last executing test programs: 11.376268806s ago: executing program 2 (id=1766): socket(0x8000000010, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x8800) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x6, 0x802, 0x40300000, 0xe4, 0x8, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0x6, 0x1db, 0x80000001, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000008201220082010000770c9087d64801f4b739c8040000000f0000000700000604000000100000000c0000000d000000010000000c000000a30700000200000004000000070000000300000003000000030000000200000000000000000000000000000801000000100000000600000f0200000002000000070000000900000004000000b3000000020000000400000000000000050000000500000000000000000000000200000006000000100000000100000007000000cb0200005b130000000000000003000000000400000001000000bd53a856000000000300000d0000000000000000120000000e000000000000000a000000050000000600000008000084810000000600000004000000000000000600000009000000fc0000000600000002000000f8ffffff0700000004000000f7ffffff0e00000005000000434500000600000003000000090099000600000000000000f9ffffff0e0000000000000007000b000000000000000003000000000100000004000000010000000600000000000001000000007f00500605000000000000100c0000000000002e3000"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) unshare(0x8040480) unshare(0x2a020480) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 10.977050553s ago: executing program 4 (id=1767): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d0a, 0x4c1, 0x9, 0x0, 0xfffffffffffffed6) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0xb4325241, 0x0, [], [0x2b8], [0x0, 0xfffffffc]}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 10.265049794s ago: executing program 4 (id=1769): shmdt(0x0) 9.601605851s ago: executing program 4 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000f00)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a}, 0x28) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) 8.828523909s ago: executing program 1 (id=1775): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$watch_queue(0x0, 0x80) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.245817286s ago: executing program 2 (id=1776): r0 = socket(0x11, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {0x0}], 0x2, 0x9, 0x100) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 6.770925955s ago: executing program 1 (id=1777): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) memfd_secret(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x23f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r4, 0x3}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000300)=@buf) io_setup(0x20, &(0x7f0000001140)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000001400078008001340000017e5080006000000000805000500020000000500010006"], 0x5c}}, 0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f00000002c0)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="fc", 0x1}]) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 6.587592047s ago: executing program 2 (id=1778): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet(0x2b, 0x801, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.045625197s ago: executing program 1 (id=1779): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RAUTH(r2, &(0x7f0000000500)={0x14, 0x67, 0x2, {0x10, 0x3, 0x5}}, 0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001002bbd7000fddbdf25fffe0000000000000000000000000012000004d4020032"], 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) unshare(0x20000400) tee(r1, r4, 0x4e, 0x5) 5.958864728s ago: executing program 2 (id=1780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000029a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r7 = dup(r6) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) 5.917848617s ago: executing program 0 (id=1781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x181100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x4}) syz_io_uring_setup(0x2ad5, &(0x7f0000000380)={0x0, 0xd357, 0x800, 0x2, 0x210}, &(0x7f0000000100), &(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x23, 0x6, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) gettid() ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4.985481248s ago: executing program 1 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00000000", 0x2c}, {&(0x7f0000002680)="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", 0xc9a}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000000980)="281a9d23fdff85", 0x7}, {&(0x7f0000003340)="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", 0x274}, {&(0x7f00000002c0)="f60f27117e", 0x5}], 0x6}, 0x4005) 4.963074707s ago: executing program 4 (id=1783): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r4], 0x44}}, 0x804) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r5, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.865061607s ago: executing program 0 (id=1785): syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x101a00) socket(0xa, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 4.661771564s ago: executing program 3 (id=1786): r0 = socket$inet(0x2, 0x80001, 0xffffffff) listen(r0, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x21c484ba4cb434ef}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}], 0x1}) 3.947318926s ago: executing program 1 (id=1787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000f00)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a}, 0x28) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4) 3.881407107s ago: executing program 4 (id=1788): r0 = socket(0x11, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3.649122781s ago: executing program 0 (id=1789): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x1, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setgid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(r1, &(0x7f0000003080)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xb1, &(0x7f00000001c0)=[{&(0x7f0000000400)="acdbfc88a8031d64172a446682fa0432714a493616c37f8a8c88fe59edfce4fa3b3afaafb9f16b517043ce616cf8560111f4a07d6f48737014c02cb5031f4677babe90b2901ac583af469b746cd262733a6cc5514c4c1541561140cff3f290c118b3f6e3c8a0ddd23363a4d3a0444454a6fca245a9524abcc8d3a71f8716f4b0078a3763d61dc91310b0d8e64ec3243e1951202e32e174c061833588ebe3fa92a4698ad5b2c0dbc723eafdf702b10d6ffe0f61b50d25cbcd6807", 0xba}, {&(0x7f0000000a00)="92ed6c3ff27461b15cf9fd1a59c8d1f923d60b11c4047d6c08ade6eaaae55127efd2763301578d20432f608feffc7f7ab1ca50cfd6298d990da78867bc6d398ab13e9e6186c07b61577315e9b74709aa5fa0a9ca3987a374b3ec5da0a5847c8fc3a023c72d9f2b2f19f238f2b642bc170760745d2c05266f93fff72115f1868c69a20d1a40cbc103fe3b4f2223f44b3749113c8e15ed3fc4e5b299384c3837d0a527d1f3fbf44577f590", 0xaa}], 0x2, &(0x7f0000002880)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x48}}, {{&(0x7f0000002900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002fc0), 0x9, 0x0, 0x0, 0x4000000}}], 0x2, 0x4000800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8905, &(0x7f0000000100)={0x0, 'wg0\x00', {0x3}, 0x26}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x4048005) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_io_uring_setup(0x7dc9, 0x0, &(0x7f0000000140), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffff]}, 0x8) r8 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f00000000c0)=[{r7, 0x400}], 0x1, 0xfffffffa) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x56) io_uring_enter(r3, 0x39fd, 0x2cf1, 0xa5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3820200010000000000000", @ANYRES32=0x0, @ANYBLOB="01980000000000001800128008000100677265000c00028006000300bf000000"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 2.773103614s ago: executing program 4 (id=1790): listen(0xffffffffffffffff, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x21c484ba4cb434ef}}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000500)=[{0x6, 0x801, 0x0, 0x0}], 0x1}) 2.12326215s ago: executing program 0 (id=1791): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet(0x2b, 0x801, 0x0) socket$l2tp6(0xa, 0x2, 0x73) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.953269302s ago: executing program 2 (id=1792): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pipe2$9p(&(0x7f0000002740), 0x80080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 1.669548087s ago: executing program 2 (id=1793): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000100)={0xfffffff7, {{0xa, 0x4e21, 0x0, @empty, 0x9}}, {{0xa, 0x4e20, 0xfffffffb, @remote, 0x100}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c0002801800028009000200c16022730000000008000180fffffffd0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000480)) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b40011", 0x29}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100008400000000ddff001806000002000d00000033"], &(0x7f0000000600)=""/280, 0x32, 0x118, 0x1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MAP={0x24, 0xe, {0xc21d, 0x3, 0x400, 0x78e2, 0x49, 0x10}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000002300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0xc, "bd19e459749a73ca5b"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "deccae22ef5ae0730bdeeba8f783ee1a82b46ff97de652013a64806d4d3582871a970a835c2fe2e36285a4077d8ac64752caadedae"}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "f772fd7b397b4d7e1e14790a236282a9776a21e9fe64bbd92c1e244d3f40843f99dbed425072cc6582bfb215d9ed0d0d67a8d39e9ac3535f0875e8161201146e5c1450fec952fe3cdc8b33b8e289720b1950c593"}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "1e42ccf58f311837fb3fbab3052baeb907b65958ddd2d5e33e89200b66a898e0f1797fa3945fe54cc114"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "50ed890d5502148443e176e8eee9925a59d1558f60e403615d41a6ce30b72abd6558fe5188aa39f5b8871dc553d26b357e195546760336f1a7448936c0c944d5cc67cf64bc8e26c289e360016771af19b91565182cf830b75078b2d3dbb2da56fea474db3356d518727bb94dd7d853f68e6d2bccbbec657f4cb175f007ca2d291cd3882179dd127bffcbe214c7bc01099e58fc1684f334075b1537d41a855cd4fc1505d73914e2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x1300, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12a4, 0x3, 0x0, 0x1, [{0x10a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xd3, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x104e, 0x1, "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"}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "dae08a2520f1778605be66ea99e1e269bb5c34417e4d731f549fecc5aa67e217115935a6a2a9643d3115a4e0bce7711fd3f0214bf627a440a6543956eea2d2c9394fdef9209aaeafa950488405c814310554de9d7c71fc0017ca49ad72a4d1f8fcdedb6235c178dba050a17c01147946b3af38ed29ba56dd65f1a66fe77e2d8aa0886de7aa2a3025ce08b2092e0d3d0f7fbc4905c7e05bc814eae637bfdc5f2120347ab6a9ab7db46e9b5b04daecc6c5ba2499c57ec031ab141ee3d07b1543811800def21069d6e185383d5ab43c15727b3004d299ba0e22bccbc65061147e4d344f346a"}, @NFTA_DATA_VALUE={0x47, 0x1, "a944ff2087faca00de4399d0b1e880c093a568b639ced20081fa25ebc458efe5aef71656b21dd08c6dad4cd9ea0dfbf73fd11949b8e0491b192b1b512fe419801c5aa8"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x18, 0x1, "652d1420d5ec11be9cc8b723b3e83294ba747a0c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x105, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa7, 0x8, "503bd0e517221e5d67cff043011f2be6bab7e42246b4cf4eb8861a2c334d5bc752e56a6aff1cb08831510ce424764d27af540e8c25727589c71f6aad401d938a171a798b8301cfaeddb8ca003f3a00c5adfad3f8c877250a391949ddcbb3c51689339f770810a577704fea870079420e6f3bb71fbffee74523c597c0e088b05f56b6b010bb12a46a453b02c8fe6c0f41152e86e8b006ff2962e8e8d14089582ec01279"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1698}, 0x1, 0x0, 0x0, 0x8880}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000b0a010100000000000000000700000214000000111d279d940000aafc1ececc144bdfa8bbfad63500000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 1.556720302s ago: executing program 3 (id=1794): socket$inet6(0xa, 0x8000c, 0x40000) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4de", 0x10}], 0x1) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 64) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x4, 0x8, 0xcd}, 'syz0\x00', 0x36}) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 1.200680955s ago: executing program 3 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000c000000000000b708000000000000dbaaf8fff1000000b50800000000000e7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000072825c7896dee9d51040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 973.341513ms ago: executing program 3 (id=1796): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x22780, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0xbdc, 0x0, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40000001, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x2f, 0x10000, 0xdd7, 0x88d7, 0x8f, 0x6, 0x8012, 0x1006, 0xc0000000, 0x10000005, 0x1, 0x10000009, 0x0, 0x800007, 0xfdfffffd, 0x8, 0x6, 0x9, 0x8e, 0x4, 0xffffffff, 0x7, 0xb, 0x4, 0x1, 0x1, 0x800, 0x20103, 0x400002, 0x22]}) 909.338811ms ago: executing program 3 (id=1797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000c000000000000b708000000000000dbaaf8fff1000000b50800000000000e7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000072825c7896dee9d51040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 767.466863ms ago: executing program 0 (id=1798): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x7ff, 0x1) (async) r0 = userfaultfd(0x80001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e297", 0x3, 0x20044801, 0x0, 0x0) (async) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1}, 0x142) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 149.643919ms ago: executing program 0 (id=1799): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0) fcntl$setown(r5, 0x8, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 120.871639ms ago: executing program 1 (id=1800): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 0s ago: executing program 3 (id=1801): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x19) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x7fffffff) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) lseek(0xffffffffffffffff, 0xffffff7f, 0x3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gre0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) kernel console output (not intermixed with test programs): ? __fget_files+0x215/0x3d0 [ 443.514264][T10049] ? hook_file_ioctl_common+0x146/0x410 [ 443.514295][T10049] ? __fget_files+0x21f/0x3d0 [ 443.514316][T10049] security_file_ioctl+0xd3/0x230 [ 443.514338][T10049] __x64_sys_ioctl+0xb7/0x210 [ 443.514357][T10049] do_syscall_64+0x106/0xf80 [ 443.514374][T10049] ? clear_bhb_loop+0x40/0x90 [ 443.514389][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.514402][T10049] RIP: 0033:0x7fb20a59c799 [ 443.514418][T10049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.514447][T10049] RSP: 002b:00007fb20b3b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.514466][T10049] RAX: ffffffffffffffda RBX: 00007fb20a815fa0 RCX: 00007fb20a59c799 [ 443.514477][T10049] RDX: 0000200000000080 RSI: 000000004014563c RDI: 0000000000000003 [ 443.514486][T10049] RBP: 00007fb20b3b8090 R08: 0000000000000000 R09: 0000000000000000 [ 443.514492][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.514498][T10049] R13: 00007fb20a816038 R14: 00007fb20a815fa0 R15: 00007fff5fb3ec08 [ 443.514512][T10049] [ 443.514551][T10049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.587483][ T9] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 443.754787][ T29] audit: type=1400 audit(1773216397.905:748): avc: denied { accept } for pid=10041 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 443.830803][ T9] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 443.909357][ T5815] Bluetooth: hci5: urb ffff888034f3a200 submission failed (90) [ 443.936295][ T793] usb 5-1: USB disconnect, device number 27 [ 444.061462][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 444.208900][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -71 [ 444.223847][ T9] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 444.260164][ T29] audit: type=1326 audit(1773216398.285:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.1.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20a59c799 code=0x0 [ 444.264092][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 445.145239][ T29] audit: type=1400 audit(1773216399.255:750): avc: denied { create } for pid=10044 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 445.217259][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 445.226676][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 445.235821][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 445.244883][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 445.265843][ T9] usb 1-1: USB disconnect, device number 23 [ 445.992720][ T5940] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 446.492681][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 446.499569][ T5940] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 446.530352][ T5940] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 446.543180][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.596886][ T5940] usb 2-1: Product: syz [ 446.647672][ T5940] usb 2-1: Manufacturer: syz [ 446.652331][ T5940] usb 2-1: SerialNumber: syz [ 446.740581][ T5940] usb 2-1: config 0 descriptor?? [ 446.746577][T10080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.765535][T10070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.851107][ T5940] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 447.196853][T10086] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1101'. [ 447.206774][T10070] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1101'. [ 448.941650][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 448.947875][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 449.003057][ T10] usb 2-1: USB disconnect, device number 37 [ 449.074331][ T10] mcba_usb 2-1:0.0 can0: device disconnected [ 451.849032][T10164] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 451.864699][ T42] libceph: connect (1)[c::]:6789 error -101 [ 451.870853][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 451.969371][T10170] ceph: No mds server is up or the cluster is laggy [ 453.139615][T10194] tmpfs: Bad value for 'mpol' [ 453.654283][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 453.663396][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1120'. [ 453.886354][ T5880] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 454.281399][ T29] audit: type=1400 audit(1773216408.255:751): avc: denied { mounton } for pid=10204 comm="syz.2.1122" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 454.840379][ T29] audit: type=1400 audit(1773216408.255:752): avc: denied { mount } for pid=10204 comm="syz.2.1122" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 454.859238][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 454.881029][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.901496][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 455.034449][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.042503][ T5880] usb 5-1: Product: syz [ 455.047444][ T5880] usb 5-1: Manufacturer: syz [ 455.052068][ T5880] usb 5-1: SerialNumber: syz [ 455.064029][ T5880] usb 5-1: config 0 descriptor?? [ 455.200529][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.257016][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.275989][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.291572][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.304110][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.488969][ T5880] msi2500 5-1:0.0: Registered as swradio24 [ 455.520103][ T5880] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 455.573938][T10237] usb usb8: usbfs: process 10237 (syz.2.1127) did not claim interface 0 before use [ 456.026090][ T5880] usb 5-1: USB disconnect, device number 28 [ 457.162706][T10260] binder: 10255:10260 ioctl c0306201 0 returned -14 [ 458.123315][ T5880] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 458.228747][ T9] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 458.306568][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.317138][ T5880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.329211][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.344323][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.357808][ T5880] usb 5-1: config 0 descriptor?? [ 458.394769][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 458.422776][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 458.442396][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 458.465071][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 458.488581][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 458.507186][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 458.525323][ T9] usb 1-1: string descriptor 0 read error: -22 [ 458.531779][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 458.541256][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.562230][ T9] usb 1-1: config 0 descriptor?? [ 458.583863][T10262] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 458.601800][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 458.732910][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 458.863237][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 459.124584][ T9] usb 1-1: USB disconnect, device number 24 [ 459.124636][ C1] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 459.162137][ T7614] udevd[7614]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 460.321673][ T9] usb 5-1: USB disconnect, device number 29 [ 460.757073][T10288] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 460.832798][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 461.012936][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 461.076772][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.233486][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 461.309404][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.376220][ T10] usb 3-1: Product: syz [ 461.435507][ T10] usb 3-1: Manufacturer: syz [ 461.484693][ T10] usb 3-1: SerialNumber: syz [ 461.503913][T10291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1145'. [ 461.692881][ T10] usb 3-1: config 0 descriptor?? [ 462.764384][T10298] usb usb8: usbfs: process 10298 (syz.3.1146) did not claim interface 0 before use [ 462.841755][ T10] msi2500 3-1:0.0: Registered as swradio24 [ 462.856241][ T10] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 463.060366][ T10] usb 3-1: USB disconnect, device number 25 [ 464.461961][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 465.322705][ T5880] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 465.515339][ T5880] usb 1-1: config 0 has no interfaces? [ 465.521008][ T5880] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 465.589414][ T29] audit: type=1326 audit(1773216419.745:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10333 comm="syz.4.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430f99c799 code=0x0 [ 465.613031][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.645145][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 465.657426][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 465.667734][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 465.712924][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 465.808863][ T5880] usb 1-1: config 0 descriptor?? [ 465.985026][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 467.709278][ T10] usb 1-1: USB disconnect, device number 25 [ 468.322812][T10360] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 469.625007][T10372] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 469.816661][T10372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10372 comm=syz.1.1163 [ 471.144015][T10388] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 471.290152][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'. [ 471.341015][T10397] netlink: 'syz.4.1172': attribute type 23 has an invalid length. [ 471.382877][ T29] audit: type=1400 audit(1773216425.535:754): avc: denied { mounton } for pid=10394 comm="syz.4.1172" path="mnt:[4026532802]" dev="nsfs" ino=4026532802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 471.919120][T10408] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 471.969186][ T24] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 472.486692][ T24] usb 2-1: config 0 has no interfaces? [ 472.492264][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 472.743630][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.793498][ T24] usb 2-1: config 0 descriptor?? [ 473.076904][T10422] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 473.284559][T10422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10422 comm=syz.4.1178 [ 474.493365][T10428] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 474.593021][ T5940] usb 2-1: USB disconnect, device number 38 [ 475.385947][ T793] libceph: connect (1)[c::]:6789 error -101 [ 475.402405][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 476.656127][ T10] libceph: connect (1)[c::]:6789 error -101 [ 476.661819][T10442] ceph: No mds server is up or the cluster is laggy [ 477.043360][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 478.739232][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 478.771336][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 478.787104][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 478.802929][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 478.814192][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 479.237376][T10466] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 479.583053][T10470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10470 comm=syz.3.1191 [ 480.954022][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 481.222618][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 481.238085][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 481.258389][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 481.270388][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 483.345384][T10498] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 484.780436][ T24] libceph: connect (1)[c::]:6789 error -101 [ 484.791662][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 484.925852][T10507] ceph: No mds server is up or the cluster is laggy [ 484.936040][ T24] libceph: connect (1)[c::]:6789 error -101 [ 484.950261][ T29] audit: type=1804 audit(1773216439.105:755): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1201" name="bus" dev="ramfs" ino=29698 res=1 errno=0 [ 484.959595][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 485.398347][T10529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10529 comm=syz.2.1204 [ 486.274839][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1206'. [ 487.540966][T10553] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1209'. [ 487.667996][T10559] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 488.389372][T10544] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1209'. [ 490.256771][T10578] usb usb8: usbfs: process 10578 (syz.2.1215) did not claim interface 0 before use [ 490.582695][ T5940] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 491.414316][T10585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10585 comm=syz.0.1217 [ 491.522131][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 491.533743][ T5940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 491.542768][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.552903][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.562808][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.573625][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.051294][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.062059][ T24] libceph: connect (1)[c::]:6789 error -22 [ 492.068489][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 492.088401][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.139534][ T5940] usb 5-1: can't set config #16, error -71 [ 492.191372][ T5940] usb 5-1: USB disconnect, device number 30 [ 492.414275][ T24] libceph: connect (1)[c::]:6789 error -22 [ 492.421509][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 493.147736][ T24] libceph: connect (1)[c::]:6789 error -22 [ 493.277264][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 493.288462][T10589] ceph: No mds server is up or the cluster is laggy [ 494.972902][ T5940] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 495.192871][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 495.240885][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.262638][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.331973][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 495.404460][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.421326][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.495865][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.663158][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 496.321787][ T29] audit: type=1400 audit(1773216450.475:756): avc: denied { read } for pid=10612 comm="syz.3.1224" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 496.387576][T10638] netlink: 'syz.3.1224': attribute type 2 has an invalid length. [ 496.459058][ T29] audit: type=1400 audit(1773216450.485:757): avc: denied { open } for pid=10612 comm="syz.3.1224" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 496.484094][ T29] audit: type=1400 audit(1773216450.485:758): avc: denied { ioctl } for pid=10612 comm="syz.3.1224" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 496.495995][T10638] !: entered promiscuous mode [ 496.673098][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 496.685688][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.701801][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 496.712252][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.723845][ T10] usb 3-1: Product: syz [ 496.728108][ T10] usb 3-1: Manufacturer: syz [ 496.732824][ T10] usb 3-1: SerialNumber: syz [ 497.230375][T10638] netlink: 'syz.3.1224': attribute type 2 has an invalid length. [ 497.566582][ T10] usb 3-1: config 0 descriptor?? [ 497.587628][T10638] !: left promiscuous mode [ 497.716000][ T29] audit: type=1326 audit(1773216451.865:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.0.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa84cf9c799 code=0x0 [ 497.863092][ T10] msi2500 3-1:0.0: Registered as swradio24 [ 497.879182][ T10] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 498.038071][ T10] usb 3-1: USB disconnect, device number 26 [ 498.128707][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 498.494723][ T5940] usb 4-1: usb_control_msg returned -71 [ 498.541132][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 498.584396][ T5940] usb 4-1: USB disconnect, device number 19 [ 499.672915][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 500.032448][T10680] binder: 10674:10680 ioctl c0306201 0 returned -14 [ 500.645018][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.655280][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.666238][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.677991][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.687062][T10682] openvswitch: netlink: Message has 12 unknown bytes. [ 500.701649][ T10] usb 5-1: config 0 descriptor?? [ 500.717496][T10682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.271921][ T29] audit: type=1400 audit(1773216455.425:760): avc: denied { read } for pid=10681 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.128467][ T9] usb 5-1: USB disconnect, device number 31 [ 502.137542][ T5940] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 502.218123][T10698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1244'. [ 502.443391][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.543556][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.712929][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 502.733892][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.759750][ T5940] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 502.777659][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.788561][ T5940] usb 4-1: Product: syz [ 502.795357][ T5940] usb 4-1: Manufacturer: syz [ 502.818711][ T5940] usb 4-1: SerialNumber: syz [ 502.880111][ T5940] usb 4-1: config 0 descriptor?? [ 503.083016][ T29] audit: type=1804 audit(1773216457.225:761): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1247" name="bus" dev="ramfs" ino=30124 res=1 errno=0 [ 503.216360][ T5940] msi2500 4-1:0.0: Registered as swradio24 [ 503.226233][ T5940] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 503.595266][ T5940] usb 4-1: USB disconnect, device number 20 [ 505.031960][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 505.072897][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 505.085736][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 505.097530][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 505.110973][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 505.282769][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 505.504182][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.524944][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 505.534797][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.421625][T10745] binder: 10736:10745 ioctl c0306201 0 returned -14 [ 506.553021][ T10] usb 3-1: Product: syz [ 506.557695][ T10] usb 3-1: Manufacturer: syz [ 506.563484][ T10] usb 3-1: SerialNumber: syz [ 506.870782][ T10] usb 3-1: config 0 descriptor?? [ 506.876409][T10746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1255'. [ 506.886144][ T10] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 507.203555][T10730] vivid-000: ================= START STATUS ================= [ 507.282757][ T42] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 507.815384][T10730] vivid-000: RDS Tx I/O Mode: Controls [ 507.853821][T10730] vivid-000: RDS Program ID: 32904 [ 507.882301][T10730] vivid-000: RDS Program Type: 3 [ 507.899791][T10730] vivid-000: RDS PS Name: VIVID-TX [ 507.910875][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.912721][T10730] vivid-000: RDS Radio Text: [ 507.934767][ T42] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.977794][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.024378][T10730] This is a VIVID default Radio Text template text, change at will [ 508.044492][T10730] vivid-000: RDS Stereo: true [ 508.045719][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.082844][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 508.084632][ T42] usb 1-1: config 0 descriptor?? [ 508.095802][T10730] vivid-000: RDS Artificial Head: false [ 508.113978][T10730] vivid-000: RDS Compressed: false [ 508.121761][T10730] vivid-000: RDS Dynamic PTY: false [ 508.141339][T10730] vivid-000: RDS Traffic Announcement: false [ 508.168124][T10730] vivid-000: RDS Traffic Program: true [ 508.186395][T10730] vivid-000: RDS Music: true [ 508.196489][T10730] vivid-000: ================== END STATUS ================== [ 508.245303][ T10] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 508.245438][ T1704] usb 3-1: USB disconnect, device number 27 [ 508.254978][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.282044][ T10] usb 2-1: config 0 has no interfaces? [ 508.290855][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 508.320526][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.361927][ T10] usb 2-1: config 0 descriptor?? [ 509.232801][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 509.384283][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.406228][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.438424][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.485593][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.525632][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.556226][ T10] usb 3-1: config 0 descriptor?? [ 509.722699][ T793] usb 1-1: USB disconnect, device number 26 [ 509.782814][ T42] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 509.798039][ T5914] usb 2-1: USB disconnect, device number 39 [ 509.948091][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 509.958768][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.976116][T10772] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 509.996228][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 510.022652][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.063500][ T42] usb 4-1: Product: syz [ 510.077960][ T42] usb 4-1: Manufacturer: syz [ 510.111346][ T42] usb 4-1: SerialNumber: syz [ 510.130331][ T10] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 510.135547][ T42] usb 4-1: config 0 descriptor?? [ 510.253584][T10764] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1260'. [ 510.303672][T10764] CIFS mount error: No usable UNC path provided in device string! [ 510.303672][T10764] [ 510.335352][T10764] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 510.345160][ T42] msi2500 4-1:0.0: Registered as swradio24 [ 510.351043][ T29] audit: type=1326 audit(1773216464.505:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10778 comm="syz.1.1266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20a59c799 code=0x0 [ 510.362632][ T42] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 510.467464][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 510.483726][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 510.632042][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 510.651207][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 510.678571][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 510.714166][ T5914] usb 4-1: USB disconnect, device number 21 [ 510.722289][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 510.746586][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.775698][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 510.786063][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.796414][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 510.806209][ T10] usb 5-1: Product: syz [ 510.810472][ T10] usb 5-1: Manufacturer: syz [ 510.815814][ T10] usb 5-1: SerialNumber: syz [ 510.828366][ T10] usb 5-1: config 0 descriptor?? [ 511.304956][ C0] plantronics 0003:047F:FFFF.001A: usb_submit_urb(ctrl) failed: -1 [ 511.445689][ T10] msi2500 5-1:0.0: Registered as swradio24 [ 511.457767][ T10] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 511.462752][ T5880] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 511.490606][T10799] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 511.557448][ T10] usb 5-1: USB disconnect, device number 32 [ 512.162699][ T5880] usb 3-1: device descriptor read/64, error -32 [ 512.412764][ T5880] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 512.974335][T10825] binder: 10822:10825 ioctl c0306201 0 returned -14 [ 513.302764][T10640] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 513.549555][ T42] usb 3-1: USB disconnect, device number 28 [ 513.704448][T10640] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.721491][T10640] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.730672][T10640] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.767728][T10640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.212096][T10831] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 514.223746][T10640] usb 1-1: config 0 descriptor?? [ 514.289062][T10838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10838 comm=syz.1.1275 [ 514.303546][T10831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.662935][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 516.345037][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 516.361035][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.373102][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.387110][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 516.398435][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.410600][ T10] usb 2-1: config 0 descriptor?? [ 516.582686][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 516.729093][T10857] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 516.793010][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 516.858003][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.004424][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 517.060307][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.074002][ T5914] usb 1-1: USB disconnect, device number 27 [ 517.104072][ T42] usb 3-1: Product: syz [ 517.126630][ T42] usb 3-1: Manufacturer: syz [ 517.156015][ T42] usb 3-1: SerialNumber: syz [ 517.186311][ T10] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 517.261192][ T42] usb 3-1: config 0 descriptor?? [ 518.220726][ T10] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 518.311368][ T10] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 518.335674][ T42] msi2500 3-1:0.0: Registered as swradio24 [ 518.336802][ T10] ft260 0003:0403:6030.001B: failed to retrieve system status [ 518.341541][ T42] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 518.376839][ T42] usb 3-1: USB disconnect, device number 29 [ 518.526293][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 518.590510][ T10] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -32 [ 519.881537][ T42] usb 2-1: USB disconnect, device number 40 [ 522.270669][T10909] binder: 10906:10909 ioctl c0306201 0 returned -14 [ 523.606284][T10890] ALSA: mixer_oss: invalid OSS volume '' [ 524.354562][T10911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.370129][ T29] audit: type=1400 audit(1773216478.525:763): avc: denied { setopt } for pid=10910 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 525.613251][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 525.845942][T10926] process 'syz.1.1299' launched './file0' with NULL argv: empty string added [ 526.657422][ T1704] libceph: connect (1)[c::]:6789 error -101 [ 526.768486][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 527.053171][ T1704] libceph: connect (1)[c::]:6789 error -101 [ 527.138990][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 527.156088][T10939] ceph: No mds server is up or the cluster is laggy [ 527.908500][T10958] binder: 10954:10958 ioctl c0306201 0 returned -14 [ 528.472635][ T29] audit: type=1400 audit(1773216482.625:764): avc: denied { mount } for pid=10952 comm="syz.4.1305" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 528.790749][ T29] audit: type=1326 audit(1773216482.875:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.2.1308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa27159c799 code=0x0 [ 528.874029][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1306'. [ 528.977372][ T793] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 529.012121][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 529.058368][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 529.068238][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 529.077613][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 529.086640][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 529.173573][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 529.193027][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 529.200248][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.226881][ T793] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 529.271289][ T793] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 529.290041][ T793] usb 5-1: SerialNumber: ર볠㍫㒁箶ꇶ鬵폎弍贔侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧右曁쫉齤鱔喺猪퍒觭䄚慉赎㶧ꅺ룹ᯒ輓纁絃舍Ⴅꌁ솪囘밊ꋨ珴在 [ 529.398555][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 529.414606][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.452703][ T9] usb 4-1: config 0 has no interfaces? [ 529.489324][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 529.563102][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.613913][ T793] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 529.627430][ T9] usb 4-1: config 0 descriptor?? [ 529.665515][ T793] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.689163][ T793] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 529.709867][ T793] usb 5-1: media controller created [ 529.805427][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.842984][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 529.919795][ T793] zl10353_read_register: readreg error (reg=127, ret==0) [ 530.126182][T10981] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 530.294708][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 530.313282][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.361681][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.424178][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 530.433413][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.460180][ T9] usb 3-1: config 0 descriptor?? [ 530.478763][ T793] usb 5-1: USB disconnect, device number 33 [ 531.039426][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 531.045795][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 531.063171][ T9] usb 3-1: USB disconnect, device number 30 [ 531.923482][T10640] usb 4-1: USB disconnect, device number 22 [ 533.665052][T11027] netlink: 'syz.1.1321': attribute type 9 has an invalid length. [ 533.675514][T11027] netlink: 'syz.1.1321': attribute type 7 has an invalid length. [ 533.683882][T11027] netlink: 'syz.1.1321': attribute type 8 has an invalid length. [ 534.329650][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1319'. [ 534.524356][ T29] audit: type=1326 audit(1773216488.685:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.4.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430f99c799 code=0x0 [ 535.112682][ T1704] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 535.357865][ T1704] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 535.382423][ T1704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.402687][ T1704] usb 1-1: config 0 has no interfaces? [ 535.409081][ T1704] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 535.432717][ T1704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.503151][ T1704] usb 1-1: config 0 descriptor?? [ 536.296242][T10640] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 536.482336][T10640] usb 4-1: Using ep0 maxpacket: 32 [ 536.503085][T10640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.552622][T10640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.570637][T10640] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 536.704670][T10640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.169493][T10640] usb 4-1: config 0 descriptor?? [ 537.324879][ T1704] usb 1-1: can't set config #0, error -71 [ 537.349067][ T1704] usb 1-1: USB disconnect, device number 28 [ 537.662406][T10640] usbhid 4-1:0.0: can't add hid device: -32 [ 537.694746][T10640] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 537.731937][T10640] usb 4-1: USB disconnect, device number 23 [ 538.810940][T11074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1334'. [ 539.232636][T10640] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 541.660869][T10640] usb 2-1: unable to read config index 0 descriptor/all [ 541.674160][T10640] usb 2-1: can't read configurations, error -71 [ 541.796997][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1338'. [ 541.824664][T11089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=11089 comm=syz.3.1338 [ 541.862928][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1338'. [ 541.876245][T11093] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 541.919974][T11093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.983101][T11093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11093 comm=syz.0.1340 [ 543.012927][T10640] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 543.758257][T10640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.769618][T10640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.907930][T10640] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 544.011518][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 544.091040][ T1704] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 544.098943][T10640] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 544.109182][T10640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.120754][T10640] usb 2-1: config 0 descriptor?? [ 544.582734][ T1704] usb 4-1: Using ep0 maxpacket: 8 [ 544.606645][ T1704] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.655430][ T1704] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 545.211583][T11125] ALSA: mixer_oss: invalid OSS volume '' [ 546.125291][T10640] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 546.142697][ T1704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.161778][ T1704] usb 4-1: Product: syz [ 546.179066][ T1704] usb 4-1: Manufacturer: syz [ 546.192665][ T1704] usb 4-1: SerialNumber: syz [ 546.223744][ T1704] usb 4-1: config 0 descriptor?? [ 546.257574][T10640] usb 2-1: USB disconnect, device number 42 [ 546.344251][T11135] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 546.402770][ T1704] usb 4-1: can't set config #0, error -71 [ 546.422895][ T1704] usb 4-1: USB disconnect, device number 24 [ 546.476653][T11130] fido_id[11130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 546.992119][ T29] audit: type=1804 audit(1773216501.145:767): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1353" name="bus" dev="ramfs" ino=31374 res=1 errno=0 [ 547.021269][T11147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11147 comm=syz.4.1354 [ 547.044965][T11135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.405023][ T793] libceph: connect (1)[c::]:6789 error -101 [ 548.413849][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 548.727037][ T793] libceph: connect (1)[c::]:6789 error -101 [ 548.734865][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 549.248404][T11163] ceph: No mds server is up or the cluster is laggy [ 549.265928][ T9] libceph: connect (1)[c::]:6789 error -101 [ 549.276112][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 549.742713][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 549.902855][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 549.919358][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.500889][T11181] ALSA: mixer_oss: invalid OSS volume '' [ 551.023016][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 551.242609][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.250659][ T9] usb 3-1: Product: syz [ 551.262608][ T9] usb 3-1: Manufacturer: syz [ 551.267247][ T9] usb 3-1: SerialNumber: syz [ 551.288663][ T9] usb 3-1: config 0 descriptor?? [ 552.191920][ T9] msi2500 3-1:0.0: Registered as swradio24 [ 552.338230][ T9] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 553.056643][T11203] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 553.071953][ T9] usb 3-1: USB disconnect, device number 31 [ 553.247129][T11203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.298377][T11211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11211 comm=syz.1.1369 [ 555.179974][T11232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.187663][T11232] IPv6: NLM_F_CREATE should be set when creating new route [ 555.195201][T11232] IPv6: NLM_F_CREATE should be set when creating new route [ 555.202505][T11232] IPv6: NLM_F_CREATE should be set when creating new route [ 555.428677][T11232] 0xfffffffffffffffd-0x000000020000 : "" [ 555.434679][T11232] mtd: partition "" is out of reach -- disabled [ 555.544190][T11232] ftl_cs: FTL header not found. [ 556.227210][T11239] ALSA: mixer_oss: invalid OSS volume '' [ 559.041088][ T29] audit: type=1400 audit(1773216513.195:768): avc: denied { create } for pid=11264 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 560.098849][ T29] audit: type=1400 audit(1773216514.245:769): avc: denied { connect } for pid=11281 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.223142][ T29] audit: type=1400 audit(1773216514.355:770): avc: denied { setopt } for pid=11281 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.375431][ T29] audit: type=1400 audit(1773216514.375:771): avc: denied { accept } for pid=11281 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 560.436914][ T793] libceph: connect (1)[c::]:6789 error -22 [ 560.489155][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 560.753394][ T793] libceph: connect (1)[c::]:6789 error -22 [ 560.759456][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 560.955593][T11288] ceph: No mds server is up or the cluster is laggy [ 560.975771][T11286] Process accounting resumed [ 560.995482][T11299] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 561.276906][T11309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11309 comm=syz.2.1384 [ 561.993258][T11299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.244376][ T793] libceph: connect (1)[c::]:6789 error -22 [ 562.250450][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 562.272723][T11304] ceph: No mds server is up or the cluster is laggy [ 563.851242][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.858269][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.094227][ T29] audit: type=1400 audit(1773216519.255:772): avc: denied { write } for pid=11337 comm="syz.4.1405" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 565.118683][T11339] random: crng reseeded on system resumption [ 565.188503][T11345] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 565.232697][ T29] audit: type=1400 audit(1773216519.275:773): avc: denied { open } for pid=11337 comm="syz.4.1405" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 565.431646][T11349] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 565.579632][T11349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 566.114283][T11349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11349 comm=syz.2.1407 [ 567.353236][ T29] audit: type=1400 audit(1773216521.505:774): avc: denied { attach_queue } for pid=11354 comm="syz.1.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 567.618913][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 567.637963][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 567.759206][T11359] ceph: No mds server is up or the cluster is laggy [ 567.833815][T11369] binder: 11368:11369 ioctl 4018620d 0 returned -22 [ 567.882678][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 568.054900][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.079264][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.102640][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.194143][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.317845][ T29] audit: type=1400 audit(1773216522.465:775): avc: denied { mount } for pid=11376 comm="syz.0.1415" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.629745][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.662952][ T29] audit: type=1400 audit(1773216522.465:776): avc: denied { remount } for pid=11376 comm="syz.0.1415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.685114][ T10] usb 3-1: config 0 descriptor?? [ 569.047879][T11388] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1417'. [ 569.256964][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.337727][ T10] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 569.534582][T11366] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1411'. [ 569.596373][T11366] CIFS mount error: No usable UNC path provided in device string! [ 569.596373][T11366] [ 569.607162][T11366] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.734794][ T10] usb 3-1: USB disconnect, device number 32 [ 569.837247][T11394] fido_id[11394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 570.112708][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 570.176119][T11401] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 570.211333][ T29] audit: type=1400 audit(1773216524.365:777): avc: denied { accept } for pid=11402 comm="syz.4.1422" lport=34545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.353013][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 570.396681][T11401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.410119][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.437371][T11405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.439397][T11407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11407 comm=syz.3.1421 [ 570.593236][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 570.662659][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.670758][ T10] usb 2-1: Product: syz [ 570.701422][ T10] usb 2-1: Manufacturer: syz [ 570.711381][ T10] usb 2-1: SerialNumber: syz [ 570.783208][T11413] binder: 11412:11413 ioctl 4018620d 0 returned -22 [ 570.825439][ T10] usb 2-1: config 0 descriptor?? [ 571.004017][ T10] msi2500 2-1:0.0: Registered as swradio24 [ 571.009891][ T10] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 571.058714][ T10] usb 2-1: USB disconnect, device number 43 [ 571.673287][ T793] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 571.823109][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 571.842496][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.907721][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.985135][ T29] audit: type=1400 audit(1773216526.145:778): avc: denied { name_bind } for pid=11427 comm="syz.2.1428" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 572.028594][ T793] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 572.343517][T11436] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1430'. [ 572.358096][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.580503][ T793] usb 4-1: config 0 descriptor?? [ 573.046079][ T793] usbhid 4-1:0.0: can't add hid device: -32 [ 573.052187][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 573.064556][ T29] audit: type=1326 audit(1773216527.225:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11442 comm="syz.1.1434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20a59c799 code=0x0 [ 573.099569][ T793] usb 4-1: USB disconnect, device number 25 [ 573.142635][T10640] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 573.314731][T10640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.347174][T10640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.364669][T10640] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.378494][T10640] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.387756][T10640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.571404][T10640] usb 1-1: config 0 descriptor?? [ 573.751908][T11453] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 573.892963][T11453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.176280][T11458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11458 comm=syz.3.1436 [ 574.197372][T10640] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 574.243617][T11461] capability: warning: `syz.1.1438' uses 32-bit capabilities (legacy support in use) [ 574.358499][T11441] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1433'. [ 574.405903][T11441] CIFS mount error: No usable UNC path provided in device string! [ 574.405903][T11441] [ 574.416238][T11441] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 574.699725][ T793] usb 1-1: USB disconnect, device number 29 [ 574.754638][T11462] fido_id[11462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 575.837419][T11485] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1444'. [ 577.853612][T11494] ALSA: mixer_oss: invalid OSS volume '' [ 578.365144][T11501] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 579.752642][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 579.928662][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.959248][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.991014][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.141443][T11514] binder: 11510:11514 ioctl c0306201 0 returned -14 [ 580.337962][T10640] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 580.504301][T10640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.523248][T10640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.535366][T10640] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.549906][T10640] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.573642][T10640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.602657][ T1704] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 580.644198][T10640] usb 1-1: config 0 descriptor?? [ 580.832181][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.832184][ T1704] usb 3-1: Using ep0 maxpacket: 8 [ 580.847575][ T10] usb 5-1: config 0 descriptor?? [ 580.859525][ T1704] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.925126][ T29] audit: type=1804 audit(1773216535.075:780): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1450" name="bus" dev="ramfs" ino=33852 res=1 errno=0 [ 580.955791][ T1704] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 580.965544][ T1704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.974072][ T1704] usb 3-1: Product: syz [ 580.979736][ T1704] usb 3-1: Manufacturer: syz [ 580.985249][ T1704] usb 3-1: SerialNumber: syz [ 581.000422][ T1704] usb 3-1: config 0 descriptor?? [ 581.273080][T10640] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 581.401446][ T1704] msi2500 3-1:0.0: Registered as swradio24 [ 581.428794][ T1704] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 581.498164][ T1704] usb 3-1: USB disconnect, device number 33 [ 581.507673][T11511] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1454'. [ 581.526314][T11511] CIFS mount error: No usable UNC path provided in device string! [ 581.526314][T11511] [ 581.552735][T11511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 581.681471][ T793] usb 1-1: USB disconnect, device number 30 [ 582.564275][ T1704] usb 5-1: USB disconnect, device number 34 [ 583.207426][ T29] audit: type=1326 audit(1773216537.365:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.3.1460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb80b9c799 code=0x0 [ 584.130974][ T793] libceph: connect (1)[c::]:6789 error -101 [ 584.142891][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 584.424096][ T793] libceph: connect (1)[c::]:6789 error -101 [ 584.433444][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 584.522842][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 584.682910][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 584.717747][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.757369][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.908069][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 584.976148][ T793] libceph: connect (1)[c::]:6789 error -101 [ 584.996261][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 585.007673][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.030778][T11553] ceph: No mds server is up or the cluster is laggy [ 585.034075][ T10] usb 2-1: Product: syz [ 585.046110][ T10] usb 2-1: Manufacturer: syz [ 585.053923][ T10] usb 2-1: SerialNumber: syz [ 585.076666][ T10] usb 2-1: config 0 descriptor?? [ 585.494454][T11572] usb usb8: usbfs: process 11572 (syz.2.1468) did not claim interface 0 before use [ 585.568228][ T29] audit: type=1804 audit(1773216539.705:782): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1467" name="bus" dev="ramfs" ino=33174 res=1 errno=0 [ 585.686198][T11580] binder: 11574:11580 ioctl c0306201 0 returned -14 [ 586.538636][ T793] libceph: connect (1)[c::]:6789 error -22 [ 586.548959][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 587.088873][T11583] ALSA: mixer_oss: invalid OSS volume '' [ 587.573515][ T10] libceph: connect (1)[c::]:6789 error -22 [ 587.579600][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 587.675214][ T42] usb 2-1: USB disconnect, device number 44 [ 587.712897][T10640] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 587.750460][T11570] ceph: No mds server is up or the cluster is laggy [ 588.068081][T10640] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.109020][T10640] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.153727][T10640] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.166874][T10640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.188725][T10640] usb 4-1: config 0 descriptor?? [ 588.322298][T11592] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1473'. [ 588.331663][T11592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'. [ 589.235018][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 589.316423][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 589.584341][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 589.626098][ T9] usb 4-1: USB disconnect, device number 26 [ 589.872702][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 589.886182][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 589.969922][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 591.179945][T11622] ALSA: mixer_oss: invalid OSS volume '' [ 592.003690][T11631] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1484'. [ 592.637142][ T29] audit: type=1804 audit(1773216546.795:783): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1487" name="bus" dev="ramfs" ino=34134 res=1 errno=0 [ 592.795315][ T29] audit: type=1400 audit(1773216546.935:784): avc: denied { ioctl } for pid=11641 comm="syz.0.1488" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 592.910031][ T29] audit: type=1400 audit(1773216546.935:785): avc: denied { getopt } for pid=11641 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 593.593090][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 594.454182][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.494337][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.507631][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.523831][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.536220][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.552299][ T10] usb 2-1: config 0 descriptor?? [ 594.892642][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 595.040223][ T10] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 595.132194][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.143978][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.190840][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.210109][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.253576][T11653] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1490'. [ 595.264994][T11653] CIFS mount error: No usable UNC path provided in device string! [ 595.264994][T11653] [ 595.282640][T11653] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 595.421579][ T10] usb 2-1: USB disconnect, device number 45 [ 595.421625][ C0] plantronics 0003:047F:FFFF.0020: usb_submit_urb(ctrl) failed: -19 [ 595.500766][ T9] usb 1-1: usb_control_msg returned -32 [ 595.523506][ T9] usbtmc 1-1:16.0: can't read capabilities [ 596.315121][T11671] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 597.801891][ T10] usb 1-1: USB disconnect, device number 31 [ 597.932605][ T29] audit: type=1804 audit(1773216552.085:786): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1503" name="bus" dev="ramfs" ino=33495 res=1 errno=0 [ 598.406432][ T5940] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 598.477583][T11711] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1506'. [ 598.670646][T10131] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.110480][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 599.129458][ T5940] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 599.767412][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 599.872772][ T5940] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 599.884477][ T5940] usb 5-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 599.893776][ T5940] usb 5-1: config 162 has no interface number 0 [ 599.900060][ T5940] usb 5-1: config 162 has no interface number 1 [ 599.906450][ T5940] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.919615][ T5940] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 599.931626][ T5940] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 600.016659][T10640] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 600.025303][ T5940] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 600.036977][ T5940] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 600.047317][ T5940] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 600.060825][ T5940] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 600.074660][ T5940] usb 5-1: config 162 interface 84 has no altsetting 0 [ 600.081619][ T5940] usb 5-1: config 162 interface 2 has no altsetting 0 [ 600.092402][ T5940] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 600.102365][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.110591][ T5940] usb 5-1: Product: syz [ 600.115959][ T5940] usb 5-1: Manufacturer: syz [ 600.120572][ T5940] usb 5-1: SerialNumber: syz [ 600.410462][T10640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.428403][ T5940] usb 5-1: USB disconnect, device number 35 [ 600.435965][T10640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.446964][ T5816] Bluetooth: hci5: sending frame failed (-19) [ 600.457392][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 600.461246][T10640] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.489374][T10640] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.499515][T10640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.102117][T11735] ALSA: mixer_oss: invalid OSS volume '' [ 601.991991][T10640] usb 3-1: config 0 descriptor?? [ 602.007056][T10640] usb 3-1: can't set config #0, error -71 [ 602.039694][T10640] usb 3-1: USB disconnect, device number 34 [ 602.415610][T11748] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 602.495762][T11748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 602.580298][T11748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11748 comm=syz.3.1518 [ 603.376066][T11742] ALSA: mixer_oss: invalid OSS volume '' [ 603.758055][ T29] audit: type=1804 audit(1773216557.895:787): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1520" name="bus" dev="ramfs" ino=33658 res=1 errno=0 [ 604.232663][T11764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1521'. [ 604.374895][ T29] audit: type=1400 audit(1773216558.535:788): avc: denied { read write } for pid=11762 comm="syz.0.1522" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 604.409075][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1522'. [ 604.508172][ T29] audit: type=1400 audit(1773216558.535:789): avc: denied { open } for pid=11762 comm="syz.0.1522" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 605.553768][ T793] hid-generic 0009:06BD:0000.0021: unknown main item tag 0x5 [ 606.376227][ T793] hid-generic 0009:06BD:0000.0021: item fetching failed at offset 4/5 [ 606.397237][ T793] hid-generic 0009:06BD:0000.0021: probe with driver hid-generic failed with error -22 [ 606.530610][ T29] audit: type=1400 audit(1773216560.665:790): avc: denied { ioctl } for pid=11767 comm="syz.1.1523" path="socket:[33677]" dev="sockfs" ino=33677 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 607.082682][ T42] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 607.415725][ T793] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 607.626987][ T793] usb 3-1: unable to get BOS descriptor or descriptor too short [ 607.636137][ T793] usb 3-1: not running at top speed; connect to a high speed hub [ 607.646353][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.649464][ T793] usb 3-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config [ 607.674842][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.694170][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.694626][ T793] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 607.823657][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.837207][ T42] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.846498][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.860904][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.862620][ T42] usb 1-1: config 0 descriptor?? [ 608.245153][ T793] usb 3-1: Product: syz [ 608.263638][ T793] usb 3-1: Manufacturer: syz [ 608.274119][ T793] usb 3-1: SerialNumber: syz [ 608.480372][ T42] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 608.495914][T11802] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 608.659954][T11802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.718386][T11808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11808 comm=syz.4.1530 [ 608.739571][T11775] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1526'. [ 608.771708][ T29] audit: type=1400 audit(1773216562.925:791): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 608.794916][T11811] CIFS mount error: No usable UNC path provided in device string! [ 608.794916][T11811] [ 608.955252][T11811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 609.295431][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 609.723204][ T1704] usb 1-1: USB disconnect, device number 32 [ 610.225145][ T29] audit: type=1804 audit(1773216564.385:792): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1535" name="bus" dev="ramfs" ino=33735 res=1 errno=0 [ 610.380212][ T793] usb 3-1: 0:197 : does not exist [ 610.387653][ T793] usb 3-1: 0:35 : does not exist [ 610.456966][T11834] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 610.852908][ T793] usb 3-1: USB disconnect, device number 35 [ 611.511509][T11843] mkiss: ax0: crc mode is auto. [ 612.204450][ T7614] udevd[7614]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.368750][T11826] ceph: No mds server is up or the cluster is laggy [ 612.618094][ T793] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 612.733700][T11855] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 612.741666][ T29] audit: type=1400 audit(1773216566.895:793): avc: denied { getopt } for pid=11854 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 612.783242][T11855] syz_tun: entered promiscuous mode [ 612.817964][T11855] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 612.863531][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 612.870473][ T793] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.897973][ T793] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 612.921677][ T29] audit: type=1400 audit(1773216567.075:794): avc: denied { bind } for pid=11854 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 612.987199][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.022629][ T793] usb 3-1: Product: syz [ 613.039471][ T793] usb 3-1: Manufacturer: syz [ 613.048696][T11858] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 613.061179][ T793] usb 3-1: SerialNumber: syz [ 613.093733][ T793] usb 3-1: config 0 descriptor?? [ 613.110038][T11858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 613.136424][T11864] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11864 comm=syz.0.1543 [ 613.793562][ T793] msi2500 3-1:0.0: Registered as swradio24 [ 613.799739][ T793] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 614.109104][ T793] usb 3-1: USB disconnect, device number 36 [ 614.185836][T10640] libceph: connect (1)[c::]:6789 error -101 [ 614.191919][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 614.507545][T10640] libceph: connect (1)[c::]:6789 error -101 [ 614.574736][T11884] ceph: No mds server is up or the cluster is laggy [ 614.590917][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 615.260780][ T1704] libceph: connect (1)[c::]:6789 error -101 [ 615.267135][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 615.322606][ T29] audit: type=1804 audit(1773216569.475:795): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1552" name="bus" dev="ramfs" ino=34949 res=1 errno=0 [ 615.553149][ T1704] libceph: connect (1)[c::]:6789 error -101 [ 615.703870][T11895] ceph: No mds server is up or the cluster is laggy [ 615.716158][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 616.043135][ T1704] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 616.297244][T11916] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 616.309804][ T1704] usb 2-1: Using ep0 maxpacket: 8 [ 616.348942][ T29] audit: type=1400 audit(1773216570.485:796): avc: denied { remove_name } for pid=11909 comm="syz.2.1555" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 616.382708][ T29] audit: type=1400 audit(1773216570.485:797): avc: denied { unlink } for pid=11909 comm="syz.2.1555" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 616.518686][ T1704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.540910][ T1704] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 616.556304][ T1704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.566701][ T1704] usb 2-1: Product: syz [ 616.571804][ T1704] usb 2-1: Manufacturer: syz [ 616.579360][ T1704] usb 2-1: SerialNumber: syz [ 616.590706][ T1704] usb 2-1: config 0 descriptor?? [ 616.620099][T11922] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 616.639363][T11922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.659806][T11922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11922 comm=syz.4.1557 [ 616.782074][ T1704] msi2500 2-1:0.0: Registered as swradio24 [ 616.801952][ T1704] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 616.955617][ T1704] usb 2-1: USB disconnect, device number 46 [ 618.753378][T11952] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1565'. [ 618.940598][T10143] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.124718][T11956] binder: 11949:11956 ioctl c0306201 0 returned -14 [ 620.973366][T11961] ALSA: mixer_oss: invalid OSS volume '' [ 621.858305][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 621.898222][T11971] nbd: illegal input index -3276800 [ 623.943101][ T5914] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 624.155178][T11989] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 624.483657][T11995] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 624.502585][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 624.548692][T11997] dummy0: entered allmulticast mode [ 624.569903][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.611077][T11995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.701655][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.749475][T11995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11995 comm=syz.0.1570 [ 624.762379][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 624.772344][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 624.821653][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.945811][ T5914] usb 4-1: string descriptor 0 read error: -71 [ 624.975477][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 625.016507][ T5914] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 625.071448][ T5914] usb 4-1: config 0 descriptor?? [ 625.109909][ T5914] usb 4-1: can't set config #0, error -71 [ 625.125556][T11990] dummy0: left allmulticast mode [ 625.168177][ T5914] usb 4-1: USB disconnect, device number 27 [ 625.287974][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.294494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.392768][ T29] audit: type=1326 audit(1773216579.495:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 625.472455][ T29] audit: type=1326 audit(1773216579.495:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 625.509699][T12005] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 625.588075][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'. [ 625.957283][ T29] audit: type=1326 audit(1773216579.495:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 625.991989][ T29] audit: type=1326 audit(1773216579.495:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 626.016139][ T29] audit: type=1400 audit(1773216579.795:802): avc: denied { read } for pid=12001 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 626.037758][ T29] audit: type=1326 audit(1773216579.975:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 626.061301][ T29] audit: type=1326 audit(1773216579.975:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.0.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84cf9c799 code=0x7ffc0000 [ 626.128488][T12005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.151359][T12014] tmpfs: Bad value for 'mpol' [ 626.374000][ T1704] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 626.624151][ T1704] usb 3-1: Using ep0 maxpacket: 32 [ 626.692669][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.704108][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.713957][ T1704] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 626.724813][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.743101][ T42] libceph: connect (1)[c::]:6789 error -22 [ 626.750052][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 626.793702][ T1704] usb 3-1: config 0 descriptor?? [ 627.013149][ T5940] libceph: connect (1)[c::]:6789 error -22 [ 627.019198][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 628.009961][ T5940] libceph: connect (1)[c::]:6789 error -22 [ 628.032905][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 628.045541][T12019] ceph: No mds server is up or the cluster is laggy [ 628.193650][T12031] dummy0: entered allmulticast mode [ 628.465755][T12027] dummy0: left allmulticast mode [ 628.528175][ T1704] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 628.535802][ T1704] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 628.743460][ T1704] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 628.962448][ T1704] ft260 0003:0403:6030.0023: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 629.188744][ T1704] ft260 0003:0403:6030.0023: failed to retrieve status: -32, no wakeup [ 629.292873][ T5940] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 629.351319][ T10] libceph: connect (1)[c::]:6789 error -22 [ 629.364604][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 629.382648][ T5914] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 629.493033][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 629.550196][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.606417][ T5940] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 629.608201][ T5914] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 629.627128][ T10] libceph: connect (1)[c::]:6789 error -22 [ 629.635789][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.636693][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 629.653886][ T5940] usb 4-1: Product: syz [ 629.655137][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.658915][T12011] ft260 0003:0403:6030.0023: ft260_i2c_read: failed with -38 [ 629.671939][ T5914] usb 1-1: Product: syz [ 629.673733][ T5940] usb 4-1: Manufacturer: syz [ 629.678355][ T5914] usb 1-1: Manufacturer: syz [ 629.689680][ T5914] usb 1-1: SerialNumber: syz [ 629.689751][ T5940] usb 4-1: SerialNumber: syz [ 629.697832][ T5914] usb 1-1: config 0 descriptor?? [ 629.709776][ T5914] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 629.718140][ T5940] usb 4-1: config 0 descriptor?? [ 629.739963][ T1704] usb 3-1: USB disconnect, device number 37 [ 629.751039][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.778493][T12050] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 629.786835][ T5914] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 629.816193][ T5914] usb 1-1: media controller created [ 629.839425][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.914899][ T5940] msi2500 4-1:0.0: Registered as swradio24 [ 629.921142][ T5940] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 629.958180][T12042] ceph: No mds server is up or the cluster is laggy [ 629.984415][ T5940] usb 4-1: USB disconnect, device number 28 [ 630.118600][ T5914] DVB: Unable to find symbol mt352_attach() [ 630.179321][ T5914] DVB: Unable to find symbol nxt6000_attach() [ 630.190013][ T5914] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 630.230815][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 630.259222][ T5914] dvb-usb: schedule remote query interval to 1000 msecs. [ 630.270507][ T5914] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 630.324844][ T5914] dvb-usb: bulk message failed: -22 (7/0) [ 630.341054][ T5914] dvb-usb: bulk message failed: -22 (7/0) [ 630.369297][ T5914] usb 1-1: USB disconnect, device number 33 [ 630.417077][T12057] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 630.557885][T12059] tmpfs: Bad value for 'mpol' [ 630.652030][ T5914] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 630.908866][T12066] dummy0: entered allmulticast mode [ 631.489144][T12060] dummy0: left allmulticast mode [ 632.733529][ T29] audit: type=1326 audit(1773216586.795:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12078 comm="syz.4.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430f99c799 code=0x0 [ 633.183636][T12085] binder: 12082:12085 ioctl c0306201 0 returned -14 [ 635.212706][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 635.485703][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 635.548647][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.601140][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.632857][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 635.652420][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.670234][ T9] usb 2-1: config 0 descriptor?? [ 635.864033][ T29] audit: type=1326 audit(1773216589.885:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.1605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430f99c799 code=0x0 [ 636.351957][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 636.365987][ T9] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 636.392860][ T10] libceph: connect (1)[c::]:6789 error -22 [ 636.399239][ T9] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 636.409308][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 636.420369][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 636.462460][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 636.533225][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 636.545557][ T9] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 636.554239][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 636.583309][T12108] ceph: No mds server is up or the cluster is laggy [ 636.755723][ T9] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 636.909000][T12119] tmpfs: Bad value for 'mpol' [ 636.939203][T12120] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 637.007015][ T9] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup [ 637.129490][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 637.424073][T12093] ft260 0003:0403:6030.0024: ft260_i2c_read: failed with -38 [ 637.459924][ T9] usb 2-1: USB disconnect, device number 47 [ 637.962787][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 638.329398][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 638.338804][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.350351][ T9] usb 3-1: Product: syz [ 638.356260][ T9] usb 3-1: Manufacturer: syz [ 638.360985][ T9] usb 3-1: SerialNumber: syz [ 638.522317][ T9] usb 3-1: config 0 descriptor?? [ 638.874127][T12132] ceph: No mds server is up or the cluster is laggy [ 638.922406][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 638.949048][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 638.959578][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 639.042124][ T9] usb 3-1: media controller created [ 639.057453][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.121903][ T9] DVB: Unable to find symbol mt352_attach() [ 639.130546][T12142] dvb-usb: bulk message failed: -22 (7/0) [ 639.203164][ T9] DVB: Unable to find symbol nxt6000_attach() [ 639.228466][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 639.502951][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 639.564865][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 639.584791][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 639.599923][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 639.606659][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 639.617748][ T9] usb 3-1: USB disconnect, device number 38 [ 639.637824][T12147] syzkaller0: entered promiscuous mode [ 639.666814][T12147] syzkaller0: entered allmulticast mode [ 639.772085][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 640.938864][T12165] tmpfs: Bad value for 'mpol' [ 641.061277][T12168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1620'. [ 641.562707][ T5920] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 641.752751][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 641.764315][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.786686][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.809244][ T5920] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 641.830175][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.853413][ T5920] usb 4-1: config 0 descriptor?? [ 642.269894][T12177] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 642.295384][ T5920] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 642.304240][ T5920] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 642.501080][ T5920] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 642.710172][ T5920] ft260 0003:0403:6030.0025: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 642.924544][ T5920] ft260 0003:0403:6030.0025: failed to retrieve status: -32, no wakeup [ 643.141221][T12170] ft260 0003:0403:6030.0025: ft260_i2c_read: failed with -38 [ 643.155019][ T1704] usb 4-1: USB disconnect, device number 29 [ 643.422458][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 643.444134][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 643.778477][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 643.801835][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 644.135708][T12184] ceph: No mds server is up or the cluster is laggy [ 644.338982][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 644.735879][ T29] audit: type=1400 audit(1773216598.895:807): avc: denied { bind } for pid=12191 comm="syz.0.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 644.888391][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 645.644560][ T29] audit: type=1400 audit(1773216599.795:808): avc: denied { connect } for pid=12191 comm="syz.0.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 646.369235][T12208] tmpfs: Bad value for 'mpol' [ 646.643165][ T5914] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 647.154291][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.165724][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.185701][ T5914] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 647.196412][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.221100][ T5914] usb 3-1: config 0 descriptor?? [ 647.657891][T12223] dummy0: entered allmulticast mode [ 648.249889][T12220] dummy0: left allmulticast mode [ 648.745744][ T5914] usb 3-1: USB disconnect, device number 39 [ 648.854319][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 648.860372][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 649.223635][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 649.325502][T12229] ceph: No mds server is up or the cluster is laggy [ 649.964335][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 651.443029][ T1704] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 651.811329][ T1704] usb 1-1: device descriptor read/64, error -71 [ 653.342640][ T1704] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 653.404447][T12245] ceph: No mds server is up or the cluster is laggy [ 653.559989][ T1704] usb 1-1: device descriptor read/64, error -71 [ 653.672935][ T1704] usb usb1-port1: attempt power cycle [ 653.688355][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1644'. [ 653.697829][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 654.053778][ T1704] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 654.345755][ T1704] usb 1-1: device descriptor read/8, error -71 [ 654.776489][T12277] dummy0: entered allmulticast mode [ 655.245790][T12270] dummy0: left allmulticast mode [ 655.250977][ T1704] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 655.609650][ T1704] usb 1-1: device not accepting address 37, error -71 [ 655.637439][ T1704] usb usb1-port1: unable to enumerate USB device [ 659.260471][T10640] libceph: connect (1)[c::]:6789 error -101 [ 659.267058][ T29] audit: type=1326 audit(1773216613.235:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.3.1664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb80b9c799 code=0x0 [ 659.290291][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 659.423625][T12312] ceph: No mds server is up or the cluster is laggy [ 659.552937][ T1704] libceph: connect (1)[c::]:6789 error -101 [ 659.563425][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 659.938897][T12340] dummy0: entered allmulticast mode [ 660.519434][T12335] dummy0: left allmulticast mode [ 660.706519][T10640] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 660.790091][T12346] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1671'. [ 661.162910][T10640] usb 5-1: device descriptor read/64, error -71 [ 661.485550][T10640] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 661.893557][T10640] usb 5-1: device descriptor read/64, error -71 [ 662.053291][T10640] usb usb5-port1: attempt power cycle [ 662.097013][ T29] audit: type=1326 audit(1773216616.245:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20a59c799 code=0x0 [ 662.198530][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 662.967961][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 662.982642][T10640] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 663.016753][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 663.108381][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 663.121219][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 663.222917][T10640] usb 5-1: device not accepting address 38, error -71 [ 665.372643][ T9] libceph: connect (1)[c::]:6789 error -22 [ 665.451138][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 665.733262][ T9] libceph: connect (1)[c::]:6789 error -22 [ 665.739319][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 666.009743][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 666.099154][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 666.281576][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 666.292275][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 666.540691][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 666.713124][ T5920] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 666.988682][ T5920] usb 3-1: device descriptor read/64, error -71 [ 667.525491][T12394] ceph: No mds server is up or the cluster is laggy [ 667.582253][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 667.771175][ T5920] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 667.975370][ T9] libceph: connect (1)[c::]:6789 error -22 [ 669.017568][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 669.282131][ T9] libceph: connect (1)[c::]:6789 error -22 [ 669.290068][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 669.428019][T12389] ceph: No mds server is up or the cluster is laggy [ 669.448600][ T5920] usb 3-1: device descriptor read/64, error -71 [ 669.503323][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1689'. [ 669.514873][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 669.633651][ T5920] usb usb3-port1: attempt power cycle [ 669.667378][ T793] libceph: connect (1)[c::]:6789 error -22 [ 669.718970][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 669.956827][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 669.968703][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 670.103359][ T5920] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 670.354151][ T5920] usb 3-1: device descriptor read/8, error -71 [ 670.642831][ T5920] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 670.673614][ T5920] usb 3-1: device descriptor read/8, error -71 [ 670.890752][ T5920] usb usb3-port1: unable to enumerate USB device [ 670.913806][T12435] ceph: No mds server is up or the cluster is laggy [ 671.333637][ T10] libceph: connect (1)[c::]:6789 error -22 [ 671.472815][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 671.503742][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 671.585933][T12456] veth3: entered promiscuous mode [ 671.597261][T12456] veth3: entered allmulticast mode [ 671.650528][T12444] ceph: No mds server is up or the cluster is laggy [ 671.853342][T12469] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1704'. [ 673.169145][T12483] kAFS: unable to lookup cell '(' [ 673.687757][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 673.702981][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 673.885825][T12488] ceph: No mds server is up or the cluster is laggy [ 673.978540][T10640] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 674.224078][T10640] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 674.232390][T10640] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 674.392595][T10640] usb 1-1: config 220 has no interface number 2 [ 674.402711][T10640] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 674.424066][T10640] usb 1-1: config 220 interface 0 has no altsetting 0 [ 674.430894][T10640] usb 1-1: config 220 interface 76 has no altsetting 0 [ 674.452648][T10640] usb 1-1: config 220 interface 1 has no altsetting 0 [ 674.484012][T10640] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 674.505797][T10640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.522779][T10640] usb 1-1: Product: syz [ 674.526968][T10640] usb 1-1: Manufacturer: syz [ 674.544584][T10640] usb 1-1: SerialNumber: syz [ 674.763448][T12504] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1713'. [ 675.116860][T10640] usb 1-1: selecting invalid altsetting 0 [ 675.145199][T10640] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 675.164698][T10640] uvcvideo 1-1:220.0: No valid video chain found. [ 675.193011][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1714'. [ 675.223910][T10640] usb 1-1: selecting invalid altsetting 0 [ 675.240276][T10640] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 675.269375][T10640] usb 1-1: USB disconnect, device number 38 [ 675.903727][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 676.092646][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 676.294537][T12523] FAULT_INJECTION: forcing a failure. [ 676.294537][T12523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.308124][T12523] CPU: 0 UID: 0 PID: 12523 Comm: syz.0.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.308153][T12523] Tainted: [L]=SOFTLOCKUP [ 676.308159][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 676.308171][T12523] Call Trace: [ 676.308182][T12523] [ 676.308188][T12523] dump_stack_lvl+0x100/0x190 [ 676.308221][T12523] should_fail_ex.cold+0x5/0xa [ 676.308238][T12523] ? prepare_alloc_pages+0x16d/0x5f0 [ 676.308254][T12523] should_fail_alloc_page+0xeb/0x140 [ 676.308269][T12523] prepare_alloc_pages+0x1f0/0x5f0 [ 676.308287][T12523] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 676.308304][T12523] ? __pfx___schedule+0x10/0x10 [ 676.308322][T12523] ? __lock_acquire+0x4a5/0x2630 [ 676.308343][T12523] ? find_held_lock+0x2b/0x80 [ 676.308356][T12523] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 676.308378][T12523] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 676.308394][T12523] ? lock_acquire+0x1cf/0x380 [ 676.308415][T12523] ? __mutex_lock+0x26a/0x1b90 [ 676.308428][T12523] ? anon_pipe_write+0x163/0x1d40 [ 676.308441][T12523] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 676.308459][T12523] ? policy_nodemask+0xed/0x4f0 [ 676.308471][T12523] alloc_pages_mpol+0x1fb/0x550 [ 676.308482][T12523] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 676.308496][T12523] alloc_pages_noprof+0x131/0x390 [ 676.308508][T12523] anon_pipe_write+0xabf/0x1d40 [ 676.308524][T12523] ? __pfx_anon_pipe_write+0x10/0x10 [ 676.308534][T12523] ? selinux_file_permission+0x8f/0x6d0 [ 676.308556][T12523] ? bpf_lsm_file_permission+0x9/0x10 [ 676.308573][T12523] ? security_file_permission+0x76/0x210 [ 676.308588][T12523] ? rw_verify_area+0xce/0x6d0 [ 676.308605][T12523] vfs_write+0x6ac/0x1070 [ 676.308622][T12523] ? __pfx_anon_pipe_write+0x10/0x10 [ 676.308634][T12523] ? __pfx_vfs_write+0x10/0x10 [ 676.308648][T12523] ? find_held_lock+0x2b/0x80 [ 676.308670][T12523] ksys_write+0x1f8/0x250 [ 676.308686][T12523] ? __pfx_ksys_write+0x10/0x10 [ 676.308705][T12523] do_syscall_64+0x106/0xf80 [ 676.308719][T12523] ? clear_bhb_loop+0x40/0x90 [ 676.308734][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.308758][T12523] RIP: 0033:0x7fa84cf9c799 [ 676.308769][T12523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.308779][T12523] RSP: 002b:00007fa84de0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.308792][T12523] RAX: ffffffffffffffda RBX: 00007fa84d216180 RCX: 00007fa84cf9c799 [ 676.308799][T12523] RDX: 00000000ffffff14 RSI: 0000200000000240 RDI: 0000000000000008 [ 676.308805][T12523] RBP: 00007fa84de0b090 R08: 0000000000000000 R09: 0000000000000000 [ 676.308811][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.308817][T12523] R13: 00007fa84d216218 R14: 00007fa84d216180 R15: 00007ffc93c6bcc8 [ 676.308831][T12523] [ 676.738353][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.778591][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 676.789490][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.798243][ T10] usb 5-1: Product: syz [ 676.802426][ T10] usb 5-1: Manufacturer: syz [ 676.808589][ T10] usb 5-1: SerialNumber: syz [ 676.816837][ T10] usb 5-1: config 0 descriptor?? [ 676.915238][ T10] msi2500 5-1:0.0: Registered as swradio24 [ 676.921089][ T10] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 677.717003][ T5920] usb 5-1: USB disconnect, device number 40 [ 678.391105][ T5920] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 678.535966][T10640] libceph: connect (1)[c::]:6789 error -101 [ 678.542096][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 678.714969][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 678.724678][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.742881][ T29] audit: type=1326 audit(1773216632.885:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz.4.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f430f99c799 code=0x0 [ 678.803245][T10640] libceph: connect (1)[c::]:6789 error -101 [ 678.809908][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 678.832610][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 678.849047][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 678.859215][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.878181][ T5920] usb 2-1: Product: syz [ 678.913172][ T5920] usb 2-1: Manufacturer: syz [ 678.921750][ T5920] usb 2-1: SerialNumber: syz [ 678.942136][ T5920] usb 2-1: config 0 descriptor?? [ 678.958877][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 678.965555][T12554] ceph: No mds server is up or the cluster is laggy [ 679.036207][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 679.196493][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 679.217510][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 679.452660][ T1704] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 679.460284][T10640] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 679.547405][ T5920] msi2500 2-1:0.0: Registered as swradio24 [ 679.554738][ T5920] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 679.585158][ T5920] usb 2-1: USB disconnect, device number 48 [ 679.632972][T10640] usb 3-1: Using ep0 maxpacket: 32 [ 679.645242][ T1704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.658138][T10640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.690149][ T1704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.714970][T10640] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.731646][ T1704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.750472][T10640] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 679.781435][ T1704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.792677][T10640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.830080][ T1704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.842444][T10640] usb 3-1: config 0 descriptor?? [ 679.925263][ T1704] usb 4-1: config 0 descriptor?? [ 680.296757][T10640] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 680.315124][T10640] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 680.329214][ T29] audit: type=1400 audit(1773216634.485:812): avc: denied { write } for pid=12574 comm="syz.4.1733" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.366554][ T5920] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 680.391352][ T29] audit: type=1400 audit(1773216634.515:813): avc: denied { open } for pid=12574 comm="syz.4.1733" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.417708][ T1704] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 680.497880][T10640] ft260 0003:0403:6030.0026: chip code: 0000 0000 [ 680.706819][T10640] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 680.707160][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.812880][ T5920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 62, changing to 7 [ 680.825841][T12566] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1729'. [ 680.836905][T12566] CIFS mount error: No usable UNC path provided in device string! [ 680.836905][T12566] [ 680.852590][ T5920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 680.857152][T12566] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 680.867181][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 680.899544][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.908640][ T5920] usb 2-1: Product: syz [ 680.912682][T10640] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 680.913162][ T5920] usb 2-1: Manufacturer: syz [ 680.932206][ T5920] usb 2-1: SerialNumber: syz [ 681.049839][ T793] usb 4-1: USB disconnect, device number 30 [ 681.193468][T12567] ft260 0003:0403:6030.0026: ft260_i2c_read: failed with -38 [ 681.205503][T10640] usb 3-1: USB disconnect, device number 44 [ 681.219290][T12570] mmap: syz.1.1731 (12570): VmData 37593088 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 681.383177][ T5920] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 681.389448][ T5920] usb 2-1: 1:1 : invalid channels 0 [ 681.395754][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.403743][ T5920] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 681.417348][ T5920] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 681.424986][ T5920] usb 2-1: 1:1 : invalid channels 0 [ 681.430926][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.439851][ T5920] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 681.460233][ T5920] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 681.468855][ T5920] usb 2-1: 1:1 : invalid channels 0 [ 681.480471][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.807307][ T5920] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 681.829651][ T5920] usb 2-1: USB disconnect, device number 49 [ 681.889186][ T7614] udevd[7614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.476961][ T1704] libceph: connect (1)[c::]:6789 error -22 [ 682.659051][ T1704] libceph: mon0 (1)[c::]:6789 connect error [ 682.943093][T10640] libceph: connect (1)[c::]:6789 error -22 [ 682.955307][T12605] ceph: No mds server is up or the cluster is laggy [ 682.960391][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 683.239289][T10640] libceph: connect (1)[c::]:6789 error -22 [ 683.248926][T10640] libceph: mon0 (1)[c::]:6789 connect error [ 683.268629][ T5920] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 683.445419][T12614] ceph: No mds server is up or the cluster is laggy [ 683.471964][ T5920] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 683.517933][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 683.527449][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 683.557967][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.706146][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 683.716070][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 683.727608][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.743719][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 683.773966][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 683.870121][T12628] dummy0: entered allmulticast mode [ 684.242704][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.256837][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 684.266426][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 684.288199][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.301556][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 684.311888][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 684.326093][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.340198][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 684.350055][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 684.364213][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.386134][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 684.395641][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 684.419514][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.429999][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 684.465745][T12624] dummy0: left allmulticast mode [ 684.543119][ T5920] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 684.554420][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 684.563162][ T5920] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 684.572317][ T5920] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 684.581006][ T5920] usb 3-1: Product: syz [ 684.601787][ T5920] usb 3-1: Manufacturer: syz [ 684.608300][ T5920] usb 3-1: SerialNumber: syz [ 684.627700][ T5920] usb 3-1: config 0 descriptor?? [ 684.856394][ T5920] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 685.363658][ T5920] usb 3-1: USB disconnect, device number 45 [ 685.397902][ T5920] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 686.088786][T12653] mkiss: ax0: crc mode is auto. [ 686.234643][ T5920] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 686.452611][ T5920] usb 3-1: device descriptor read/64, error -71 [ 686.656714][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1753'. [ 686.770288][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.802636][ T5920] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 686.882371][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.164764][T12663] binder: 12660:12663 ioctl c0306201 0 returned -14 [ 687.752858][ T10] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 688.264653][ T10] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 688.274167][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.286830][ T10] usb 2-1: config 0 has no interfaces? [ 688.292342][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 688.327017][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.378801][ T10] usb 2-1: config 0 descriptor?? [ 688.764246][ T29] audit: type=1400 audit(1773216642.915:814): avc: denied { watch } for pid=12672 comm="syz.2.1759" path="/349/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 688.844392][ T29] audit: type=1400 audit(1773216642.915:815): avc: denied { ioctl } for pid=12672 comm="syz.2.1759" path="socket:[37716]" dev="sockfs" ino=37716 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 688.962008][T12676] dvmrp9: entered allmulticast mode [ 689.385855][T10640] usb 2-1: USB disconnect, device number 50 [ 690.277211][T12692] binder: 12690:12692 ioctl c0306201 0 returned -14 [ 690.976318][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 690.982380][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 690.982742][ T1704] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 691.215171][ T1704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.243304][ T1704] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 691.264159][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 691.417616][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 691.428942][ T1704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 691.471096][ T1704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.500203][ T1704] usb 1-1: config 0 descriptor?? [ 691.593651][T12697] ceph: No mds server is up or the cluster is laggy [ 693.327935][ T42] usb 1-1: USB disconnect, device number 39 [ 694.381638][ T5880] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 694.792869][ T5880] usb 5-1: device descriptor read/64, error -71 [ 695.386561][T12734] dummy0: entered allmulticast mode [ 695.818178][T12731] dummy0: left allmulticast mode [ 695.843788][ T5880] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 696.017469][ T5880] usb 5-1: device descriptor read/64, error -71 [ 696.214908][ T5880] usb usb5-port1: attempt power cycle [ 696.886542][ T5880] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 697.427144][T10640] lo speed is unknown, defaulting to 1000 [ 697.458409][ T5880] usb 5-1: device descriptor read/8, error -71 [ 697.667328][T12756] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 697.899748][T12756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.408882][T12777] mkiss: ax0: crc mode is auto. [ 698.437910][T12756] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12756 comm=syz.4.1783 [ 698.692667][T10640] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 698.956620][T10640] usb 4-1: device descriptor read/64, error -71 [ 699.011280][ T29] audit: type=1400 audit(1773216653.165:816): avc: denied { connect } for pid=12788 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 699.101748][T12791] dummy0: entered allmulticast mode [ 699.562636][T10640] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 699.660721][T12785] dummy0: left allmulticast mode [ 699.725883][T10640] usb 4-1: device descriptor read/64, error -71 [ 700.148654][ T5920] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 700.231206][T10640] usb usb4-port1: attempt power cycle [ 700.415625][ T5920] usb 2-1: config 0 has no interfaces? [ 700.567663][ T5920] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 700.579852][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.589102][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 700.603803][ T5920] usb 2-1: Product: syz [ 700.613347][ T5920] usb 2-1: Manufacturer: syz [ 700.618191][ T5920] usb 2-1: SerialNumber: syz [ 700.634229][ T5920] usb 2-1: config 0 descriptor?? [ 700.845010][T10640] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 700.883622][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 700.896566][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.912324][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.914561][T10640] usb 4-1: device descriptor read/8, error -71 [ 700.976333][T12787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 700.978261][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 700.999087][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.027784][ T10] usb 5-1: config 0 descriptor?? [ 701.055325][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 701.302603][ T42] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 701.592606][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 701.593981][ T10] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 701.607438][ T42] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 701.640286][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.661612][ T42] usb 3-1: Product: syz [ 701.752394][ T42] usb 3-1: Manufacturer: syz [ 701.757805][ T42] usb 3-1: SerialNumber: syz [ 701.767263][ T10] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 702.200288][ T10] ft260 0003:0403:6030.0028: chip code: 0000 0000 [ 702.215031][ T42] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 702.227550][ T10] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 702.257330][ T42] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 702.268348][ T42] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 702.282040][ T42] usb 3-1: media controller created [ 702.310823][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.336940][ T793] usb 2-1: USB disconnect, device number 51 [ 702.371033][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.419619][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.442980][ T10] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 702.460823][T12824] xfrm0: entered promiscuous mode [ 702.474151][T12824] xfrm0: entered allmulticast mode [ 702.547248][ T42] zl10353_read_register: readreg error (reg=127, ret==-32) [ 703.094466][ T793] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 703.140600][T12796] ------------[ cut here ]------------ [ 703.147162][T12796] usb 3-1: BOGUS control dir, pipe 80003080 doesn't match bRequestType c0 [ 703.156074][T12796] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.4.1790/12796 [ 703.166523][T12796] Modules linked in: [ 703.170937][T12796] CPU: 0 UID: 0 PID: 12796 Comm: syz.4.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.181965][T12796] Tainted: [L]=SOFTLOCKUP [ 703.186329][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 703.196455][T12796] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 703.202634][T12796] Code: d2 74 5d 48 89 54 24 40 e8 5f 3c b8 fa 4c 89 ef e8 17 b8 de fe 48 89 c6 48 8d 3d dd be 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 33 3c b8 fa 89 ee bf ff 00 00 00 [ 703.222521][T12796] RSP: 0018:ffffc9001c5af918 EFLAGS: 00010287 [ 703.228664][T12796] RAX: ffffffff8c80ccc0 RBX: ffff888020ee2e00 RCX: 0000000080003080 [ 703.236739][T12796] RDX: ffff88804fab3400 RSI: ffffffff8c80ccc0 RDI: ffffffff90e63c30 [ 703.245414][T12796] RBP: ffff88802aa1b058 R08: 00000000000000c0 R09: 0000000000000000 [ 703.253921][T12796] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880322c0c20 [ 703.261987][T12796] R13: ffff88802aa1b0b0 R14: 0000000080003080 R15: 00000000000000c0 [ 703.270018][T12796] FS: 00007f431086a6c0(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 703.278980][T12796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.285577][T12796] CR2: 0000001b2fdfdff8 CR3: 000000007586a000 CR4: 00000000003526f0 [ 703.293569][T12796] Call Trace: [ 703.296851][T12796] [ 703.299770][T12796] ? __init_swait_queue_head+0xca/0x150 [ 703.305352][T12796] usb_start_wait_urb+0x106/0x4c0 [ 703.310373][T12796] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 703.315938][T12796] ? __asan_memset+0x23/0x50 [ 703.320535][T12796] usb_control_msg+0x326/0x4a0 [ 703.325331][T12796] ? __pfx_usb_control_msg+0x10/0x10 [ 703.330631][T12796] ? kasan_save_stack+0x3f/0x50 [ 703.335523][T12796] ? kasan_save_track+0x14/0x30 [ 703.340371][T12796] ? __kasan_kmalloc+0xaa/0xb0 [ 703.345150][T12796] ? __kmalloc_noprof+0x301/0x850 [ 703.350551][T12796] ? i2cdev_ioctl_rdwr+0xcf/0x700 [ 703.355859][T12796] ? i2cdev_ioctl+0x19d/0x830 [ 703.360525][T12796] ? __x64_sys_ioctl+0x18e/0x210 [ 703.365990][T12796] gl861_ctrl_msg+0x1a5/0x4a0 [ 703.370730][T12796] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 703.375985][T12796] ? __lock_acquire+0x4a5/0x2630 [ 703.380961][T12796] gl861_i2c_master_xfer+0x545/0x690 [ 703.386272][T12796] __i2c_transfer+0x5d9/0x17f0 [ 703.391037][T12796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 703.396902][T12796] ? __pfx___i2c_transfer+0x10/0x10 [ 703.402132][T12796] ? rt_mutex_slowtrylock+0x93/0x100 [ 703.407506][T12796] i2c_transfer+0x15f/0x380 [ 703.412041][T12796] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 703.417017][T12796] i2cdev_ioctl+0x19d/0x830 [ 703.421509][T12796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 703.426596][T12796] ? selinux_file_ioctl+0x139/0x290 [ 703.431810][T12796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 703.436851][T12796] __x64_sys_ioctl+0x18e/0x210 [ 703.441622][T12796] do_syscall_64+0x106/0xf80 [ 703.446249][T12796] ? clear_bhb_loop+0x40/0x90 [ 703.451285][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.457525][T12796] RIP: 0033:0x7f430f99c799 [ 703.461948][T12796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.481604][T12796] RSP: 002b:00007f431086a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.490029][T12796] RAX: ffffffffffffffda RBX: 00007f430fc15fa0 RCX: 00007f430f99c799 [ 703.498022][T12796] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 703.506002][T12796] RBP: 00007f430fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 703.514012][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.521967][T12796] R13: 00007f430fc16038 R14: 00007f430fc15fa0 R15: 00007ffdb07c3aa8 [ 703.529962][T12796] [ 703.532997][T12796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 703.540256][T12796] CPU: 0 UID: 0 PID: 12796 Comm: syz.4.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.551182][T12796] Tainted: [L]=SOFTLOCKUP [ 703.555509][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 703.565551][T12796] Call Trace: [ 703.568827][T12796] [ 703.571743][T12796] dump_stack_lvl+0x100/0x190 [ 703.576411][T12796] vpanic+0x552/0x970 [ 703.580367][T12796] ? __pfx_vpanic+0x10/0x10 [ 703.584847][T12796] panic+0xd1/0xe0 [ 703.588548][T12796] ? __pfx_panic+0x10/0x10 [ 703.592963][T12796] check_panic_on_warn.cold+0x19/0x34 [ 703.598338][T12796] ? usb_submit_urb+0x1573/0x1910 [ 703.603354][T12796] __warn.cold+0x191/0x348 [ 703.607751][T12796] __report_bug+0x296/0x3d0 [ 703.612237][T12796] ? usb_submit_urb+0x1573/0x1910 [ 703.617242][T12796] ? __pfx___report_bug+0x10/0x10 [ 703.622245][T12796] ? mark_held_locks+0x40/0x70 [ 703.626991][T12796] ? stack_depot_save_flags+0x479/0x9d0 [ 703.632527][T12796] report_bug_entry+0xe1/0x290 [ 703.637267][T12796] ? usb_submit_urb+0x157e/0x1910 [ 703.642276][T12796] handle_bug+0x1cd/0x2a0 [ 703.646591][T12796] exc_invalid_op+0x17/0x50 [ 703.651104][T12796] asm_exc_invalid_op+0x1a/0x20 [ 703.655955][T12796] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 703.661587][T12796] Code: d2 74 5d 48 89 54 24 40 e8 5f 3c b8 fa 4c 89 ef e8 17 b8 de fe 48 89 c6 48 8d 3d dd be 95 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 33 3c b8 fa 89 ee bf ff 00 00 00 [ 703.681180][T12796] RSP: 0018:ffffc9001c5af918 EFLAGS: 00010287 [ 703.687228][T12796] RAX: ffffffff8c80ccc0 RBX: ffff888020ee2e00 RCX: 0000000080003080 [ 703.695194][T12796] RDX: ffff88804fab3400 RSI: ffffffff8c80ccc0 RDI: ffffffff90e63c30 [ 703.703158][T12796] RBP: ffff88802aa1b058 R08: 00000000000000c0 R09: 0000000000000000 [ 703.711133][T12796] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880322c0c20 [ 703.719097][T12796] R13: ffff88802aa1b0b0 R14: 0000000080003080 R15: 00000000000000c0 [ 703.727065][T12796] ? usb_submit_urb+0x1569/0x1910 [ 703.732095][T12796] ? __init_swait_queue_head+0xca/0x150 [ 703.737650][T12796] usb_start_wait_urb+0x106/0x4c0 [ 703.742682][T12796] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 703.748212][T12796] ? __asan_memset+0x23/0x50 [ 703.752785][T12796] usb_control_msg+0x326/0x4a0 [ 703.757547][T12796] ? __pfx_usb_control_msg+0x10/0x10 [ 703.762816][T12796] ? kasan_save_stack+0x3f/0x50 [ 703.767655][T12796] ? kasan_save_track+0x14/0x30 [ 703.772490][T12796] ? __kasan_kmalloc+0xaa/0xb0 [ 703.777245][T12796] ? __kmalloc_noprof+0x301/0x850 [ 703.782260][T12796] ? i2cdev_ioctl_rdwr+0xcf/0x700 [ 703.787260][T12796] ? i2cdev_ioctl+0x19d/0x830 [ 703.791909][T12796] ? __x64_sys_ioctl+0x18e/0x210 [ 703.796827][T12796] gl861_ctrl_msg+0x1a5/0x4a0 [ 703.801505][T12796] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 703.806696][T12796] ? __lock_acquire+0x4a5/0x2630 [ 703.811647][T12796] gl861_i2c_master_xfer+0x545/0x690 [ 703.816958][T12796] __i2c_transfer+0x5d9/0x17f0 [ 703.821726][T12796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 703.827551][T12796] ? __pfx___i2c_transfer+0x10/0x10 [ 703.832761][T12796] ? rt_mutex_slowtrylock+0x93/0x100 [ 703.838031][T12796] i2c_transfer+0x15f/0x380 [ 703.842527][T12796] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 703.847474][T12796] i2cdev_ioctl+0x19d/0x830 [ 703.851969][T12796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 703.856973][T12796] ? selinux_file_ioctl+0x139/0x290 [ 703.862155][T12796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 703.867195][T12796] __x64_sys_ioctl+0x18e/0x210 [ 703.871959][T12796] do_syscall_64+0x106/0xf80 [ 703.876544][T12796] ? clear_bhb_loop+0x40/0x90 [ 703.881207][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.887088][T12796] RIP: 0033:0x7f430f99c799 [ 703.891493][T12796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.911092][T12796] RSP: 002b:00007f431086a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.919516][T12796] RAX: ffffffffffffffda RBX: 00007f430fc15fa0 RCX: 00007f430f99c799 [ 703.927497][T12796] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004 [ 703.935511][T12796] RBP: 00007f430fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 703.943475][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.951446][T12796] R13: 00007f430fc16038 R14: 00007f430fc15fa0 R15: 00007ffdb07c3aa8 [ 703.959421][T12796] [ 703.962696][T12796] Kernel Offset: disabled [ 703.967034][T12796] Rebooting in 86400 seconds..