last executing test programs: 16.526558872s ago: executing program 1 (id=1470): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12061) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x6}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0x9, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x9}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) 14.833088145s ago: executing program 2 (id=1473): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = getpgrp(0xffffffffffffffff) waitid(0x3, r3, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) read$FUSE(r4, &(0x7f000000a400)={0x2020}, 0x2020) 13.775118256s ago: executing program 4 (id=1477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x801c581f, 0x0) socket(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000700)={0xfffffff, 0x1, 0xa, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x980921, 0x5, '\x00', @p_u8=0x0}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 13.273412658s ago: executing program 1 (id=1478): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = getpgrp(0xffffffffffffffff) waitid(0x3, r3, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) read$FUSE(r4, &(0x7f000000a400)={0x2020}, 0x2020) 10.425811101s ago: executing program 2 (id=1479): migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff06}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 9.857237347s ago: executing program 1 (id=1481): migrate_pages(0x0, 0x3, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff06}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 9.759648221s ago: executing program 4 (id=1482): fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000035000701ffdffffffaffffff057c000008000480"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 8.551649338s ago: executing program 3 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) 7.748015563s ago: executing program 3 (id=1488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.627215274s ago: executing program 2 (id=1489): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(0x0, 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.567896696s ago: executing program 0 (id=1490): syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd51400000011"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)) 7.487097161s ago: executing program 2 (id=1491): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = getpgrp(0xffffffffffffffff) waitid(0x3, r3, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) read$FUSE(r4, &(0x7f000000a400)={0x2020}, 0x2020) 7.484294656s ago: executing program 0 (id=1492): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x17}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000428e64b7b835da7b574c60e03283bc5fbaec0c075970536bc054df2e240615bd35097f4f1cc322136ce0acca3870b96f47754de6a81ba864d09004c87e51a0ecc1720a562fff893a3798caa252dcf1820801858468c7bdb63f17094a83ddf89ab20c678b30e3984480d216d64a21a7a851f00"/157], 0x58}, 0x1, 0x2}, 0x80) 7.429053314s ago: executing program 3 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d"], 0x34}}, 0x0) 7.049573626s ago: executing program 1 (id=1494): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd3180020060020010000000000000000000000000001fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780002050a0c311500073bb9b40000"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='d=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.042683819s ago: executing program 3 (id=1495): syz_io_uring_complete(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.572287571s ago: executing program 0 (id=1496): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = getpgrp(0xffffffffffffffff) waitid(0x3, r4, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, 0x0, 0x80) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r8, 0x0, 0x7fffffff) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.539489446s ago: executing program 4 (id=1497): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.506045429s ago: executing program 2 (id=1498): socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) fadvise64(r6, 0x2400000, 0x2, 0x500) 4.040390802s ago: executing program 3 (id=1499): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) r3 = socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x121003) r4 = io_uring_setup(0x56ab, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x5, &(0x7f0000000140)=0x1) r5 = getpid() syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a00)={{}, 0x0, 0x8, @unused=[0xe, 0xfff, 0x1, 0x8], @name="354cb31e5386229150a5a471373ddfeb072f469d173b501191921cb0115cb8a2e850b1f02247a600efb0261228277df540f29c7c97c96ecff89d5603baa82af165c2158ae85e9e3b867860a9d22f830df548fd75ffd5aee8a643b2d24e1b440dfa3d8a63301309dd4d8518bdda776cd4afb78d46281353630b0715bd73340d757736abe58f33b428e8e63e354f9ac52999ff868e3845c9ee7200b4bc6b812c3abe4f01678a4e4857be67947fd5392f18e3367b2305a7a33037acd405cf61f826ffe4ac213098d2bf0cb68899c88da5e14ba1fdc0821a923bb0edf4583e75fbdafb752e54aca74183153e12af7f696cfbb95983286551b794b8fb0ccef85465d85762f7c4e409be93aada78a55ef6993090ce36a9445acbcc0eda6ea8bebfa7d90b476e6decab09c64752daf857470ba340d09032613468869d1367c489238c013432ae59e8fbcc74fcdb2d30f1e7fa910a14bae20b1df5be4f4bbfe135d052426524ce899a4151fb316b6ffc622eb8e6f20a2eb4987c5ce870751d86034b51d61d8024c651b167947d85323fb5bc753f614b8982402f8e97339b794d028c2ca1e05ebe4c3f961c5d5f44782ba2cf559b1a9e7ce0440ae031c1a417b1a442f9500c302edea25b716065503a828e9537a82c53d505d10b8ed7a06f46200d3a6b4b5aa1d2934a4f1448d9a2192e83bd0687e40fa122cdbe91a2db0e31d854ecc8d40f62cb4ebd412056daeaf8051e7bea41e5dd8867af521360604bdfa2c78bd310757e3df78d994eeb03d117108b8548d698627fb1b9268c35175b916a6b1fa05687c3d3773737c6b099b804f6fc84ebd5aaf0fc6c10e8e639d77679c725edf22fddbd330e682eaf4564f4bdf71e14bb5972abc1e5c4ea53e28d4d1c80581ad0a037a4fb50fc3e7d4c98978846ae804091c8b9fdbc8fbf815f32d389ede8dfaedb0177d571e0df6b141094444c7d859a22e9ddd4be21ed7fc2a11216c747e7dc50d9a501adf44de72db6d961f2281016a9089a7657f1f5bf7d677b0eadb79c0aafdfd7386539863377bddea495bad363044be0300bd9143e87498e5e84b0b0f8c5d6e6772b701515500a6f8d06118404ac0b8a86d0f560715802aff0c76717a2e92691ffb8ff82121f17e8e4a82f6d6d1eb2733ec01220d4ffd8f82955858760444bc7b72b59fba9a2732a0b11d4d81a5ab00bec38c9efcc7eaca687fd4b615c4237a2b5e076ce7b90144f1bd8bebe1e83fe1467776834fbbd1fd29d7bb6c6edc7a0e018ae90cdb09b35674573c864be1171c7d65d8464c41b5f005b126a3a8274c47713e5b75c347d3b5f047ad4e270b8f0bc5ae18fd59ebb60cf75791dcfc80046b8666e0072e8b02d100e78f5ffcecf5b0759992a513658a3d460643d79e733292d60c70959893c029abbc36a2ddb6cfa695a7995c71e6712372ca622e7754462092c6fa1f5729eccc2b90154064b136353c7bb355047d6f4212032480bd511dc3a69282c66c1d7a93d317e5c9fc0ce3dfb97d0c48e59b28f5d08f2e39ab9c7c08507890f2769aea1f227ac138c0e4554ece984e9ea9d85b0a50260fd9dac2abd7b59a979e946a768a4aba57835a34120c00965338a2fdcdcf4f2e36491cf94013c0bf510b71fff8e37e32801ff9c86292092d2d51d03c8f7c7d2b19369ba46d4443f0e954a155dd364f7589655102d64c1e424ce9e960cf4b5262968c7124e7623cbc3103e1b02af1ec6948ed9293bab089d2b58545576fe4a916793c59f0573575755d8a79dceef2c1b0fe57d0bb0ed26e9f0878ab9bb108b87a3a31908dce4d0db3a5901dc2efb5783a92cbc095e2136c84e5d20b813b0e28900e8315625b86500bb091d7efeb0561348435fb4ddab53915b1eebe32853b7ebe81a674e9fa67660d057f705179033f2c3c6479f04a7f190e09d4eafb23c0077d75c0c51e52bcb185a9aff3ba8f43eac14e4024ab8b4444c4f0aeb424956586c13bd1b1ec9d31f7909e746aa46c4c19c2151d1b0820740fc1e16e5b6f8f7b88d68af6144e84ee04bebce7fc077f202d8a78aaec46b51c07c08fd61c9c1035a6142baf39848cf1aa15af24a2faa5c108de5e8874b1162de9b33f70bfc3bd54c9a7d5b7ca0ca1cc4b62ef809ef8add44bd5acb52d610cd4ab4dcba9cc2fdcf4b3e854a68f1cf28010ca14dbb08f41b14065c8614d1f8993eb26a10f7bc3dfe71d1a179f5bd4f1788a5c8c046d0e523bf5b7e00b600b22d12ff2a0c3f7522d211bb50c22a93de0a0c1b9bb4a728e6c30e7b5516f6d4490800f0f598755f184fbdda14aa3b8b010ed46131d60fec7b74f601cbdea81fb438f2874eabe2d630c91471f41fb91327f21e6d78b6cbc2eb8688d7c9b27dea5cc46af03d9841f939a4cdb37fbc0a9871070ec90c457f9458ea1f64a0f4bea798d5386535d66c04711cf562d64537d881e6ab6af6f244083166af00da775d34b908d97fd5e522260b9e4ef4f276b81b4d4d6ed3abea170a8a72b8759b7cf803caeaaf978c4cfcd1e751b0f551c38698ab540d584a27cffa9562c6a4d5db5a9556900c25db40e3c7fdaa413e6f249962481c6401c2a92cfa6b5bc4065f7aa2306857b4b3fe1d16bccf2fb427ee439fbc73098468d7d1aa0e654fed20a1cecddb8105f4fca2256e6339724bb11f6f1ed3b81ae43b49f674a45b6fd26607d1b49aad38d622bf518e239d5dfdf7e9fc34cdd81939ae906b29e08686dd5db454d497be7b84798b649af416a27170f231011d90d2253b47359e588a6d969079c65b0e406297ef675af432d05861f7c1ad46a3d263ee9200351114f8afc80947d890ef8dc632fa74e1348d5e8ad2c2bdf5952607d882e3661c8f69ebcc3b6f45c3273a238d4a8cea91a10f0243002125fdc0e051ab369b650b0d73c4e92a587fff87f1e96bd11556abf091fdf0c3085ec874a26570326718256f8d230d372726f76faac526b798f9cda567cfb8f54261db1a6d4d2d0ee3ac070da09a13ed0ef24019af89bebe61237394a8deb18d736a09c09d03821295495e2d627e4e79a7383341176cf7cc4e4c41b3b2a2cc4073e0fc8e03b135de9fe3052274465cb87cf7a0fce7faeb1963bbcfe04cb298422e1fdfe7b2a1cb961f2e338d80b7241ec787e8054b2690c21bd3bd95b6a74748ab3bb5525d1c15c3c9c577466fa6c7592cd569ccfbdcc5eb3c3de20b42dd0d20bd2900ecb7e1ab33abb040a42013e6629c753adff2eb72c9c07ba715c80db880ba2b4f5c9842325756d26925f9f921a7a116e3a458b689106b71d20f7e8fb94c019db6d709d895d6c7089ab422f7adf09e80bbfd2dab3ef0084c3a4c7b2c71022a9dde13bcf834fa638310d830da882d91be59dee457fcc49b30a9d9f4f24b093fd279d8c40496160888f26d2a0ba455634fc59f162e0fa8edd52d252a0dc08ce8cbd1968934d1f88ef7783c1f0e67d3a0ee832df75b66e9dcbcf9c2f1a4fa84a7bf975c70f07f53f03566de469ba0b9e3fcedba68b895c739449c96c6f202d63d36a5bbbd650acb0c124861f0257aae4f7def4fff96f337821b539ae4cda4bf43290a37a51515747ba867c292c9ba6ad511fd97aa336625be0f4b35bac2855755cd775770c410ad11f519009f36a449fa81875e9dfbd921bfb0c69bf6525a19694e5c8777bca41b11a083e6082e58c393da2da664cf0b8f4ba93c2713adca70ae9316e104062e215625dba3374867e147edc518364942c1e4f4241fda73daa9538f7f3a308f8d972aa63d1c9dde1da3883e596bc230d6ac6db478836b1bceadb32bc36804876077c01345ba493845e7b2e03b7b5cb0eb69f25c9ddf0cd704a9347c08f07a246a4a96e3c99a5d05920976e7d947e52eafe07663ca0fbcf7291423ecbc8abdebca2b119772ff15146baa0e7178bd28b53158174ec5fa04bd66ee8e4c0cf3003574921b883dc8e0408620b6e326f132902e792f4b88b3752a0be88ab4f9b03975ca8553f19ccbeddfe14cdf3dd2c27d00872c80ce8bd0a7e77e4f84afd3e47ab2bfa3e736f73642beac87eed31a57633ca8e159f4acc5c4154f15ec94c6e5881003b6408b4e5c3bf90f66e6e97308cd77d0ee9cfd3aa4b1efc9220d974a5d5a69a198934e1a1e19fb1b7bbf3633d8f1b9a0f909fcb6bcac572a1e403f16634357069db407689b7b180c6d2d6f28f114427769c3fa5fc1e7bb3b6f8591f3f77390aa4fec0234cdba940596688e5bed4777e9057a3fbdbe8da80ed1dbf0c09e4b7c45b76969d1f41a614c8c63e98cd3b8cd93b8003ebd9d0cd6a05476e00801f1f9adc050908be5096c9006dc1179034f671e504f144a2f6cdbc42de04e3f97e2b2e41eae962ace4e16e3eee5776e6168cf3d03caef8863bef0b61f8384f9902888cc943ec9307bf52295cdcd74ffd37a6de941be3bd1db03e77defb1f80bc06c78b02389c0b63e8f7f7f2427ea2c7118ee35c1c68bc1081fc05164335d41e4ccdd24e1e4b6fedada5539c3a494f5e759348b60485ae91071741584ca1cbdab9596d5b19a8de3bfea041bbef96ee67a334fe75247f12f7b484589ba0043512df74364ce8e9e9e96094f9c825c4aaa2a41b5518f4311220f41943e5825e7c88b7dd50e14acb85c5a9cab4c970f355b82cf2128b26ce1ed3c0fe90f00b72752905a194453cb46f907d651bd5334b15c64b1dd639f1ded7097bc0d15c582e501f428bab1b53419afa835fee53b15ba9525c591935b8278a5e6c6772b07dba1022c4d32fa4f9b3cef9e782a9ac590fb4222455ae0e4e304c335395c11231ad9670008ee0005cafc03b21c890834d2d7ea3d509af1e06f12732c699a670ad8209a66e6e27388b36357aee8000d30a2061fbee45409a5b07086a6c258a5bd737878709918d7729740902cce1dfb0357e47321e73d772ea54652a7d4391a0753bf536e8b360528dd954d6a7557ac6fa3744b1ea4c73201ccc9434f86d272aa1aa7a80593e24ee5dd5e303b0a5c10fe8f59c0b9451dcf1811637408b2c6ca8dd726999edad6bfddbad47d68551b563d6fdf1866d3d283074e2b07e1c211c043e428a8cff55c2c4fa252bb2a2cc2a37e53ddd3496b12bf2bf5f1d73c5143cfc02bd559e0a20b49fcc5536dbf4812038ef16775bbfae0ebfb8e59dafb74187f11a598fd331bf31a31756ee9cca1ca62ee3593dcb767273f4f19152c708ee1b7e882126eccf035b9a07699e1c2434c894d814782023524e63d783cc6169e9e1f90b59c964746b1e9486ee0eb7cc857267231734bf3dd835a96ae691b94134b0cadfc62a5e09a986001ef5c85e226545e42f280306c5cc0f8ccb39f9e6d2bc7bce0cce45818fcc8a817b7caa41da5bf96163e0f8e01391f43963fc76ea1af1fe0da1a4d0455501acf6aa5f4225e0dcd85c3fbbda1ccedc12807ceea4fc5aedfd65780c00c0fa938a012a6edc110305f941d8d8f52e98547eb7061c461fcbf6a1bc8651c68501f7a266ce4514c73e79ddadff587582802cbbeb5deb2907da85712bbb543f8cfd43e34b6418860b04d326cb3c201fdaf117e93381fe506a6dab78fe4d33688057118dc7369c8bd616e731dcca31738345d83903b191c7fa73a6e5464ef8373cf353074817a67db3e403963b08cf8bedca12796cc4c321525d8da7b404b997354e1de882492b11b371e1b7fdf84e6a0f57a8c79d0136389ee7c8e5e36628ce6174ed048ac2f0b4d866e38"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003440)="3768a163d6ee12aff8729d9775898c984ddd5dc24930083c065ea82ba42262802392ec69a9e260100a75703f02904de696e3fc15a562dae659a5f1da0efb3bb75553166a3cf5234abd29ec3042647cdf8ac8e4ffd9fc951c3cf10e0c64830b837d4fba246cb98c9374f6f6f23b41c92f2b0e78b585fc33e042b94dde29425c9bc5bf0125087978e76806cf08789b617b9b44db5634713f3c9a6d257e5b3b3ebb2f9e8956aa6f0690862130493345035e7008b3ecbdaa44539e8a53ac80eff006c6be9dedf186b84322c1c122fade9963517b169b9b315d903a32798af128ee7000f73dce0c95e6cedb8a57f8d6d5174400ad3ad3389b369ea55837d5d6b971854025ff3ce1d4de1eeb8245b54115f78ebfbe137e360752346cc151f2e4402d19bfdb7e656bd3053db8f2d51e91c3f5f400ee1a39fd9af4066190f4348da452ca5184252ca73dc6cc34dd27b1c5a661313081f959173ef0cfae1a717d491db95b6a7ef2ebab779f953e035434c93c040997a24edb5dad42aa835f720a58c1511b23a39dd2fd6bbc681d7b52eab7c2adb630240bfaa627167baa4ae4abe3fff0b3554f29bfbad4cab4f5a63bda5e0f43ae2ae8efab50f1e1d69b5d996f6edb76cff536e3892f4b27de326e9afbf6857226c5378b8044e8cc6da32f699dc00e7836bd8b9e4798908b2f367a6cf8eb1c720211b82e2c4a1d693e5c007aa8a8d0a4cc9ccd4a1dee28e7eb9557c0d8ed622b608d41ddd8827e7f599b1f6d1adf3568e46227b1f629fb4161065cdc23379efcdeb1933d1655a7bc158994091694086884f4e6d3e1680763cb3434bc040a3f02238f18a065148ac447d5f89e98e4daff999ad2e4cf4729eee8424cb2e607d5b50739c8403c1bb3b4a6f3e62ef9572bbd279b840cf8bdbdbe4d1ff39f759aa6a7e8ff1fb94235d752160d0e5660e5f37a030a478e47f0c972d4a5967a271060df7b7b394e02bb4ff007a504b29f5d6a93c1fde50d5c64dd8455cc914fd5b1380aa2de6deb6885622c6997804cc43d532037e5c75c94f9bdcf35747338e1392289147b99e1d2b8d8cd269d5cf9c83429d7a1a19a0ed99c51aef0608c4aaeedab2e15d54fb907c8327b8576e90441c7de69f11f2b2ece5f3ac1a21b5c4167f97899ba6079c34d28868c7b947fe7cd4b250ffdd5ee614aab3c7698a0e18de0ebac4d68322fb90c7c9fa509246c0993bd7cc542498e558239f2a8afc91aade0addc68be57ad511bd7995e5aa9943e972634ef74e2b82dac0f20f16c99c805c0bc4c1fbe16b6be0a92b2c320dd14282c1aed71f86c254c6080fca486f334c01b074624ab8403a0a686e09821ef1614c344c9bc49fa6e24f97a5be52f0afa397cdc62732a644cc06a0aa78708b43f9ca89603532d457c3fe8d442ca49e5e96a0487eb09505bf1c202bc10387a7f581f1ce12ad5de63a4599ca7838cc3ccd83657d877d8028991455fcb7d27494dfafcb989637b234bb8d8e952ef10aef411e4fac63a042e29abab73b72ba865d184fa027571af5745fec05bddb3b6c3f60077d2eabd2820b5041bab67147ad2981b8935b09079e9367c4ca735648a3b61e544f7f5e8dd53842667d700b94b44ce36358d1615c1cbe609a37a1719fb64b785b775362312a1071fcf8254cc367a01a2df9ac924d113a4ea982611f67ef8549a18326c1c1000110d8a60ea4443797f92cca5f506dfbe7e69d3e7d074c8db6da1fc1b99fad0f6113baa40ad2e01d81539f390a79a8a0fae70447e27c9f4a7fb54b4364f3deb534cfebe75bf2658d7573b494ff702ee1397ea39b2cc2ee4de11fa7f2f7cc1a65018b1a614ec978a31c77f7894c26b39d6e796eeaa3c4fd2f4db9ccfadf193055a9136205d4b7e59a82e41d5224de772eaf68540a43087601cd809663424ff852bf027d17934abd9531ff0c9acfcc15ec9bbc4ddb7fd1605db5fe3c976e1dfa54e39f08314dab0ea012465260cd55edafc7eb2f5c612c25c66a0109e2e06afcf2144a956cb01a3958fe49e53029a4520e78f69697abeca64d65c8e83ca46168d03425df715c5b700a3655e2dd6ae315e5a8f6690c45293f40c932d7379815ec5376ccf84ab812ecf726fab38234f896fb3af3fe7ba619e9b9aa11bf9b0ddc658a1c56c7bd731ebe9d2bb2380ce23c0365878995e3f7163ad4c0c175651961bad73173891c093654fd3f425bec4f8390ba0be3dab2170d2c7952b01fb55f735969d22a801f851c4588733774466b045c04bd6d01ff49f15c83e9198455d0d5737cddbb888fcb46901e074f825485ef9dde9cf49c478fcc06ea62c5647a124d4c4e85b0124a834245f52d55b9c52da5c03f10711d9d604eb5edf120960ec46d98d03a82925acf2ba272deb9b13139fb60715200505347fb7668b8f5c703dc0c265d6ebaa15d18f399dfcf1e5c4335abfffc3808f052c7950f26188a95623bf8b85e280f63d917e9ed7c343c8bb898f4229ac400f4a9cc47c9287f826206e47622a76d37ec13b8697199c3d81b5c2d4afdafd8b5e938ccdafe33e6dd456eceb34c0476503f94984b4dd2cdfd9bc4b5776da2cddeb2061345b40bc75f14158bfc9301ddb697d594f71abddce1f92a2ef8144450e672728c2466b53dbe8ae94a39b980d499545de1bf8ed1f7adbe83c5ffc6bcfb8156b542b984712daf427a209054af69b765eb01086f13525a5eb0a0d5daaab7f49ab61f807193beea4088de5e0b69428276f24555d938d20e82badd4b8c38389e8ce553352d6003751cf371325e1f73cf17e39df590b867c59086dff1f8c209bc96212e79414fde0bb5ca512000e38b404a3e0dd645117c7aeb62b829988049575bd5053da0578d3e1f7c1395f646e5596db4b3f5a0b76254b29bbb36749bae03df98006ea6e762bc04bfbd862b31d5a83735944cd52489d9baa051e498f50adf6c74cdd78c1715a52533ea91dad46fb6297a18f04cdaf68ae1591e12e7ddf5cc324def8eb0c4cf8c8cf706948220ab2893e5813ab1926775cb7d254d9f311a6a7d5b742c845fa37d02c7f580d7083084ad5feba7a6c3b3899b920dc15a509334797cf83d71c1d3720fae23fa3facd548042fd25508f4cb2330ab9d2a62b8d64471c0f3a1e9c2526654539050b869f3c12e482bf35324bf85d992e31f10eb04101697bf94dff37dcc3fa2c41c307e721bf71963747e6e9587c0d360115f1154a8ddba8cb3c436320279bfd050f9d312ebb22af0a7a08f013e6f59777407484735bcb5b02a6e59bd29689ea7d193e3564f50e88b9a4e7605ceff4a6bbd82633ac60afeca9372edbf2f3be6991a32c0f46eb8745eab43c043a15dbe280d3c9ed5645fe5c1e228bc6d5881d5cf30ca5505d1dffaa76128749cead8ba4204345ae6845160b08f7ea86face48a20715215914a0f1596b20f524d3f41c84f533394e6f28ab095afa37e22d79f178ea0c328172b1a0e7402eb4eb3cc9c3ea6384e809347ba8044390a46a3561c7ae546bb37422aa263808283d16000ea2a43670db3fb4a767101b06480d402000a3337be7aa27a0b27a01eb8325dcc7ce0789ec6f8631cd206a9e5083d58e610af317b8a9193dbab230055fc9634b4bd570b6c8932719fc115501e17b3f41e21e08bc5938b175f295aab40e2c61f4db0388090a3ad9fec607f61dcea2c71bb89406a7c911da3850408d50fa4ef68aa91e41031aa7c185043bda20ef2d0fe531d71542e5411f8432903eb62a99b011ff43d1c43cc6858d579e0595e588b30a19a96406d361a032db9e5ad95b408721a4d467ec9665ce4fdcecced22c9150762732c6a2a37934b006ca3b0e27a99f91420bd3a667ec8f44969099d24d7badb30c3a2d32868e9a9273d4bcb05cb61bc7ed331c88487c5a1cf76169004d2275e62d8efab2a6f4e38989a5218a884280a7f941dcb8d8841bf1bf6f35511e09ba46d7a90dab84b9c40773ca45ba2d9d3609991adc9942450e615ac9ec4ea285efc99185da7c3d68d03afe7fd08a342c739ddb104ff9cb097ab2df6d8ff8b4450925ef07444c11f25c99705d3e3e04b8fa4429ef961c98de5b6713f80cc9945e6f1d26a62351a04bd57da7b3465528df40f6dac84e56b669b47b4f8e93e49cc56c479ae9c1ea02712b7a9cdf57aa7d45e4a3fec0643c2c070d00e1c847920836337ae00e650b19a6acbad721d6820e31cb65520ab3996c90d07aaf63e95e99ee7f28ae9efedf4bb849ac434107ac5a97495b3eb05a717835f6e0a87edcb49ae3b1ea0f8f3b31a9a190fa0d51cd89f672f66903b2832eebf5630c3593ff1bc26b6ffa98722be9eb59f7cc91a6b0630609468409c10d91938dee40af770ed55f98d397d0476e484db768b98792d2148cb885fe6c36bb4b577c1d78a10e9ad6d2426d949d7f44cae075311a65596f7b7cd922d1f3f69031bc982329badafc8fc1da465b4e1c064fc6b21b151a43fe6c93f7a9bbf2965dece4c865d28efdb527d067212314e385a78e68dfa610fa42a111feba474a23f2cc25dc70f18193fd264c45619d3805682e4d073f5e416f1942e1fec1dc99211180b2da2bb0f6b242c6b01e16fc3c674c98db8c15030bed1913f74aff7e6b80633aa6d046a14a49d6ec340ea16305a3b62dd21867d17e035837f4220456be777cd19778f16ce6db23f91a46e81d9cc95426a81fa66ad670a127c562fcb1056c1993d57a9e8e5d2b79fddeb4bd52be37f4941f2e2061146c276a8c7b5fc0cbedd0b6c4a8d3601bf0931f36029fb38c66e862403b06a61dc399231853ea67d57a371c4ffc67f08a9aab8d84361ff97b01a115ea809f96f4ff95292cf7e3e0752bb64895d41375df0692a0f182c13b40cd129a55b50264515e88ea544405fc3464dc51b1081bbf149ff3f7e71b24a94e8f7003be8176e04fc0d102de47898b8cce21010ca96e52564d38ada0501be783bd73b2cc8857d3633c076aa6f014f1c48bbd03028f0765919fd2b5d964919a672d6a66acd14be280a2f4533219b1a02369dfe335e019499ac696606e279ce564238295774332c98ebd5e322ae5ac3a275063c0b7789a55cdbfce3b15448aab50034b644b1f27e1cf64d7d394270ffc0218a86cc9160ec8e0f120c24d3e656f50061e795855a2e1b1e87989912d6ca2651095d357a3483b3a1dde5c8e874e82d90163237647c8f8963bfdb296cbbb29ba899235a2d9c14f0e02d5f5c2ff8eb428e4730300fe8d9b08b11b1f5877812d71fb196a17722da373ec345b2dc1d9a27b782fbdc7e2238018831b6fd009ec18a0dfc02c9ce2ab30bb4b4f92dc25a2d8a7931ee7b328bf899654b9cba54a0c0e7ee0a9587a325ae6d11863d8d2c71429d54a334c6be1361860d441e4b494abdcbe59f990421dc3cc767ec8409894b7e9a58b982dea753e5ab8b309775e2f03360776a43570a3f3287bd0840e5041e2e8a274e83e4ccc7ca543e6d3c68515c2f62bb33ef23591c0722ba6510ce1368a149fb9467b8430e88dcc382915e4529423e6ccd7b6f14ac189bdd5e294d07a4a086cba373df3fd0d1facdc45a4be8b3954eff294399e14d526240f38dc66531d7a60ae1db264c23ad6bb356d627022c059a1f89b38acd35ea88b9bd15221f72a0e94595d59a61e194b660d0f4dae1728ae1db3957eb92ed3ae1ac4109fa6f002681942f4abad3b799f2f51757c89bf051803", 0xfba}, {&(0x7f0000004440)="61a9c8791787f37a2870bdc8775764823b2aff6433a6736077eace54310d44159cac2a17b029239619ebc3817441151ffa842692d6ae7e7e9d7c5b9d7982546298973c8037f94769614ff9231350471c070d797cb57259d07aeeb58d53dbde7b175be849368a583a57df58c5f6a58afbe3cd04754f2093091be6c9728b1bc7dcf7bba0d5911060c071f48d4eb50f910525627f8e9a901f292cb5fcee5a536945699ed4fd9a02af81d70bc5812769e91876a66a6119bdf1ac7897846f8a88a20546387c18732dfd7761dcb24a62a64fab494d22d093f647f4fb92713a200a9878b53079f67a3fc1bc6e62c77807b9cdd3c2", 0xf1}, {&(0x7f0000004540)="f1ded92c5bf99bbde8ba5eddda5ccc2bfac7d7d6ae40cd96e25ee961bc06f4d48895679dd2a3a218ae4970c85a0df2138e08f1a6ace3cc056d91e286f95140d5f36e831d265c09864eeabfde609318dd7c7c3a16ac88f199f832365ddaf7c640b63f6feb9ed2f3ec4c8e21cb2b574e5b6457e7410ec7bb323396c2b2419c71ab40613d962c8d711938214bdc08c5048e8aeedada84a017b1005853f1f1db0d34f978dc3776623e4fd872e57399f5ddca97074a56661fb20a0d062fafe928290e5189f544ba75209ba84b7921f4ddfa88dc7a6c0f5fdc5abf4546bd0f68b65a3c72142598af0eb010f2", 0xe9}, {&(0x7f0000004640)="4dde2750a54ea1b18a868718a7c56447a2a497f3563b27909a26227dde73698d35540a21ced70835145c180bd459641cd243fe25b38a6a086b347288de0d0b6c7a206425e2", 0x45}, {&(0x7f00000046c0)="39c5f2a2737f77e5b65c1bba8c8b016a6c5025e5aeaef92a7ed05e9ce1", 0x1d}], 0x5, &(0x7f0000004780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50, 0x24000000}}, {{&(0x7f0000004800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004880)="5c452d40e13e876f86529f208eec801371923cf0d7c5451cad05e5ec82460ad2725f98a9c44d23133b16403347", 0x2d}, {&(0x7f00000048c0)="4aa96f8487f6284fe6da0d22b5ca088cec4cd2d4978c3c5c652084f466847cf9e0ddfd507c5a4a8f0bdeefcd82469a61e1a45419ca6101a9b7040f3af485decba7f246b799665c77bf9cff1e520dd57c8fff40", 0x53}, {&(0x7f0000004940)="3cb46b11841dd12b2fdbff70685920750d1a41435d6b58a3f96e5ff51dd828ee537971261ef9a84be1e51b5daa8bf8db71f5fec1f8b80c9d5213b0fef90af108881ac4181802e09dfb77f9732f478c3bfe7449b3b4786c6ae83e4a8bf37f6442f9e2897f22fea5b09f42a78f58811db48c775cd11a2ba0d9780cd457781f1aff487a36c36ab295e34f6f13859d2c7f", 0x8f}, {&(0x7f0000004a00)="e0c1ecb944cf6ed6e92331e58c014ee09ba79ec4e37c7db2c0d640f1db952c73378c0f4f22f387dd39834909270dd94f3e2efe1491d83d8564280a4af9cb8b35d705f78d5b614690e72854b79c0c559c120e9eb7aa6fa8b26a9a98d33f829c51037d312fd17f66a7215f551675c11bbd065a0e86096712efa425d92495404da75953a51a3c717db927c10da7c22698a0c85b0531bceb9b13f7e973144f7feda094a4fc6c11d8163a257e79620010865217cdcd1270b92457ae23ad955c10f44e36a1f60feb0975985d9912e36c5b373a3b", 0xd1}, {&(0x7f0000004b00)="4f9e9a6645800b65ac6632ae64d1ac9eda1e12062c395755c9931038035bb1898fb02d089a3fda9ee102a8d6e701b937542d37bd3e3588dbabe4a083f11ee2e4005271afa1825ec2a8ee8e594707fd30979e5216b72ec3e1e97b87c177d26f7e7acec5e6a6fba0e9659f0da4f91b8642ee1e6bc6466791ba801d2b5565f177a0cdf38380beed99d34a123b899454a9891dce415c2ee7bce67b98dc844ada212825c90f16a6e64b3fc5a7f6ca2910d98f95535ec179bc6661f2a56d2b4eba2a9735515ab7783e67f25132779096de4bcc1ecd3f6810b3d515f937f1b0ce98814adc7f09", 0xe3}, {&(0x7f0000004c00)="be78d02351351fdae8ed49249823aa3dd2107b06d35472223fc709e600b6ba88f1879d7b97a7aecbf252af94b83f6e6f5edf1e8c50a70c1c8d83f57bbc912414c84ac75509f110f8039c3faf27138b4763b8a61bc1d8c79eb5af4da06604cb708750f49855fc5e89cb224bdd642e05c457a5326db157ecb79d723f2daa98d5e24f58464da1ed18abe88a4e253d05c1fbe8639c6377568efed6b201a308f2c5770b1652feed411f35470fa3dda7b2a4799a212bade32858382506cf8e179c1fc25213eecf699499fc14b002039360af0e591915e624c83da2b1cd1ab887", 0xdd}], 0x6, &(0x7f0000004dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0, 0x4000800}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000004e80)}, {&(0x7f0000004f00)="0325868277d9dad7d6a689b62d66c1bdcb6ef08ecf844903278fcbc09a474e22335248d000008e394cbe95599e6706d8a931238de32313a306e4e51638aae6754fcde101b8fcb5e8a58984cdcdb7310268b7253d3181c9ce5efb74ad3ff81115b29ef572ee1442b1ec6ffb4c8c10", 0x6e}, {0x0}], 0x3, 0x0, 0x0, 0x4}}], 0x3, 0x4004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) prctl$PR_GET_DUMPABLE(0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 4.017234272s ago: executing program 4 (id=1500): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(0x0, 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.940091177s ago: executing program 1 (id=1501): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) 3.205052012s ago: executing program 4 (id=1502): socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001040)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r4, 0xb) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f1000080009090502"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) fadvise64(r5, 0x2400000, 0x2, 0x500) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) 2.173621462s ago: executing program 0 (id=1503): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f4", 0x6d, 0x5, 0x6}], 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev}, &(0x7f00000006c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x1e}, {0xe, 0xa}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4048010) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb0993", 0x41}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62", 0x9b}], 0x3}, 0x41) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.919895816s ago: executing program 2 (id=1504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, 0x0, 0x5) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_io_uring_setup(0x126a, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x1, 0x3a8}, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000300)={@r2t={{0x9, 0x2, 0x18, 0x4, 0x7}, 0x4, 0x5, 0x7, 0x5}, @val=&(0x7f00000001c0)="102db0a11b479e12e27b3c92"}, 0x88, 0x0, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) unshare(0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.819171018s ago: executing program 0 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d"], 0x34}}, 0x0) 1.779464886s ago: executing program 3 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/74, 0x4a}], 0x2}, 0xf0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.545958525s ago: executing program 0 (id=1507): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1e, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022d"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/165, 0xa5, 0x1, 0x0}, &(0x7f0000000180)=0x40) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 858.138222ms ago: executing program 1 (id=1508): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = getpgrp(0xffffffffffffffff) waitid(0x3, r3, &(0x7f0000000440), 0x4, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, 0x0, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) read$FUSE(r4, &(0x7f000000a400)={0x2020}, 0x2020) 0s ago: executing program 4 (id=1509): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) kernel console output (not intermixed with test programs): 10249] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 388.634398][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 388.663689][T10249] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 388.995638][T10249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.002671][T10251] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 389.031601][T10251] bond3: entered allmulticast mode [ 389.327987][T10257] netlink: 236 bytes leftover after parsing attributes in process `syz.3.973'. [ 389.837267][T10270] netlink: 'syz.2.975': attribute type 2 has an invalid length. [ 389.845091][T10270] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 389.853020][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 389.871853][T10270] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 390.005681][T10270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 390.016130][T10273] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 390.066944][T10273] bond6: entered allmulticast mode [ 390.737411][ T5862] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 391.472567][T10285] binder: 10282:10285 ioctl c0306201 0 returned -14 [ 391.507709][T10285] binder: 10282:10285 ioctl c0306201 0 returned -14 [ 391.566066][ T5862] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 391.589147][ T5862] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.604196][ T5862] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.681790][ T5862] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.711502][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.875381][ T5862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.922094][ T5862] usb 2-1: invalid MIDI out EP 0 [ 392.861408][T10316] netlink: 236 bytes leftover after parsing attributes in process `syz.2.981'. [ 393.009528][T10318] siw: device registration error -23 [ 393.020100][ T30] audit: type=1804 audit(1780062669.705:3175): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.982" name="bus" dev="ramfs" ino=30296 res=1 errno=0 [ 393.246838][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.311062][T10324] fuse: Bad value for 'user_id' [ 393.317032][T10324] fuse: Bad value for 'user_id' [ 393.321816][ T5862] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 393.359757][ T5862] usb 2-1: USB disconnect, device number 24 [ 393.644973][ T29] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 393.843314][ T29] usb 4-1: config 0 has no interfaces? [ 393.891372][ T29] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.931443][ T29] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.982820][ T29] usb 4-1: Product: syz [ 394.007854][ T29] usb 4-1: Manufacturer: syz [ 394.028291][ T29] usb 4-1: config 0 descriptor?? [ 394.041786][T10335] fuse: Bad value for 'group_id' [ 394.054443][T10335] fuse: Bad value for 'group_id' [ 394.109370][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.159211][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.186120][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.241129][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.269173][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 394.289388][T10289] usb 4-1: USB disconnect, device number 21 [ 394.580097][T10345] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 394.588077][T10345] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 394.595906][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 394.613784][T10345] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 394.879977][T10345] 8021q: adding VLAN 0 to HW filter on device bond14 [ 394.905689][T10346] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 394.916078][T10346] bond14: entered allmulticast mode [ 395.325868][ T30] audit: type=1804 audit(1780062671.865:3176): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.990" name="bus" dev="ramfs" ino=31076 res=1 errno=0 [ 395.451084][T10358] binder: 10352:10358 ioctl c0306201 0 returned -14 [ 395.467120][T10356] wg1 speed is unknown, defaulting to 1000 [ 395.473486][T10358] binder: 10352:10358 ioctl c0306201 0 returned -14 [ 395.589207][T10360] siw: device registration error -23 [ 395.600752][ T30] audit: type=1804 audit(1780062672.285:3177): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.993" name="bus" dev="ramfs" ino=30457 res=1 errno=0 [ 396.053548][T10362] ceph: No mds server is up or the cluster is laggy [ 396.062693][ T5708] libceph: connect (1)[c::]:6789 error -22 [ 396.083925][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 396.334561][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 396.369658][T10374] siw: device registration error -23 [ 396.671274][T10377] siw: device registration error -23 [ 396.983078][ T5708] libceph: connect (1)[c::]:6789 error -22 [ 396.989101][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 397.003668][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 397.011281][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.139300][ T29] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 397.148686][ T29] usb 5-1: config 2 has no interface number 0 [ 397.157163][ T29] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 397.168991][ T29] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.262437][ T29] usb 5-1: config 2 interface 99 has no altsetting 0 [ 397.288920][ T29] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 397.410776][ T5708] libceph: connect (1)[c::]:6789 error -22 [ 397.416763][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.428580][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 397.439323][ T29] usb 5-1: Product: syz [ 397.444045][ T29] usb 5-1: Manufacturer: syz [ 397.446372][T10376] ceph: No mds server is up or the cluster is laggy [ 397.594411][ T29] usb 5-1: SerialNumber: syz [ 397.864422][T10289] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 397.994396][ T5708] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 398.032081][T10289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.032116][T10289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.032149][T10289] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 398.032170][T10289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.046081][T10289] usb 1-1: config 0 descriptor?? [ 398.137614][T10392] fuse: Bad value for 'group_id' [ 398.143802][T10392] fuse: Bad value for 'group_id' [ 398.155929][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.186744][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.203420][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.217176][ T5708] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.227408][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.246953][ T5708] usb 2-1: config 0 descriptor?? [ 398.467205][T10399] netlink: 'syz.3.1002': attribute type 2 has an invalid length. [ 398.475106][T10399] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 398.482932][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 398.500112][T10399] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 398.611899][T10399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 398.621377][T10401] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 398.722145][T10289] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 398.730081][T10401] bond7: entered allmulticast mode [ 398.793914][T10289] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 398.817531][T10289] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 398.824647][T10289] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 398.831512][T10289] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 398.835573][ T5708] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 398.839094][T10289] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 398.866459][T10289] elan 0003:04F3:0755.0005: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 398.939434][T10289] usb 1-1: USB disconnect, device number 22 [ 398.957068][ T29] usb 5-1: USB disconnect, device number 23 [ 399.132651][T10403] fido_id[10403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 399.182930][ T5708] usb 2-1: USB disconnect, device number 25 [ 399.211737][T10406] siw: device registration error -23 [ 399.249075][T10410] siw: device registration error -23 [ 399.282812][ T30] audit: type=1804 audit(1780062675.965:3178): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1005" name="bus" dev="ramfs" ino=30526 res=1 errno=0 [ 399.726576][T10418] binder: 10412:10418 ioctl c0306201 0 returned -14 [ 399.788794][T10418] binder: 10412:10418 ioctl c0306201 0 returned -14 [ 399.791899][T10289] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 400.016107][T10289] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 400.032284][T10289] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.047831][T10289] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.061519][T10289] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.070970][T10289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.088578][T10289] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.097089][T10289] usb 3-1: invalid MIDI out EP 0 [ 400.404026][ T30] audit: type=1804 audit(1780062677.085:3179): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1009" name="bus" dev="ramfs" ino=31182 res=1 errno=0 [ 400.524464][ T30] audit: type=1804 audit(1780062677.135:3180): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1009" name="bus" dev="ramfs" ino=31182 res=1 errno=0 [ 400.672526][T10289] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 400.765465][T10429] siw: device registration error -23 [ 401.536254][ T5862] usb 3-1: USB disconnect, device number 35 [ 402.517763][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 402.533023][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 402.533254][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 402.533388][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 402.533484][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 403.504636][ T5708] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 403.621196][T10452] siw: device registration error -23 [ 403.634139][ T30] audit: type=1804 audit(1780062680.325:3181): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1017" name="bus" dev="ramfs" ino=31787 res=1 errno=0 [ 403.815825][ T5708] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 403.867783][ T5708] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.903647][ T5708] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.966727][ T5708] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.022616][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.053429][ T5708] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.076489][ T5708] usb 3-1: invalid MIDI out EP 0 [ 404.297630][ T5708] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 404.565490][ T5729] usb 3-1: USB disconnect, device number 36 [ 404.699235][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 404.790494][ T30] audit: type=1400 audit(1780062681.475:3182): avc: denied { create } for pid=10466 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 404.859720][T10469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 404.922615][ T30] audit: type=1400 audit(1780062681.475:3183): avc: denied { write } for pid=10466 comm="syz.4.1019" path="socket:[31299]" dev="sockfs" ino=31299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 405.066690][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 405.093379][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 405.117586][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 405.662724][ T30] audit: type=1804 audit(1780062682.345:3184): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1024" name="bus" dev="ramfs" ino=31316 res=1 errno=0 [ 405.674477][T10289] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 405.862915][ T30] audit: type=1804 audit(1780062682.545:3185): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1024" name="bus" dev="ramfs" ino=31316 res=1 errno=0 [ 405.904747][T10289] usb 2-1: Using ep0 maxpacket: 8 [ 407.254485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 407.584380][T10289] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.801524][T10289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.801550][T10289] usb 2-1: config 0 has no interface number 0 [ 407.801583][T10289] usb 2-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.834474][T10289] usb 2-1: config 0 interface 1 has no altsetting 0 [ 407.842095][T10491] __nla_validate_parse: 2 callbacks suppressed [ 407.842119][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 407.857974][T10289] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 407.868085][T10289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.870973][T10289] usb 2-1: config 0 descriptor?? [ 407.888134][T10289] hso 2-1:0.1: Failed to find BULK eps [ 407.913351][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 407.913538][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 407.913663][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 407.913723][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 408.067514][T10495] fuse: Bad value for 'user_id' [ 408.067535][T10495] fuse: Bad value for 'user_id' [ 408.134009][T10497] tipc: Enabled bearer , priority 0 [ 408.136815][T10289] usb 2-1: USB disconnect, device number 26 [ 408.142234][T10497] syzkaller0: entered promiscuous mode [ 408.199154][T10497] syzkaller0: entered allmulticast mode [ 408.266056][T10497] tipc: Resetting bearer [ 408.273264][T10496] tipc: Resetting bearer [ 408.415891][T10496] tipc: Disabling bearer [ 408.444407][ T5862] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 410.571793][ T5862] usb 1-1: config 0 has no interfaces? [ 410.626262][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.691722][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.855672][ T5862] usb 1-1: Product: syz [ 410.864918][ T5862] usb 1-1: Manufacturer: syz [ 410.878492][ T5862] usb 1-1: config 0 descriptor?? [ 410.978851][T10545] siw: device registration error -23 [ 411.045493][ T30] audit: type=1804 audit(1780062687.725:3186): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1037" name="bus" dev="ramfs" ino=31402 res=1 errno=0 [ 411.604414][ T5729] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 411.693649][ T5708] usb 1-1: USB disconnect, device number 23 [ 411.766955][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 411.784722][ T5729] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 411.818149][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.843013][ T5729] usb 3-1: config 0 descriptor?? [ 411.859659][ T5729] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 411.983294][T10558] siw: device registration error -23 [ 412.068582][ T30] audit: type=1804 audit(1780062688.755:3187): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1041" name="bus" dev="ramfs" ino=31423 res=1 errno=0 [ 412.125821][ T30] audit: type=1804 audit(1780062688.785:3188): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1041" name="bus" dev="ramfs" ino=31423 res=1 errno=0 [ 413.052991][ T5708] usb 3-1: USB disconnect, device number 37 [ 413.404973][T10571] siw: device registration error -23 [ 413.516056][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 413.724451][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 413.726010][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.726036][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.726055][ T9] usb 1-1: config 0 has no interface number 0 [ 413.726087][ T9] usb 1-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.726113][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 413.726140][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 413.726161][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.730078][ T9] usb 1-1: config 0 descriptor?? [ 413.733366][ T9] hso 1-1:0.1: Failed to find BULK eps [ 413.957740][T10289] usb 1-1: USB disconnect, device number 24 [ 414.139716][T10576] Scaler: ================= START STATUS ================= [ 414.139734][T10576] Scaler: ================== END STATUS ================== [ 414.345855][T10578] syz.2.1047 (10578): drop_caches: 2 [ 414.991749][T10587] wg1 speed is unknown, defaulting to 1000 [ 416.018111][T10595] ceph: No mds server is up or the cluster is laggy [ 416.092327][ T806] libceph: connect (1)[c::]:6789 error -22 [ 416.167356][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 416.361069][ T5708] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 416.466467][T10605] siw: device registration error -23 [ 416.577005][ T30] audit: type=1804 audit(1780062693.265:3189): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1051" name="bus" dev="ramfs" ino=31508 res=1 errno=0 [ 416.623705][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 416.721517][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 416.801924][ T5708] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 416.811773][ T30] audit: type=1804 audit(1780062693.345:3190): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1051" name="bus" dev="ramfs" ino=31508 res=1 errno=0 [ 416.849415][ T5708] usb 1-1: config 2 has no interface number 0 [ 416.874416][ T5708] usb 1-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 416.924068][ T5708] usb 1-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 416.950860][ T5708] usb 1-1: config 2 interface 99 has no altsetting 0 [ 416.967952][ T5708] usb 1-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 416.977639][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.992685][ T5708] usb 1-1: Product: syz [ 417.013057][ T5708] usb 1-1: Manufacturer: syz [ 417.017887][ T5708] usb 1-1: SerialNumber: syz [ 417.837309][T10617] siw: device registration error -23 [ 417.855223][ T30] audit: type=1804 audit(1780062694.535:3191): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1055" name="bus" dev="ramfs" ino=32154 res=1 errno=0 [ 418.304055][T10623] siw: device registration error -23 [ 418.656367][ T30] audit: type=1804 audit(1780062695.005:3192): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1056" name="bus" dev="ramfs" ino=31542 res=1 errno=0 [ 418.744886][ T30] audit: type=1804 audit(1780062695.005:3193): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1056" name="bus" dev="ramfs" ino=31542 res=1 errno=0 [ 418.800622][ T5708] usb 1-1: USB disconnect, device number 25 [ 419.131581][T10631] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1059'. [ 419.301911][T10628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 419.514403][ T5862] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 419.664437][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 419.670889][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.682960][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.721096][ T5862] usb 5-1: config 0 has no interface number 0 [ 419.744957][ T5862] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.779782][ T5862] usb 5-1: config 0 interface 1 has no altsetting 0 [ 419.815130][ T5862] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 419.914535][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.341911][ T5862] usb 5-1: config 0 descriptor?? [ 420.379995][ T5862] hso 5-1:0.1: Failed to find BULK eps [ 420.585686][ T5862] usb 5-1: USB disconnect, device number 24 [ 420.733638][T10649] tipc: Started in network mode [ 420.741867][T10649] tipc: Node identity a601ffaf1155, cluster identity 4711 [ 420.749576][T10649] tipc: Enabled bearer , priority 0 [ 420.758379][T10649] syzkaller0: entered promiscuous mode [ 420.766088][T10649] syzkaller0: entered allmulticast mode [ 420.789480][T10649] tipc: Resetting bearer [ 420.799251][T10648] tipc: Resetting bearer [ 420.844614][T10648] tipc: Disabling bearer [ 420.954781][T10647] Scaler: ================= START STATUS ================= [ 420.972548][T10647] Scaler: ================== END STATUS ================== [ 421.130781][T10647] syz.3.1063 (10647): drop_caches: 2 [ 421.307578][T10664] wg1 speed is unknown, defaulting to 1000 [ 421.436375][T10653] Scaler: ================= START STATUS ================= [ 421.467467][T10653] Scaler: ================== END STATUS ================== [ 421.784244][T10676] netlink: 'syz.4.1069': attribute type 2 has an invalid length. [ 421.792113][T10676] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 421.800686][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 421.831148][T10676] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 422.534018][T10676] 8021q: adding VLAN 0 to HW filter on device bond15 [ 422.541454][T10677] bond15: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 422.604709][T10677] bond15: entered allmulticast mode [ 422.624396][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 422.713040][ T30] audit: type=1804 audit(1780062699.395:3194): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1070" name="bus" dev="ramfs" ino=32325 res=1 errno=0 [ 423.724391][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 423.732963][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.789127][ T29] usb 3-1: config 2 has an invalid interface number: 99 but max is 0 [ 423.837435][ T29] usb 3-1: config 2 has no interface number 0 [ 423.862012][ T29] usb 3-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 423.868932][T10665] syz.1.1065 (10665): drop_caches: 2 [ 423.903454][ T29] usb 3-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 423.903486][ T29] usb 3-1: config 2 interface 99 has no altsetting 0 [ 423.915649][ T29] usb 3-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 423.915678][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.915698][ T29] usb 3-1: Product: syz [ 423.915711][ T29] usb 3-1: Manufacturer: syz [ 423.915726][ T29] usb 3-1: SerialNumber: syz [ 424.033472][T10690] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 424.319805][T10699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1073'. [ 424.568782][ T30] audit: type=1804 audit(1780062701.255:3195): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1075" name="bus" dev="ramfs" ino=32355 res=1 errno=0 [ 425.528703][ T29] usb 3-1: USB disconnect, device number 38 [ 426.274895][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 426.294702][ T5862] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 426.404381][ T29] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 426.466708][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.481477][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.494427][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.509473][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.524453][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.566279][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 426.584001][ T5862] usb 4-1: config 0 descriptor?? [ 426.584605][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.617684][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.643531][ T29] usb 3-1: config 0 has no interface number 0 [ 426.662310][ T29] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.696900][ T29] usb 3-1: config 0 interface 1 has no altsetting 0 [ 426.711427][ T29] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 426.734393][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.745377][ T5708] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 426.766886][ T29] usb 3-1: config 0 descriptor?? [ 426.784113][ T29] hso 3-1:0.1: Failed to find BULK eps [ 426.826831][T10716] wg1 speed is unknown, defaulting to 1000 [ 427.001748][ T29] usb 3-1: USB disconnect, device number 39 [ 427.007806][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 427.048784][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 427.052063][ T5708] usb 1-1: no configurations [ 427.063583][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.070568][ T5708] usb 1-1: can't read configurations, error -22 [ 427.077873][ T806] libceph: connect (1)[c::]:6789 error -99 [ 427.086079][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 427.088765][ T5862] usb 4-1: USB disconnect, device number 22 [ 427.102533][T10716] ceph: No mds server is up or the cluster is laggy [ 427.182401][T10718] Scaler: ================= START STATUS ================= [ 427.190099][T10718] Scaler: ================== END STATUS ================== [ 427.214505][ T5708] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 427.270518][T10718] syz.4.1081 (10718): drop_caches: 2 [ 427.334467][ T806] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 427.351108][T10729] fuse: Bad value for 'user_id' [ 427.356408][T10729] fuse: Bad value for 'user_id' [ 427.374543][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 427.380887][ T5708] usb 1-1: no configurations [ 427.392840][ T5708] usb 1-1: can't read configurations, error -22 [ 427.400853][ T5708] usb usb1-port1: attempt power cycle [ 427.494400][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 427.496250][ T806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.510116][ T806] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 427.510143][ T806] usb 2-1: config 2 has no interface number 0 [ 427.510173][ T806] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 427.510200][ T806] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.510222][ T806] usb 2-1: config 2 interface 99 has no altsetting 0 [ 427.512093][ T806] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 427.512118][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.512136][ T806] usb 2-1: Product: syz [ 427.512149][ T806] usb 2-1: Manufacturer: syz [ 427.512163][ T806] usb 2-1: SerialNumber: syz [ 427.645795][T10734] wg1 speed is unknown, defaulting to 1000 [ 427.933377][T10743] siw: device registration error -23 [ 427.938450][ T5708] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 429.119568][ T806] usb 2-1: USB disconnect, device number 27 [ 429.125727][ T30] audit: type=1804 audit(1780062704.675:3196): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1085" name="bus" dev="ramfs" ino=32834 res=1 errno=0 [ 429.134815][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 429.153920][ T30] audit: type=1804 audit(1780062704.855:3197): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1086" name="bus" dev="ramfs" ino=32423 res=1 errno=0 [ 430.172543][T10734] ceph: No mds server is up or the cluster is laggy [ 430.174540][ T5729] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 430.189426][ T9] libceph: connect (1)[c::]:6789 error -99 [ 430.201626][ T5708] usb 1-1: device descriptor read/all, error -71 [ 430.233256][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 430.387678][T10749] siw: device registration error -23 [ 430.524377][ T30] audit: type=1804 audit(1780062707.095:3198): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1087" name="bus" dev="ramfs" ino=32849 res=1 errno=0 [ 430.549291][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 430.674462][ T30] audit: type=1804 audit(1780062707.095:3199): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1087" name="bus" dev="ramfs" ino=32849 res=1 errno=0 [ 430.720953][ T5729] usb 3-1: device descriptor read/all, error -71 [ 430.961383][T10754] netlink: 'syz.4.1088': attribute type 2 has an invalid length. [ 430.969212][T10754] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 430.977189][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 431.008546][T10754] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 431.176067][T10754] 8021q: adding VLAN 0 to HW filter on device bond16 [ 431.188007][T10756] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 431.343498][T10756] bond16: entered allmulticast mode [ 431.720512][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1089'. [ 432.391453][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 432.398320][ T806] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 432.411810][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 432.438505][T10768] wg1 speed is unknown, defaulting to 1000 [ 432.448444][T10770] ceph: No mds server is up or the cluster is laggy [ 432.570388][ T806] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 432.605935][ T806] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.627250][ T806] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.635356][T10777] fuse: Bad value for 'user_id' [ 432.640749][ T806] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.658955][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.667869][T10777] fuse: Bad value for 'user_id' [ 432.681836][ T806] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.699512][ T806] usb 4-1: invalid MIDI out EP 0 [ 433.915907][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.994434][ T5864] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 434.002689][ T806] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 434.142672][ T806] usb 4-1: USB disconnect, device number 23 [ 434.174416][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 434.228146][ T5864] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.600859][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.607519][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.824391][ T806] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 434.942470][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.956528][ T5864] usb 5-1: config 0 has no interface number 0 [ 434.962713][ T5864] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 434.985986][ T5864] usb 5-1: config 0 interface 1 has no altsetting 0 [ 435.002829][ T5864] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 435.007672][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 435.013814][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.017933][ T5729] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 435.043726][ T806] usb 2-1: no configurations [ 435.044035][ T5864] usb 5-1: config 0 descriptor?? [ 435.050873][ T806] usb 2-1: can't read configurations, error -22 [ 435.071549][ T5864] hso 5-1:0.1: Failed to find BULK eps [ 435.204571][ T806] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 435.222808][ T5729] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 435.243647][ T5729] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.266614][ T5729] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.294426][ T5729] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.299297][ T5864] usb 5-1: USB disconnect, device number 25 [ 435.315407][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.353171][ T5729] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.374123][ T5729] usb 4-1: invalid MIDI out EP 0 [ 435.384732][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 435.396898][ T806] usb 2-1: no configurations [ 435.406240][ T806] usb 2-1: can't read configurations, error -22 [ 435.438046][ T806] usb usb2-port1: attempt power cycle [ 435.580828][ T5729] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 435.700575][T10821] siw: device registration error -23 [ 435.845103][ T806] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 435.907055][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 435.919908][ T806] usb 2-1: no configurations [ 435.925014][ T30] audit: type=1804 audit(1780062712.605:3200): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1100" name="bus" dev="ramfs" ino=33022 res=1 errno=0 [ 435.961789][ T806] usb 2-1: can't read configurations, error -22 [ 436.073991][T10827] siw: device registration error -23 [ 436.104740][ T806] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 436.365066][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 436.377203][ T806] usb 2-1: no configurations [ 436.384977][ T806] usb 2-1: can't read configurations, error -22 [ 436.405955][ T9] usb 4-1: USB disconnect, device number 24 [ 436.406219][ T806] usb usb2-port1: unable to enumerate USB device [ 436.425450][T10831] siw: device registration error -23 [ 436.704114][ T30] audit: type=1804 audit(1780062713.155:3201): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1102" name="bus" dev="ramfs" ino=33035 res=1 errno=0 [ 436.791806][ T30] audit: type=1804 audit(1780062713.165:3202): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1102" name="bus" dev="ramfs" ino=33035 res=1 errno=0 [ 436.907293][T10833] wg1 speed is unknown, defaulting to 1000 [ 437.663977][T10837] ceph: No mds server is up or the cluster is laggy [ 437.671902][ T806] libceph: connect (1)[c::]:6789 error -22 [ 437.692587][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 437.737259][ T5798] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 437.818170][T10843] siw: device registration error -23 [ 437.959016][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 438.228530][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.608996][ T5798] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 438.698218][ T5798] usb 1-1: config 2 has no interface number 0 [ 438.713616][ T5798] usb 1-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 438.761800][ T5798] usb 1-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 438.795783][ T5798] usb 1-1: config 2 interface 99 has no altsetting 0 [ 438.822982][ T5798] usb 1-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 438.852169][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.884395][ T5798] usb 1-1: Product: syz [ 438.922011][ T5798] usb 1-1: Manufacturer: syz [ 438.954279][ T5798] usb 1-1: SerialNumber: syz [ 440.368873][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1111'. [ 440.620138][ T5798] usb 1-1: USB disconnect, device number 30 [ 440.950469][ T5708] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 441.052461][T10877] wg1 speed is unknown, defaulting to 1000 [ 441.202244][ T806] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 441.225692][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.245517][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.274372][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.281479][T10883] fuse: Unknown parameter 'grou00000000000000000000' [ 441.294583][ T5708] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.294612][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.296613][ T5708] usb 5-1: config 0 descriptor?? [ 441.403413][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 441.412902][ T806] usb 3-1: no configurations [ 441.420591][ T806] usb 3-1: can't read configurations, error -22 [ 441.599210][T10885] ceph: No mds server is up or the cluster is laggy [ 441.613714][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 441.758687][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 441.946318][ T5708] usbhid 5-1:0.0: can't add hid device: -71 [ 441.954612][ T5708] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 441.965087][ T5708] usb 5-1: USB disconnect, device number 26 [ 442.004417][ T806] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 442.134069][T10896] tipc: Started in network mode [ 442.143106][T10896] tipc: Node identity da549dfba17a, cluster identity 4711 [ 442.154567][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 442.160019][T10896] tipc: Enabled bearer , priority 0 [ 442.171483][ T806] usb 3-1: no configurations [ 442.186933][ T806] usb 3-1: can't read configurations, error -22 [ 442.213036][ T806] usb usb3-port1: attempt power cycle [ 442.241773][T10899] siw: device registration error -23 [ 442.242164][T10896] tipc: Resetting bearer [ 442.256891][ T30] audit: type=1804 audit(1780062718.945:3203): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1120" name="bus" dev="ramfs" ino=33167 res=1 errno=0 [ 442.564421][ T30] audit: type=1804 audit(1780062718.945:3204): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1120" name="bus" dev="ramfs" ino=33167 res=1 errno=0 [ 442.598630][ T806] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 442.629191][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 442.636151][T10895] tipc: Disabling bearer [ 442.699185][ T806] usb 3-1: no configurations [ 442.708797][ T806] usb 3-1: can't read configurations, error -22 [ 442.799777][T10904] siw: device registration error -23 [ 442.910433][ T806] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 443.045374][ T30] audit: type=1804 audit(1780062719.565:3205): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1121" name="bus" dev="ramfs" ino=33182 res=1 errno=0 [ 443.078836][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 443.084715][ T806] usb 3-1: no configurations [ 443.089519][ T806] usb 3-1: can't read configurations, error -22 [ 443.544980][ T30] audit: type=1804 audit(1780062719.575:3206): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1121" name="bus" dev="ramfs" ino=33182 res=1 errno=0 [ 443.566191][ T806] usb usb3-port1: unable to enumerate USB device [ 444.102794][T10917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31 [ 444.224402][ T5798] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 444.844388][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 444.851074][ T5798] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.860367][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.933582][ T5798] usb 3-1: config 0 has no interface number 0 [ 444.958876][ T5798] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.991945][ T5798] usb 3-1: config 0 interface 1 has no altsetting 0 [ 445.011953][ T5798] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 445.011982][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.047254][ T5798] usb 3-1: config 0 descriptor?? [ 445.108423][ T5798] hso 3-1:0.1: Failed to find BULK eps [ 445.410943][ T5798] usb 3-1: USB disconnect, device number 46 [ 445.966703][T10944] siw: device registration error -23 [ 446.054408][ T30] audit: type=1804 audit(1780062722.725:3207): pid=10944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1131" name="bus" dev="ramfs" ino=33368 res=1 errno=0 [ 446.289686][ T30] audit: type=1804 audit(1780062722.735:3208): pid=10944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1131" name="bus" dev="ramfs" ino=33368 res=1 errno=0 [ 446.808682][T10955] siw: device registration error -23 [ 447.206969][T10958] siw: device registration error -23 [ 447.563774][ T30] audit: type=1804 audit(1780062723.935:3209): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1135" name="bus" dev="ramfs" ino=33394 res=1 errno=0 [ 447.994492][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 448.215022][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 448.352583][ T9] usb 4-1: no configurations [ 448.451701][T10968] wg1 speed is unknown, defaulting to 1000 [ 448.480961][ T9] usb 4-1: can't read configurations, error -22 [ 448.638184][ T5708] libceph: connect (1)[c::]:6789 error -22 [ 448.942586][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 448.994542][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 449.144846][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 449.154078][ T9] usb 4-1: no configurations [ 449.180138][ T9] usb 4-1: can't read configurations, error -22 [ 449.184423][ T806] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 449.197590][ T9] usb usb4-port1: attempt power cycle [ 449.226041][ T5708] libceph: connect (1)[c::]:6789 error -22 [ 449.233965][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 449.375335][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 449.389067][ T806] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.407291][ T806] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 449.424454][ T806] usb 1-1: config 2 has no interface number 0 [ 449.440286][ T806] usb 1-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 449.464515][ T806] usb 1-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.486559][ T806] usb 1-1: config 2 interface 99 has no altsetting 0 [ 449.500984][ T806] usb 1-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 449.501013][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.501032][ T806] usb 1-1: Product: syz [ 449.501046][ T806] usb 1-1: Manufacturer: syz [ 449.501061][ T806] usb 1-1: SerialNumber: syz [ 449.564411][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 449.585654][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 449.619652][ T9] usb 4-1: no configurations [ 449.619678][ T9] usb 4-1: can't read configurations, error -22 [ 449.755634][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 449.763234][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 449.766712][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 449.795887][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 449.805023][ T9] usb 4-1: no configurations [ 449.813927][ T9] usb 4-1: can't read configurations, error -22 [ 449.830840][ T9] usb usb4-port1: unable to enumerate USB device [ 449.999597][T10993] siw: device registration error -23 [ 450.030957][ T30] audit: type=1400 audit(1780062726.725:3210): avc: denied { mounton } for pid=10989 comm="syz.1.1145" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 450.076253][ T5864] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 450.273846][ T5864] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 450.289935][ T5864] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.315605][ T5864] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.353238][ T5864] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.377444][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.412584][T10990] syz.1.1145 uses obsolete (PF_INET,SOCK_PACKET) [ 450.439776][ T5864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.461895][ T5864] usb 3-1: invalid MIDI out EP 0 [ 450.658067][ T5864] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 450.812057][ T5864] usb 3-1: USB disconnect, device number 47 [ 451.169480][T10971] ceph: No mds server is up or the cluster is laggy [ 451.356297][T11010] siw: device registration error -23 [ 451.408594][ T806] usb 1-1: USB disconnect, device number 31 [ 451.564678][ T30] audit: type=1804 audit(1780062728.185:3211): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1149" name="bus" dev="ramfs" ino=33727 res=1 errno=0 [ 452.033518][ T30] audit: type=1804 audit(1780062728.225:3212): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1149" name="bus" dev="ramfs" ino=33727 res=1 errno=0 [ 452.512961][T11030] netlink: 'syz.4.1153': attribute type 2 has an invalid length. [ 452.521693][T11030] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 452.530231][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 452.561221][T11030] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 452.669664][T11030] 8021q: adding VLAN 0 to HW filter on device bond17 [ 452.680224][T11032] bond17: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 452.904204][T11032] bond17: entered allmulticast mode [ 452.966958][T11036] FAULT_INJECTION: forcing a failure. [ 452.966958][T11036] name fail_futex, interval 1, probability 0, space 0, times 1 [ 452.980064][T11036] CPU: 0 UID: 0 PID: 11036 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) [ 452.980088][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.980097][T11036] Call Trace: [ 452.980103][T11036] [ 452.980110][T11036] dump_stack_lvl+0x100/0x190 [ 452.980138][T11036] should_fail_ex.cold+0x5/0xa [ 452.980164][T11036] get_futex_key+0x295/0x1510 [ 452.980238][T11036] ? __pfx_get_futex_key+0x10/0x10 [ 452.980269][T11036] futex_wake_op+0x12d/0xdc0 [ 452.980285][T11036] ? get_pid_task+0xfc/0x250 [ 452.980318][T11036] ? __pfx_futex_wake_op+0x10/0x10 [ 452.980334][T11036] ? proc_fail_nth_write+0x9f/0x220 [ 452.980364][T11036] ? find_held_lock+0x2b/0x80 [ 452.980383][T11036] ? ksys_write+0x190/0x250 [ 452.980402][T11036] ? ksys_write+0x190/0x250 [ 452.980427][T11036] do_futex+0x2f1/0x350 [ 452.980452][T11036] ? __pfx_do_futex+0x10/0x10 [ 452.980483][T11036] __x64_sys_futex+0x34f/0x4d0 [ 452.980509][T11036] ? fput+0x79/0x100 [ 452.980528][T11036] ? __pfx___x64_sys_futex+0x10/0x10 [ 452.980549][T11036] ? ksys_write+0x1ac/0x250 [ 452.980567][T11036] ? __pfx_ksys_write+0x10/0x10 [ 452.980586][T11036] ? rcu_is_watching+0x12/0xc0 [ 452.980612][T11036] do_syscall_64+0x115/0x870 [ 452.980636][T11036] ? clear_bhb_loop+0x40/0x90 [ 452.980656][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.980672][T11036] RIP: 0033:0x7f555c39ce59 [ 452.980687][T11036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.980702][T11036] RSP: 002b:00007f555a5d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 452.980718][T11036] RAX: ffffffffffffffda RBX: 00007f555c616090 RCX: 00007f555c39ce59 [ 452.980728][T11036] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 452.980737][T11036] RBP: 00007f555a5d5090 R08: 0000200000000000 R09: 0000000000000000 [ 452.980747][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.980757][T11036] R13: 00007f555c616128 R14: 00007f555c616090 R15: 00007fff22808818 [ 452.980778][T11036] [ 453.394420][T10289] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 453.546488][T10289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.558589][T10289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.571532][T10289] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 453.598416][T10289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.610999][T10289] usb 2-1: config 0 descriptor?? [ 454.063925][T11051] siw: device registration error -23 [ 454.084609][T10289] usbhid 2-1:0.0: can't add hid device: -71 [ 454.095058][T10289] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 454.206281][T10289] usb 2-1: USB disconnect, device number 32 [ 454.833301][ T30] audit: type=1804 audit(1780062731.455:3213): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1161" name="bus" dev="ramfs" ino=33783 res=1 errno=0 [ 454.833348][ T30] audit: type=1804 audit(1780062731.465:3214): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1161" name="bus" dev="ramfs" ino=33783 res=1 errno=0 [ 454.980562][T11063] siw: device registration error -23 [ 455.047471][ T30] audit: type=1804 audit(1780062731.695:3215): pid=11063 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1162" name="bus" dev="ramfs" ino=33790 res=1 errno=0 [ 455.554519][ T806] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 455.757981][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.763894][ T30] audit: type=1804 audit(1780062732.425:3216): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1165" name="bus" dev="ramfs" ino=34832 res=1 errno=0 [ 455.976175][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.003032][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.068148][ T806] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.100228][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.127698][ T806] usb 4-1: config 0 descriptor?? [ 456.544784][T11075] Scaler: ================= START STATUS ================= [ 456.569104][ T806] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 456.594552][T11075] Scaler: ================== END STATUS ================== [ 456.766459][ T806] usb 4-1: USB disconnect, device number 29 [ 456.908657][T11088] siw: device registration error -23 [ 456.929781][T11079] fido_id[11079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 457.102691][ T30] audit: type=1804 audit(1780062733.725:3217): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1171" name="bus" dev="ramfs" ino=34863 res=1 errno=0 [ 457.141563][T11076] syz.0.1167 (11076): drop_caches: 2 [ 457.273665][ T30] audit: type=1804 audit(1780062733.755:3218): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1171" name="bus" dev="ramfs" ino=34863 res=1 errno=0 [ 457.541352][T11097] siw: device registration error -23 [ 458.074552][T11105] siw: device registration error -23 [ 458.184499][ T30] audit: type=1804 audit(1780062734.835:3219): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1174" name="bus" dev="ramfs" ino=34881 res=1 errno=0 [ 458.351609][ T30] audit: type=1804 audit(1780062734.835:3220): pid=11105 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1174" name="bus" dev="ramfs" ino=34881 res=1 errno=0 [ 459.310145][ T30] audit: type=1804 audit(1780062736.005:3221): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1178" name="bus" dev="ramfs" ino=34930 res=1 errno=0 [ 459.316368][T11120] wg1 speed is unknown, defaulting to 1000 [ 459.766791][ T806] libceph: connect (1)[c::]:6789 error -22 [ 459.811155][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 459.940347][T11129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32 [ 460.030853][T11123] ceph: No mds server is up or the cluster is laggy [ 460.081189][ T806] libceph: connect (1)[c::]:6789 error -22 [ 460.136051][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 461.466038][T11141] fuse: Bad value for 'user_id' [ 461.471077][T11141] fuse: Bad value for 'user_id' [ 461.584464][ T2171] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 461.682471][T11145] fuse: Bad value for 'user_id' [ 461.688346][T11145] fuse: Bad value for 'user_id' [ 461.746514][ T2171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.758142][ T2171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.768036][ T2171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.782130][ T2171] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.791720][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.828723][ T2171] usb 5-1: config 0 descriptor?? [ 462.005403][ T806] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 462.064484][T10289] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 462.072249][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 462.166032][ T806] usb 1-1: config 0 has no interfaces? [ 462.177380][ T806] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 462.194399][ T806] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 462.212819][ T806] usb 1-1: Product: syz [ 462.217310][ T806] usb 1-1: Manufacturer: syz [ 462.232802][ T806] usb 1-1: config 0 descriptor?? [ 462.247002][T10289] usb 3-1: config 0 has no interfaces? [ 462.254260][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.272781][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.285532][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 462.295563][T10289] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 462.306405][ T2171] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 462.324350][T10289] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 462.337203][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.345913][T10289] usb 3-1: Product: syz [ 462.350353][T10289] usb 3-1: Manufacturer: syz [ 462.359024][ T9] usb 4-1: config 0 descriptor?? [ 462.397802][T10289] usb 3-1: config 0 descriptor?? [ 462.459190][ T806] usb 1-1: USB disconnect, device number 32 [ 462.467300][T10289] usb 5-1: USB disconnect, device number 27 [ 462.827842][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 462.848305][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 462.863366][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 462.877965][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 462.893252][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 462.909600][ T9] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 462.942921][ T9] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 463.161351][ T806] libceph: connect (1)[c::]:6789 error -22 [ 463.176574][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 463.194936][ T806] libceph: connect (1)[c::]:6789 error -22 [ 463.292968][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 463.455566][ T30] audit: type=1400 audit(1780062740.085:3222): avc: denied { write } for pid=11156 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 463.711837][ T806] libceph: connect (1)[c::]:6789 error -22 [ 463.717945][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 463.962847][T11157] ceph: No mds server is up or the cluster is laggy [ 465.134477][ T2171] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 465.379904][ T2171] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.484188][ T2171] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 465.632866][ T2171] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.764525][ T2171] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.841242][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.968543][ T2171] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.988190][ T2171] usb 5-1: invalid MIDI out EP 0 [ 466.507799][ T2171] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 466.597659][ T2171] usb 5-1: USB disconnect, device number 28 [ 466.708437][ T806] usb 3-1: USB disconnect, device number 48 [ 466.728454][ T5798] usb 4-1: USB disconnect, device number 30 [ 466.795643][T11212] fuse: Bad value for 'user_id' [ 466.802062][T11212] fuse: Bad value for 'user_id' [ 467.067875][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 467.075267][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 467.092300][T11222] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33 [ 467.125252][T11223] ceph: No mds server is up or the cluster is laggy [ 467.164367][ T806] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 467.366674][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.395488][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.425057][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.481318][ T806] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.511596][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.538156][ T806] usb 3-1: config 0 descriptor?? [ 467.608187][ T30] audit: type=1804 audit(1780062744.295:3223): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1206" name="bus" dev="ramfs" ino=35065 res=1 errno=0 [ 468.009043][ T806] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 468.178839][ T806] usb 3-1: USB disconnect, device number 49 [ 468.573083][T11249] siw: device registration error -23 [ 468.694966][ T30] audit: type=1804 audit(1780062745.295:3224): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1208" name="bus" dev="ramfs" ino=35145 res=1 errno=0 [ 469.314505][ T5618] Bluetooth: hci4: command 0x0405 tx timeout [ 469.545920][T11266] siw: device registration error -23 [ 469.712404][ T30] audit: type=1804 audit(1780062746.385:3225): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1211" name="bus" dev="ramfs" ino=35187 res=1 errno=0 [ 469.851473][ T30] audit: type=1804 audit(1780062746.395:3226): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1211" name="bus" dev="ramfs" ino=35187 res=1 errno=0 [ 470.211185][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 470.351492][T11281] wg1 speed is unknown, defaulting to 1000 [ 470.443029][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.455175][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.506814][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.514371][ T806] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 470.520106][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.536682][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.547848][ T2171] libceph: connect (1)[c::]:6789 error -99 [ 470.553814][ T2171] libceph: mon0 (1)[c::]:6789 connect error [ 470.573040][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.583758][ T9] usb 5-1: invalid MIDI out EP 0 [ 470.714008][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 470.727026][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.739256][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.751317][ T806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.764837][ T806] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.773901][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.784975][ T806] usb 1-1: config 0 descriptor?? [ 470.814549][ T2171] libceph: connect (1)[c::]:6789 error -99 [ 470.820925][ T2171] libceph: mon0 (1)[c::]:6789 connect error [ 470.834519][ T5798] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 470.908402][ T5729] usb 5-1: USB disconnect, device number 29 [ 470.994486][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 471.014024][ T30] audit: type=1804 audit(1780062747.695:3227): pid=11289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1220" name="bus" dev="ramfs" ino=35318 res=1 errno=0 [ 471.085518][ T5798] usb 4-1: unable to get BOS descriptor or descriptor too short [ 471.319378][ T5798] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 471.334539][ T9] libceph: connect (1)[c::]:6789 error -99 [ 471.340632][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 471.350241][ T5798] usb 4-1: config 2 has no interface number 0 [ 471.361703][ T5798] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 471.376394][ T5798] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.390333][ T5798] usb 4-1: config 2 interface 99 has no altsetting 0 [ 471.404751][ T5798] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 471.544353][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.563357][ T806] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 471.584119][ T5798] usb 4-1: Product: syz [ 471.590137][ T5798] usb 4-1: Manufacturer: syz [ 471.600304][ T5798] usb 4-1: SerialNumber: syz [ 471.643936][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1221'. [ 472.030702][ T806] usb 1-1: USB disconnect, device number 33 [ 472.290599][ T30] audit: type=1804 audit(1780062748.905:3228): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1223" name="bus" dev="ramfs" ino=35345 res=1 errno=0 [ 472.524998][ T9] libceph: connect (1)[c::]:6789 error -99 [ 472.536332][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 472.615971][T11306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 473.310400][T11281] ceph: No mds server is up or the cluster is laggy [ 473.374857][ T5798] usb 4-1: USB disconnect, device number 31 [ 473.490593][T11315] siw: device registration error -23 [ 473.971928][ T30] audit: type=1804 audit(1780062750.215:3229): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1228" name="bus" dev="ramfs" ino=35382 res=1 errno=0 [ 474.162822][ T30] audit: type=1804 audit(1780062750.225:3230): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1228" name="bus" dev="ramfs" ino=35382 res=1 errno=0 [ 474.293710][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1229'. [ 474.844394][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 474.994454][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 475.000868][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.009870][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.037889][ T9] usb 1-1: config 0 has no interface number 0 [ 475.067168][ T9] usb 1-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.098945][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 475.126532][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 475.144357][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.164683][ T9] usb 1-1: config 0 descriptor?? [ 475.184879][ T9] hso 1-1:0.1: Failed to find BULK eps [ 475.357515][ T30] audit: type=1804 audit(1780062752.035:3231): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1236" name="bus" dev="ramfs" ino=35481 res=1 errno=0 [ 475.643138][ T9] usb 1-1: USB disconnect, device number 34 [ 475.647985][ T30] audit: type=1804 audit(1780062752.045:3232): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1236" name="bus" dev="ramfs" ino=35481 res=1 errno=0 [ 476.936407][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1238'. [ 477.264019][T11355] siw: device registration error -23 [ 477.514432][ T30] audit: type=1804 audit(1780062754.005:3233): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1239" name="bus" dev="ramfs" ino=35503 res=1 errno=0 [ 477.638706][ T30] audit: type=1804 audit(1780062754.015:3234): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1239" name="bus" dev="ramfs" ino=35503 res=1 errno=0 [ 478.629204][ T30] audit: type=1804 audit(1780062755.315:3235): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1243" name="bus" dev="ramfs" ino=35538 res=1 errno=0 [ 478.637535][T11373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34 [ 480.487878][T11381] Scaler: ================= START STATUS ================= [ 480.535165][T11381] Scaler: ================== END STATUS ================== [ 480.721437][T11410] syz.0.1247 (11410): drop_caches: 2 [ 481.269142][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'. [ 481.595830][T11428] siw: device registration error -23 [ 481.704499][ T30] audit: type=1804 audit(1780062758.365:3236): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1253" name="bus" dev="ramfs" ino=35595 res=1 errno=0 [ 481.980875][ T30] audit: type=1804 audit(1780062758.365:3237): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1253" name="bus" dev="ramfs" ino=35595 res=1 errno=0 [ 482.424038][T11437] fuse: Bad value for 'user_id' [ 482.429613][T11437] fuse: Bad value for 'user_id' [ 482.485338][T10289] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 482.554689][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 482.562296][ T2171] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 482.651656][T10289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.663530][T10289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.675625][T10289] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 482.705843][T10289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.736400][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.748390][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 482.760001][T10289] usb 4-1: config 0 descriptor?? [ 482.770416][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.790519][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.821822][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.836177][ T2171] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 482.863982][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.884070][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 482.902788][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.915546][ T2171] usb 2-1: config 0 descriptor?? [ 482.960332][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.982717][ T9] usb 3-1: invalid MIDI out EP 0 [ 483.156036][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 483.184440][ T5798] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 483.210963][T10289] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 483.227569][T10289] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 483.246218][T10289] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 483.318482][T10289] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 483.395666][T10289] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 483.551654][T10289] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 483.633255][ T2171] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 483.715551][T10289] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 483.769292][ T2171] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 483.828408][ T2171] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 483.912098][ T2171] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 483.972597][T10289] usb 4-1: USB disconnect, device number 32 [ 484.001743][ T2171] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 484.082546][ T2171] elan 0003:04F3:0755.000D: failed to start in urb: -90 [ 484.111793][T11456] fido_id[11456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 484.149116][ T2171] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 484.185237][ T5798] usb 5-1: Using ep0 maxpacket: 16 [ 484.207446][ T5798] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 484.286053][T10289] usb 3-1: USB disconnect, device number 50 [ 484.302281][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.419149][ T2171] usb 2-1: USB disconnect, device number 33 [ 484.463784][ T5798] usb 5-1: config 0 descriptor?? [ 484.565680][ T5798] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 484.743137][T11480] fido_id[11480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 485.738403][ T2171] usb 5-1: USB disconnect, device number 30 [ 485.957109][T11510] siw: device registration error -23 [ 486.099351][ T30] audit: type=1804 audit(1780062762.745:3238): pid=11510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1266" name="bus" dev="ramfs" ino=35804 res=1 errno=0 [ 486.248389][ T30] audit: type=1804 audit(1780062762.755:3239): pid=11510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1266" name="bus" dev="ramfs" ino=35804 res=1 errno=0 [ 486.935934][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 487.153303][T11523] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 487.302238][T11523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.419326][T11524] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 487.524389][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 487.531483][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.541501][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.551745][ T9] usb 4-1: config 0 has no interface number 0 [ 487.560391][ T9] usb 4-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.577775][T11524] bond6: entered allmulticast mode [ 487.616668][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 487.630599][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 487.679097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.323476][ T9] usb 4-1: config 0 descriptor?? [ 488.349575][ T9] hso 4-1:0.1: Failed to find BULK eps [ 488.554600][ T30] audit: type=1804 audit(1780062765.225:3240): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1272" name="bus" dev="ramfs" ino=35834 res=1 errno=0 [ 488.767917][ T30] audit: type=1804 audit(1780062765.225:3241): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1272" name="bus" dev="ramfs" ino=35834 res=1 errno=0 [ 489.223449][ T5715] usb 4-1: USB disconnect, device number 33 [ 489.816107][T11568] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1275'. [ 491.031318][T11578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 491.308144][ T9] libceph: connect (1)[c::]:6789 error -22 [ 491.314145][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 491.584688][ T9] libceph: connect (1)[c::]:6789 error -22 [ 491.602540][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 491.905455][ T30] audit: type=1804 audit(1780062768.525:3242): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1284" name="bus" dev="ramfs" ino=36987 res=1 errno=0 [ 491.974422][ T30] audit: type=1804 audit(1780062768.525:3243): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1284" name="bus" dev="ramfs" ino=36987 res=1 errno=0 [ 492.105150][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 492.122218][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 492.124710][ T2171] libceph: connect (1)[c::]:6789 error -22 [ 492.131028][T11585] ceph: No mds server is up or the cluster is laggy [ 492.134267][ T2171] libceph: mon0 (1)[c::]:6789 connect error [ 492.162449][T11604] ceph: No mds server is up or the cluster is laggy [ 493.320563][T11623] siw: device registration error -23 [ 493.503245][ T30] audit: type=1804 audit(1780062770.185:3244): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1288" name="bus" dev="ramfs" ino=37022 res=1 errno=0 [ 495.721182][T11645] siw: device registration error -23 [ 495.776511][ T30] audit: type=1804 audit(1780062772.435:3245): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1296" name="bus" dev="ramfs" ino=37064 res=1 errno=0 [ 495.989844][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.998781][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.334374][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 496.426527][T11655] siw: device registration error -23 [ 496.496443][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 496.528470][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.544083][ T30] audit: type=1804 audit(1780062773.235:3246): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1298" name="bus" dev="ramfs" ino=36518 res=1 errno=0 [ 496.576543][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.659011][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.777563][T11658] siw: device registration error -23 [ 497.007473][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.038372][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.253365][ T9] usb 3-1: invalid MIDI out EP 0 [ 497.935786][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 498.026800][ T9] usb 3-1: USB disconnect, device number 51 [ 498.354385][ T2171] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 499.245080][T11671] siw: device registration error -23 [ 499.385832][ T30] audit: type=1804 audit(1780062775.935:3247): pid=11671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1305" name="bus" dev="ramfs" ino=36556 res=1 errno=0 [ 499.421484][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.431365][ T30] audit: type=1804 audit(1780062775.935:3248): pid=11671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1305" name="bus" dev="ramfs" ino=36556 res=1 errno=0 [ 499.455388][ T2171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.605458][ T2171] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 499.614359][ T30] audit: type=1804 audit(1780062776.215:3249): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1301" name="bus" dev="ramfs" ino=37176 res=1 errno=0 [ 499.659246][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.947696][ T2171] usb 2-1: config 0 descriptor?? [ 500.104312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 502.474502][ T2171] usbhid 2-1:0.0: can't add hid device: -71 [ 502.493545][ T2171] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 502.703908][ T2171] usb 2-1: USB disconnect, device number 34 [ 503.988328][T11694] wg1 speed is unknown, defaulting to 1000 [ 504.150877][T11703] ceph: No mds server is up or the cluster is laggy [ 504.373206][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 504.436371][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 504.714425][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 504.720560][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 504.794570][T11713] ceph: No mds server is up or the cluster is laggy [ 504.804346][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 504.814082][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 504.949182][ T5798] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 505.117842][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 505.129419][ T5798] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 505.147929][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.249471][ T5798] usb 3-1: config 0 has no interface number 0 [ 505.287672][ T5798] usb 3-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 505.383006][ T5798] usb 3-1: config 0 interface 1 has no altsetting 0 [ 505.410749][ T5798] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 505.461076][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.567785][ T5798] usb 3-1: config 0 descriptor?? [ 505.609272][ T5798] hso 3-1:0.1: Failed to find BULK eps [ 505.833059][ T5729] usb 3-1: USB disconnect, device number 52 [ 506.014352][ T5798] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 506.174563][ T5798] usb 5-1: Using ep0 maxpacket: 16 [ 506.188961][ T5798] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 506.208832][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.249383][ T5798] usb 5-1: config 0 descriptor?? [ 506.282927][ T5798] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 506.485154][T11740] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1322'. [ 507.147192][ T5798] gspca_sonixj: reg_w1 err -71 [ 507.147234][ T5798] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 507.148887][ T5798] usb 5-1: USB disconnect, device number 31 [ 507.791506][T11757] siw: device registration error -23 [ 508.987447][T11767] wg1 speed is unknown, defaulting to 1000 [ 509.795824][T11765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 509.944359][ T806] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 509.966666][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 510.053859][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 510.124437][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 510.138064][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 510.167811][ T806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 510.182425][ T806] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 510.191948][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 510.201674][ T806] usb 4-1: config 2 has no interface number 0 [ 510.219719][ T806] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 510.264446][ T806] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.268999][T11791] fuse: Bad value for 'user_id' [ 510.299244][ T806] usb 4-1: config 2 interface 99 has no altsetting 0 [ 510.314467][T11791] fuse: Bad value for 'user_id' [ 510.364149][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 510.387634][ T806] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 510.448467][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.686185][ T806] usb 4-1: Product: syz [ 511.001943][ T806] usb 4-1: Manufacturer: syz [ 511.071857][ T806] usb 4-1: SerialNumber: syz [ 511.304761][ T5798] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 511.478008][ T5798] usb 5-1: config 0 has no interfaces? [ 511.494127][ T5798] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 511.518368][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 511.546521][ T5798] usb 5-1: Product: syz [ 511.551099][ T5798] usb 5-1: Manufacturer: syz [ 511.563707][ T5798] usb 5-1: config 0 descriptor?? [ 511.603962][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 511.670031][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 511.671630][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 511.681904][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 511.686660][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 511.813282][ T5798] usb 5-1: USB disconnect, device number 32 [ 512.045323][T11786] Bluetooth: hci4: command 0x0405 tx timeout [ 512.348653][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 512.373501][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 512.413694][T11813] ceph: No mds server is up or the cluster is laggy [ 512.542324][ T806] usb 4-1: USB disconnect, device number 34 [ 512.706773][ T30] audit: type=1400 audit(1780062789.395:3250): avc: denied { read append } for pid=11820 comm="syz.3.1340" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 512.735229][ T30] audit: type=1400 audit(1780062789.395:3251): avc: denied { open } for pid=11820 comm="syz.3.1340" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 513.301388][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 514.366990][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 514.427930][T11839] siw: device registration error -23 [ 514.435668][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.461946][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 514.489264][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.502471][ T9] usb 1-1: config 0 descriptor?? [ 514.813379][T11846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input37 [ 514.952175][ T9] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 514.975456][ T9] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 515.000398][ T9] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 515.013028][ T9] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 515.026940][ T9] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 515.039885][ T9] elan 0003:04F3:0755.000E: failed to start in urb: -90 [ 515.061454][ T9] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 515.220846][ T30] audit: type=1400 audit(1780062791.905:3252): avc: denied { write } for pid=11827 comm="syz.0.1343" name="hidraw0" dev="devtmpfs" ino=3528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 515.223933][ T9] usb 1-1: USB disconnect, device number 35 [ 515.258158][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 515.444803][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 515.466895][ T24] usb 3-1: no configurations [ 515.481489][ T24] usb 3-1: can't read configurations, error -22 [ 515.490479][T10289] libceph: connect (1)[c::]:6789 error -22 [ 515.499342][T10289] libceph: mon0 (1)[c::]:6789 connect error [ 515.505889][T10289] libceph: connect (1)[c::]:6789 error -22 [ 515.518750][T10289] libceph: mon0 (1)[c::]:6789 connect error [ 515.550377][T11859] ceph: No mds server is up or the cluster is laggy [ 515.644541][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 515.815189][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 515.835012][ T24] usb 3-1: no configurations [ 515.857197][ T24] usb 3-1: can't read configurations, error -22 [ 515.882914][ T24] usb usb3-port1: attempt power cycle [ 517.130721][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 517.156491][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 517.162780][ T24] usb 3-1: no configurations [ 517.170900][ T24] usb 3-1: can't read configurations, error -22 [ 517.186055][T11871] wg1 speed is unknown, defaulting to 1000 [ 517.698228][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 517.950942][T11879] ceph: No mds server is up or the cluster is laggy [ 517.957812][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 517.976742][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 517.994841][ T24] usb 3-1: device descriptor read/8, error -71 [ 518.064346][ T5798] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 518.155744][ T24] usb usb3-port1: unable to enumerate USB device [ 518.188700][T11885] siw: device registration error -23 [ 518.553939][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 518.877346][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 518.886676][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.962689][ T5798] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 518.987193][ T5798] usb 1-1: config 2 has no interface number 0 [ 518.993729][ T5798] usb 1-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 519.008834][ T5798] usb 1-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.018851][ T5798] usb 1-1: config 2 interface 99 has no altsetting 0 [ 519.036752][ T5798] usb 1-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 519.047671][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.055926][ T5798] usb 1-1: Product: syz [ 519.060476][ T5798] usb 1-1: Manufacturer: syz [ 519.070599][ T5798] usb 1-1: SerialNumber: syz [ 519.116051][ T5798] usb 1-1: can't set config #2, error -71 [ 519.159445][ T5798] usb 1-1: USB disconnect, device number 36 [ 519.562721][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 519.598356][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 520.341855][T11906] Scaler: ================= START STATUS ================= [ 520.362856][T11906] Scaler: ================== END STATUS ================== [ 520.649967][T11919] siw: device registration error -23 [ 520.654405][ T5729] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 520.841645][ T5729] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 520.936282][ T5729] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 520.955159][T11909] syz.2.1361 (11909): drop_caches: 2 [ 520.998380][ T5729] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.022196][T11922] siw: device registration error -23 [ 521.274393][ T30] audit: type=1804 audit(1780062797.755:3253): pid=11922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1365" name="bus" dev="ramfs" ino=37626 res=1 errno=0 [ 521.320775][ T5729] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.345667][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.364413][ T30] audit: type=1804 audit(1780062797.765:3254): pid=11922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1365" name="bus" dev="ramfs" ino=37626 res=1 errno=0 [ 521.433450][ T5729] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 521.461237][ T5729] usb 2-1: invalid MIDI out EP 0 [ 521.901403][ T5729] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 521.949227][ T5729] usb 2-1: USB disconnect, device number 35 [ 521.994380][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 522.188074][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1368'. [ 522.255531][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 522.285887][ T9] usb 1-1: no configurations [ 522.291256][ T9] usb 1-1: can't read configurations, error -22 [ 522.424408][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 522.595491][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 522.596068][ T9] usb 1-1: no configurations [ 522.596084][ T9] usb 1-1: can't read configurations, error -22 [ 522.599175][ T9] usb usb1-port1: attempt power cycle [ 522.804348][T10289] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 522.934389][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 522.965468][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 522.966706][T10289] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 522.966749][T10289] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 522.966774][T10289] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.966809][T10289] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.966830][T10289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.968088][ T9] usb 1-1: no configurations [ 522.968104][ T9] usb 1-1: can't read configurations, error -22 [ 522.972388][T10289] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.972740][T10289] usb 2-1: invalid MIDI out EP 0 [ 523.104431][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 523.145332][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 523.145857][ T9] usb 1-1: no configurations [ 523.145868][ T9] usb 1-1: can't read configurations, error -22 [ 523.146055][ T9] usb usb1-port1: unable to enumerate USB device [ 524.146373][T10289] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 524.467542][T11951] siw: device registration error -23 [ 524.483734][ T30] audit: type=1804 audit(1780062801.165:3255): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1375" name="bus" dev="ramfs" ino=37811 res=1 errno=0 [ 524.486407][ T30] audit: type=1804 audit(1780062801.175:3256): pid=11951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1375" name="bus" dev="ramfs" ino=37811 res=1 errno=0 [ 524.908160][T10289] usb 2-1: USB disconnect, device number 36 [ 525.724237][T11959] Scaler: ================= START STATUS ================= [ 525.734096][T11959] Scaler: ================== END STATUS ================== [ 525.945923][T11964] syz.3.1377 (11964): drop_caches: 2 [ 526.281719][T11976] wg1 speed is unknown, defaulting to 1000 [ 526.368175][T11987] fuse: Bad value for 'user_id' [ 526.373928][T11984] tipc: Enabling of bearer rejected, failed to enable media [ 526.534591][T11987] fuse: Bad value for 'user_id' [ 526.714478][ T5729] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 526.866459][T11990] siw: device registration error -23 [ 526.917753][T11992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input38 [ 526.974560][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 526.986294][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.012652][ T5729] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 527.024422][ T5729] usb 5-1: config 2 has no interface number 0 [ 527.031930][ T5729] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 527.048993][ T5729] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.060913][ T5729] usb 5-1: config 2 interface 99 has no altsetting 0 [ 527.068626][ T5798] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 527.081287][ T5729] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 527.091490][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.099950][ T5729] usb 5-1: Product: syz [ 527.104423][ T5729] usb 5-1: Manufacturer: syz [ 527.109291][ T5729] usb 5-1: SerialNumber: syz [ 527.227492][ T5798] usb 2-1: config 0 has no interfaces? [ 527.236138][ T5798] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.250746][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.273552][ T5798] usb 2-1: Product: syz [ 527.286524][T12005] wg1 speed is unknown, defaulting to 1000 [ 527.292523][ T5798] usb 2-1: Manufacturer: syz [ 527.307880][ T5798] usb 2-1: config 0 descriptor?? [ 527.943695][T12008] ceph: No mds server is up or the cluster is laggy [ 527.951188][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 527.970866][ T2171] usb 2-1: USB disconnect, device number 37 [ 527.974680][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 528.151578][T12015] siw: device registration error -23 [ 528.184425][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 528.215203][ T30] audit: type=1804 audit(1780062804.895:3257): pid=12015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1388" name="bus" dev="ramfs" ino=38560 res=1 errno=0 [ 528.355421][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 528.373930][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 528.388577][ T24] usb 3-1: config 2 has an invalid interface number: 99 but max is 0 [ 528.406566][ T24] usb 3-1: config 2 has no interface number 0 [ 528.424010][ T24] usb 3-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 528.436406][ T24] usb 3-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.447409][ T24] usb 3-1: config 2 interface 99 has no altsetting 0 [ 528.457929][ T24] usb 3-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 528.467200][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.476473][ T24] usb 3-1: Product: syz [ 528.480795][ T24] usb 3-1: Manufacturer: syz [ 528.485935][ T24] usb 3-1: SerialNumber: syz [ 528.682100][T12017] wg1 speed is unknown, defaulting to 1000 [ 529.166579][ T806] libceph: connect (1)[c::]:6789 error -22 [ 529.166766][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 529.237651][ T5729] usb 5-1: USB disconnect, device number 33 [ 529.284431][ T5798] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 529.426077][ T806] libceph: connect (1)[c::]:6789 error -22 [ 529.426277][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 529.436436][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 529.439343][ T5798] usb 4-1: unable to get BOS descriptor or descriptor too short [ 529.440343][ T5798] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 529.440365][ T5798] usb 4-1: config 2 has no interface number 0 [ 529.440405][ T5798] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 529.440421][ T5798] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.440434][ T5798] usb 4-1: config 2 interface 99 has no altsetting 0 [ 529.442235][ T5798] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 529.442256][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.442273][ T5798] usb 4-1: Product: syz [ 529.442286][ T5798] usb 4-1: Manufacturer: syz [ 529.442297][ T5798] usb 4-1: SerialNumber: syz [ 529.888516][T12034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39 [ 529.934892][ T806] libceph: connect (1)[c::]:6789 error -22 [ 529.936136][ T806] libceph: mon0 (1)[c::]:6789 connect error [ 530.028206][T12041] siw: device registration error -23 [ 530.872577][ T24] usb 3-1: USB disconnect, device number 57 [ 531.212244][T12046] tipc: Enabling of bearer rejected, failed to enable media [ 531.311452][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1398'. [ 531.425942][T12022] ceph: No mds server is up or the cluster is laggy [ 531.478364][ T24] libceph: connect (1)[c::]:6789 error -22 [ 531.587832][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 531.697624][ T5798] usb 4-1: USB disconnect, device number 35 [ 532.056177][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 532.072915][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 532.091859][T12064] ceph: No mds server is up or the cluster is laggy [ 532.681258][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 532.687441][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 532.907498][ T30] audit: type=1804 audit(1780062809.475:3258): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1402" name="bus" dev="ramfs" ino=39048 res=1 errno=0 [ 535.454996][T12101] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 535.530146][T12101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.556065][T12101] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 535.837662][T12101] bond7: entered allmulticast mode [ 536.689065][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1414'. [ 537.404401][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 537.554712][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 537.563913][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.583016][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.628327][ T9] usb 2-1: config 0 has no interface number 0 [ 537.650254][ T9] usb 2-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 537.682802][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 537.698582][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 537.726113][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.759315][ T9] usb 2-1: config 0 descriptor?? [ 537.782379][ T9] hso 2-1:0.1: Failed to find BULK eps [ 537.910971][T12153] wg1 speed is unknown, defaulting to 1000 [ 538.183067][ T9] libceph: connect (1)[c::]:6789 error -99 [ 538.196334][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 538.218698][T12153] ceph: No mds server is up or the cluster is laggy [ 538.272475][T12161] siw: device registration error -23 [ 538.335188][ T30] audit: type=1804 audit(1780062815.015:3259): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1420" name="bus" dev="ramfs" ino=39186 res=1 errno=0 [ 538.374299][ T30] audit: type=1804 audit(1780062815.055:3260): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1420" name="bus" dev="ramfs" ino=39186 res=1 errno=0 [ 538.416395][ T5798] usb 2-1: USB disconnect, device number 38 [ 538.966616][T12167] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 539.345163][T12167] 8021q: adding VLAN 0 to HW filter on device bond8 [ 539.352353][T12168] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 539.368146][T12168] bond8: entered allmulticast mode [ 539.822524][T12175] wg1 speed is unknown, defaulting to 1000 [ 540.417622][T12180] ceph: No mds server is up or the cluster is laggy [ 540.429077][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 540.469282][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 540.936280][T12173] Scaler: ================= START STATUS ================= [ 540.944315][T12173] Scaler: ================== END STATUS ================== [ 541.550469][T12187] syz.0.1423 (12187): drop_caches: 2 [ 542.321189][T12203] siw: device registration error -23 [ 542.465255][ T30] audit: type=1804 audit(1780062819.155:3261): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1430" name="bus" dev="ramfs" ino=40086 res=1 errno=0 [ 542.467586][ T30] audit: type=1804 audit(1780062819.155:3262): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1430" name="bus" dev="ramfs" ino=40086 res=1 errno=0 [ 543.615939][T12219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40 [ 544.202936][T12241] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 544.598671][T12241] 8021q: adding VLAN 0 to HW filter on device bond9 [ 544.605769][T12243] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 544.763913][T12243] bond9: entered allmulticast mode [ 545.056894][T12249] wg1 speed is unknown, defaulting to 1000 [ 545.224420][ T30] audit: type=1804 audit(1780062821.855:3263): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1436" name="bus" dev="ramfs" ino=40118 res=1 errno=0 [ 545.755272][T12256] ceph: No mds server is up or the cluster is laggy [ 545.762153][ T5746] libceph: connect (1)[c::]:6789 error -22 [ 545.770492][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 545.770881][ T30] audit: type=1804 audit(1780062821.865:3264): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1436" name="bus" dev="ramfs" ino=40118 res=1 errno=0 [ 546.904368][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 547.054360][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 547.079387][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.088335][ T24] usb 1-1: config 2 has an invalid interface number: 99 but max is 0 [ 548.046513][ T24] usb 1-1: config 2 has no interface number 0 [ 548.052644][ T24] usb 1-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 548.067985][ T24] usb 1-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.078013][ T24] usb 1-1: config 2 interface 99 has no altsetting 0 [ 548.086410][ T24] usb 1-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 548.095512][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.455304][ T24] usb 1-1: Product: syz [ 548.459770][ T24] usb 1-1: Manufacturer: syz [ 548.472983][ T24] usb 1-1: SerialNumber: syz [ 548.750504][T12265] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input41 [ 548.990544][T12276] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1441'. [ 549.756410][ T24] usb 1-1: USB disconnect, device number 41 [ 549.962138][T12282] Scaler: ================= START STATUS ================= [ 549.987490][T12282] Scaler: ================== END STATUS ================== [ 551.305994][T12284] syz.4.1442 (12284): drop_caches: 2 [ 551.534877][T12303] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 551.609779][T12303] 8021q: adding VLAN 0 to HW filter on device bond10 [ 551.790084][T12303] bond11: Unable to set up delay as MII monitoring is disabled [ 551.912603][T12303] bond11 (unregistering): Released all slaves [ 552.069855][T12311] tipc: Enabling of bearer rejected, failed to enable media [ 553.041894][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 553.053883][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 553.068175][T12336] ceph: No mds server is up or the cluster is laggy [ 554.808433][T12364] siw: device registration error -23 [ 555.074361][T11786] Bluetooth: hci4: command 0x0405 tx timeout [ 555.510426][T12366] Scaler: ================= START STATUS ================= [ 555.651612][T12366] Scaler: ================== END STATUS ================== [ 555.745330][T12371] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 555.900311][T12371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.093679][T12373] bond8: Unable to set up delay as MII monitoring is disabled [ 556.102003][T12373] bond8 (unregistering): Released all slaves [ 556.613455][ T30] audit: type=1804 audit(1780062833.035:3265): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1461" name="bus" dev="ramfs" ino=39625 res=1 errno=0 [ 556.658707][T12367] syz.1.1459 (12367): drop_caches: 2 [ 556.729773][T12383] tipc: Enabling of bearer rejected, failed to enable media [ 556.747997][ T30] audit: type=1804 audit(1780062833.085:3266): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1461" name="bus" dev="ramfs" ino=39625 res=1 errno=0 [ 557.266565][T12396] wg1 speed is unknown, defaulting to 1000 [ 557.397807][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.404195][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.891392][T12400] ceph: No mds server is up or the cluster is laggy [ 557.900582][ T5798] libceph: connect (1)[c::]:6789 error -22 [ 557.927052][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 558.170769][T12410] siw: device registration error -23 [ 558.485590][ T30] audit: type=1804 audit(1780062834.935:3267): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1466" name="bus" dev="ramfs" ino=39690 res=1 errno=0 [ 558.585784][ T30] audit: type=1804 audit(1780062834.945:3268): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1466" name="bus" dev="ramfs" ino=39690 res=1 errno=0 [ 558.637873][ T30] audit: type=1804 audit(1780062835.265:3269): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1465" name="bus" dev="ramfs" ino=39693 res=1 errno=0 [ 561.566705][T12448] siw: device registration error -23 [ 561.694799][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 561.731490][ T30] audit: type=1400 audit(1780062838.415:3270): avc: denied { accept } for pid=12451 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.760851][T10289] libceph: connect (1)[c::]:6789 error -22 [ 561.768358][T10289] libceph: mon0 (1)[c::]:6789 connect error [ 561.826530][T12452] ceph: No mds server is up or the cluster is laggy [ 561.866320][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 561.887662][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.900415][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.913603][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.922816][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.953650][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.962625][ T9] usb 2-1: invalid MIDI out EP 0 [ 562.506526][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 562.564149][ T9] usb 2-1: USB disconnect, device number 39 [ 562.713413][ T30] audit: type=1804 audit(1780062839.385:3271): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1475" name="bus" dev="ramfs" ino=40989 res=1 errno=0 [ 562.897534][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.951717][ T30] audit: type=1804 audit(1780062839.385:3272): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1475" name="bus" dev="ramfs" ino=40989 res=1 errno=0 [ 563.454678][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 563.476174][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 563.584652][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 563.855792][ T30] audit: type=1804 audit(1780062840.315:3273): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1478" name="bus" dev="ramfs" ino=40530 res=1 errno=0 [ 563.883087][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 563.902190][ T30] audit: type=1804 audit(1780062840.315:3274): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1478" name="bus" dev="ramfs" ino=40530 res=1 errno=0 [ 565.315340][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 566.447855][T12483] fuse: Bad value for 'user_id' [ 566.476554][T12483] fuse: Bad value for 'user_id' [ 566.794936][ T5798] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 566.955837][ T5798] usb 4-1: config 0 has no interfaces? [ 566.968626][ T5798] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 566.978493][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 566.990378][ T5798] usb 4-1: Product: syz [ 566.995964][ T5798] usb 4-1: Manufacturer: syz [ 567.003447][ T5798] usb 4-1: config 0 descriptor?? [ 567.054394][T10289] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 567.124411][ T5746] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 567.132202][ T30] audit: type=1804 audit(1780062843.815:3275): pid=12493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1483" name="bus" dev="ramfs" ino=41096 res=1 errno=0 [ 567.207413][T10289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.232547][ T5798] usb 4-1: USB disconnect, device number 36 [ 567.235335][T10289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.254401][ T2171] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 567.280913][T10289] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 567.290836][T10289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.319648][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.320534][T10289] usb 3-1: config 0 descriptor?? [ 567.357237][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.381108][ T5746] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 567.404578][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.445956][ T2171] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.451256][ T5746] usb 2-1: config 0 descriptor?? [ 567.464322][ T2171] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 567.494099][ T2171] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.504040][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.519166][ T2171] usb 5-1: config 0 descriptor?? [ 567.530203][ T2171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 567.777437][T10289] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 567.807760][T10289] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 567.834969][T10289] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 567.853463][T10289] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 567.869808][T10289] elan 0003:04F3:0755.000F: unknown main item tag 0x0 [ 567.881794][ T5746] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 567.889742][T10289] elan 0003:04F3:0755.000F: failed to start in urb: -90 [ 567.901848][ T5746] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 567.913472][T10289] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 567.921689][ T5746] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 567.959089][ T5746] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 567.976001][ T5746] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 567.994669][T10289] usb 3-1: USB disconnect, device number 58 [ 567.995178][ T5746] elan 0003:04F3:0755.0010: failed to start in urb: -90 [ 568.053048][ T5746] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 568.121713][ T5746] usb 2-1: USB disconnect, device number 40 [ 568.158961][T12499] fido_id[12499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 569.054365][T12507] fido_id[12507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 569.280696][T12517] siw: device registration error -23 [ 569.290530][ T30] audit: type=1804 audit(1780062845.985:3276): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1491" name="bus" dev="ramfs" ino=40605 res=1 errno=0 [ 569.490254][ T30] audit: type=1804 audit(1780062845.985:3277): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1491" name="bus" dev="ramfs" ino=40605 res=1 errno=0 [ 569.588914][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 569.674867][T12525] fuse: Bad value for 'user_id' [ 569.683816][T12525] fuse: Bad value for 'user_id' [ 569.740951][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1492'. [ 571.156456][T10289] usb 5-1: USB disconnect, device number 34 [ 572.196443][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 572.261526][T12532] siw: device registration error -23 [ 572.376886][ T30] audit: type=1804 audit(1780062849.065:3278): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1496" name="bus" dev="ramfs" ino=41234 res=1 errno=0 [ 572.481244][ T24] usb 2-1: config 0 has no interfaces? [ 572.537681][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 572.595033][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.628882][ T24] usb 2-1: Product: syz [ 572.647686][ T24] usb 2-1: Manufacturer: syz [ 572.704086][ T24] usb 2-1: config 0 descriptor?? [ 572.714163][T12537] wg1 speed is unknown, defaulting to 1000 [ 572.736209][ T24] usb 2-1: can't set config #0, error -71 [ 572.865357][ T24] usb 2-1: USB disconnect, device number 41 [ 573.057010][T12545] ceph: No mds server is up or the cluster is laggy [ 573.068296][ T5746] libceph: connect (1)[c::]:6789 error -22 [ 573.069344][ T5746] libceph: mon0 (1)[c::]:6789 connect error [ 573.362714][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 573.362830][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 573.569364][ T30] audit: type=1804 audit(1780062850.255:3279): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1501" name="bus" dev="ramfs" ino=41273 res=1 errno=0 [ 574.069447][T12559] ceph: No mds server is up or the cluster is laggy [ 574.078048][ T5729] libceph: connect (1)[c::]:6789 error -22 [ 574.078984][ T5729] libceph: mon0 (1)[c::]:6789 connect error [ 574.285659][T12556] wg1 speed is unknown, defaulting to 1000 [ 574.300915][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 574.444360][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 574.446434][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.447371][ T24] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 574.447386][ T24] usb 5-1: config 2 has no interface number 0 [ 574.447405][ T24] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 574.447420][ T24] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 574.447432][ T24] usb 5-1: config 2 interface 99 has no altsetting 0 [ 574.449105][ T24] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 574.449120][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.449131][ T24] usb 5-1: Product: syz [ 574.449139][ T24] usb 5-1: Manufacturer: syz [ 574.449147][ T24] usb 5-1: SerialNumber: syz [ 574.998191][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 575.265280][T12575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input42 [ 576.611852][ T30] audit: type=1804 audit(1780062853.195:3280): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1508" name="bus" dev="ramfs" ino=40731 res=1 errno=0 [ 576.634841][ T24] usb 5-1: USB disconnect, device number 35 [ 576.761232][ T30] audit: type=1804 audit(1780062853.195:3281): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1508" name="bus" dev="ramfs" ino=40731 res=1 errno=0 [ 683.104225][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 683.111189][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12607/1:b..l P12579/1:b..l P1026/1:b..l [ 683.121845][ C1] rcu: (detected by 1, t=10502 jiffies, g=63313, q=870 ncpus=2) [ 683.129534][ C1] task:kworker/u8:8 state:R running task stack:24056 pid:1026 tgid:1026 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 683.143596][ C1] Workqueue: netns cleanup_net [ 683.148708][ C1] Call Trace: [ 683.151962][ C1] [ 683.154883][ C1] __schedule+0x1295/0x67a0 [ 683.159407][ C1] ? lock_acquire+0x1b1/0x370 [ 683.164091][ C1] ? __pfx___schedule+0x10/0x10 [ 683.168944][ C1] ? mark_held_locks+0x40/0x70 [ 683.173705][ C1] preempt_schedule_irq+0x50/0x90 [ 683.178725][ C1] irqentry_exit+0x205/0x970 [ 683.183315][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 683.189287][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 683.194482][ C1] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 683.214088][ C1] RSP: 0018:ffffc90004c4f230 EFLAGS: 00000206 [ 683.220153][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000006 [ 683.228129][ C1] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 683.236105][ C1] RBP: ffffffff8e7e5620 R08: 00000000202ff075 R09: 0000000000000007 [ 683.244076][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 683.252049][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.260033][ C1] ? unwind_next_frame+0x3be/0x2090 [ 683.265267][ C1] ? unwind_next_frame+0x3be/0x2090 [ 683.270465][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 683.276633][ C1] unwind_next_frame+0xd1/0x2090 [ 683.281572][ C1] ? unwind_next_frame+0xbd/0x2090 [ 683.286686][ C1] ? kthread+0x370/0x450 [ 683.290926][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 683.297077][ C1] arch_stack_walk+0x94/0xf0 [ 683.301705][ C1] ? kthread+0x370/0x450 [ 683.305948][ C1] stack_trace_save+0x8e/0xc0 [ 683.310622][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 683.315987][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 683.320927][ C1] ? __lock_acquire+0x4a5/0x2630 [ 683.325860][ C1] kasan_save_stack+0x30/0x50 [ 683.330536][ C1] ? kasan_save_stack+0x30/0x50 [ 683.335377][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 683.340745][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 683.346808][ C1] ? kernfs_put.part.0+0x22f/0x720 [ 683.351918][ C1] ? kernfs_remove_by_name_ns+0xf3/0x120 [ 683.357551][ C1] ? remove_files+0x96/0x1c0 [ 683.362135][ C1] ? sysfs_remove_group+0x8b/0x1b0 [ 683.367238][ C1] ? sysfs_remove_groups+0x60/0xb0 [ 683.372347][ C1] ? device_remove_attrs+0x192/0x290 [ 683.377687][ C1] ? device_del+0x36e/0x9b0 [ 683.382182][ C1] ? unregister_netdevice_many_notify+0x179e/0x24f0 [ 683.388760][ C1] ? ops_undo_list+0x8ff/0xab0 [ 683.393510][ C1] ? cleanup_net+0x499/0x920 [ 683.398094][ C1] ? process_one_work+0xa0e/0x1980 [ 683.403205][ C1] ? worker_thread+0x5ef/0xe50 [ 683.407966][ C1] ? kthread+0x370/0x450 [ 683.412229][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 683.417427][ C1] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 683.422704][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 683.428601][ C1] kernfs_put.part.0+0x22f/0x720 [ 683.433547][ C1] kernfs_remove_by_name_ns+0xf3/0x120 [ 683.439012][ C1] remove_files+0x96/0x1c0 [ 683.443424][ C1] sysfs_remove_group+0x8b/0x1b0 [ 683.448359][ C1] sysfs_remove_groups+0x60/0xb0 [ 683.453299][ C1] device_remove_attrs+0x192/0x290 [ 683.458406][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 683.464058][ C1] device_del+0x36e/0x9b0 [ 683.468388][ C1] ? __pfx_device_del+0x10/0x10 [ 683.473248][ C1] ? netdev_unregister_kobject+0x2da/0x540 [ 683.479069][ C1] unregister_netdevice_many_notify+0x179e/0x24f0 [ 683.485485][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 683.492245][ C1] ? bond_net_exit_rtnl+0xff/0x3a0 [ 683.497387][ C1] ? mutex_is_locked+0x17/0x60 [ 683.502152][ C1] ops_undo_list+0x8ff/0xab0 [ 683.506736][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 683.511836][ C1] ? cleanup_net+0x332/0x920 [ 683.516417][ C1] ? idr_destroy+0x62/0x2e0 [ 683.520917][ C1] cleanup_net+0x499/0x920 [ 683.525328][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 683.530262][ C1] ? rcu_is_watching+0x12/0xc0 [ 683.535028][ C1] process_one_work+0xa0e/0x1980 [ 683.539989][ C1] ? __pfx_process_one_work+0x10/0x10 [ 683.545361][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 683.550294][ C1] worker_thread+0x5ef/0xe50 [ 683.554890][ C1] ? kthread+0x13a/0x450 [ 683.559124][ C1] ? __pfx_worker_thread+0x10/0x10 [ 683.564227][ C1] kthread+0x370/0x450 [ 683.568297][ C1] ? __pfx_kthread+0x10/0x10 [ 683.572885][ C1] ret_from_fork+0x72b/0xd50 [ 683.577477][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 683.582584][ C1] ? __switch_to+0x800/0x1100 [ 683.587285][ C1] ? __pfx_kthread+0x10/0x10 [ 683.591871][ C1] ret_from_fork_asm+0x1a/0x30 [ 683.596647][ C1] [ 683.599658][ C1] task:syz.0.1507 state:R running task stack:27240 pid:12579 tgid:12576 ppid:5615 task_flags:0x40054c flags:0x00080001 [ 683.613146][ C1] Call Trace: [ 683.616419][ C1] [ 683.619346][ C1] __schedule+0x1295/0x67a0 [ 683.623866][ C1] ? __pfx___schedule+0x10/0x10 [ 683.628755][ C1] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 683.634307][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 683.639687][ C1] preempt_schedule_common+0x42/0xc0 [ 683.644974][ C1] preempt_schedule_thunk+0x16/0x30 [ 683.650185][ C1] _raw_spin_unlock+0x3e/0x50 [ 683.654859][ C1] __zap_vma_range+0x24b4/0x4a30 [ 683.659815][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 683.665100][ C1] ? find_held_lock+0x2b/0x80 [ 683.669785][ C1] unmap_vmas+0x299/0x5f0 [ 683.674113][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 683.678959][ C1] ? mas_next_slot+0x10a3/0x1960 [ 683.683909][ C1] exit_mmap+0x1ef/0xa10 [ 683.688149][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 683.692931][ C1] ? rcu_is_watching+0x12/0xc0 [ 683.697699][ C1] ? uprobe_clear_state+0x5f/0x260 [ 683.702841][ C1] ? uprobe_clear_state+0x5f/0x260 [ 683.707958][ C1] ? __lock_acquire+0x4a5/0x2630 [ 683.712905][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 683.718538][ C1] __mmput+0x12a/0x410 [ 683.722606][ C1] mmput+0x67/0x80 [ 683.726322][ C1] do_exit+0x8b2/0x2af0 [ 683.730470][ C1] ? __pfx___might_resched+0x10/0x10 [ 683.735787][ C1] ? __pfx_do_exit+0x10/0x10 [ 683.740394][ C1] ? do_raw_spin_lock+0x128/0x260 [ 683.745419][ C1] ? find_held_lock+0x2b/0x80 [ 683.750091][ C1] ? get_signal+0x7e5/0x2210 [ 683.754683][ C1] do_group_exit+0xd5/0x2a0 [ 683.759182][ C1] get_signal+0x20ff/0x2210 [ 683.763689][ C1] ? __pfx_task_work_add+0x10/0x10 [ 683.768807][ C1] ? __pfx_get_signal+0x10/0x10 [ 683.773655][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 683.778937][ C1] ? __pfx___file_ref_put+0x10/0x10 [ 683.784139][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 683.789691][ C1] ? fput+0xd9/0x100 [ 683.793674][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 683.799836][ C1] ? rcu_is_watching+0x12/0xc0 [ 683.804605][ C1] exit_to_user_mode_loop+0x98/0x670 [ 683.809886][ C1] ? rcu_is_watching+0x12/0xc0 [ 683.814652][ C1] do_syscall_64+0x666/0x870 [ 683.819335][ C1] ? clear_bhb_loop+0x40/0x90 [ 683.824009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.829895][ C1] RIP: 0033:0x7f555c39ce59 [ 683.834303][ C1] RSP: 002b:00007f555a5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.842718][ C1] RAX: 0000000000000010 RBX: 00007f555c616090 RCX: 00007f555c39ce59 [ 683.850684][ C1] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 683.858646][ C1] RBP: 00007f555c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 683.866611][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.874574][ C1] R13: 00007f555c616128 R14: 00007f555c616090 R15: 00007fff22808818 [ 683.882554][ C1] [ 683.885570][ C1] task:kworker/u8:20 state:R running task stack:28104 pid:12607 tgid:12607 ppid:6312 task_flags:0x8040 flags:0x00080000 [ 683.898879][ C1] Call Trace: [ 683.902146][ C1] [ 683.905069][ C1] __schedule+0x1295/0x67a0 [ 683.909586][ C1] ? __pfx___schedule+0x10/0x10 [ 683.914432][ C1] ? mark_held_locks+0x40/0x70 [ 683.919194][ C1] preempt_schedule_irq+0x50/0x90 [ 683.924305][ C1] irqentry_exit+0x205/0x970 [ 683.928899][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 683.934868][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 683.940063][ C1] Code: 05 7b 24 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 86 89 f2 0e 0f 82 a4 02 00 00 8b 35 0e bd f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 1d 24 25 12 0f 85 ed 02 00 00 48 83 c4 [ 683.959688][ C1] RSP: 0018:ffffc9000582f688 EFLAGS: 00000206 [ 683.965751][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 683.973715][ C1] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 683.981678][ C1] RBP: ffffffff8e7e5620 R08: 00000000b5b85b68 R09: 0000000000000007 [ 683.989641][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 683.997610][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.005635][ C1] ? unwind_next_frame+0x3be/0x2090 [ 684.010851][ C1] ? unwind_next_frame+0x3be/0x2090 [ 684.016060][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 684.022214][ C1] unwind_next_frame+0xd1/0x2090 [ 684.027155][ C1] ? unwind_next_frame+0xbd/0x2090 [ 684.032266][ C1] ? kernel_execve+0x31e/0x3a0 [ 684.037029][ C1] ? mntput+0x70/0xa0 [ 684.041005][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 684.047158][ C1] arch_stack_walk+0x94/0xf0 [ 684.051841][ C1] ? kernel_execve+0x31e/0x3a0 [ 684.056601][ C1] ? putname+0xb1/0x110 [ 684.060806][ C1] stack_trace_save+0x8e/0xc0 [ 684.065872][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 684.071250][ C1] ? __lock_acquire+0x4a5/0x2630 [ 684.076192][ C1] ? kasan_save_stack+0x3f/0x50 [ 684.081037][ C1] ? kasan_save_stack+0x30/0x50 [ 684.085879][ C1] ? kasan_save_track+0x14/0x30 [ 684.090722][ C1] kasan_save_stack+0x30/0x50 [ 684.095388][ C1] ? kasan_save_stack+0x30/0x50 [ 684.100226][ C1] ? kasan_save_track+0x14/0x30 [ 684.105061][ C1] ? kasan_save_free_info+0x3b/0x70 [ 684.110229][ C1] ? __kasan_slab_free+0x5f/0x80 [ 684.115132][ C1] ? kmem_cache_free+0x127/0x6c0 [ 684.120040][ C1] ? putname+0xb1/0x110 [ 684.124164][ C1] ? open_exec+0x33/0x40 [ 684.128372][ C1] ? load_elf_binary+0x534/0x51b0 [ 684.133392][ C1] ? bprm_execve+0x8f5/0x1740 [ 684.138035][ C1] ? kernel_execve+0x31e/0x3a0 [ 684.142785][ C1] kasan_save_track+0x14/0x30 [ 684.147431][ C1] kasan_save_free_info+0x3b/0x70 [ 684.152428][ C1] __kasan_slab_free+0x5f/0x80 [ 684.157160][ C1] kmem_cache_free+0x127/0x6c0 [ 684.161894][ C1] ? __asan_memcpy+0x3c/0x60 [ 684.166456][ C1] putname+0xb1/0x110 [ 684.170413][ C1] open_exec+0x33/0x40 [ 684.174449][ C1] load_elf_binary+0x534/0x51b0 [ 684.179270][ C1] ? __lock_acquire+0x4a5/0x2630 [ 684.184178][ C1] ? lock_acquire+0x1b1/0x370 [ 684.188836][ C1] ? find_held_lock+0x2b/0x80 [ 684.193497][ C1] ? load_misc_binary+0x95e/0xd20 [ 684.198510][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 684.203856][ C1] ? find_held_lock+0x2b/0x80 [ 684.208504][ C1] ? bprm_execve+0x8d3/0x1740 [ 684.213152][ C1] ? bprm_execve+0x8d3/0x1740 [ 684.217799][ C1] bprm_execve+0x8f5/0x1740 [ 684.222276][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 684.227255][ C1] ? copy_strings_kernel+0x152/0x190 [ 684.232533][ C1] kernel_execve+0x31e/0x3a0 [ 684.237107][ C1] call_usermodehelper_exec_async+0x239/0x4b0 [ 684.243146][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 684.248351][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 684.254998][ C1] ret_from_fork+0x72b/0xd50 [ 684.259568][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 684.264662][ C1] ? rcu_is_watching+0x12/0xc0 [ 684.269397][ C1] ? __switch_to+0x800/0x1100 [ 684.274044][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 684.280870][ C1] ret_from_fork_asm+0x1a/0x30 [ 684.285614][ C1] [ 684.288624][ C1] rcu: rcu_preempt kthread starved for 10597 jiffies! g63313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 684.299801][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 684.309741][ C1] rcu: RCU grace-period kthread stack dump: [ 684.315598][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 684.329050][ C1] Call Trace: [ 684.332300][ C1] [ 684.335205][ C1] __schedule+0x1295/0x67a0 [ 684.339699][ C1] ? __pfx___schedule+0x10/0x10 [ 684.344525][ C1] ? find_held_lock+0x2b/0x80 [ 684.349201][ C1] ? schedule+0x2bf/0x390 [ 684.353531][ C1] schedule+0xdd/0x390 [ 684.357602][ C1] schedule_timeout+0x127/0x280 [ 684.362451][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 684.367814][ C1] ? __pfx_process_timeout+0x10/0x10 [ 684.373134][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 684.378933][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 684.384410][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 684.389183][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 684.394483][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 684.399940][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 684.404879][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 684.410075][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 684.415877][ C1] rcu_gp_kthread+0x179/0x230 [ 684.420547][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 684.425740][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 684.431541][ C1] ? __kthread_parkme+0x18c/0x230 [ 684.436567][ C1] ? kthread+0x13a/0x450 [ 684.440799][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 684.445997][ C1] kthread+0x370/0x450 [ 684.450058][ C1] ? __pfx_kthread+0x10/0x10 [ 684.454645][ C1] ret_from_fork+0x72b/0xd50 [ 684.459242][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 684.464354][ C1] ? __switch_to+0x800/0x1100 [ 684.469029][ C1] ? __pfx_kthread+0x10/0x10 [ 684.473613][ C1] ret_from_fork_asm+0x1a/0x30 [ 684.478388][ C1] [ 684.481393][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 684.487711][ C1] Sending NMI from CPU 1 to CPUs 0: [ 684.492905][ C0] NMI backtrace for cpu 0 [ 684.492917][ C0] CPU: 0 UID: 0 PID: 12604 Comm: syz.4.1509 Not tainted syzkaller #0 PREEMPT(full) [ 684.492934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.492942][ C0] RIP: 0010:lock_acquire+0x2f9/0x370 [ 684.492962][ C0] Code: 8b fd ff ff 48 8d 74 24 08 b9 0a 00 00 00 ba 08 00 00 00 65 48 8b 3d ae 21 25 12 e8 11 c7 ff ff e9 6a fd ff ff e8 f7 64 08 00 <84> c0 0f 85 4f fd ff ff 48 8d 3d f8 f3 f5 0e 67 48 0f b9 3a e9 3e [ 684.492976][ C0] RSP: 0018:ffffc900057ff438 EFLAGS: 00000286 [ 684.492989][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 684.492997][ C0] RDX: 0000000000000000 RSI: ffffffff8c1c4400 RDI: ffffffff8e1c1920 [ 684.493006][ C0] RBP: ffffffff8e7e5620 R08: 0000000000000000 R09: 0000000000000000 [ 684.493014][ C0] R10: 0000000000000200 R11: 0000000000019b3f R12: 0000000000000002 [ 684.493023][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.493031][ C0] FS: 00007f3ad58e86c0(0000) GS:ffff888124386000(0000) knlGS:0000000000000000 [ 684.493045][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.493054][ C0] CR2: 00007f9ecc22ebfc CR3: 00000000755cb000 CR4: 00000000003526f0 [ 684.493063][ C0] Call Trace: [ 684.493067][ C0] [ 684.493072][ C0] ? unwind_next_frame+0x3be/0x2090 [ 684.493091][ C0] ? unwind_next_frame+0x3be/0x2090 [ 684.493110][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 684.493125][ C0] unwind_next_frame+0xd1/0x2090 [ 684.493143][ C0] ? unwind_next_frame+0xbd/0x2090 [ 684.493161][ C0] ? do_splice_direct+0x174/0x240 [ 684.493181][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 684.493195][ C0] arch_stack_walk+0x94/0xf0 [ 684.493214][ C0] ? do_splice_direct+0x174/0x240 [ 684.493232][ C0] ? iter_file_splice_write+0x5fd/0x10a0 [ 684.493250][ C0] stack_trace_save+0x8e/0xc0 [ 684.493263][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 684.493276][ C0] ? __lock_acquire+0x4a5/0x2630 [ 684.493293][ C0] kasan_save_stack+0x30/0x50 [ 684.493305][ C0] ? kasan_save_stack+0x30/0x50 [ 684.493316][ C0] ? kasan_save_track+0x14/0x30 [ 684.493327][ C0] ? kasan_save_free_info+0x3b/0x70 [ 684.493344][ C0] ? __kasan_slab_free+0x5f/0x80 [ 684.493356][ C0] ? kfree+0x223/0x6c0 [ 684.493373][ C0] ? iter_file_splice_write+0x5fd/0x10a0 [ 684.493389][ C0] ? direct_splice_actor+0x192/0x6c0 [ 684.493405][ C0] ? splice_direct_to_actor+0x345/0xa30 [ 684.493422][ C0] ? do_splice_direct+0x174/0x240 [ 684.493452][ C0] kasan_save_track+0x14/0x30 [ 684.493464][ C0] kasan_save_free_info+0x3b/0x70 [ 684.493481][ C0] __kasan_slab_free+0x5f/0x80 [ 684.493493][ C0] ? iter_file_splice_write+0x580/0x10a0 [ 684.493510][ C0] kfree+0x223/0x6c0 [ 684.493528][ C0] iter_file_splice_write+0x5fd/0x10a0 [ 684.493550][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 684.493577][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 684.493596][ C0] direct_splice_actor+0x192/0x6c0 [ 684.493614][ C0] splice_direct_to_actor+0x345/0xa30 [ 684.493631][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 684.493650][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 684.493670][ C0] do_splice_direct+0x174/0x240 [ 684.493688][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 684.493704][ C0] ? avc_policy_seqno+0x9/0x20 [ 684.493722][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 684.493741][ C0] ? rw_verify_area+0xce/0x6d0 [ 684.493757][ C0] do_sendfile+0xadc/0xe20 [ 684.493773][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 684.493789][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 684.493808][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 684.493827][ C0] __x64_sys_sendfile64+0x1d8/0x220 [ 684.493849][ C0] ? ksys_write+0x1ac/0x250 [ 684.493863][ C0] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 684.493883][ C0] ? rcu_is_watching+0x12/0xc0 [ 684.493904][ C0] do_syscall_64+0x115/0x870 [ 684.493921][ C0] ? clear_bhb_loop+0x40/0x90 [ 684.493938][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.493951][ C0] RIP: 0033:0x7f3ad499ce59 [ 684.493964][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.493976][ C0] RSP: 002b:00007f3ad58e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 684.493990][ C0] RAX: ffffffffffffffda RBX: 00007f3ad4c15fa0 RCX: 00007f3ad499ce59 [ 684.494000][ C0] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 684.494008][ C0] RBP: 00007f3ad4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 684.494017][ C0] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000000 [ 684.494025][ C0] R13: 00007f3ad4c16038 R14: 00007f3ad4c15fa0 R15: 00007fff837f6ba8 [ 684.494041][ C0] [ 686.668107][ T30] audit: type=1804 audit(1780062854.825:3282): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1509" name="bus" dev="ramfs" ino=41402 res=1 errno=0 [ 686.670849][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.691756][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.705600][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.724082][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=5312 sent=0 n=-1 (errno 32: Broken pipe) [ 688.082785][ T30] audit: type=1400 audit(1780062964.765:3283): avc: denied { write } for pid=5602 comm="syz-executor" path="pipe:[4617]" dev="pipefs" ino=4617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 689.338073][ T1026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.412601][ T1026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.486786][ T1026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.550563][ T1026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.661201][ T30] audit: type=1400 audit(1780062966.345:3284): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 689.682881][ T30] audit: type=1400 audit(1780062966.355:3285): avc: denied { search } for pid=5279 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.705809][ T30] audit: type=1400 audit(1780062966.355:3286): avc: denied { search } for pid=5279 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.744350][ T30] audit: type=1400 audit(1780062966.355:3287): avc: denied { search } for pid=5279 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.769604][ T30] audit: type=1400 audit(1780062966.355:3288): avc: denied { read } for pid=5279 comm="dhcpcd" name="n30" dev="tmpfs" ino=9089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.796301][ T30] audit: type=1400 audit(1780062966.355:3289): avc: denied { open } for pid=5279 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=9089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.819962][ T30] audit: type=1400 audit(1780062966.355:3290): avc: denied { getattr } for pid=5279 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=9089 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.867685][ T30] audit: type=1400 audit(1780062966.495:3291): avc: denied { read } for pid=12620 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.082218][ T1026] bond0 (unregistering): Released all slaves [ 690.095412][ T1026] bond1 (unregistering): Released all slaves [ 690.111726][ T1026] bond2 (unregistering): Released all slaves [ 690.122778][ T1026] bond3 (unregistering): Released all slaves [ 690.134777][ T1026] bond4 (unregistering): Released all slaves [ 690.149374][ T1026] bond5 (unregistering): Released all slaves [ 690.162335][ T1026] bond6 (unregistering): Released all slaves [ 690.175531][ T1026] bond7 (unregistering): Released all slaves [ 690.188467][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 690.523313][ T1026] hsr_slave_0: left promiscuous mode [ 690.533156][ T1026] hsr_slave_1: left promiscuous mode [ 690.551996][ T1026] veth1_macvtap: left promiscuous mode [ 690.558570][ T1026] veth0_macvtap: left promiscuous mode [ 690.564112][ T1026] veth1_vlan: left promiscuous mode [ 690.569586][ T1026] veth0_vlan: left promiscuous mode [ 690.793537][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 691.142022][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 691.437377][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.490212][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 691.561810][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.640132][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.688388][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.993351][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 691.993366][ T30] audit: type=1400 audit(1780062968.675:3308): avc: denied { write } for pid=12679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.044033][ T30] audit: type=1400 audit(1780062968.725:3309): avc: denied { write } for pid=12690 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.109025][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 692.289292][ T1026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.360450][ T30] audit: type=1400 audit(1780062969.045:3310): avc: denied { write } for pid=12693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.402998][ T1026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.442441][ T30] audit: type=1400 audit(1780062969.125:3311): avc: denied { write } for pid=12704 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.490245][ T1026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.512805][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 692.582807][ T1026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.728555][ T30] audit: type=1400 audit(1780062969.415:3312): avc: denied { write } for pid=12709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.806069][ T1026] bridge_slave_1: left allmulticast mode [ 692.813300][ T1026] bridge_slave_1: left promiscuous mode [ 692.821077][ T30] audit: type=1400 audit(1780062969.515:3313): avc: denied { write } for pid=12720 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.821321][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.858829][ T1026] bridge_slave_0: left allmulticast mode [ 692.864739][ T1026] bridge_slave_0: left promiscuous mode [ 692.873265][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.057409][ T1026] bridge_slave_1: left allmulticast mode [ 693.063050][ T1026] bridge_slave_1: left promiscuous mode [ 693.069105][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.083093][ T1026] bridge_slave_0: left allmulticast mode [ 693.095908][ T1026] bridge_slave_0: left promiscuous mode [ 693.102654][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state