T44] audit: type=1326 audit(1789001027.061:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 552.821285][ T43] legousbtower 6-1:14.57: interrupt endpoints not found [ 552.907072][ T1506] usb 5-1: Using ep0 maxpacket: 32 [ 553.148807][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.151983][ T9] usb 9-1: Product: syz [ 553.152050][ T9] usb 9-1: Manufacturer: syz [ 553.152112][ T9] usb 9-1: SerialNumber: syz [ 553.322955][ T43] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 553.325084][ T43] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 553.326382][T11818] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 553.387981][ T1506] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.390677][ T1506] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 553.693508][ T44] audit: type=1326 audit(1789001028.031:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.1150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 553.693573][ T44] audit: type=1326 audit(1789001028.031:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.4.1150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 553.842384][ T9] usb 9-1: can't set config #14, error -71 [ 553.843884][ T9] usb 9-1: USB disconnect, device number 35 [ 553.856478][ T1506] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 553.856506][ T1506] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 553.856525][ T1506] usb 5-1: config 14 has no interface number 0 [ 553.856540][ T1506] usb 5-1: config 14 has no interface number 1 [ 553.856590][ T1506] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 553.856613][ T1506] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 553.856637][ T1506] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 553.856662][ T1506] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 553.856687][ T1506] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 553.856711][ T1506] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.856733][ T1506] usb 5-1: config 14 interface 57 has no altsetting 0 [ 553.856749][ T1506] usb 5-1: config 14 interface 228 has no altsetting 0 [ 554.213415][T11818] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 554.238457][ T5658] usb 6-1: USB disconnect, device number 46 [ 554.243396][ T5658] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 554.589066][ T1506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.589170][ T1506] usb 5-1: Product: syz [ 554.589264][ T1506] usb 5-1: Manufacturer: syz [ 554.589364][ T1506] usb 5-1: SerialNumber: syz [ 554.821516][ T1506] usb 5-1: can't set config #14, error -71 [ 554.822762][ T1506] usb 5-1: USB disconnect, device number 41 [ 555.176393][T11818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.176416][T11818] usb 8-1: Product: syz [ 555.176425][T11818] usb 8-1: Manufacturer: syz [ 555.176434][T11818] usb 8-1: SerialNumber: syz [ 555.475687][T11818] usb 8-1: USB2VGA dongle found at address 44 [ 555.478095][T11818] usb 8-1: Allocated 8 output buffers [ 555.601337][T11940] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1154'. [ 555.621990][ T44] audit: type=1326 audit(1789001029.921:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.622039][ T44] audit: type=1326 audit(1789001029.921:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.622076][ T44] audit: type=1326 audit(1789001029.921:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.623788][ T44] audit: type=1326 audit(1789001029.921:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.623831][ T44] audit: type=1326 audit(1789001029.921:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.623865][ T44] audit: type=1326 audit(1789001029.921:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.3.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 555.715509][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 555.721015][T11940] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1154'. [ 555.778563][T11915] netlink: 'syz.3.1149': attribute type 30 has an invalid length. [ 557.260634][T11957] kAFS: unable to lookup cell '/,c¾ûL' [ 557.947255][T11818] usb 8-1: Failed to early initialize device [ 557.969064][T11818] usb 8-1: USB disconnect, device number 44 [ 558.132047][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.348095][T11985] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1164'. [ 559.392202][T11985] syzkaller1: entered promiscuous mode [ 559.392225][T11985] syzkaller1: entered allmulticast mode [ 560.593115][T11995] Console: switching to colour dummy device 80x25 [ 561.307597][T11997] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 561.384526][T11997] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 561.384673][T11997] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 561.384906][T11997] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 561.385445][T11997] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 561.536220][T11997] pci 0000:00:01.0: Adding to iommu group 1 [ 561.864945][T11997] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 561.864970][T11997] pci 0000:00:01.0: vgaarb: bridge control possible [ 561.864985][T11997] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 562.061402][T11997] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 562.061575][T11997] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 562.062939][T11997] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 562.164463][T11997] [drm] Found bochs VGA, ID 0xb0c5. [ 562.164481][T11997] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 562.166351][T11997] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 562.246709][T12012] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 562.249477][T12014] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 562.329671][T12014] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 562.849258][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'. [ 563.052503][ T44] kauditd_printk_skb: 37 callbacks suppressed [ 563.052520][ T44] audit: type=1326 audit(1789001037.391:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12020 comm="syz.0.1173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 563.052694][ T44] audit: type=1326 audit(1789001037.391:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12020 comm="syz.0.1173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 563.055103][ T44] audit: type=1326 audit(1789001037.391:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.3.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 563.110058][ T44] audit: type=1326 audit(1789001037.411:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.3.1171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 564.264364][T12037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1175'. [ 565.033602][ T5658] libceph: connect (1)[c::]:6789 error -101 [ 565.033741][ T5658] libceph: mon0 (1)[c::]:6789 connect error [ 565.037927][T12041] ceph: No mds server is up or the cluster is laggy [ 565.047871][T12044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.048067][T12044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.048191][T12044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.362430][ T5658] libceph: connect (1)[c::]:6789 error -101 [ 565.362607][ T5658] libceph: mon0 (1)[c::]:6789 connect error [ 565.698976][T12052] jffs2: notice: (12052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 566.122300][ T44] audit: type=1326 audit(1789001040.451:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.122425][ T44] audit: type=1326 audit(1789001040.451:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.123047][ T44] audit: type=1326 audit(1789001040.451:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.123237][ T44] audit: type=1326 audit(1789001040.451:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.123480][ T44] audit: type=1326 audit(1789001040.451:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.123992][ T44] audit: type=1326 audit(1789001040.451:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12060 comm="syz.1.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 566.476412][ T43] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 566.674723][ T43] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 566.675740][ T43] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 135 [ 566.678009][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.678032][ T43] usb 9-1: Product: syz [ 566.678043][ T43] usb 9-1: Manufacturer: syz [ 566.678056][ T43] usb 9-1: SerialNumber: syz [ 566.683651][T12056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 567.139142][ T43] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 567.145803][ T43] usb 9-1: USB disconnect, device number 36 [ 567.151729][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 567.151787][ T5757] Bluetooth: hci1: command 0x0406 tx timeout [ 567.151789][ T67] Bluetooth: hci3: command 0x0406 tx timeout [ 567.155524][ T43] usblp0: removed [ 567.439934][T12069] JFS: discard option not supported on device [ 567.440179][T12069] Mount JFS Failure: -5 [ 567.440190][T12069] jfs_mount failed w/return code = -5 [ 567.687441][ T5658] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 568.154130][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 568.154152][ T44] audit: type=1326 audit(1789001042.481:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.154205][ T44] audit: type=1326 audit(1789001042.481:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.212601][ T44] audit: type=1326 audit(1789001042.481:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.212793][ T44] audit: type=1326 audit(1789001042.481:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.212975][ T44] audit: type=1326 audit(1789001042.481:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.213157][ T44] audit: type=1326 audit(1789001042.481:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.213336][ T44] audit: type=1326 audit(1789001042.481:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.213375][ T44] audit: type=1326 audit(1789001042.481:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.213558][ T44] audit: type=1326 audit(1789001042.481:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.213597][ T44] audit: type=1326 audit(1789001042.481:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 568.409350][ T5658] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.757164][ T5658] usb 8-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 568.757223][ T5658] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.757245][ T5658] usb 8-1: config 0 interface 0 has no altsetting 0 [ 568.820224][T12089] jffs2: notice: (12089) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 569.403833][ T5658] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 569.403859][ T5658] usb 8-1: Product: syz [ 569.403872][ T5658] usb 8-1: Manufacturer: syz [ 569.403883][ T5658] usb 8-1: SerialNumber: syz [ 569.406195][ T5658] usb 8-1: config 0 descriptor?? [ 569.547842][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.547907][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.183179][ T5658] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 570.283836][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 570.785967][T12118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1194'. [ 571.322135][T12123] JFS: discard option not supported on device [ 571.322308][T12123] Mount JFS Failure: -5 [ 571.322316][T12123] jfs_mount failed w/return code = -5 [ 571.672076][ T1506] usb 8-1: USB disconnect, device number 45 [ 572.955419][T12151] ubi0: attaching mtd0 [ 572.962556][T12151] ubi0: scanning is finished [ 572.962606][T12151] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 573.128557][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 573.857766][T12161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.857998][T12161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.858172][T12161] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.416319][ T31] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 574.700080][ T5658] libceph: connect (1)[c::]:6789 error -101 [ 574.700248][ T5658] libceph: mon0 (1)[c::]:6789 connect error [ 574.736456][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 574.738801][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.738839][ T31] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 574.739965][ T31] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 574.739985][ T31] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 574.740002][ T31] usb 6-1: config 14 has no interface number 0 [ 574.740015][ T31] usb 6-1: config 14 has no interface number 1 [ 574.740059][ T31] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 574.740078][ T31] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 574.740099][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 574.740120][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 574.740142][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 574.740163][ T31] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.740185][ T31] usb 6-1: config 14 interface 57 has no altsetting 0 [ 574.740199][ T31] usb 6-1: config 14 interface 228 has no altsetting 0 [ 574.743091][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.743136][ T31] usb 6-1: Product: syz [ 574.743149][ T31] usb 6-1: Manufacturer: syz [ 574.743161][ T31] usb 6-1: SerialNumber: syz [ 574.773540][T12175] ceph: No mds server is up or the cluster is laggy [ 574.876058][T12151] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 574.967894][ T5658] libceph: connect (1)[c::]:6789 error -101 [ 574.968059][ T5658] libceph: mon0 (1)[c::]:6789 connect error [ 575.177272][ T31] legousbtower 6-1:14.57: interrupt endpoints not found [ 575.607332][ T31] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 575.608959][ T31] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 575.908967][T11646] Bluetooth: hci2: command 0x0406 tx timeout [ 575.909012][T11646] Bluetooth: hci3: command 0x0406 tx timeout [ 575.962016][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 576.228141][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.228467][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.433495][ T43] usb 6-1: USB disconnect, device number 47 [ 576.439949][ T43] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 577.048320][ T5829] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.048356][ T5829] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.048385][ T5829] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.048403][ T5829] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.048426][ T5829] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.048443][ T5829] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.048466][ T5829] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.048483][ T5829] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.088172][T12198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'. [ 577.423422][ T5658] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 577.935973][ T5658] usb 9-1: Using ep0 maxpacket: 32 [ 578.146504][ T31] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 578.399968][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 578.400015][ T31] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 578.401378][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.401399][ T31] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 578.401450][ T31] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.403981][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.404004][ T31] usb 6-1: Product: syz [ 578.404016][ T31] usb 6-1: Manufacturer: syz [ 578.404028][ T31] usb 6-1: SerialNumber: syz [ 578.632923][ T5658] usb 9-1: unable to get BOS descriptor or descriptor too short [ 578.632973][ T5658] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 578.683082][T12208] ip6t_rt: too many addresses specified [ 579.282725][ T5658] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 579.282751][ T5658] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 579.282768][ T5658] usb 9-1: config 14 has no interface number 0 [ 579.282782][ T5658] usb 9-1: config 14 has no interface number 1 [ 579.282830][ T5658] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 579.282848][ T5658] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 579.282868][ T5658] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 579.282888][ T5658] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 579.282909][ T5658] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 579.282938][ T5658] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.282959][ T5658] usb 9-1: config 14 interface 57 has no altsetting 0 [ 579.282973][ T5658] usb 9-1: config 14 interface 228 has no altsetting 0 [ 579.905908][ T5658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.906006][ T5658] usb 9-1: Product: syz [ 579.906062][ T5658] usb 9-1: Manufacturer: syz [ 579.910264][ T5658] usb 9-1: SerialNumber: syz [ 580.609260][ T5658] legousbtower 9-1:14.57: interrupt endpoints not found [ 580.874186][ T5658] legousbtower 9-1:14.228: get version request failed: -71 [ 580.874311][ T5658] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 580.901385][ T5658] usb 9-1: USB disconnect, device number 37 [ 581.434469][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 581.434492][ T44] audit: type=1326 audit(1789001055.591:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 581.434537][ T44] audit: type=1326 audit(1789001055.591:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12227 comm="syz.4.1212" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 581.974491][ T44] audit: type=1326 audit(1789001056.291:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.4.1215" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 581.974804][ T44] audit: type=1326 audit(1789001056.291:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.1.1214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 581.974975][ T44] audit: type=1326 audit(1789001056.291:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.1.1214" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 582.088935][ T44] audit: type=1326 audit(1789001056.361:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.4.1215" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 582.138803][ T31] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 582.144142][ T31] usb 6-1: USB disconnect, device number 48 [ 582.234923][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 583.397176][T12247] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.577068][T12252] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 583.577449][T12252] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 584.452623][T12255] loop5: detected capacity change from 0 to 6 [ 584.500196][T12255] Dev loop5: unable to read RDB block 6 [ 584.500241][T12255] loop5: unable to read partition table [ 584.500431][T12255] loop5: partition table beyond EOD, truncated [ 584.500542][T12255] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 584.794205][T12261] UDC core: g1: couldn't find an available UDC or it's busy [ 586.003073][ T44] audit: type=1326 audit(1789001060.301:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.4.1224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.070563][ T44] audit: type=1326 audit(1789001060.381:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12279 comm="syz.4.1224" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 586.319310][ T44] audit: type=1326 audit(1789001060.651:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.1.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 586.319793][ T44] audit: type=1326 audit(1789001060.651:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.1.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 586.768805][T12285] kvm [12284]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 587.025033][ T3382] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 587.311265][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 587.311285][ T44] audit: type=1326 audit(1789001061.641:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.311560][ T44] audit: type=1326 audit(1789001061.641:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.313851][ T44] audit: type=1326 audit(1789001061.641:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.314171][ T44] audit: type=1326 audit(1789001061.641:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.314360][ T44] audit: type=1326 audit(1789001061.641:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.315074][ T44] audit: type=1326 audit(1789001061.641:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.315560][ T44] audit: type=1326 audit(1789001061.641:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.315772][ T44] audit: type=1326 audit(1789001061.641:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.316410][ T44] audit: type=1326 audit(1789001061.641:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 587.316942][ T44] audit: type=1326 audit(1789001061.641:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12295 comm="syz.0.1228" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 587.319857][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 587.965391][ T3382] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 588.025446][T12299] netlink: 'syz.1.1229': attribute type 4 has an invalid length. [ 588.025468][T12299] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1229'. [ 588.366704][ T5756] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 588.578899][ T5756] usb 8-1: Using ep0 maxpacket: 32 [ 588.604650][ T5756] usb 8-1: unable to get BOS descriptor or descriptor too short [ 588.604692][ T5756] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 588.648471][ T5756] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 588.648524][ T5756] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 588.648619][ T5756] usb 8-1: config 14 has no interface number 0 [ 588.648673][ T5756] usb 8-1: config 14 has no interface number 1 [ 588.648974][ T5756] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 588.649030][ T5756] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 588.649160][ T5756] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 588.649250][ T5756] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 588.649356][ T5756] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 588.649918][ T5756] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.650160][ T5756] usb 8-1: config 14 interface 57 has no altsetting 0 [ 588.650212][ T5756] usb 8-1: config 14 interface 228 has no altsetting 0 [ 588.954663][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.954759][ T5756] usb 8-1: Product: syz [ 588.954847][ T5756] usb 8-1: Manufacturer: syz [ 588.954893][ T5756] usb 8-1: SerialNumber: syz [ 589.156209][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 589.156329][T12306] bridge_slave_1: left allmulticast mode [ 589.156350][T12306] bridge_slave_1: left promiscuous mode [ 589.160873][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.495632][ T5756] legousbtower 8-1:14.57: interrupt endpoints not found [ 589.905317][ T5756] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 589.910511][ T5756] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 590.213286][T12306] bridge_slave_0: left allmulticast mode [ 590.213313][T12306] bridge_slave_0: left promiscuous mode [ 590.213522][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.327798][ T3382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.327825][ T3382] usb 9-1: Product: syz [ 590.327837][ T3382] usb 9-1: Manufacturer: syz [ 590.434236][ T3382] usb 9-1: can't set config #1, error -71 [ 590.439958][ T3382] usb 9-1: USB disconnect, device number 38 [ 590.441423][ T5754] udevd[5754]: setting mode of /dev/bus/usb/009/038 to 020664 failed: No such file or directory [ 590.441498][ T5754] udevd[5754]: setting owner of /dev/bus/usb/009/038 to uid=0, gid=0 failed: No such file or directory [ 590.660867][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 591.035761][ T5658] usb 8-1: USB disconnect, device number 46 [ 591.054429][ T5658] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 593.348815][T12370] JFS: discard option not supported on device [ 593.349061][T12370] Mount JFS Failure: -5 [ 593.349071][T12370] jfs_mount failed w/return code = -5 [ 593.523778][ T44] kauditd_printk_skb: 51 callbacks suppressed [ 593.523797][ T44] audit: type=1326 audit(1789001067.821:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.523835][ T44] audit: type=1326 audit(1789001067.821:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.866722][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 593.975428][ T44] audit: type=1326 audit(1789001068.241:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.975476][ T44] audit: type=1326 audit(1789001068.241:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.975510][ T44] audit: type=1326 audit(1789001068.241:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.975544][ T44] audit: type=1326 audit(1789001068.291:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.975576][ T44] audit: type=1326 audit(1789001068.291:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 593.975609][ T44] audit: type=1326 audit(1789001068.291:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 594.217366][ T44] audit: type=1326 audit(1789001068.511:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 594.217412][ T44] audit: type=1326 audit(1789001068.511:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.4.1239" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 594.326164][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 594.880749][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 595.685435][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 596.027109][ T3382] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 596.586124][ T3382] usb 9-1: Using ep0 maxpacket: 32 [ 597.525666][ T3382] usb 9-1: unable to get BOS descriptor or descriptor too short [ 597.526454][ T3382] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 598.087525][ T3382] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 598.087552][ T3382] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 598.087569][ T3382] usb 9-1: config 14 has no interface number 0 [ 598.087583][ T3382] usb 9-1: config 14 has no interface number 1 [ 598.087648][ T3382] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 598.087667][ T3382] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 598.087689][ T3382] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 598.087710][ T3382] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 598.087734][ T3382] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 598.087756][ T3382] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.087778][ T3382] usb 9-1: config 14 interface 57 has no altsetting 0 [ 598.087793][ T3382] usb 9-1: config 14 interface 228 has no altsetting 0 [ 599.310495][ T3382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.310560][ T3382] usb 9-1: Product: syz [ 599.310890][ T3382] usb 9-1: Manufacturer: syz [ 599.475129][ T3382] usb 9-1: can't set config #14, error -71 [ 599.512069][ T3382] usb 9-1: USB disconnect, device number 39 [ 600.796556][ T44] kauditd_printk_skb: 26 callbacks suppressed [ 600.796577][ T44] audit: type=1326 audit(1789001075.121:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.796623][ T44] audit: type=1326 audit(1789001075.121:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.797183][ T44] audit: type=1326 audit(1789001075.121:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.797248][ T44] audit: type=1326 audit(1789001075.121:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.797291][ T44] audit: type=1326 audit(1789001075.121:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.797617][ T44] audit: type=1326 audit(1789001075.121:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.798555][ T44] audit: type=1326 audit(1789001075.121:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.799453][ T44] audit: type=1326 audit(1789001075.121:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 600.800410][ T44] audit: type=1326 audit(1789001075.121:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.1.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 601.178788][ T44] audit: type=1326 audit(1789001075.511:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.3.1258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 601.590898][ T5551] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 601.737287][ T5551] usb 6-1: Using ep0 maxpacket: 8 [ 601.742338][ T5551] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 601.755898][ T5551] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 601.757068][ T5551] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 601.757220][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.757534][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.757626][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.757887][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.758244][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 601.758269][ T5551] usb 6-1: config 168 interface 0 has no altsetting 0 [ 601.775586][ T5551] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 601.775726][ T5551] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 601.775984][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.776082][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.776940][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.776999][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.777093][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 601.777206][ T5551] usb 6-1: config 168 interface 0 has no altsetting 0 [ 601.852377][ T5551] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 601.852411][ T5551] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 601.852446][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 601.852468][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 601.852489][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 601.852509][ T5551] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 601.852531][ T5551] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 601.852554][ T5551] usb 6-1: config 168 interface 0 has no altsetting 0 [ 601.877036][ T5551] usb 6-1: string descriptor 0 read error: -22 [ 601.877158][ T5551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.087407][ T5551] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.349592][T12452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1261'. [ 602.422978][T11818] usb 6-1: USB disconnect, device number 49 [ 602.662272][T12442] comedi comedi3: comedi_config --init_data is deprecated [ 602.670910][T12442] UDC core: g1: couldn't find an available UDC or it's busy [ 603.416246][ T5551] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 603.694642][ T5551] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 603.699022][ T5551] usb 9-1: config 0 has no interfaces? [ 603.717142][ T5551] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.717163][ T5551] usb 9-1: Product: syz [ 603.717202][ T5551] usb 9-1: Manufacturer: syz [ 603.717212][ T5551] usb 9-1: SerialNumber: syz [ 603.727182][ T5551] usb 9-1: config 0 descriptor?? [ 604.199936][T12473] UDC core: g1: couldn't find an available UDC or it's busy [ 604.859492][T12479] kvm [12478]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 605.340318][ T3382] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 605.460198][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 606.038888][ T3382] usb 8-1: Using ep0 maxpacket: 8 [ 606.141843][ T3382] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 606.483768][ T6116] usb 9-1: USB disconnect, device number 40 [ 606.491610][ T3382] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.491633][ T3382] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.674594][T12495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1273'. [ 606.680996][ T44] kauditd_printk_skb: 16 callbacks suppressed [ 606.681014][ T44] audit: type=1326 audit(1789001081.011:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.704453][ T44] audit: type=1326 audit(1789001081.031:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.704524][ T44] audit: type=1326 audit(1789001081.031:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.705264][ T44] audit: type=1326 audit(1789001081.031:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.705304][ T44] audit: type=1326 audit(1789001081.031:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.705337][ T44] audit: type=1326 audit(1789001081.031:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.705680][ T44] audit: type=1326 audit(1789001081.031:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12491 comm="syz.4.1272" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 606.819302][T12492] kvm [12491]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 606.907574][ T5756] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 607.056331][ T5756] usb 6-1: Using ep0 maxpacket: 32 [ 607.058660][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 607.058698][ T5756] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 607.059662][ T5756] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 607.059684][ T5756] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 607.059701][ T5756] usb 6-1: config 14 has no interface number 0 [ 607.059715][ T5756] usb 6-1: config 14 has no interface number 1 [ 607.059765][ T5756] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 607.059792][ T5756] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 607.059814][ T5756] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 607.059837][ T5756] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 607.059861][ T5756] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 607.059881][ T5756] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.059903][ T5756] usb 6-1: config 14 interface 57 has no altsetting 0 [ 607.059917][ T5756] usb 6-1: config 14 interface 228 has no altsetting 0 [ 607.061915][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.061932][ T5756] usb 6-1: Product: syz [ 607.061942][ T5756] usb 6-1: Manufacturer: syz [ 607.061951][ T5756] usb 6-1: SerialNumber: syz [ 607.249862][ T3382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.249997][ T3382] usb 8-1: Product: syz [ 607.250291][ T3382] usb 8-1: Manufacturer: syz [ 607.250683][ T3382] usb 8-1: SerialNumber: syz [ 607.413742][ T3382] usb 8-1: config 0 descriptor?? [ 607.513219][ T5756] legousbtower 6-1:14.57: interrupt endpoints not found [ 607.737730][T12497] netlink: 'syz.4.1274': attribute type 11 has an invalid length. [ 607.831935][T12497] bond2: option ad_actor_sys_prio: invalid value (0) [ 607.831961][T12497] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 607.865272][T12497] bond2 (unregistering): Released all slaves [ 607.886512][ T26] usb 8-1: USB disconnect, device number 47 [ 607.966403][ T5756] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 607.970801][T12499] can: request_module (can-proto-3) failed. [ 607.993579][ T5756] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 608.129211][ T44] audit: type=1326 audit(1789001082.461:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 608.130645][ T44] audit: type=1326 audit(1789001082.461:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 608.130687][ T44] audit: type=1326 audit(1789001082.461:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12502 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 608.774615][T12512] jffs2: notice: (12512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 608.916649][ T816] usb 6-1: USB disconnect, device number 50 [ 608.986284][ T816] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 610.037261][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 610.314045][T12522] Mount JFS Failure: -5 [ 610.314063][T12522] jfs_mount failed w/return code = -5 [ 610.518700][T12526] JFS: discard option not supported on device [ 610.518972][T12526] Mount JFS Failure: -5 [ 610.518984][T12526] jfs_mount failed w/return code = -5 [ 611.057224][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 611.116138][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 611.716336][T12546] JFS: discard option not supported on device [ 611.716570][T12546] Mount JFS Failure: -5 [ 611.716581][T12546] jfs_mount failed w/return code = -5 [ 612.831909][T12553] jffs2: notice: (12553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 613.361711][ T44] kauditd_printk_skb: 3 callbacks suppressed [ 613.361732][ T44] audit: type=1326 audit(1789001087.681:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12556 comm="syz.3.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 613.635152][ T44] audit: type=1326 audit(1789001087.921:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12556 comm="syz.3.1288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 614.253432][ T44] audit: type=1326 audit(1789001088.591:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.253668][ T44] audit: type=1326 audit(1789001088.591:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.254276][ T44] audit: type=1326 audit(1789001088.591:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.254457][ T44] audit: type=1326 audit(1789001088.591:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.254814][ T44] audit: type=1326 audit(1789001088.591:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.255190][ T44] audit: type=1326 audit(1789001088.591:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.255370][ T44] audit: type=1326 audit(1789001088.591:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.255773][ T44] audit: type=1326 audit(1789001088.591:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.0.1290" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 614.760753][T12567] JFS: discard option not supported on device [ 614.760955][T12567] Mount JFS Failure: -5 [ 614.760965][T12567] jfs_mount failed w/return code = -5 [ 615.597331][T12583] ima: policy update completed [ 615.690406][T12580] nbd0: detected capacity change from 0 to 63 [ 617.156369][ T816] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 617.337950][ T816] usb 8-1: Using ep0 maxpacket: 32 [ 617.357865][ T816] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 617.381202][ T816] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 617.381227][ T816] usb 8-1: config 0 has no interface number 0 [ 617.381296][ T816] usb 8-1: config 0 interface 12 has no altsetting 0 [ 617.386322][ T816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.386344][ T816] usb 8-1: Product: syz [ 617.386357][ T816] usb 8-1: Manufacturer: syz [ 617.386370][ T816] usb 8-1: SerialNumber: syz [ 617.388606][ T816] usb 8-1: config 0 descriptor?? [ 617.658278][T12605] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 617.770350][T12605] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 617.770495][T12605] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 617.770721][T12605] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 617.771227][T12605] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 617.776731][T12605] pci 0000:00:01.0: Adding to iommu group 1 [ 617.787457][T12605] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 617.787483][T12605] pci 0000:00:01.0: vgaarb: bridge control possible [ 617.787497][T12605] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 617.819404][T12605] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 617.845789][T12605] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 617.847082][T12605] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 617.855654][T12605] [drm] Found bochs VGA, ID 0xb0c5. [ 617.855673][T12605] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 617.924189][T12605] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 618.014134][T12608] lo speed is unknown, defaulting to 1000 [ 618.479922][ T44] kauditd_printk_skb: 34 callbacks suppressed [ 618.479940][ T44] audit: type=1800 audit(1789001092.821:1451): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198376 res=0 errno=0 [ 618.643489][T12605] Console: switching to colour frame buffer device 160x50 [ 618.894400][T12605] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 619.057748][ T44] audit: type=1326 audit(1789001093.331:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057810][ T44] audit: type=1326 audit(1789001093.341:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057846][ T44] audit: type=1326 audit(1789001093.351:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057883][ T44] audit: type=1326 audit(1789001093.351:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057921][ T44] audit: type=1326 audit(1789001093.351:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057957][ T44] audit: type=1326 audit(1789001093.351:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.057993][ T44] audit: type=1326 audit(1789001093.351:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.058028][ T44] audit: type=1326 audit(1789001093.361:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.058063][ T44] audit: type=1326 audit(1789001093.361:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.1.1302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 619.083804][T12585] block nbd0: Receive control failed (result -104) [ 619.343419][T12608] wg2 speed is unknown, defaulting to 1000 [ 619.589260][T12617] JFS: discard option not supported on device [ 619.589436][T12617] Mount JFS Failure: -5 [ 619.589444][T12617] jfs_mount failed w/return code = -5 [ 619.941230][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 620.176396][ T5756] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 620.326380][ T5756] usb 9-1: Using ep0 maxpacket: 32 [ 620.329674][ T5756] usb 9-1: unable to get BOS descriptor or descriptor too short [ 620.329716][ T5756] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 620.331762][ T5756] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 620.331786][ T5756] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 620.331864][ T5756] usb 9-1: config 14 has no interface number 0 [ 620.331878][ T5756] usb 9-1: config 14 has no interface number 1 [ 620.331923][ T5756] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 620.331942][ T5756] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 620.331962][ T5756] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 620.332047][ T5756] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 620.332071][ T5756] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 620.332091][ T5756] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.332113][ T5756] usb 9-1: config 14 interface 57 has no altsetting 0 [ 620.332128][ T5756] usb 9-1: config 14 interface 228 has no altsetting 0 [ 620.335345][T12602] nvme_fabrics: missing parameter 'transport=%s' [ 620.335361][T12602] nvme_fabrics: missing parameter 'nqn=%s' [ 620.407723][ T816] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 620.407812][ T816] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 620.407826][ T816] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 620.407881][ T816] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 620.414448][ T816] usb 8-1: USB disconnect, device number 48 [ 620.467561][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.467585][ T5756] usb 9-1: Product: syz [ 620.467598][ T5756] usb 9-1: Manufacturer: syz [ 620.467609][ T5756] usb 9-1: SerialNumber: syz [ 620.972732][ T5756] legousbtower 9-1:14.57: interrupt endpoints not found [ 621.277379][ T5551] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 621.367265][T12641] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 621.396488][ T5756] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 621.409954][ T5756] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 621.437035][ T5551] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 621.449278][ T5551] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 621.449307][ T5551] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 621.449326][ T5551] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.449355][ T5551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.452825][T12637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.452958][T12637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.454590][ T5551] pl2303 6-1:1.0: required interrupt-in endpoint missing [ 622.222103][ T6116] usb 6-1: USB disconnect, device number 51 [ 622.541147][ T3382] usb 9-1: USB disconnect, device number 41 [ 622.821990][ T3382] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 623.712059][ T44] kauditd_printk_skb: 37 callbacks suppressed [ 623.712079][ T44] audit: type=1326 audit(1789001098.041:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713473][ T44] audit: type=1326 audit(1789001098.041:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713517][ T44] audit: type=1326 audit(1789001098.041:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713548][ T44] audit: type=1326 audit(1789001098.041:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713612][ T44] audit: type=1326 audit(1789001098.041:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713642][ T44] audit: type=1326 audit(1789001098.041:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.713674][ T44] audit: type=1326 audit(1789001098.041:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.716233][ T44] audit: type=1326 audit(1789001098.041:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.716283][ T44] audit: type=1326 audit(1789001098.041:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.1312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 623.765473][ T44] audit: type=1800 audit(1789001098.091:1507): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 623.912798][T12660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'. [ 624.030320][T12660] team0 (unregistering): Port device team_slave_0 removed [ 624.086793][T12660] team0 (unregistering): Port device team_slave_1 removed [ 624.384309][T12660] team0 (unregistering): Port device macvlan2 removed [ 624.525010][T12670] Invalid ELF header magic: != ELF [ 626.071202][T12674] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 626.071228][T12674] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 626.536731][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1320'. [ 626.926305][ T5551] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 627.129693][ T5551] usb 6-1: Using ep0 maxpacket: 32 [ 627.146016][ T5551] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.146057][ T5551] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 627.147295][ T5551] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 627.147316][ T5551] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 627.147333][ T5551] usb 6-1: config 14 has no interface number 0 [ 627.147346][ T5551] usb 6-1: config 14 has no interface number 1 [ 627.147392][ T5551] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 627.147411][ T5551] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 627.147431][ T5551] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 627.147453][ T5551] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 627.147474][ T5551] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 627.147495][ T5551] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.147517][ T5551] usb 6-1: config 14 interface 57 has no altsetting 0 [ 627.147531][ T5551] usb 6-1: config 14 interface 228 has no altsetting 0 [ 627.154434][ T5551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.154457][ T5551] usb 6-1: Product: syz [ 627.154471][ T5551] usb 6-1: Manufacturer: syz [ 627.154484][ T5551] usb 6-1: SerialNumber: syz [ 627.638306][ T5551] legousbtower 6-1:14.57: interrupt endpoints not found [ 628.070024][ T5551] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 628.114313][ T5551] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 629.184464][T11818] usb 6-1: USB disconnect, device number 52 [ 629.217689][T11818] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 629.437408][T12696] JFS: discard option not supported on device [ 629.437669][T12696] Mount JFS Failure: -5 [ 629.437682][T12696] jfs_mount failed w/return code = -5 [ 629.748370][ T44] kauditd_printk_skb: 18 callbacks suppressed [ 629.748387][ T44] audit: type=1800 audit(1789001104.071:1526): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 629.855418][T12702] jffs2: notice: (12702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 629.938015][ T44] audit: type=1326 audit(1789001104.271:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12698 comm="syz.3.1326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 629.952816][ T44] audit: type=1326 audit(1789001104.291:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12698 comm="syz.3.1326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 630.023989][T12705] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 630.299607][ T44] audit: type=1800 audit(1789001104.611:1529): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 630.324005][T12712] syz.0.1328: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 630.324248][T12712] CPU: 1 UID: 0 PID: 12712 Comm: syz.0.1328 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.324277][T12712] Tainted: [L]=SOFTLOCKUP [ 630.324286][T12712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 630.324299][T12712] Call Trace: [ 630.324307][T12712] [ 630.324316][T12712] dump_stack_lvl+0x100/0x190 [ 630.324350][T12712] warn_alloc.cold+0x9e/0xb2 [ 630.324375][T12712] ? __pfx_warn_alloc+0x10/0x10 [ 630.324447][T12712] ? __kasan_kmalloc+0xaa/0xb0 [ 630.324470][T12712] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 630.324501][T12712] ? xskq_create+0x52/0x290 [ 630.324554][T12712] ? do_sock_setsockopt+0xf3/0x1d0 [ 630.324621][T12712] ? __do_fast_syscall_32+0x13a/0x8b0 [ 630.324652][T12712] ? do_fast_syscall_32+0x32/0x70 [ 630.324696][T12712] ? xsk_setsockopt+0x743/0xab0 [ 630.324723][T12712] __vmalloc_node_range_noprof+0x123b/0x1420 [ 630.324765][T12712] ? xsk_setsockopt+0x743/0xab0 [ 630.324797][T12712] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 630.324827][T12712] ? kasan_save_track+0x14/0x30 [ 630.324851][T12712] ? __kasan_kmalloc+0xaa/0xb0 [ 630.324876][T12712] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 630.324909][T12712] ? xskq_create+0x52/0x290 [ 630.324936][T12712] ? xsk_setsockopt+0x743/0xab0 [ 630.324962][T12712] xskq_create+0x18f/0x290 [ 630.324989][T12712] ? xsk_setsockopt+0x743/0xab0 [ 630.325018][T12712] xsk_setsockopt+0x743/0xab0 [ 630.325043][T12712] ? __pfx_aa_sk_perm+0x10/0x10 [ 630.325077][T12712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 630.325103][T12712] ? find_held_lock+0x2b/0x80 [ 630.325138][T12712] ? aa_sock_opt_perm+0x114/0x1e0 [ 630.325168][T12712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 630.325197][T12712] do_sock_setsockopt+0xf3/0x1d0 [ 630.325235][T12712] __sys_setsockopt+0x119/0x190 [ 630.325271][T12712] __ia32_sys_setsockopt+0xbc/0x160 [ 630.325299][T12712] ? __do_fast_syscall_32+0xb3/0x8b0 [ 630.325331][T12712] ? lockdep_hardirqs_on+0x7d/0x110 [ 630.325362][T12712] __do_fast_syscall_32+0x13a/0x8b0 [ 630.325398][T12712] do_fast_syscall_32+0x32/0x70 [ 630.325432][T12712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.325459][T12712] RIP: 0023:0xf7ff6fec [ 630.325483][T12712] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 630.325493][T12712] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 630.325514][T12712] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 630.325555][T12712] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 630.325569][T12712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.325581][T12712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 630.325595][T12712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.325621][T12712] [ 630.325756][T12712] Mem-Info: [ 630.325768][T12712] active_anon:1232 inactive_anon:1049 isolated_anon:0 [ 630.325768][T12712] active_file:3815 inactive_file:15211 isolated_file:0 [ 630.325768][T12712] unevictable:1000 dirty:199 writeback:0 [ 630.325768][T12712] slab_reclaimable:6561 slab_unreclaimable:62887 [ 630.325768][T12712] mapped:22959 shmem:1010 pagetables:1465 [ 630.325768][T12712] sec_pagetables:315 bounce:0 [ 630.325768][T12712] kernel_misc_reclaimable:0 [ 630.325768][T12712] free:33207 free_pcp:13624 free_cma:0 [ 630.325820][T12712] Node 0 active_anon:88kB inactive_anon:176kB active_file:728kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1236kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.325874][T12712] Node 1 active_anon:4840kB inactive_anon:4020kB active_file:14532kB inactive_file:60844kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:91808kB dirty:792kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5888kB pagetables:4624kB sec_pagetables:128kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.325925][T12712] Node 0 DMA free:2160kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.325979][T12712] lowmem_reserve[]: 0 277 277 277 277 [ 630.326014][T12712] Node 0 DMA32 free:18860kB boost:6144kB min:18772kB low:21928kB high:25084kB reserved_highatomic:2048kB free_highatomic:160kB active_anon:88kB inactive_anon:176kB active_file:728kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:2224kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:12092kB local_pcp:2240kB free_cma:0kB [ 630.326072][T12712] lowmem_reserve[]: 0 0 0 0 0 [ 630.326274][T12712] Node 1 DMA32 free:111808kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4840kB inactive_anon:4020kB active_file:14532kB inactive_file:60844kB unevictable:4000kB writepending:792kB zspages:4036kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:42400kB local_pcp:14124kB free_cma:0kB [ 630.326342][T12712] lowmem_reserve[]: 0 0 0 0 0 [ 630.326378][T12712] Node 0 DMA: 8*4kB (U) 6*8kB (UM) 4*16kB (UM) 5*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2160kB [ 630.326519][T12712] Node 0 DMA32: 367*4kB (UEH) 54*8kB (UEH) 22*16kB (U) 109*32kB (UEH) 45*64kB (UE) 14*128kB (UME) 5*256kB (UME) 8*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 18860kB [ 630.326661][T12712] Node 1 DMA32: 1109*4kB (UME) 19*8kB (M) 5*16kB (ME) 402*32kB (UME) 255*64kB (UME) 131*128kB (UME) 53*256kB (UME) 27*512kB (UM) 15*1024kB (UM) 3*2048kB (M) 3*4096kB (UM) = 111804kB [ 630.326815][T12712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 630.326831][T12712] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 630.326847][T12712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 630.326863][T12712] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 630.326878][T12712] 21047 total pagecache pages [ 630.326886][T12712] 983 pages in swap cache [ 630.326893][T12712] Free swap = 76832kB [ 630.326900][T12712] Total swap = 124996kB [ 630.326908][T12712] 524155 pages RAM [ 630.326915][T12712] 0 pages HighMem/MovableOnly [ 630.326923][T12712] 212121 pages reserved [ 630.326929][T12712] 0 pages cma reserved [ 631.020518][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.020563][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.171529][ T44] audit: type=1326 audit(1789001105.501:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.3.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 631.171591][ T44] audit: type=1326 audit(1789001105.501:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.3.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7fec code=0x7ffc0000 [ 631.348454][ T44] audit: type=1326 audit(1789001105.681:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.1.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 631.348829][ T44] audit: type=1326 audit(1789001105.681:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.1.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 631.349641][ T44] audit: type=1326 audit(1789001105.681:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.1.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 631.349811][ T44] audit: type=1326 audit(1789001105.681:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.1.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 631.614069][T12720] kvm [12719]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 632.854104][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1335'. [ 633.086328][ T31] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 633.236370][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 633.239038][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 633.239079][ T31] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 633.240207][ T31] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 633.240229][ T31] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 633.240246][ T31] usb 6-1: config 14 has no interface number 0 [ 633.240260][ T31] usb 6-1: config 14 has no interface number 1 [ 633.240307][ T31] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 633.240327][ T31] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 633.240348][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 633.240370][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 633.240393][ T31] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 633.240418][ T31] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.240441][ T31] usb 6-1: config 14 interface 57 has no altsetting 0 [ 633.240457][ T31] usb 6-1: config 14 interface 228 has no altsetting 0 [ 633.242729][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.242751][ T31] usb 6-1: Product: syz [ 633.242764][ T31] usb 6-1: Manufacturer: syz [ 633.242776][ T31] usb 6-1: SerialNumber: syz [ 633.784505][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 633.816248][T12737] lo speed is unknown, defaulting to 1000 [ 633.872823][ T31] legousbtower 6-1:14.57: interrupt endpoints not found [ 634.036580][T12736] kvm [12735]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 634.288058][ T31] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 634.311850][ T31] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 634.405627][T12737] wg2 speed is unknown, defaulting to 1000 [ 635.094741][T12746] Mount JFS Failure: -5 [ 635.094758][T12746] jfs_mount failed w/return code = -5 [ 635.144379][ T31] usb 6-1: USB disconnect, device number 53 [ 635.167027][ T31] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 635.357574][ T44] kauditd_printk_skb: 21 callbacks suppressed [ 635.357593][ T44] audit: type=1800 audit(1789001109.681:1557): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 635.490828][ T44] audit: type=1326 audit(1789001109.821:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.491039][ T44] audit: type=1326 audit(1789001109.821:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.491537][ T44] audit: type=1326 audit(1789001109.821:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.491706][ T44] audit: type=1326 audit(1789001109.821:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.491922][ T44] audit: type=1326 audit(1789001109.821:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.492340][ T44] audit: type=1326 audit(1789001109.821:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.492638][ T44] audit: type=1326 audit(1789001109.821:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12747 comm="syz.0.1339" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 635.947558][T12755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1341'. [ 637.066488][ T44] audit: type=1800 audit(1789001111.401:1565): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 637.175981][T12769] JFS: discard option not supported on device [ 637.176193][T12769] Mount JFS Failure: -5 [ 637.176203][T12769] jfs_mount failed w/return code = -5 [ 637.559894][T12773] [ 637.560996][T12773] ====================================================== [ 637.565469][T12773] WARNING: possible circular locking dependency detected [ 637.569942][T12773] syzkaller #0 Tainted: G L [ 637.581087][T12773] ------------------------------------------------------ [ 637.584236][T12773] syz.4.1345/12773 is trying to acquire lock: [ 637.587290][T12773] ffff888029f54d70 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 637.593177][T12773] [ 637.593177][T12773] but task is already holding lock: [ 637.603021][T12773] ffff888020075f50 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 637.614304][T12773] [ 637.614304][T12773] which lock already depends on the new lock. [ 637.614304][T12773] [ 637.632649][T12773] [ 637.632649][T12773] the existing dependency chain (in reverse order) is: [ 637.636292][T12773] [ 637.636292][T12773] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 637.651167][T12773] lock_acquire+0x1d1/0x380 [ 637.653310][T12773] __mutex_lock+0x1a4/0x1bd0 [ 637.662596][T12773] process_measurement+0x5ab/0x2350 [ 637.665144][T12773] ima_file_check+0xcc/0x120 [ 637.683436][T12773] security_file_post_open+0xc4/0x210 [ 637.686024][T12773] path_openat+0x5cd/0x2440 [ 637.691823][T12773] do_file_open+0x20e/0x430 [ 637.693853][T12773] do_sys_openat2+0x10f/0x1e0 [ 637.706959][T12773] __x64_sys_openat+0x12d/0x210 [ 637.709122][T12773] do_syscall_64+0x121/0x770 [ 637.726326][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.729028][T12773] [ 637.729028][T12773] -> #2 (sb_writers#5){.+.+}-{0:0}: [ 637.732135][T12773] lock_acquire+0x1d1/0x380 [ 637.734381][T12773] mnt_want_write+0x6f/0x420 [ 637.736526][T12773] lookup_open+0x150/0x1990 [ 637.738620][T12773] path_openat+0xa2c/0x2440 [ 637.754129][T12773] do_file_open+0x20e/0x430 [ 637.756793][T12773] file_open_name+0x1c3/0x3e0 [ 637.759353][T12773] filp_open+0x2e/0x50 [ 637.761440][T12773] nvmet_file_ns_enable+0x95/0x420 [ 637.763585][T12773] nvmet_ns_enable+0x43b/0x650 [ 637.765666][T12773] nvmet_ns_enable_store+0x11e/0x160 [ 637.767866][T12773] configfs_write_iter+0x302/0x4e0 [ 637.786513][T12773] vfs_write+0x6af/0x1050 [ 637.789004][T12773] ksys_write+0x12a/0x250 [ 637.791238][T12773] __do_fast_syscall_32+0x13a/0x8b0 [ 637.793265][T12773] do_fast_syscall_32+0x32/0x70 [ 637.795279][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.798137][T12773] [ 637.798137][T12773] -> #1 (&subsys->lock){+.+.}-{4:4}: [ 637.808921][T12773] lock_acquire+0x1d1/0x380 [ 637.811668][T12773] __mutex_lock+0x1a4/0x1bd0 [ 637.814347][T12773] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 637.822942][T12773] configfs_write_iter+0x302/0x4e0 [ 637.826332][T12773] vfs_write+0x6af/0x1050 [ 637.828196][T12773] ksys_write+0x12a/0x250 [ 637.830021][T12773] __do_fast_syscall_32+0x13a/0x8b0 [ 637.843122][T12773] do_fast_syscall_32+0x32/0x70 [ 637.846300][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.852013][T12773] [ 637.852013][T12773] -> #0 (&p->frag_sem){.+.+}-{4:4}: [ 637.855335][T12773] check_prev_add+0xeb/0xe60 [ 637.861549][T12773] __lock_acquire+0x1528/0x1f40 [ 637.863630][T12773] lock_acquire+0x1d1/0x380 [ 637.865560][T12773] down_read+0x99/0x4c0 [ 637.867396][T12773] __configfs_open_file+0xe8/0x9c0 [ 637.869525][T12773] do_dentry_open+0x6ab/0x14d0 [ 637.881996][T12773] vfs_open+0x82/0x3f0 [ 637.883961][T12773] dentry_open+0x71/0xd0 [ 637.885973][T12773] ima_calc_file_hash+0xe1/0x380 [ 637.888257][T12773] ima_collect_measurement+0x94f/0xb30 [ 637.890886][T12773] process_measurement+0xdfe/0x2350 [ 637.929624][T12773] ima_file_check+0xcc/0x120 [ 637.931902][T12773] security_file_post_open+0xc4/0x210 [ 637.934543][T12773] path_openat+0x5cd/0x2440 [ 637.936765][T12773] do_file_open+0x20e/0x430 [ 637.938914][T12773] do_sys_openat2+0x10f/0x1e0 [ 637.941114][T12773] __ia32_compat_sys_openat+0x12d/0x210 [ 637.954218][T12773] __do_fast_syscall_32+0x13a/0x8b0 [ 637.956902][T12773] do_fast_syscall_32+0x32/0x70 [ 637.959261][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.982185][T12773] [ 637.982185][T12773] other info that might help us debug this: [ 637.982185][T12773] [ 637.986402][T12773] Chain exists of: [ 637.986402][T12773] &p->frag_sem --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 637.986402][T12773] [ 638.003637][T12773] Possible unsafe locking scenario: [ 638.003637][T12773] [ 638.007397][T12773] CPU0 CPU1 [ 638.012132][T12773] ---- ---- [ 638.023044][T12773] lock(&ima_iint_mutex_key[depth]); [ 638.025292][T12773] lock(sb_writers#5); [ 638.028069][T12773] lock(&ima_iint_mutex_key[depth]); [ 638.049567][T12773] rlock(&p->frag_sem); [ 638.051533][T12773] [ 638.051533][T12773] *** DEADLOCK *** [ 638.051533][T12773] [ 638.055073][T12773] locks held by syz.4.1345/12773: 1, last CPU#2: [ 638.057772][T12773] #0: ffff888020075f50 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 638.082330][T12773] [ 638.082330][T12773] stack backtrace: [ 638.084767][T12773] CPU: 2 UID: 0 PID: 12773 Comm: syz.4.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.089483][T12773] Tainted: [L]=SOFTLOCKUP [ 638.091211][T12773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 638.112757][T12773] Call Trace: [ 638.114315][T12773] [ 638.115919][T12773] dump_stack_lvl+0x100/0x190 [ 638.118635][T12773] print_circular_bug.cold+0x178/0x1be [ 638.121876][T12773] check_noncircular+0x146/0x160 [ 638.124329][T12773] ? kasan_save_stack+0x30/0x50 [ 638.126840][T12773] ? process_measurement+0xdfe/0x2350 [ 638.131955][T12773] check_prev_add+0xeb/0xe60 [ 638.133961][T12773] ? do_fast_syscall_32+0x32/0x70 [ 638.136036][T12773] __lock_acquire+0x1528/0x1f40 [ 638.138265][T12773] lock_acquire+0x1d1/0x380 [ 638.140214][T12773] ? __configfs_open_file+0xe8/0x9c0 [ 638.170646][T12773] ? __pfx___might_resched+0x10/0x10 [ 638.178968][T12773] down_read+0x99/0x4c0 [ 638.180646][T12773] ? __configfs_open_file+0xe8/0x9c0 [ 638.182791][T12773] ? __pfx_down_read+0x10/0x10 [ 638.198213][T12773] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 638.202355][T12773] ? __configfs_open_file+0xcb/0x9c0 [ 638.205696][T12773] __configfs_open_file+0xe8/0x9c0 [ 638.209441][T12773] do_dentry_open+0x6ab/0x14d0 [ 638.213796][T12773] ? __pfx_configfs_open_file+0x10/0x10 [ 638.221872][T12773] vfs_open+0x82/0x3f0 [ 638.224518][T12773] dentry_open+0x71/0xd0 [ 638.230062][T12773] ima_calc_file_hash+0xe1/0x380 [ 638.235796][T12773] ima_collect_measurement+0x94f/0xb30 [ 638.243213][T12773] ? __pfx_ima_collect_measurement+0x10/0x10 [ 638.251126][T12773] ? process_measurement+0x5ab/0x2350 [ 638.261678][T12773] ? is_bad_inode+0xd/0x40 [ 638.264776][T12773] ? xattr_resolve_name+0x27d/0x3f0 [ 638.268251][T12773] ? vfs_getxattr_alloc+0xec/0x350 [ 638.273998][T12773] ? ima_get_hash_algo+0x241/0x400 [ 638.278833][T12773] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 638.303686][T12773] ? process_measurement+0xdfe/0x2350 [ 638.305963][T12773] process_measurement+0xdfe/0x2350 [ 638.308105][T12773] ? __pfx_process_measurement+0x10/0x10 [ 638.326474][T12773] ? lock_acquire+0x1d1/0x380 [ 638.328402][T12773] ? __configfs_open_file+0x6ca/0x9c0 [ 638.330674][T12773] ima_file_check+0xcc/0x120 [ 638.332453][T12773] ? __pfx_ima_file_check+0x10/0x10 [ 638.362549][T12773] security_file_post_open+0xc4/0x210 [ 638.364841][T12773] path_openat+0x5cd/0x2440 [ 638.366812][T12773] ? __pfx_path_openat+0x10/0x10 [ 638.368874][T12773] do_file_open+0x20e/0x430 [ 638.398929][T12773] ? __pfx_do_file_open+0x10/0x10 [ 638.400999][T12773] ? _raw_spin_unlock+0x28/0x50 [ 638.403828][T12773] ? alloc_fd+0x471/0x7a0 [ 638.405682][T12773] do_sys_openat2+0x10f/0x1e0 [ 638.408025][T12773] ? __pfx_do_sys_openat2+0x10/0x10 [ 638.410265][T12773] __ia32_compat_sys_openat+0x12d/0x210 [ 638.416345][T12773] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 638.422615][T12773] __do_fast_syscall_32+0x13a/0x8b0 [ 638.470437][T12773] do_fast_syscall_32+0x32/0x70 [ 638.477320][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.479645][T12773] RIP: 0023:0xf7fe5fec [ 638.481156][T12773] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 638.495403][T12773] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 638.498516][T12773] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000700 [ 638.519561][T12773] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.522805][T12773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.526441][T12773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 638.533880][T12773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.537264][T12773] [ 638.591919][ T44] audit: type=1800 audit(1789001112.931:1566): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1345" name="UDC" dev="configfs" ino=50780 res=0 errno=0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 639.894742][T12769] syz_tun (unregistering): left allmulticast mode [ 639.894769][T12769] syz_tun (unregistering): left promiscuous mode [ 639.894818][T12769] bridge0: port 3(syz_tun) entered disabled state [ 640.772355][ T5829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.772388][ T5829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.957962][ T5829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.957995][ T5829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.151071][ T5829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.151105][ T5829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.378500][ T5829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.378534][ T5829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.530515][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 641.530531][ T44] audit: type=1800 audit(1789001115.861:1577): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=212970 res=0 errno=0 [ 641.544767][ T44] audit: type=1800 audit(1789001115.861:1578): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213056 res=0 errno=0 [ 641.570737][ T44] audit: type=1800 audit(1789001115.891:1579): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=213142 res=0 errno=0 [ 641.571134][ T44] audit: type=1800 audit(1789001115.901:1580): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=212975 res=0 errno=0 [ 641.571461][ T44] audit: type=1800 audit(1789001115.901:1581): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=212979 res=0 errno=0 [ 641.571985][ T44] audit: type=1800 audit(1789001115.901:1582): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=212978 res=0 errno=0 [ 641.572445][ T44] audit: type=1800 audit(1789001115.901:1583): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=213147 res=0 errno=0 [ 641.572642][ T44] audit: type=1800 audit(1789001115.901:1584): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=213151 res=0 errno=0 [ 641.572772][ T44] audit: type=1800 audit(1789001115.901:1585): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=213150 res=0 errno=0 [ 641.572869][ T44] audit: type=1800 audit(1789001115.901:1586): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=213061 res=0 errno=0 [ 641.648014][ T5829] vlan2: left promiscuous mode [ 641.648040][ T5829] dummy0: left promiscuous mode [ 641.648313][ T5829] bridge0: port 3(vlan2) entered disabled state [ 641.673314][ T5829] bridge_slave_1: left allmulticast mode [ 641.673335][ T5829] bridge_slave_1: left promiscuous mode [ 641.673453][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.729061][ T5829] bridge_slave_0: left allmulticast mode [ 641.729086][ T5829] bridge_slave_0: left promiscuous mode [ 641.729216][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.180647][ T5829] gretap0 (unregistering): left promiscuous mode [ 642.279375][ T5829] .` (unregistering): left promiscuous mode [ 642.279399][ T5829] bond_slave_0: left promiscuous mode [ 642.279480][ T5829] bond_slave_1: left promiscuous mode [ 642.288849][ T5829] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.445904][ T5829] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.497976][ T5829] .` (unregistering): Released all slaves [ 642.499932][ T5829] bond0 (unregistering): Released all slaves [ 642.749054][ T5829] tipc: Left network mode [ 643.209756][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 643.979160][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7 [ 644.446663][ T5829] hsr_slave_0: left promiscuous mode [ 644.459816][ T5829] hsr_slave_1: left promiscuous mode [ 644.464267][ T5829] veth1_macvtap: left promiscuous mode [ 644.464311][ T5829] veth0_macvtap: left promiscuous mode [ 644.464442][ T5829] veth1_vlan: left promiscuous mode [ 644.464500][ T5829] veth0_vlan: left promiscuous mode [ 644.948289][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8 [ 645.574529][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 645.720024][ T1876] block nbd0: Possible stuck request ffff8880271c5080: control (read@0,1024B). Runtime 30 seconds [ 645.759246][ T1876] block nbd0: Possible stuck request ffff8880271c5240: control (read@1024,3072B). Runtime 30 seconds [ 645.782676][ T5829] IPVS: stop unused estimator thread 0... [ 646.674512][ T5829] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.705946][ T5829] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.726066][ T5829] .` (unregistering): Released all slaves [ 646.728316][ T5829] bond0 (unregistering): Released all slaves [ 647.054753][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 647.370916][ T5455] 8021q: adding VLAN 0 to HW filter on device eth12