last executing test programs: 9.219862474s ago: executing program 0 (id=596): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe300}, 0x1c) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x8, {0x24, 0xffffffffffffffff, 0x80, 0x32d5, 0x8}}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x300) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xc) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f00000006c0), 0x1, 0x141c81) getresuid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) r5 = getegid() r6 = syz_clone(0x4200, &(0x7f0000000b80)="3fce6cfc647fde4e866acd81b4bf45ff30763e486882b1c6e174cca30e2a773c20f2f2f654f018628828c926edda2db89b34f59e05e1205004eb6d1608a2f54b6cb1c24c1d39ba6459bfad7d4f7e0ac3780bbfda4a7ea7515b7ebbb24f4076ad7cf7e88ed6c1028402fbbe3a3c20750abbde49c007955ad2e7237a8a4c7a3d3e4e4ac33fbd7cc5ffa7ab397291f9ea643011035c3c6971c95da79fe8a7db41ea2b5a6d2608bcb5c130335d209f5a3fcf35c26ec97ac4c881666f1f1db05148192bbe68078e7f", 0xc6, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="181c5823fa14620988ae417d9363661c1b00d467f6f4df1f151b6480019b11c1c1cd800943ec384ccaf86182a531dd078eb0d565ffbb3508eb64517e51ed28dc94c2e8d876364e3c4741124a2fe84d6c392a5cd32fac27561ebc54b13331d1193cd3f628a7877f6687a4d9812c83b6d6d75302e05a64b8b12f7d41303fa8c8af2cc1aeeb0b4848ffc1e08b67cce9") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000e80)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) r12 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002240)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002280)=0x0) fstat(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002340), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002400)={0x66c, 0x9, {0x0}, {0xee00}, 0x9, 0x7ff}) newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003680)=0x0) lstat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000003780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000006000)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)="02706e46b5fbabb4e011", 0xa}, {&(0x7f0000000240)="e860c4bbabff3de854905e5def02a19a1e187578d34e42ba9802cda49d8ea8b2", 0x20}, {&(0x7f0000000280)="e3cb6c4bf4bee8866c38f3cced82f81964e9fa08dc7a1e1b711e8d4ad531416f23c34d8dd4f2ac69d2fa55f9ae09780f360075eb35a030e79fac221fc0f0a6763cc0f55f50b1749213d158c91d2967636896b628ec2ac17ab3eaf51af3ba73a132a623fb32da9a4461cde06bb2f0e912cfa5938efbd8734acfb02ac6a1720887eb8bc2f0799d8354ae0c283e285b3dd264dc70da3b9bc5787daf60f399c981a06fd7abfb35cab9ec7ccf9194dbf7", 0xae}, {&(0x7f0000000340)="a84700f8a671c750fbd3d32c34ad07cfd069e9e78261c7825fc72d0b6f10799913ef84affd56214ec67987a62230f7caf18c5d5e8cc95cc78fa964231e68407a483b04e950008a9e0d9ab52560ab10c4d1c0e3f64416d1aecc29ce317db0818b3aab18b8b1a9c734d7431169536722ff10d4903f33f49097cb978eb60a169ba363169b00a749556779dbee4fd059b4d7ad0b15991f5b76510894a2478e107023e7caa8538e9a6d39ee80516323bcebfc070b1e44e8935f98ba7e087a953fce8cb7f0cb61cf2304e4b05ee19f1d3bc3065142860b2531cb59c6a12731e07e9308457c33e888ccfd95744f8ba82cf2374f", 0xf0}, {&(0x7f0000000440)="a88f8c97c697408a007a75c424f128218a6f07234d31734e7cb715c7420dce1b23e5d0e6b763eaef4016f40f627b54e808923519b708785a15c6de28a8b3fb677ee8aafbf32f67a51d3acfa31ee9c46c13bcd57306b912a6e3cb2d98fda630024004e63faa18c0ebbbd65dbf6579d39a025397dd78f40f7e149a3072aa41478b32b910bb844c24bb23515d69926d57898cebe7d4a1396cb87717cfd146a2a1ffef9006a745691a760c6745d28725efc5ae9cec0014dfb0461c793df33c", 0xbd}, {&(0x7f0000000500)="663c1506a52cbb6dd45c3d20d4f70fe7986304047d2605533abc046291d944c5bd0e38f5fe3aaa0dea172c71c37c3c78273b0cd1787ce56218d756bb54fda5cce55d1bdfcfee3e6cb40f905acd05e11ee869093f81bbb23344741ca76b47ed5afc24b469f12e9d263e66c9e56dd69ccaf49730a096e22a8b62489edf9b256bcd858be7e325df47a0b653984204198d3602446028ab5422016e9fdb3f7ac9e4f937cca85242974ded9e514d1d4144a729a8b1cb363a7debec2068dd2c90cf", 0xbe}, {&(0x7f00000005c0)="631b193c40211aed2514ca859ac5f68989da5e82fed4cbde5349275a", 0x1c}], 0x7, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r1, r0]}}], 0x68, 0x4c001}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="fa00c42dc88443a85f5c124f29202898194f0f3c437929d036af5ca7ef25628967370a5b6ce0dca6251758545551887d58746aefcda88ae8fb36d736c58fdb26c0ebde237ce363ff31a2eb6f683eeff683b6e6caa4b3188f2b0f5fca0e7998839a246d2c03147840a8e4b76b4d527dd221b59b37e1cb4dbc7d810143de3384cd8eeaa4f105adf767111e8bde72ebc84e6876f1815b037954ef4a84e78f352fc5bd75", 0xa2}, {&(0x7f0000000900)="3377dd8376e20c3aa1a2e68fdcbcc27df440a5097673", 0x16}, {&(0x7f0000000940)="cc889602a361761ea411aa8932133a026196d63ccd2dd22d229e4a67a664d573ada809895035622315532a0e9440738483c63d8b523ba72d1d8409d6dd0c357086708189bc14ffce92cf8470c0bd890b8146c8ff53fee9cde6d482a321d05d621527d3c45df95470ebed4c732884e2fcf7da054d992332c39b30a4cae33db2", 0x7f}, {&(0x7f00000009c0)="6b97e11fff5d0358eddd54c0a0cece5ce2721f2398988bcf471efde8931ca7e02420dc25306e988565c7d954613e1a2e65c4b0cf75a1f3136513b13df63535a3b16955518a790e52d60bb704873f5c3021b1eb1291e0ed72", 0x58}], 0x5, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x90, 0x400a005}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001040)="25fa3c5780fd6c4fe6dd6ee14c62c0488f3b246d0082c3273d1203f89d", 0x1d}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="fa64727ef640e5f1a92c76e14dd3b93f8887207a8cda5b98625b18ef94d9a807567b08cb104891a5486adb2972a45f092a73d3306e2338070625a2948b2b51dfd38c61ff274ded7a5cc71d9740acf5275fd41ab7ad58cb67470c9335aba557f38a03a12fa3ecfd7a1bad2712c6d067faca81d44cc52722e2ef212c1dae7cf84959ed6a40608ef79e84aa944042a439b3269fdb86ad9851f1808ebca2b73404f29ff2072603815e255f970373263c6f6563caf4df457dedf08f78b8fee690b74cff7cb5cd05f278f1f69a6383", 0xcc}, {&(0x7f0000002180)="608d09d0c9440f9a3522b1c15421f007915bbc1679bd084eb2d98e59da7e76fdbf206ae2dabe336a646a052bb926d3981884ab950d46685171d216fc26cd35c6222d695691ef159ed523522b034868c688cbdfcf0399d0c11fde15350c9a6b4aac1cf8", 0x63}], 0x4, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee00, r18}}}], 0x60, 0xefa60d16dfcbb277}}, {{&(0x7f0000002580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="81ae11c22385a11344a5aa43ddc562493c73d7c507100d5e911893c870af643c2bee88eff04efe4e0862bd5514483865d12a40bc74b8fbf8d7de", 0x3a}], 0x2, &(0x7f0000005f00)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r22, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r1, r0, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8, 0x4000001}}], 0x4, 0x1) 8.499866622s ago: executing program 3 (id=598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'U\xd7\x99\x06!6$\xa2R\vA\xeeP;\xb0W\x81\xc9T\xb6\xb9\xed\xbd\xe96\xe4UF\x1e\x02\x85\xec\xc9X\xdc\x15\xd0\b\xe5\x18\x98\x11\xd9\xf4\xa1\xb9}\xb6\xa3g\xa7\xbc8\xeck\xa0\xb6\xa6\xbd\x8e\xd1\x1c\x9d\x95\x89\xab\xd8\x0e.\xdc\x8c]K\xd4\xf1\xe4N\xb5\x0f-\xe24\xbc\xff-W\x16\x82\x91>\xb4%\xdd\xeaf\xe2k\xb67C\xe7kE(Vz\xa2A\xcd\x84\xc7\xe3\xd7`s2\xbbe\xd0Y\xbb+\xf4\xb3\xa6s\xa2\xe1\x9c\x00\x00\x00w\x01\xc2h\xf2\xe2\xed3O\xbe\x18\x1d\x8b\x80\x8f\xd03\xc0\xf0\x00\xc4\xc3\xd3\xef\x83S\xcd\xed\xb1bbM\xda\xdd\x00\xf0\x91<\xb9\xc3\xc7\x17c\xd5\xa8\x9d\x9d\x1bL\xba\xbd\x16\xe2\xc6\xd1\xc5\x81l\xff(\x00\xc2\x19\x06\b\xf1\xff\xe3r\'\x01\xda\xcd\xdd\xf6u\xe9\x93 C\xdb\xe2\x8a\xbal\xba\xa9\xbc4\xcfH&\xb9\x9d\x8a\x15\xe0Q\xb9\xd7\x98\x97\'80\xafhe?\xbb\xf5\xa6\xca6\x10\xb6T\xd7\xebA!A\xf6\xec L?\xe1\n\x9c\xca\xaf\x81?XA\xe8t%\x9f\x83\x87\xa3\xd5\xe4\xfc\xddZ\xca\x1b\xe8\x03\xf1\x82\xd6\xa5\xce\xfaD\xe1l\x19\xd3'}]}, 0x133) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000001040), 0x7fff, 0x10780) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x1, 0x6, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r8}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdcf, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/3535], 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r11, 0x0, 0x42, 0x0, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xc20c, 0x2}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) r14 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x181100, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r9, @ANYRES16=r5, @ANYRESHEX=r14, @ANYBLOB="06001100f6000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 8.054085817s ago: executing program 1 (id=600): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = dup(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xe, 0x7, 0x11, @local, @rand_addr=' \x01\x00', 0x7800, 0x700, 0x7, 0x80000000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01b9f962150e00efffff1200000008000300", @ANYRES32=r5, @ANYBLOB="06001200000800000600b500850100000a0006"], 0x44}, 0x1, 0x0, 0x0, 0xa880}, 0xc084) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$FUSE_BMAP(r2, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000006840)=[{{0x0, 0xf5, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$radio(0x0, 0x3, 0x2) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) 7.987923515s ago: executing program 0 (id=601): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/rt6_stats\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000036c55cad877bc9fd23aa21cf656de8cb6271406c6b3003000000017000a3ddf11d9ad1bda421d4c7fad1b50ebe03abf0e28b38feec21b11964929c21113f82434975c140c3d90155f6803237b7e194e8d2edbd65666e1b7e30e346bb3ec08df8d64d80f6076b53740e4f74441bc04af2665fb2da817e5d6c3a5948ec46ae035332d8b0d90a68023a1b25873ce4803f14b64a37f77632977b3f37564f516744906a6e6030962c3e5663f6d77422d436", @ANYRES32=r0, @ANYBLOB], 0x18}}, 0x810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 7.98498014s ago: executing program 3 (id=602): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000b900000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000854000002e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e80)={r3, r5, 0x25, 0x8, @val=@tcx={@void, @value}}, 0x1c) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r8, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4, 0x5}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f0000000040)={0x2, 0x915e, 0xfffffff7, 0x4, 0xd, "710e1d0ffee4ad9898f4b3ecec5a1a11e753f3"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00003d6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000440)="460f01c2b9830100000f32c461c85637b901040000b8f7b9f0f9ba000000000f30d9f566baf80cb84e70038aef66bafc0cec42ff14e8b9800000c00f3235000400000f306526f2418eb200900000450f09"}], 0x1, 0x23, &(0x7f0000000200), 0x16) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.022882965s ago: executing program 0 (id=603): pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x2) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40044590, &(0x7f0000000300)=""/240) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4d, [{0x0, 0x0}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 5.516033937s ago: executing program 2 (id=606): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@mmap={0x3344, 0x1, 0x4, 0x100000, 0x8, {}, {0x2, 0x0, 0x5, 0x2, 0x2, 0x9, "78075ed5"}, 0x10000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 5.197195444s ago: executing program 2 (id=608): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000100b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x2c) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) (async) ioctl$NBD_DO_IT(r3, 0xab03) 5.19367619s ago: executing program 1 (id=609): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3) r5 = syz_io_uring_setup(0x5859, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x493c, 0x4, 0xfffffffd, 0xffffffff, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x120) execveat(r9, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000280)='\x00']}, &(0x7f00000006c0)={[&(0x7f00000005c0)='{*!@*(\x00']}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r10, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x28}}, 0x0) 4.744448686s ago: executing program 1 (id=612): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r4, 0xfbff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x4, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0x7, 0x2}, {0x5, 0x8001, 0x7, 0x1000, 0x9, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x3, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7c, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x2, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458c}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0xc, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x6, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x4}, {0x80, 0xfffff001, 0x5, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x1, 0x3, 0x80, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x1, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x6, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x2, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x10005, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0xffffffff, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x4, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5eb}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x8, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0x1}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x7}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7894, 0x4}, {0x8, 0x800, 0x1, 0x4, 0x7, 0x101}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x400, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x8, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x2, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0xa, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.192935214s ago: executing program 2 (id=614): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) fcntl$notify(r1, 0x402, 0x0) 3.872010005s ago: executing program 3 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f0000000640)="990f38f12a0f3066b9690a000066b80000008066ba000000000f3066b8070000000f23d80f21f86635400000c00f23f80f20950f009b4b423665660f38db280f20d86635080000002f22a16676562c", 0x4f}], 0x1, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='syscall\x00') pread64(r7, &(0x7f00000001c0)=""/226, 0xe2, 0xc00) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.647825988s ago: executing program 1 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7079, 0x0, 0x4, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x4408}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) utime(&(0x7f0000000000)='./file1\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r8, &(0x7f0000000080)='./file0\x00', r8, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x2000, 0x1) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) 3.187713422s ago: executing program 4 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) setrlimit(0x9, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x11d502, 0x2) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(r0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x30, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @enc_lim, @ra={0x5, 0x2, 0x453}, @pad1, @ra={0x5, 0x2, 0x18}, @ra={0x5, 0x2, 0x80}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x96}, @enc_lim={0x4, 0x1, 0x4f}, @calipso={0x7, 0x8, {0x0, 0x0, 0x9, 0x89}}]}]}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r3) 3.169065812s ago: executing program 2 (id=618): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@mmap={0x3344, 0x1, 0x4, 0x100000, 0x8, {}, {0x2, 0x0, 0x5, 0x2, 0x2, 0x9, "78075ed5"}, 0x10000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 2.959864321s ago: executing program 0 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') dup3(r0, r3, 0x80000) preadv(r3, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4b6, 0x300) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x0, 0x400, 0x4, 0xe, 0x0, 0xffff, 0x5, 0x3, 0x8001, 0x0, 0x16220, 0x0, 0x5, 0x6, 0x1, 0x8, 0xfffffffd, 0xf470, 0x80000000, 0x5, 0x7, 0x8000, 0x6d3, 0x4, 0x7, 0x10000, 0x9, 0x7fff, 0x1000, 0x5, 0x5]}) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f00000006c0), 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 2.899699226s ago: executing program 2 (id=620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x22}}, 0xf0}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x7e, 0xab, 0x11, 0x20, 0x471, 0x312, 0xbc45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xdd, 0x2b, 0x4b, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x95, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x9, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "50bb5dea"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xf21, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x6e31}, [@dmm={0x7, 0x24, 0x14, 0xd7e, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xd0, 0x6, 0xef}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x7fff, [0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xc6, 0x1a}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xb, 0xe, 0x9, 0x8, 0x3e}, 0x24, &(0x7f0000000040)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "337f3717f89e69c526a1cd569670c300"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x9, 0x3, 0x7f, 0x2}]}, 0x8, [{0x36, &(0x7f0000000280)=@string={0x36, 0x3, "a5b022730bfbdcfaed93f6d3aeac21154293d70b778be7887bef4a32db0ff89d99d75410f19d9df9d650074ec66c7dc8724c40a0"}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "22de3e94d658b5349985431701c63690ac082f80391fcd00dc75d11887ec159326862e722a15a31744f6e05b1a35cb41227b8dbf69c2b6bc8e19bb5d2da268f318d4b7ab637b14b0b239b5914e099866db5bc92a3e3bac3f14693b9b65cc07e965cf10e74dcf6a83d0e107ba29d7d19f0c"}}, {0xe4, &(0x7f0000000c40)=@string={0xe4, 0x3, "881afb56a46d5b7e30077c6b31bee86003a3f9ad86fade6a0d22d20d5c80a7d3d9fc29390e84c330943b8c453647c3dc27e8c96dedde440ce6367aaa287cf2d19527501a96a9be813fb864b0506f10f057c52b4fac4f7a388c0e0e63182492e10648335e29c3e377e5bf5223dfee2ed2870b2ac6f880f7a68f0e03db939e9bee38f9e14142fc059bb89c74c6f675b8177ec4b928a6f1158696b20e66611f43b11dd1980db4cc00873138ef8169f97f621cee0a19a9573060fa487e15aca3dda60eb37e125ac403a30e93db178fa401c4e98380faae3fd09debae5c21061e50b098cf"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x447}}, {0x84, &(0x7f0000000b80)=@string={0x84, 0x3, "03c933daaec2efe4f5b84231eaab42b55340d47734dfd4a33a33fa341aa2cf6a4eb63f738575fe83766fd30193d45141c59ac8494b9d22349d5254db567ed1e04521d73f4c703b0ded3a7ff8e022f97c7701240e3045593ada828cbd597fc186ca287460c9b5ffc56cecae4238daa861d6727742b7f8e2326f935994fb9e887dffb8"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffc, 0x8102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB, @ANYRES32], 0x50) r6 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r6, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000700)=[0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000880)={r10}) syz_usb_ep_read(r1, 0x7, 0x1000, &(0x7f0000000ec0)=""/4096) 2.865064991s ago: executing program 4 (id=621): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000680)=0x1, 0x4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = getuid() getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000500), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000240), &(0x7f0000000640)='system_u:object_r:gpg_agent_exec_t:s0\x00', 0x26, 0x2) write$P9_RSTATu(r7, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x4000, 0x0, 0x6, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r5}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x1, r6}, {0x8, 0x3}, {0x8, 0x6}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0132014010ff"}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000580)) 2.799870307s ago: executing program 0 (id=622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000500), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x4000, 0x0, 0x6, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x7}], {0x4, 0x2}, [{0x8, 0x2, r5}, {0x8, 0x1, r6}, {0x8, 0x3, r7}, {0x8, 0x6}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0132014010ff"}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000580)) 2.380041787s ago: executing program 1 (id=623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.326145395s ago: executing program 3 (id=624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) (async, rerun: 32) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000004e00), &(0x7f0000004e40)={'fscrypt:', @desc3}, &(0x7f0000004e80)={0x0, "97f57c22181b67d5118416c2cf87c15cd6e56db481e3c7a9c68fb511a1e2242ace8fcaff85a1f8d4cb775806faf3a1897311d5b5fb539d38d63dab508e33e03c", 0x17}, 0x48, 0xfffffffffffffffc) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x2ad2f21a41a7f362]}}]}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1000387e3182970081b10cfb463a68c2c800054e7d069af8a31543"], 0x10}}, 0x0) (async) r7 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) (rerun: 32) r8 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000dc0)={0x0, 0x5}) 2.277762677s ago: executing program 4 (id=625): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 2.219703377s ago: executing program 0 (id=626): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d000005240600010524000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x3, 0x6, 0x5, 0x1, 0x0, 0x9, 0x7, 0xa, 0x9, 0x3, 0x83, 0x3}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x20000000, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.018755985s ago: executing program 3 (id=627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@remote, @private0, @empty, 0x40000, 0x40, 0x300, 0x100, 0x0, 0x40380043}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000480)=@v2={0x5, 0x0, 0x5}, 0x9, 0x0) 1.647802333s ago: executing program 4 (id=628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@remote, @private0, @empty, 0x40000, 0x40, 0x300, 0x100, 0x0, 0x40380043}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380), &(0x7f0000000480)=@v2={0x5, 0x0, 0x5}, 0x9, 0x0) 1.302984945s ago: executing program 1 (id=629): pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x2) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40044590, &(0x7f0000000300)=""/240) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4d, [{0x0, 0x0}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 228.60467ms ago: executing program 2 (id=630): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x700a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="b76e28203e9e7f0046eb247712b3d4576fcca878b0ad2aa5692d9c66c5307d6c0b09f6809f625c3eaf8752167b3c43243987bf436c59acdeac219c26452952e8b1072109c2cf25c73e3ee552027e7346a70be76fa4b6a8777a08107b822c11a6d01e53f14e4ca979a8179dbb058fb107ccdbe0f02dbd601083cd9937b2d10f926734f323e47e03111e765879aa2d0e3a3447a32a60a1eb4abeb078377aa2ffa7f2c118175fcc4e3554116da032a8f11197f6cc9ceb9354e6107e1fa6e3712ac91559c54568ba82ee3465b64876f133617f991540ee87c4f4bf21233ac443d792afd3c50de64d14c22e8c84dc1ff228421a134d8d", 0xf4, 0x20040000, &(0x7f0000000040)={0x11, 0xd, 0x0, 0x1, 0x89, 0x6, @remote}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2=0xac1e0001}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 227.908305ms ago: executing program 4 (id=631): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@mmap={0x3344, 0x1, 0x4, 0x100000, 0x8, {}, {0x2, 0x0, 0x5, 0x2, 0x2, 0x9, "78075ed5"}, 0x10000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 218.081638ms ago: executing program 3 (id=632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x8600) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306e53f0b3cda094f2a9000070900be0083"], 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/cgroup\x00') r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x183000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8000) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000240)={0xf, {{0x2, 0x0, @broadcast}}}, 0xffffffb8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "d88fd87f1ad6eeb75a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) 0s ago: executing program 4 (id=633): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x1, 0x400) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0x40000000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000200)={'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000100)=0x4) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x1a9) kernel console output (not intermixed with test programs): ppressed [ 108.218758][ T29] audit: type=1400 audit(1736082781.952:438): avc: denied { name_bind } for pid=6831 comm="syz.2.241" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.258141][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.855803][ T29] audit: type=1400 audit(1736082782.592:439): avc: denied { read } for pid=6860 comm="syz.4.249" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.870125][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 108.888340][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.896649][ T9] usb 1-1: Product: syz [ 108.901695][ T9] usb 1-1: Manufacturer: syz [ 108.906297][ T9] usb 1-1: SerialNumber: syz [ 108.933119][ T29] audit: type=1400 audit(1736082782.592:440): avc: denied { open } for pid=6860 comm="syz.4.249" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.961746][ T9] usb 1-1: config 0 descriptor?? [ 108.976239][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 108.987468][ T5858] usb 3-1: USB disconnect, device number 10 [ 109.648749][ T9] gspca_sunplus: reg_r err -110 [ 109.777291][ T29] audit: type=1400 audit(1736082783.512:441): avc: denied { write } for pid=6866 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.797803][ T29] audit: type=1400 audit(1736082783.542:442): avc: denied { create } for pid=6866 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.818378][ T29] audit: type=1400 audit(1736082783.542:443): avc: denied { sys_admin } for pid=6866 comm="syz.1.250" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 110.116876][ T29] audit: type=1400 audit(1736082783.772:444): avc: denied { bind } for pid=6874 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.031882][ T29] audit: type=1400 audit(1736082784.572:445): avc: denied { mount } for pid=6884 comm="syz.1.253" name="/" dev="autofs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 111.817242][ T29] audit: type=1326 audit(1736082785.552:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb10185d29 code=0x7ffc0000 [ 111.871871][ T6898] overlayfs: failed to resolve './file1': -2 [ 111.895116][ T29] audit: type=1326 audit(1736082785.552:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb10185d29 code=0x7ffc0000 [ 112.019746][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 112.088713][ T9] usb 1-1: USB disconnect, device number 10 [ 112.310578][ T6906] syz.2.257: attempt to access beyond end of device [ 112.310578][ T6906] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 112.363681][ T6906] syz.2.257: attempt to access beyond end of device [ 112.363681][ T6906] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 112.368018][ T6908] IPv4: Oversized IP packet from 172.20.20.24 [ 112.384610][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 112.389683][ T6906] syz.2.257: attempt to access beyond end of device [ 112.389683][ T6906] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 112.391288][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 112.490074][ T6906] syz.2.257: attempt to access beyond end of device [ 112.490074][ T6906] loop2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 112.571868][ T6906] syz.2.257: attempt to access beyond end of device [ 112.571868][ T6906] loop2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 112.637472][ T6906] syz.2.257: attempt to access beyond end of device [ 112.637472][ T6906] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 112.651562][ T6906] VFS: unable to find oldfs superblock on device loop2 [ 114.350161][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 115.890030][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 115.898066][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.913495][ T5858] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.919516][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.271'. [ 116.058106][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.271'. [ 116.120306][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 116.120363][ T29] audit: type=1400 audit(1736082789.862:493): avc: denied { connect } for pid=6948 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.146374][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 116.153302][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 116.165795][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 116.185846][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 116.273411][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 116.337162][ T5858] usb 2-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=a6.2f [ 116.369815][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 116.382337][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.392852][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.401192][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 116.410502][ T5858] usb 2-1: Product: syz [ 116.414759][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.430979][ T5858] usb 2-1: Manufacturer: syz [ 116.435595][ T5858] usb 2-1: SerialNumber: syz [ 116.442547][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.455669][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.467557][ T9] usb 3-1: config 0 descriptor?? [ 116.476118][ T5858] usb 2-1: config 0 descriptor?? [ 116.486989][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.500824][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 116.508462][ T5858] mos7840 2-1:0.0: required endpoints missing [ 116.527910][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 116.544826][ T29] audit: type=1400 audit(1736082790.282:494): avc: denied { ioctl } for pid=6950 comm="syz.0.272" path="socket:[12375]" dev="sockfs" ino=12375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.544834][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 116.589907][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.614396][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.643277][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.657051][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 116.665023][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 116.676430][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.688330][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.699556][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.719752][ T9] gspca_vc032x: reg_r err -71 [ 116.739744][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 116.766614][ T6936] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 116.776132][ T9] usb 3-1: USB disconnect, device number 11 [ 116.816416][ T29] audit: type=1400 audit(1736082790.552:495): avc: denied { ioctl } for pid=6935 comm="syz.1.266" path="socket:[12379]" dev="sockfs" ino=12379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 116.935560][ T8] usb 4-1: string descriptor 0 read error: -22 [ 116.942206][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 116.951804][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.965356][ T8] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.067642][ T8] usb 2-1: USB disconnect, device number 11 [ 117.288857][ T5860] usb 4-1: USB disconnect, device number 11 [ 118.166922][ T29] audit: type=1400 audit(1736082791.872:496): avc: denied { write } for pid=6964 comm="syz.2.274" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.749882][ T51] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 118.999806][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 119.009680][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.013653][ T51] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 119.018325][ T29] audit: type=1400 audit(1736082792.752:497): avc: denied { create } for pid=6990 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.039629][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.051185][ T29] audit: type=1400 audit(1736082792.772:498): avc: denied { accept } for pid=6990 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.187975][ T6992] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 119.198419][ T6992] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 119.206128][ T6992] gretap1: entered promiscuous mode [ 119.211568][ T6992] gretap1: entered allmulticast mode [ 119.235981][ T6992] block device autoloading is deprecated and will be removed. [ 119.249717][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 119.258858][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.268219][ T8] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.276562][ T8] usb 3-1: Product: syz [ 119.281074][ T8] usb 3-1: Manufacturer: syz [ 119.285670][ T8] usb 3-1: SerialNumber: syz [ 119.306272][ T8] usb 3-1: config 0 descriptor?? [ 119.328687][ T51] usb 5-1: config 0 descriptor?? [ 119.435581][ T29] audit: type=1326 audit(1736082793.172:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4585d29 code=0x7ffc0000 [ 119.458810][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.465888][ T7001] kAFS: unable to lookup cell '¹ö‚2Ì0{Ç' [ 119.563940][ T51] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 120.056187][ T51] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 120.058405][ T29] audit: type=1326 audit(1736082793.172:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de4585d29 code=0x7ffc0000 [ 120.089320][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.143383][ T6984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.151849][ T6984] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 120.159574][ T51] asix 5-1:0.0: probe with driver asix failed with error -61 [ 120.909086][ T9] usb 3-1: USB disconnect, device number 12 [ 121.337383][ T7024] No control pipe specified [ 121.434815][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 121.434830][ T29] audit: type=1400 audit(1736082795.172:570): avc: denied { getopt } for pid=7027 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.469762][ T5976] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 121.886921][ T7033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.894197][ T7033] IPv6: NLM_F_CREATE should be set when creating new route [ 121.901415][ T7033] IPv6: NLM_F_CREATE should be set when creating new route [ 121.912237][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.925749][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.938746][ T7033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.951453][ T5976] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 121.966839][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.985051][ T5976] usb 1-1: config 0 descriptor?? [ 122.005612][ T9] usb 5-1: USB disconnect, device number 12 [ 122.102498][ T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.110158][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.188015][ T29] audit: type=1326 audit(1736082795.922:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb10185d29 code=0x0 [ 122.299731][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 122.307371][ T25] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 122.316246][ T25] usb 4-1: config 0 has no interface number 0 [ 122.322949][ T25] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 122.333405][ T25] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 122.343810][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 122.350440][ T51] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 122.358647][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.372820][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 122.380508][ T51] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.392668][ T25] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 122.402456][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.410785][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.421910][ T25] usb 4-1: Product: syz [ 122.426193][ T5976] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 122.426349][ T25] usb 4-1: Manufacturer: syz [ 122.437773][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.449084][ T25] usb 4-1: SerialNumber: syz [ 122.454836][ T5976] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 122.455693][ T51] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 122.472075][ T5976] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 122.472303][ T25] usb 4-1: config 0 descriptor?? [ 122.479163][ T5976] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 122.484340][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.503252][ T5976] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 122.507290][ T51] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.510541][ T7038] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.521973][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.542198][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.544128][ T7038] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.554807][ T51] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 122.564227][ T5976] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 122.568345][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 122.596100][ T51] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.609943][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.622090][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.632247][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.643638][ T51] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.656654][ T5861] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice=ff.e4 [ 122.665942][ T5861] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 122.674999][ T5861] usb 3-1: Product: syz [ 122.679343][ T5861] usb 3-1: Manufacturer: syz [ 122.688587][ T51] usb 2-1: string descriptor 0 read error: -22 [ 122.695442][ T51] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.711527][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.724848][ T5861] usb 3-1: config 0 descriptor?? [ 122.745016][ T51] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.759079][ T117] usb 1-1: USB disconnect, device number 11 [ 122.798600][ T7038] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.809071][ T7038] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 122.949863][ T7045] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 122.966094][ T7045] bond1: entered promiscuous mode [ 122.971453][ T7045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.995340][ T7045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.003112][ T7045] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 123.014198][ T7045] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 123.027272][ T7045] bond1: (slave ip6gre1): making interface the new active one [ 123.035433][ T7045] ip6gre1: entered promiscuous mode [ 123.047042][ T7045] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 123.098517][ T5858] usb 2-1: USB disconnect, device number 12 [ 123.162178][ T5861] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 123.179792][ T5861] aquacomputer_d5next 0003:0C70:F00B.0003: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 123.365239][ T7057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.466921][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 123.912323][ T7059] netlink: 112 bytes leftover after parsing attributes in process `syz.0.301'. [ 123.951864][ T29] audit: type=1400 audit(1736082797.692:572): avc: denied { ioctl } for pid=7039 comm="syz.2.296" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.350375][ T51] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 124.693851][ T25] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 125.089230][ T25] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 125.103336][ T7079] netlink: 112 bytes leftover after parsing attributes in process `syz.0.306'. [ 125.127622][ T25] asix 4-1:0.251: probe with driver asix failed with error -5 [ 125.189539][ T25] usb 4-1: USB disconnect, device number 12 [ 125.389902][ T7087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.397282][ T7087] IPv6: NLM_F_CREATE should be set when creating new route [ 125.404583][ T7087] IPv6: NLM_F_CREATE should be set when creating new route [ 125.420483][ T7087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.065062][ T5861] usb 3-1: USB disconnect, device number 13 [ 126.100223][ T7107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.228640][ T7109] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 126.305432][ T7110] bridge0: port 3(erspan0) entered blocking state [ 126.312120][ T7110] bridge0: port 3(erspan0) entered disabled state [ 126.319140][ T7110] erspan0: entered allmulticast mode [ 126.328141][ T7110] erspan0: entered promiscuous mode [ 126.578650][ T29] audit: type=1400 audit(1736082800.282:573): avc: denied { audit_write } for pid=7108 comm="syz.1.316" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.750541][ T29] audit: type=1400 audit(1736082800.422:574): avc: denied { execute } for pid=7108 comm="syz.1.316" path="/60/cpu.stat" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.847466][ T29] audit: type=1400 audit(1736082800.422:575): avc: denied { bind } for pid=7108 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.031961][ T29] audit: type=1326 audit(1736082800.772:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6415185d29 code=0x0 [ 127.312248][ T5976] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.100409][ T7130] veth1_macvtap: left promiscuous mode [ 128.105908][ T7130] macsec0: entered promiscuous mode [ 128.183346][ T7119] mkiss: ax0: crc mode is auto. [ 128.190462][ T29] audit: type=1326 audit(1736082801.802:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6415185d29 code=0x7ffc0000 [ 128.377553][ T5976] usb 1-1: Using ep0 maxpacket: 16 [ 128.395171][ T29] audit: type=1326 audit(1736082801.802:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6415185d29 code=0x7ffc0000 [ 128.441657][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.473595][ T5976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.539804][ T29] audit: type=1326 audit(1736082801.822:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6415185d29 code=0x7ffc0000 [ 128.663565][ T7146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.678134][ T7146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.879003][ T5976] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.892217][ T29] audit: type=1326 audit(1736082801.822:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6415185d29 code=0x7ffc0000 [ 128.959381][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.988110][ T29] audit: type=1326 audit(1736082801.822:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6415185d29 code=0x7ffc0000 [ 129.023919][ T5976] usb 1-1: config 0 descriptor?? [ 129.233563][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.410213][ T7158] netlink: 112 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.530202][ T29] audit: type=1400 audit(1736082803.262:582): avc: denied { write } for pid=7124 comm="syz.0.320" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 129.530301][ T7125] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.067099][ T7184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.074471][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 131.435736][ T5976] usbhid 1-1:0.0: can't add hid device: -71 [ 131.443934][ T5976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 131.465637][ T5976] usb 1-1: USB disconnect, device number 12 [ 131.622276][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 131.726348][ T7195] syz.3.328 uses obsolete (PF_INET,SOCK_PACKET) [ 131.759524][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 131.759572][ T29] audit: type=1400 audit(1736082805.492:584): avc: denied { connect } for pid=7187 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.103071][ T29] audit: type=1400 audit(1736082805.572:585): avc: denied { write } for pid=7187 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.219745][ T5976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.293758][ T7197] use of bytesused == 0 is deprecated and will be removed in the future, [ 132.315256][ T7197] use the actual size instead. [ 132.430951][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.472158][ T5976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.483226][ T5976] usb 1-1: config 3 has an invalid interface number: 140 but max is 0 [ 132.499733][ T5976] usb 1-1: config 3 has no interface number 0 [ 132.505985][ T5976] usb 1-1: config 3 interface 140 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 132.530792][ T5976] usb 1-1: config 3 interface 140 altsetting 224 bulk endpoint 0x9 has invalid maxpacket 8 [ 132.596981][ T5976] usb 1-1: config 3 interface 140 has no altsetting 0 [ 132.652037][ T29] audit: type=1400 audit(1736082806.392:586): avc: denied { recv } for pid=7156 comm="syz.1.323" saddr=10.128.0.169 src=30006 daddr=10.128.1.27 dest=33812 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 132.688033][ T5976] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=14.74 [ 132.749949][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.795049][ T5976] usb 1-1: Product: syz [ 132.827870][ T5976] usb 1-1: Manufacturer: syz [ 132.869540][ T5976] usb 1-1: SerialNumber: syz [ 132.998118][ T7191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.006431][ T7191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.360868][ T7208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.369449][ T7208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.380074][ T5976] usb 1-1: USB disconnect, device number 13 [ 133.391358][ T25] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 133.403161][ T29] audit: type=1400 audit(1736082807.142:587): avc: denied { create } for pid=7209 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.560971][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 133.604843][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 133.817174][ T29] audit: type=1400 audit(1736082807.442:588): avc: denied { read } for pid=7188 comm="syz.0.329" path="socket:[12873]" dev="sockfs" ino=12873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.181499][ T25] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 134.191161][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.242099][ T25] usb 3-1: Product: syz [ 134.248175][ T25] usb 3-1: Manufacturer: syz [ 134.252926][ T25] usb 3-1: SerialNumber: syz [ 134.263540][ T25] usb 3-1: config 0 descriptor?? [ 134.273822][ T25] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 020d [ 134.497475][ T9] usb 3-1: USB disconnect, device number 14 [ 134.724240][ T29] audit: type=1400 audit(1736082808.352:589): avc: denied { mounton } for pid=7224 comm="syz.1.337" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 135.200978][ T29] audit: type=1400 audit(1736082808.922:590): avc: denied { module_request } for pid=7230 comm="syz.0.338" kmod="net-pf-2-proto-257-type-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 136.129791][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.316041][ T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.419336][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.598158][ T25] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.636513][ T25] usb 2-1: config 1 has no interface number 1 [ 136.657880][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 136.705407][ T25] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.731055][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.740746][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.748912][ T25] usb 2-1: Product: syz [ 136.754364][ T25] usb 2-1: Manufacturer: syz [ 136.759126][ T25] usb 2-1: SerialNumber: syz [ 136.879699][ T117] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 136.890092][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.058517][ T7263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.065810][ T7263] IPv6: NLM_F_CREATE should be set when creating new route [ 137.080546][ T7263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.321026][ T117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.343217][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.356528][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.362262][ T117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.368240][ T8] usb 5-1: config 1 has no interface number 0 [ 137.411453][ T8] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.426603][ T117] usb 3-1: config 1 has no interface number 0 [ 137.442825][ T117] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.444639][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'. [ 137.464891][ T5976] IPVS: starting estimator thread 0... [ 137.471115][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.480373][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.489251][ T8] usb 5-1: Product: syz [ 137.509343][ T8] usb 5-1: Manufacturer: syz [ 137.580982][ T7268] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.584468][ T8] usb 5-1: SerialNumber: syz [ 137.714395][ T8] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 137.738667][ T117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.759358][ T8] cdc_ncm 5-1:1.1: bind() failure [ 137.805560][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.823759][ T29] audit: type=1400 audit(1736082811.542:591): avc: denied { setopt } for pid=7266 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 137.867312][ T117] usb 3-1: Product: syz [ 137.926772][ T117] usb 3-1: Manufacturer: syz [ 137.991724][ T117] usb 3-1: SerialNumber: syz [ 138.129424][ T117] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 138.168109][ T117] cdc_ncm 3-1:1.1: bind() failure [ 138.290763][ T25] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 138.298203][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 138.337071][ T25] usb 2-1: USB disconnect, device number 13 [ 138.859768][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 138.939684][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.009738][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 139.092842][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 139.100134][ T8] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 139.108307][ T8] usb 4-1: config 0 has no interface number 0 [ 139.116401][ T8] usb 4-1: New USB device found, idVendor=2304, idProduct=0228, bcdDevice=ed.1a [ 139.126603][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.137580][ T8] usb 4-1: config 0 descriptor?? [ 139.353787][ T8] dvb-usb: found a 'Pinnacle PCTV DVB-T Flash Stick' in warm state. [ 139.365979][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.375941][ T8] dvbdev: DVB: registering new adapter (Pinnacle PCTV DVB-T Flash Stick) [ 139.385510][ T8] usb 4-1: media controller created [ 139.401600][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.435306][ T8] DVB: Unable to find symbol dib7000p_attach() [ 139.441634][ T8] dvb-usb: no frontend was attached by 'Pinnacle PCTV DVB-T Flash Stick' [ 139.499669][ T8] rc_core: IR keymap rc-dib0700-rc5 not found [ 139.505803][ T8] Registered IR keymap rc-empty [ 139.513448][ T8] dvb-usb: could not initialize remote control. [ 139.520791][ T8] dvb-usb: Pinnacle PCTV DVB-T Flash Stick successfully initialized and connected. [ 139.536438][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.545856][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 139.553657][ T25] usb 2-1: can't read configurations, error -71 [ 139.567398][ T8] usb 4-1: USB disconnect, device number 13 [ 139.603545][ T8] dvb-usb: Pinnacle PCTV DVB-T Flash Stick successfully deinitialized and disconnected. [ 139.665572][ T117] usb 5-1: USB disconnect, device number 13 [ 141.747512][ T117] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.931311][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.945004][ T6580] udevd[6580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.918936][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.931323][ T117] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 142.941039][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.962959][ T117] usb 5-1: config 0 descriptor?? [ 143.075597][ T5976] usb 3-1: USB disconnect, device number 15 [ 143.437375][ T117] usb 5-1: can't set config #0, error -71 [ 143.471315][ T117] usb 5-1: USB disconnect, device number 14 [ 144.416287][ T29] audit: type=1400 audit(1736082817.382:592): avc: denied { mounton } for pid=7296 comm="syz.0.356" path="/78/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 145.079333][ T7311] trusted_key: syz.3.358 sent an empty control message without MSG_MORE. [ 145.148565][ T29] audit: type=1400 audit(1736082818.772:593): avc: denied { read } for pid=7300 comm="syz.3.358" path="socket:[12973]" dev="sockfs" ino=12973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.174398][ T7316] netlink: 'syz.4.359': attribute type 10 has an invalid length. [ 145.209681][ T29] audit: type=1400 audit(1736082818.792:594): avc: denied { write } for pid=7300 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.264510][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.285489][ T29] audit: type=1400 audit(1736082818.882:595): avc: denied { mount } for pid=7313 comm="syz.4.359" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.338384][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 145.344432][ T29] audit: type=1400 audit(1736082819.072:596): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.363034][ T29] audit: type=1400 audit(1736082820.102:597): avc: denied { ioctl } for pid=7337 comm="syz.1.365" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 147.110187][ T29] audit: type=1400 audit(1736082820.842:598): avc: denied { relabelto } for pid=7344 comm="syz.0.367" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 147.781285][ T29] audit: type=1400 audit(1736082821.442:599): avc: denied { create } for pid=7353 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.181987][ T29] audit: type=1400 audit(1736082821.452:600): avc: denied { bind } for pid=7353 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.334332][ T29] audit: type=1400 audit(1736082822.072:601): avc: denied { map } for pid=7364 comm="syz.0.373" path="socket:[14203]" dev="sockfs" ino=14203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.650678][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 148.650695][ T29] audit: type=1400 audit(1736082822.372:603): avc: denied { write } for pid=7359 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.405387][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.570863][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.589739][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.608733][ T51] usb 1-1: config 1 has no interface number 0 [ 149.619363][ T51] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.651575][ T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.669956][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.679651][ T51] usb 1-1: Product: syz [ 149.683821][ T51] usb 1-1: Manufacturer: syz [ 149.698574][ T51] usb 1-1: SerialNumber: syz [ 149.712007][ T51] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 149.729676][ T117] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.747055][ T51] cdc_ncm 1-1:1.1: bind() failure [ 150.008561][ T117] usb 5-1: Using ep0 maxpacket: 8 [ 150.100313][ T117] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 150.108594][ T117] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 150.139217][ T117] usb 5-1: config 0 has no interface number 0 [ 150.145406][ T7386] netlink: 112 bytes leftover after parsing attributes in process `syz.3.378'. [ 150.159720][ T117] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 150.173003][ T117] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 150.198875][ T117] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.212223][ T117] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 150.226402][ T117] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 150.234779][ T117] usb 5-1: Product: syz [ 150.239489][ T117] usb 5-1: Manufacturer: syz [ 150.250335][ T117] usb 5-1: config 0 descriptor?? [ 150.271018][ T29] audit: type=1400 audit(1736082824.012:604): avc: denied { write } for pid=7391 comm="syz.1.379" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.325776][ T29] audit: type=1400 audit(1736082824.062:605): avc: denied { setopt } for pid=7393 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.599807][ T117] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 150.749715][ T117] usb 4-1: Using ep0 maxpacket: 8 [ 150.756533][ T117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 150.767196][ T117] usb 4-1: config 2 has an invalid interface number: 242 but max is 0 [ 150.775733][ T117] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.786223][ T117] usb 4-1: config 2 has no interface number 0 [ 150.792547][ T117] usb 4-1: config 2 interface 242 altsetting 250 has an invalid endpoint descriptor of length 2, skipping [ 150.804111][ T117] usb 4-1: config 2 interface 242 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 150.817390][ T117] usb 4-1: config 2 interface 242 has no altsetting 0 [ 150.825821][ T117] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=62.62 [ 150.834921][ T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.842981][ T117] usb 4-1: Product: syz [ 150.847176][ T117] usb 4-1: Manufacturer: syz [ 150.852206][ T117] usb 4-1: SerialNumber: syz [ 150.917772][ T29] audit: type=1400 audit(1736082824.652:606): avc: denied { call } for pid=7391 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.959637][ T29] audit: type=1400 audit(1736082824.652:607): avc: denied { transfer } for pid=7391 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.991023][ T29] audit: type=1400 audit(1736082824.652:608): avc: denied { write } for pid=7391 comm="syz.1.379" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 151.080431][ T117] usb 4-1: selecting invalid altsetting 1 [ 151.089662][ T117] catc 4-1:2.242: Can't set altsetting 1. [ 151.098420][ T117] catc 4-1:2.242: probe with driver catc failed with error -5 [ 151.119784][ T117] usb 4-1: USB disconnect, device number 14 [ 151.308302][ T7401] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 151.310250][ T7394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.322809][ T7401] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 151.393757][ T29] audit: type=1400 audit(1736082825.132:609): avc: denied { connect } for pid=7400 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.416326][ T7402] ax25_connect(): syz.1.381 uses autobind, please contact jreuter@yaina.de [ 151.826606][ T9] usb 5-1: USB disconnect, device number 15 [ 152.070225][ T117] usb 1-1: USB disconnect, device number 14 [ 154.590041][ T7444] netlink: 168 bytes leftover after parsing attributes in process `syz.0.392'. [ 154.727447][ T7446] @ÿ: renamed from bond_slave_0 (while UP) [ 154.926648][ T7444] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 155.351404][ T7449] netlink: 112 bytes leftover after parsing attributes in process `syz.3.393'. [ 155.706899][ T7467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.714870][ T7469] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.732447][ T7469] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.745518][ T7469] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.754708][ T7469] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 155.764328][ T7469] geneve2: entered promiscuous mode [ 155.774807][ T7469] geneve2: entered allmulticast mode [ 155.814792][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 155.957489][ T29] audit: type=1400 audit(1736082829.682:610): avc: denied { create } for pid=7478 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 156.633004][ T29] audit: type=1400 audit(1736082829.682:611): avc: denied { write } for pid=7478 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 156.774834][ T7495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.404'. [ 157.070066][ T117] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.098181][ T29] audit: type=1400 audit(1736082830.832:612): avc: denied { setopt } for pid=7504 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.123323][ T29] audit: type=1400 audit(1736082830.862:613): avc: denied { ioctl } for pid=7504 comm="syz.0.409" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 157.229739][ T117] usb 5-1: Using ep0 maxpacket: 32 [ 157.255502][ T117] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.297802][ T117] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.362986][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.411170][ T117] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 157.439801][ T117] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 157.511322][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 157.518721][ T117] usb 5-1: Product: syz [ 157.584339][ T7515] netlink: 112 bytes leftover after parsing attributes in process `syz.1.412'. [ 157.619891][ T117] usb 5-1: Manufacturer: syz [ 157.711487][ T29] audit: type=1400 audit(1736082831.292:614): avc: denied { sqpoll } for pid=7513 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.816892][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 157.833161][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 157.913888][ T117] hub 5-1:4.0: USB hub found [ 158.022059][ T29] audit: type=1400 audit(1736082831.762:615): avc: denied { egress } for pid=0 comm="swapper/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 158.075016][ T29] audit: type=1400 audit(1736082831.762:616): avc: denied { sendto } for pid=0 comm="swapper/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 158.106971][ T7525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.114178][ T7525] IPv6: NLM_F_CREATE should be set when creating new route [ 158.192587][ T117] hub 5-1:4.0: 2 ports detected [ 158.555135][ T29] audit: type=1400 audit(1736082832.292:617): avc: denied { ioctl } for pid=7531 comm="syz.3.418" path="socket:[15518]" dev="sockfs" ino=15518 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.598258][ T117] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 158.618944][ T117] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 158.686333][ T117] usb 5-1: USB disconnect, device number 16 [ 159.073821][ T7550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.469728][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 160.240983][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.259678][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.283720][ T8] usb 3-1: config 1 has no interface number 0 [ 160.299646][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.355215][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.424473][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.459842][ T8] usb 3-1: Product: syz [ 160.474426][ T8] usb 3-1: Manufacturer: syz [ 160.515977][ T8] usb 3-1: SerialNumber: syz [ 160.544613][ T8] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 160.552332][ T8] cdc_ncm 3-1:1.1: bind() failure [ 160.728593][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 160.903729][ T7573] netlink: 112 bytes leftover after parsing attributes in process `syz.3.426'. [ 161.227155][ T7582] fuse: Bad value for 'fd' [ 161.328351][ T29] audit: type=1400 audit(1736082835.062:618): avc: denied { setopt } for pid=7579 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.482078][ T29] audit: type=1400 audit(1736082836.222:619): avc: denied { map } for pid=7597 comm="syz.1.432" path="/86" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 162.503471][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.839751][ T7611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.441815][ T25] usb 3-1: USB disconnect, device number 16 [ 163.470575][ T29] audit: type=1800 audit(1736082837.192:620): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.439" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 163.673551][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 163.749051][ T7626] netlink: 112 bytes leftover after parsing attributes in process `syz.2.441'. [ 164.016170][ T7634] program syz.1.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.183177][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 164.339778][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 164.380181][ T25] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 164.389984][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'. [ 164.418290][ T25] usb 5-1: config 0 has no interface number 0 [ 164.449560][ T29] audit: type=1400 audit(1736082838.182:621): avc: denied { read } for pid=7651 comm="syz.1.447" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.486910][ T25] usb 5-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 164.510700][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.521719][ T29] audit: type=1400 audit(1736082838.192:622): avc: denied { open } for pid=7651 comm="syz.1.447" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.548919][ T25] usb 5-1: Product: syz [ 164.557226][ T25] usb 5-1: Manufacturer: syz [ 164.568338][ T25] usb 5-1: SerialNumber: syz [ 164.583718][ T25] usb 5-1: config 0 descriptor?? [ 164.591962][ T29] audit: type=1400 audit(1736082838.192:623): avc: denied { ioctl } for pid=7651 comm="syz.1.447" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.618236][ T29] audit: type=1400 audit(1736082838.242:624): avc: denied { ioctl } for pid=7651 comm="syz.1.447" path="socket:[14727]" dev="sockfs" ino=14727 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.643743][ T29] audit: type=1400 audit(1736082838.242:625): avc: denied { read } for pid=7651 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.674976][ T7663] program syz.1.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.104383][ T7666] netlink: 52 bytes leftover after parsing attributes in process `syz.4.443'. [ 166.257163][ T29] audit: type=1400 audit(1736082839.992:626): avc: denied { create } for pid=7670 comm="syz.0.452" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.294867][ T29] audit: type=1400 audit(1736082839.992:627): avc: denied { write } for pid=7670 comm="syz.0.452" name="file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.318614][ T7672] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 166.341640][ T29] audit: type=1400 audit(1736082839.992:628): avc: denied { open } for pid=7670 comm="syz.0.452" path="/101/file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.384669][ T29] audit: type=1400 audit(1736082839.992:629): avc: denied { ioctl } for pid=7670 comm="syz.0.452" path="/101/file0" dev="tmpfs" ino=564 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 166.475881][ T7682] loop5: detected capacity change from 0 to 7 [ 166.484198][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.492596][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.500768][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.509107][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.517343][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.525822][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.534241][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.543045][ T7682] ldm_validate_partition_table(): Disk read failed. [ 166.549854][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.557960][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.566094][ T7682] Buffer I/O error on dev loop5, logical block 0, async page read [ 166.574446][ T7682] Dev loop5: unable to read RDB block 0 [ 166.580900][ T7682] loop5: unable to read partition table [ 166.587244][ T7682] loop5: partition table beyond EOD, truncated [ 166.593508][ T7682] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 166.593508][ T7682] ) failed (rc=-5) [ 166.656763][ T25] usb 5-1: USB disconnect, device number 17 [ 167.259682][ T117] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 167.271440][ T5861] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 167.342964][ T7685] lo speed is unknown, defaulting to 1000 [ 167.351569][ T7685] lo speed is unknown, defaulting to 1000 [ 167.358079][ T7685] lo speed is unknown, defaulting to 1000 [ 167.406617][ T7685] infiniband sz1: set active [ 167.412344][ T25] lo speed is unknown, defaulting to 1000 [ 167.418211][ T7685] infiniband sz1: added lo [ 167.422828][ T117] usb 1-1: device descriptor read/64, error -71 [ 167.450994][ T5861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.459920][ T7685] RDS/IB: sz1: added [ 167.464231][ T7685] smc: adding ib device sz1 with port count 1 [ 167.470468][ T5861] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.481246][ T7685] smc: ib device sz1 port 1 has pnetid [ 167.488601][ T25] lo speed is unknown, defaulting to 1000 [ 167.489711][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 167.494828][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.514180][ T7685] lo speed is unknown, defaulting to 1000 [ 167.530043][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 167.559444][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 167.599366][ T5861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.613845][ T7689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.621155][ T7689] IPv6: NLM_F_CREATE should be set when creating new route [ 167.646970][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.655321][ T5861] usb 4-1: Product: syz [ 167.659491][ T5861] usb 4-1: Manufacturer: syz [ 167.678394][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 167.691409][ T117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 167.697849][ T9] usb 3-1: config 8 has no interfaces? [ 167.705628][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 167.709733][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 167.720316][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.722418][ T7685] lo speed is unknown, defaulting to 1000 [ 167.739624][ T5861] cdc_wdm 4-1:1.0: skipping garbage [ 167.750710][ T5861] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 167.756664][ T5861] cdc_wdm 4-1:1.0: Unknown control protocol [ 167.869850][ T117] usb 1-1: device descriptor read/64, error -71 [ 167.990282][ T117] usb usb1-port1: attempt power cycle [ 168.153710][ T7676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.162640][ T7676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.187637][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.194367][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.200643][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.207221][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.213470][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.220060][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.226311][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.232910][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.239162][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.245743][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.251991][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.258579][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.268086][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.274698][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.282631][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.289238][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.295482][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.302089][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.308354][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 168.314954][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 168.334393][ T7685] lo speed is unknown, defaulting to 1000 [ 168.340681][ T29] audit: type=1400 audit(1736082842.062:630): avc: denied { unmount } for pid=7698 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.360428][ T5861] usb 4-1: USB disconnect, device number 15 [ 168.366345][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.399787][ T117] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 168.400910][ T9] usb 3-1: string descriptor 0 read error: -71 [ 168.437568][ T9] usb 3-1: USB disconnect, device number 17 [ 168.452815][ T117] usb 1-1: device descriptor read/8, error -71 [ 168.486915][ T7685] lo speed is unknown, defaulting to 1000 [ 168.549196][ T7704] nvme_fabrics: missing parameter 'transport=%s' [ 168.556841][ T7704] nvme_fabrics: missing parameter 'nqn=%s' [ 168.578833][ T7685] lo speed is unknown, defaulting to 1000 [ 168.790905][ T117] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.817539][ T5858] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 168.822798][ T117] usb 1-1: device descriptor read/8, error -71 [ 168.939503][ T29] audit: type=1400 audit(1736082842.662:631): avc: denied { mounton } for pid=7706 comm="syz.1.462" path="/93/file0" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.008650][ T117] usb usb1-port1: unable to enumerate USB device [ 169.841795][ T29] audit: type=1400 audit(1736082843.542:632): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.920841][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 170.321372][ T5858] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 170.338155][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 170.349670][ T5858] usb 5-1: Product: syz [ 170.353871][ T5858] usb 5-1: Manufacturer: syz [ 170.358540][ T5858] usb 5-1: SerialNumber: syz [ 170.369285][ T5858] usb 5-1: config 0 descriptor?? [ 170.404998][ T7704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 170.591936][ T29] audit: type=1400 audit(1736082844.332:633): avc: denied { map } for pid=7723 comm="syz.2.467" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 170.636663][ T7722] vxcan1: entered promiscuous mode [ 170.695740][ T5858] usb 5-1: USB disconnect, device number 18 [ 170.850011][ T7721] lo speed is unknown, defaulting to 1000 [ 171.139303][ T7734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.146656][ T7734] IPv6: NLM_F_CREATE should be set when creating new route [ 171.529869][ T5133] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 171.543405][ T7737] geneve2: entered promiscuous mode [ 171.548630][ T7737] geneve2: entered allmulticast mode [ 171.880100][ T5858] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 172.045126][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.067676][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.108411][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.129788][ T5858] usb 3-1: string descriptor 0 read error: -22 [ 172.137803][ T5858] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.215880][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.271455][ T5858] usb 3-1: 0:2 : does not exist [ 172.446051][ T7751] process 'syz.3.475' launched '/dev/fd/3' with NULL argv: empty string added [ 172.460496][ T29] audit: type=1400 audit(1736082846.202:634): avc: denied { execute_no_trans } for pid=7750 comm="syz.3.475" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.510178][ T5858] usb 3-1: USB disconnect, device number 18 [ 172.560603][ T29] audit: type=1400 audit(1736082846.202:635): avc: denied { create } for pid=7753 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.638723][ T29] audit: type=1400 audit(1736082846.242:636): avc: denied { connect } for pid=7753 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.667698][ T29] audit: type=1400 audit(1736082846.322:637): avc: denied { listen } for pid=7753 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.902027][ T5976] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 172.989684][ T117] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.100711][ T5976] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.102518][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.136718][ T5976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.149709][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 173.169532][ T117] usb 1-1: config 0 has no interfaces? [ 173.169753][ T5976] usb 4-1: config 1 has no interface number 0 [ 173.183139][ T117] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.208472][ T5976] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.208616][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.247737][ T117] usb 1-1: config 0 descriptor?? [ 173.261893][ T5976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.299771][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.323494][ T5976] usb 4-1: Product: syz [ 173.336410][ T5976] usb 4-1: Manufacturer: syz [ 173.346793][ T5976] usb 4-1: SerialNumber: syz [ 173.375960][ T5976] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 173.408260][ T5976] cdc_ncm 4-1:1.1: bind() failure [ 173.488391][ T5861] usb 1-1: USB disconnect, device number 19 [ 173.509627][ T29] audit: type=1400 audit(1736082847.212:638): avc: denied { accept } for pid=7753 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.565587][ T5133] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.685994][ T29] audit: type=1400 audit(1736082847.212:639): avc: denied { ioctl } for pid=7753 comm="syz.0.477" path="socket:[16095]" dev="sockfs" ino=16095 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.191346][ T7785] FAULT_INJECTION: forcing a failure. [ 174.191346][ T7785] name failslab, interval 1, probability 0, space 0, times 1 [ 174.205182][ T7785] CPU: 0 UID: 0 PID: 7785 Comm: syz.3.480 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 174.215785][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.225851][ T7785] Call Trace: [ 174.229132][ T7785] [ 174.232066][ T7785] dump_stack_lvl+0x16c/0x1f0 [ 174.236758][ T7785] should_fail_ex+0x497/0x5b0 [ 174.241450][ T7785] should_failslab+0xc2/0x120 [ 174.246140][ T7785] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 174.251960][ T7785] ? zswap_store+0x870/0x2680 [ 174.256641][ T7785] zswap_store+0x870/0x2680 [ 174.261164][ T7785] ? __pfx_zswap_store+0x10/0x10 [ 174.266104][ T7785] ? irqentry_exit+0x3b/0x90 [ 174.270696][ T7785] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.275913][ T7785] ? swap_writepage+0x28c/0x1120 [ 174.280862][ T7785] ? swap_writepage+0x29a/0x1120 [ 174.285813][ T7785] swap_writepage+0x3b6/0x1120 [ 174.290586][ T7785] ? folio_clear_dirty_for_io+0x112/0x800 [ 174.296320][ T7785] pageout+0x3b2/0xaa0 [ 174.300402][ T7785] ? __pfx_pageout+0x10/0x10 [ 174.305037][ T7785] ? arch_tlbbatch_flush+0x246/0x320 [ 174.310336][ T7785] ? arch_tlbbatch_flush+0x295/0x320 [ 174.315639][ T7785] shrink_folio_list+0x3025/0x42d0 [ 174.320771][ T7785] ? __pfx_shrink_folio_list+0x10/0x10 [ 174.326238][ T7785] ? trace_contention_end.constprop.0+0x10c/0x170 [ 174.332667][ T7785] ? __pv_queued_spin_lock_slowpath+0x28a/0xc90 [ 174.338918][ T7785] ? hlock_class+0x4e/0x130 [ 174.343416][ T7785] ? mark_lock+0xb5/0xc60 [ 174.347740][ T7785] ? __pfx_mark_lock+0x10/0x10 [ 174.352490][ T7785] ? kvm_sched_clock_read+0x11/0x20 [ 174.357673][ T7785] ? sched_clock+0x38/0x60 [ 174.362082][ T7785] ? find_held_lock+0x2d/0x110 [ 174.366855][ T7785] ? __pfx_mark_lock+0x10/0x10 [ 174.371608][ T7785] reclaim_folio_list+0xd8/0x5e0 [ 174.376968][ T7785] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.382154][ T7785] ? __pfx_reclaim_folio_list+0x10/0x10 [ 174.387700][ T7785] ? reclaim_pages+0x17b/0x650 [ 174.392462][ T7785] ? reclaim_pages+0x18a/0x650 [ 174.397216][ T7785] reclaim_pages+0x481/0x650 [ 174.401796][ T7785] ? rcu_preempt_deferred_qs_irqrestore+0x411/0xb80 [ 174.408373][ T7785] ? __pfx_reclaim_pages+0x10/0x10 [ 174.413482][ T7785] madvise_cold_or_pageout_pte_range+0x13ae/0x20d0 [ 174.419981][ T7785] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 174.426816][ T7785] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 174.433662][ T7785] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 174.440500][ T7785] walk_pgd_range+0xc7b/0x1a70 [ 174.445260][ T7785] ? __pfx_walk_pgd_range+0x10/0x10 [ 174.450447][ T7785] ? mark_held_locks+0x9f/0xe0 [ 174.455197][ T7785] __walk_page_range+0x161/0x820 [ 174.460130][ T7785] ? walk_page_test+0x9b/0x180 [ 174.464883][ T7785] walk_page_range_mm+0x55a/0x940 [ 174.469912][ T7785] ? __pfx_walk_page_range_mm+0x10/0x10 [ 174.475468][ T7785] ? preempt_schedule_thunk+0x1a/0x30 [ 174.480838][ T7785] walk_page_range+0x63/0x90 [ 174.485423][ T7785] madvise_pageout+0x326/0x820 [ 174.490175][ T7785] ? __pfx_madvise_pageout+0x10/0x10 [ 174.495448][ T7785] ? irqentry_exit+0x3b/0x90 [ 174.500038][ T7785] ? write_comp_data+0x11/0x90 [ 174.504794][ T7785] madvise_vma_behavior+0x44a/0x1da0 [ 174.510075][ T7785] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 174.515790][ T7785] ? find_vma_prev+0xdb/0x160 [ 174.520458][ T7785] ? __pfx_find_vma_prev+0x10/0x10 [ 174.525566][ T7785] ? mark_held_locks+0x9f/0xe0 [ 174.530321][ T7785] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 174.536027][ T7785] madvise_walk_vmas+0x1cf/0x2c0 [ 174.540958][ T7785] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 174.546401][ T7785] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 174.552113][ T7785] do_madvise+0x30e/0x770 [ 174.556431][ T7785] ? __pfx_do_madvise+0x10/0x10 [ 174.561267][ T7785] ? __pfx___schedule+0x10/0x10 [ 174.566110][ T7785] __x64_sys_madvise+0xa9/0x110 [ 174.570947][ T7785] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.576130][ T7785] do_syscall_64+0xcd/0x250 [ 174.580619][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.586504][ T7785] RIP: 0033:0x7f4de4585d29 [ 174.590904][ T7785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.610502][ T7785] RSP: 002b:00007f4de5310038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 174.618900][ T7785] RAX: ffffffffffffffda RBX: 00007f4de4776160 RCX: 00007f4de4585d29 [ 174.626856][ T7785] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000000020000000 [ 174.634809][ T7785] RBP: 00007f4de5310090 R08: 0000000000000000 R09: 0000000000000000 [ 174.642761][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.650714][ T7785] R13: 0000000000000000 R14: 00007f4de4776160 R15: 00007ffcb17dffb8 [ 174.658678][ T7785] [ 175.118247][ T117] usb 4-1: USB disconnect, device number 16 [ 175.337399][ T7801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.489'. [ 175.763079][ T7807] netlink: 96 bytes leftover after parsing attributes in process `syz.3.491'. [ 175.979199][ T7812] loop5: detected capacity change from 0 to 7 [ 175.986777][ T7812] buffer_io_error: 4 callbacks suppressed [ 175.986807][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.000843][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.008964][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.017055][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.025280][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.033434][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.041942][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.049941][ T7812] ldm_validate_partition_table(): Disk read failed. [ 176.056696][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.064917][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.073205][ T7812] Buffer I/O error on dev loop5, logical block 0, async page read [ 176.081437][ T7812] Dev loop5: unable to read RDB block 0 [ 176.087624][ T7812] loop5: unable to read partition table [ 176.093826][ T7812] loop5: partition table beyond EOD, truncated [ 176.100118][ T7812] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 176.100118][ T7812] ) failed (rc=-5) [ 176.732922][ T7814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.913991][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 176.980188][ T5858] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 177.025638][ T29] audit: type=1400 audit(1736082850.762:640): avc: denied { write } for pid=7825 comm="syz.3.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.049768][ T5861] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 177.152814][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 177.177879][ T5858] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 177.210292][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 177.232395][ T5861] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 177.239654][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1632, setting to 1024 [ 177.247203][ T5861] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 177.345954][ T5861] usb 2-1: can't read configurations, error -61 [ 177.580506][ T5858] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 177.591940][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.600009][ T5858] usb 5-1: Product: syz [ 177.604170][ T5858] usb 5-1: Manufacturer: syz [ 177.608764][ T5858] usb 5-1: SerialNumber: syz [ 177.610311][ T5861] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 177.625974][ T5858] usb 5-1: config 0 descriptor?? [ 177.642211][ T7816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.658122][ T5858] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 177.848323][ T5861] usb 2-1: device descriptor read/all, error -71 [ 177.889126][ T5861] usb usb2-port1: attempt power cycle [ 178.438753][ T29] audit: type=1400 audit(1736082852.172:641): avc: denied { create } for pid=7848 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 179.255967][ T7858] netlink: 92 bytes leftover after parsing attributes in process `syz.1.505'. [ 179.610090][ T7863] netlink: 112 bytes leftover after parsing attributes in process `syz.3.506'. [ 179.794807][ T5858] usb 5-1: USB disconnect, device number 19 [ 179.930008][ T29] audit: type=1326 audit(1736082853.642:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.0.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x0 [ 180.891452][ T7896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.513'. [ 180.927563][ T29] audit: type=1400 audit(1736082854.662:643): avc: denied { connect } for pid=7903 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.141347][ T29] audit: type=1400 audit(1736082854.872:644): avc: denied { create } for pid=7910 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.192477][ T7912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7912 comm=syz.2.518 [ 181.222914][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 181.314740][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 181.355587][ T29] audit: type=1400 audit(1736082854.932:645): avc: denied { write } for pid=7910 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.389853][ T5976] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.604880][ T29] audit: type=1400 audit(1736082855.012:646): avc: denied { read } for pid=7910 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.720522][ T7911] netlink: 112 bytes leftover after parsing attributes in process `syz.0.517'. [ 181.741156][ T5976] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 181.809325][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.934380][ T5976] usb 4-1: config 0 descriptor?? [ 181.962250][ T5976] pwc: Philips SPC 900NC USB webcam detected. [ 182.160364][ T117] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.209762][ T51] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 182.322964][ T117] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.371886][ T51] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 182.409343][ T117] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 182.422181][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.451232][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.465402][ T51] usb 3-1: config 0 descriptor?? [ 182.479346][ T29] audit: type=1400 audit(1736082856.202:647): avc: denied { getopt } for pid=7905 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.506394][ T51] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 182.518969][ T117] usb 5-1: config 0 descriptor?? [ 182.542179][ T117] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 182.875432][ T29] audit: type=1400 audit(1736082856.612:648): avc: denied { accept } for pid=7934 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.916981][ T51] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 183.002892][ T7937] QAT: Stopping all acceleration devices. [ 183.165718][ T29] audit: type=1400 audit(1736082856.752:649): avc: denied { bind } for pid=7934 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 183.331657][ T7915] SELinux: syz.2.518 (7915) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.550326][ T5858] usb 5-1: USB disconnect, device number 20 [ 184.334954][ T7951] netdevsim netdevsim1: Direct firmware load for printk failed with error -2 [ 184.344518][ T7951] netdevsim netdevsim1: Falling back to sysfs fallback for: printk [ 184.926125][ T117] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.937887][ T51] gspca_cpia1: usb_control_msg 02, error -110 [ 184.951905][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 184.971391][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 185.055209][ T7946] [U] vÔ3 [ 185.135100][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 185.159534][ T51] gspca_cpia1: usb_control_msg 05, error -32 [ 185.195558][ T117] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.266965][ T51] cpia1 3-1:0.0: unexpected systemstate: 00 [ 185.279629][ T117] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.295792][ T5976] pwc: Failed to set LED on/off time (-71) [ 185.299151][ T51] usb 3-1: USB disconnect, device number 19 [ 185.411823][ T117] usb 1-1: config 1 has no interface number 0 [ 185.421040][ T5976] pwc: send_video_command error -71 [ 185.426262][ T5976] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 185.438275][ T117] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.530352][ T117] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.757885][ T5976] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 185.779663][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.787679][ T117] usb 1-1: Product: syz [ 185.818352][ T5976] usb 4-1: USB disconnect, device number 17 [ 185.863630][ T117] usb 1-1: Manufacturer: syz [ 185.868457][ T117] usb 1-1: SerialNumber: syz [ 185.925677][ T117] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 185.977114][ T117] cdc_ncm 1-1:1.1: bind() failure [ 186.331411][ T29] audit: type=1400 audit(1736082860.072:650): avc: denied { write } for pid=7983 comm="syz.2.537" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.826708][ T29] audit: type=1400 audit(1736082861.542:651): avc: denied { mount } for pid=8001 comm="syz.1.541" name="/" dev="rpc_pipefs" ino=17485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 187.860994][ T8005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.542'. [ 187.980182][ T29] audit: type=1400 audit(1736082861.722:652): avc: denied { create } for pid=8008 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.016468][ T29] audit: type=1400 audit(1736082861.742:653): avc: denied { connect } for pid=8008 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 188.199700][ T117] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 188.279806][ T25] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 188.862108][ T117] usb 5-1: Using ep0 maxpacket: 8 [ 188.957265][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 188.965489][ T5861] usb 1-1: USB disconnect, device number 20 [ 188.971739][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.986111][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.999462][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.019121][ T8026] FAULT_INJECTION: forcing a failure. [ 189.019121][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.020286][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.036293][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.547 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 189.053275][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.054122][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.061723][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.071493][ T8026] Call Trace: [ 189.071502][ T8026] [ 189.071510][ T8026] dump_stack_lvl+0x16c/0x1f0 [ 189.071538][ T8026] should_fail_ex+0x497/0x5b0 [ 189.071567][ T8026] _copy_to_user+0x32/0xd0 [ 189.071600][ T8026] sctp_getsockopt+0x3dfc/0x74a0 [ 189.081948][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 189.084893][ T8026] ? avc_has_perm_noaudit+0x119/0x3a0 [ 189.084925][ T8026] ? __pfx_lock_release+0x10/0x10 [ 189.087944][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.092485][ T8026] ? trace_lock_acquire+0x14e/0x1f0 [ 189.092519][ T8026] ? __pfx_sctp_getsockopt+0x10/0x10 [ 189.092541][ T8026] ? __lock_acquire+0x15a9/0x3c40 [ 189.092570][ T8026] ? __pfx___lock_acquire+0x10/0x10 [ 189.092595][ T8026] ? hlock_class+0x4e/0x130 [ 189.097378][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.101632][ T8026] ? __lock_acquire+0xcc5/0x3c40 [ 189.101657][ T8026] ? find_held_lock+0x2d/0x110 [ 189.101683][ T8026] ? __might_fault+0x13b/0x190 [ 189.101706][ T8026] ? __pfx_lock_release+0x10/0x10 [ 189.109815][ T8029] bridge0: entered promiscuous mode [ 189.117767][ T8026] ? trace_lock_acquire+0x14e/0x1f0 [ 189.117803][ T8026] ? lock_acquire+0x2f/0xb0 [ 189.117821][ T8026] ? __might_fault+0xe3/0x190 [ 189.123509][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.128166][ T8026] ? __might_fault+0xe3/0x190 [ 189.128195][ T8026] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 189.140054][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.144956][ T8026] ? do_sock_getsockopt+0x3fe/0x800 [ 189.150715][ T8029] bridge0: entered allmulticast mode [ 189.155214][ T8026] do_sock_getsockopt+0x3fe/0x800 [ 189.155243][ T8026] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 189.163972][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.164899][ T8026] ? lock_acquire+0x2f/0xb0 [ 189.164922][ T8026] ? __fget_files+0x40/0x3a0 [ 189.164944][ T8026] ? __fget_files+0x206/0x3a0 [ 189.164968][ T8026] __sys_getsockopt+0x12f/0x260 [ 189.178511][ T117] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 189.180855][ T8026] __x64_sys_getsockopt+0xbd/0x160 [ 189.180884][ T8026] ? do_syscall_64+0x91/0x250 [ 189.180907][ T8026] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.180927][ T8026] do_syscall_64+0xcd/0x250 [ 189.180952][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.185779][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 189.190505][ T8026] RIP: 0033:0x7f2810785d29 [ 189.190523][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.190540][ T8026] RSP: 002b:00007f2811637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 189.190558][ T8026] RAX: ffffffffffffffda RBX: 00007f2810975fa0 RCX: 00007f2810785d29 [ 189.190571][ T8026] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000003 [ 189.196510][ T117] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.200727][ T8026] RBP: 00007f2811637090 R08: 0000000020000040 R09: 0000000000000000 [ 189.200741][ T8026] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.200752][ T8026] R13: 0000000000000000 R14: 00007f2810975fa0 R15: 00007ffeacbf5ed8 [ 189.200775][ T8026] [ 189.468013][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.524013][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.565288][ T29] audit: type=1400 audit(1736082863.292:654): avc: denied { ioctl } for pid=8027 comm="syz.1.549" path="socket:[16556]" dev="sockfs" ino=16556 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 189.572438][ T25] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.717716][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.721179][ T29] audit: type=1400 audit(1736082863.292:655): avc: denied { write } for pid=8027 comm="syz.1.549" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 189.802151][ T25] usb 3-1: Manufacturer: syz [ 189.844629][ T25] usb 3-1: config 0 descriptor?? [ 189.854092][ T117] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.859701][ T29] audit: type=1400 audit(1736082863.292:656): avc: denied { open } for pid=8027 comm="syz.1.549" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 189.932750][ T117] usb 5-1: string descriptor 0 read error: -22 [ 189.939177][ T117] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 189.952221][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.966850][ T117] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 189.976807][ T29] audit: type=1400 audit(1736082863.722:657): avc: denied { ioctl } for pid=8043 comm="syz.3.551" path="socket:[16571]" dev="sockfs" ino=16571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.893009][ T29] audit: type=1400 audit(1736082864.082:658): avc: denied { setopt } for pid=8049 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 191.062177][ T5976] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 191.159888][ T8054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.167273][ T8054] IPv6: NLM_F_CREATE should be set when creating new route [ 191.174637][ T8054] IPv6: NLM_F_CREATE should be set when creating new route [ 191.199746][ T25] rc_core: IR keymap rc-hauppauge not found [ 191.201085][ T9] usb 5-1: USB disconnect, device number 21 [ 191.264300][ T8054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.270159][ T25] Registered IR keymap rc-empty [ 191.317876][ T5976] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 191.328355][ T5976] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.410509][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.417374][ T5976] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 191.429755][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.441400][ T5976] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 191.450599][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 191.451821][ T5976] usb 2-1: Manufacturer: syz [ 191.469139][ T5976] usb 2-1: SerialNumber: syz [ 191.508770][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 191.548751][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.599766][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.699132][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.700323][ T29] audit: type=1400 audit(1736082865.362:659): avc: denied { execute } for pid=8065 comm="syz.0.557" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 191.729763][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.772267][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.830818][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.910409][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.001524][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.030002][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.059839][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.090212][ T25] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 192.101395][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 192.137370][ T25] mceusb 3-1:0.0: Registered with mce emulator interface version 90 [ 192.206585][ T25] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.259395][ T25] usb 3-1: USB disconnect, device number 20 [ 192.636265][ T8075] binder: 8069:8075 ioctl c018620c 20000180 returned -22 [ 192.684246][ T29] audit: type=1400 audit(1736082866.422:660): avc: denied { remount } for pid=8069 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.733314][ T8075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.880314][ T5858] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 193.005183][ T5976] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 193.019451][ T5976] usb 2-1: USB disconnect, device number 19 [ 193.025764][ T8082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.033092][ T8082] IPv6: NLM_F_CREATE should be set when creating new route [ 193.074995][ T5858] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.109443][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.130294][ T5858] usb 3-1: config 1 has no interface number 0 [ 193.146308][ T5858] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.196351][ T5858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.217167][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.249054][ T8084] capability: warning: `syz.1.562' uses 32-bit capabilities (legacy support in use) [ 193.260465][ T5858] usb 3-1: Product: syz [ 193.267415][ T5858] usb 3-1: Manufacturer: syz [ 193.280903][ T5858] usb 3-1: SerialNumber: syz [ 193.360020][ T5858] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 193.449939][ T5858] cdc_ncm 3-1:1.1: bind() failure [ 193.719314][ T8094] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 193.723896][ T8101] overlayfs: conflicting lowerdir path [ 194.037589][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.048977][ T5858] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.531856][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.577545][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.607121][ T5858] usb 5-1: config 1 has no interface number 0 [ 194.625637][ T5858] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.659439][ T5858] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.668749][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.677047][ T5858] usb 5-1: Product: syz [ 194.688546][ T5858] usb 5-1: Manufacturer: syz [ 194.697124][ T5858] usb 5-1: SerialNumber: syz [ 194.709208][ T5858] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 194.737494][ T5858] cdc_ncm 5-1:1.1: bind() failure [ 194.849708][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 194.984384][ T29] audit: type=1326 audit(1736082868.722:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 195.788362][ T8119] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 195.796485][ T8119] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 196.145412][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 196.145460][ T29] audit: type=1326 audit(1736082868.722:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.163184][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 196.189880][ T29] audit: type=1326 audit(1736082868.752:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.193688][ T51] usb 3-1: USB disconnect, device number 21 [ 196.213448][ T29] audit: type=1326 audit(1736082868.752:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.254632][ T29] audit: type=1326 audit(1736082868.752:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.284122][ T29] audit: type=1326 audit(1736082868.752:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.290396][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 196.311652][ T29] audit: type=1326 audit(1736082868.752:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.344846][ T29] audit: type=1326 audit(1736082868.752:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8116 comm="syz.0.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2810785d29 code=0x7ffc0000 [ 196.349917][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.385842][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.407509][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.425405][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 196.433180][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 196.444631][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.456469][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.467909][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.482197][ T8128] fuse: Bad value for 'fd' [ 196.497287][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 196.505815][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 196.521969][ T25] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.539983][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.551353][ T25] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.575423][ T8131] fuse: Bad value for 'fd' [ 196.592749][ T25] usb 2-1: string descriptor 0 read error: -22 [ 196.602581][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 196.612236][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.648210][ T25] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 196.885045][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 196.885062][ T29] audit: type=1400 audit(1736082870.582:673): avc: denied { write } for pid=8132 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.233191][ T5858] usb 2-1: USB disconnect, device number 20 [ 197.579656][ T867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.742311][ T867] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.788283][ T867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.843174][ T867] usb 4-1: config 0 descriptor?? [ 197.958503][ T867] cp210x 4-1:0.0: cp210x converter detected [ 198.662876][ T867] usb 4-1: cp210x converter now attached to ttyUSB0 [ 198.689510][ T29] audit: type=1400 audit(1736082872.422:674): avc: denied { read append } for pid=8146 comm="syz.2.576" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 198.763414][ T25] usb 5-1: USB disconnect, device number 22 [ 198.787570][ T29] audit: type=1400 audit(1736082872.422:675): avc: denied { create } for pid=8146 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.831372][ T5976] usb 4-1: USB disconnect, device number 18 [ 198.849937][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.866787][ T5976] cp210x 4-1:0.0: device disconnected [ 198.961079][ T29] audit: type=1400 audit(1736082872.692:676): avc: denied { execute } for pid=8153 comm="syz.1.577" path="/dev/bsg/cpuacct.usage_percpu" dev="devtmpfs" ino=2986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 199.436983][ T29] audit: type=1400 audit(1736082873.172:677): avc: denied { bind } for pid=8159 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.035212][ T29] audit: type=1400 audit(1736082873.382:678): avc: denied { listen } for pid=8159 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.055720][ T8148] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 200.359855][ T8148] usb 3-1: Using ep0 maxpacket: 32 [ 200.371709][ T8148] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 200.381019][ T8148] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 200.889053][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.927590][ T8148] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 200.937383][ T8148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.947479][ T8148] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.957590][ T8148] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.971507][ T8148] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.006426][ T8148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.020238][ T8148] usb 3-1: config 0 descriptor?? [ 201.069825][ T867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 201.099846][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.115236][ T25] usb 4-1: config 0 has no interface number 0 [ 201.126624][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.138091][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.148070][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 201.161637][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.182631][ T25] usb 4-1: config 0 descriptor?? [ 201.241714][ T8148] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.279808][ T867] usb 1-1: Using ep0 maxpacket: 32 [ 201.287478][ T867] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.295932][ T867] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.305119][ T867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.314903][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.324927][ T867] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.335210][ T867] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.348668][ T867] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.358026][ T867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.367865][ T867] usb 1-1: config 0 descriptor?? [ 201.460120][ T29] audit: type=1400 audit(1736082875.202:679): avc: denied { read write } for pid=8159 comm="syz.2.580" name="lp0" dev="devtmpfs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.485191][ T29] audit: type=1400 audit(1736082875.202:680): avc: denied { open } for pid=8159 comm="syz.2.580" path="/dev/usb/lp0" dev="devtmpfs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.510654][ T29] audit: type=1400 audit(1736082875.202:681): avc: denied { ioctl } for pid=8159 comm="syz.2.580" path="/dev/usb/lp0" dev="devtmpfs" ino=2991 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.535978][ T51] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 201.598477][ T867] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.622139][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.629379][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.644672][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.653000][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.664122][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.664406][ T867] usb 3-1: USB disconnect, device number 22 [ 201.671577][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.688583][ T25] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 201.700095][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 201.707104][ T867] usblp0: removed [ 201.711180][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 201.718578][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 201.734246][ T51] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.746693][ T25] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 201.758499][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.770439][ T25] hid_prodikeys: hid-prodikeys: failed to find output report [ 201.770439][ T25] [ 201.784526][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.803118][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 201.813835][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 201.825210][ T51] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.837236][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.849268][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.864022][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 201.872450][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.883420][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 201.885335][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.897071][ T25] usb 1-1: USB disconnect, device number 21 [ 201.919864][ T25] usblp1: removed [ 201.935392][ T51] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.952744][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.964410][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.980496][ T51] usb 5-1: string descriptor 0 read error: -22 [ 201.986673][ T51] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 201.996222][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.021820][ T51] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 202.380556][ T5845] usb 5-1: USB disconnect, device number 23 [ 202.539640][ T29] audit: type=1400 audit(1736082876.272:682): avc: denied { getopt } for pid=8195 comm="syz.1.589" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.769720][ T51] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 202.951329][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 202.958206][ T51] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 202.969830][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 202.985606][ T51] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 202.994741][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.002750][ T51] usb 3-1: Product: syz [ 203.006914][ T51] usb 3-1: Manufacturer: syz [ 203.011622][ T51] usb 3-1: SerialNumber: syz [ 203.018616][ T51] r8152-cfgselector 3-1: Unknown version 0x0000 [ 203.024913][ T51] r8152-cfgselector 3-1: config 0 descriptor?? [ 203.095922][ T5845] usb 4-1: USB disconnect, device number 19 [ 203.329421][ T29] audit: type=1400 audit(1736082877.062:683): avc: denied { write } for pid=8200 comm="syz.3.591" path="socket:[16883]" dev="sockfs" ino=16883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.817645][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 205.366432][ T8221] syz.4.595 (8221): /proc/8221/oom_adj is deprecated, please use /proc/8221/oom_score_adj instead. [ 205.696460][ T8231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.703793][ T8231] IPv6: NLM_F_CREATE should be set when creating new route [ 206.180823][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 207.113880][ T51] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 207.159800][ T117] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 207.252348][ T8250] xt_TCPMSS: Only works on TCP SYN packets [ 207.384466][ T117] usb 4-1: Using ep0 maxpacket: 32 [ 207.416489][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 207.469799][ T5861] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 207.522623][ T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 207.598224][ T117] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 207.634318][ T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.669367][ T117] usb 4-1: Product: syz [ 207.700884][ T117] usb 4-1: Manufacturer: syz [ 207.709699][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 207.788412][ T5861] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 207.796310][ T117] usb 4-1: SerialNumber: syz [ 207.803025][ T117] usb 4-1: config 0 descriptor?? [ 207.808228][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 207.844383][ T5861] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.857347][ T117] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.896898][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.958773][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.070298][ T5861] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 208.162053][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 208.298345][ T8265] @ÿ: renamed from bond_slave_0 (while UP) [ 208.600154][ T29] audit: type=1400 audit(1736082882.162:684): avc: denied { execmem } for pid=8240 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 208.611434][ T5861] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.726034][ T62] usb 4-1: Failed to submit usb control message: -71 [ 208.727468][ T117] usb 4-1: USB disconnect, device number 20 [ 208.734996][ T29] audit: type=1400 audit(1736082882.462:685): avc: denied { create } for pid=8266 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.769328][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 208.779476][ T62] usb 4-1: unable to send the bmi data to the device: -71 [ 208.823503][ T62] usb 4-1: unable to get target info from device [ 208.856109][ T62] usb 4-1: could not get target info (-71) [ 208.859960][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 208.871030][ T29] audit: type=1400 audit(1736082882.502:686): avc: denied { write } for pid=8266 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.895269][ T62] usb 4-1: could not probe fw (-71) [ 208.934439][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 208.966325][ T5861] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 209.008555][ T29] audit: type=1400 audit(1736082882.502:687): avc: denied { nlmsg_write } for pid=8266 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.036217][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 209.067378][ T5861] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.088494][ T29] audit: type=1400 audit(1736082882.822:688): avc: denied { write } for pid=8274 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.114995][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.140735][ T5861] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 209.155687][ T5861] usb 1-1: string descriptor 0 read error: -22 [ 209.162870][ T5861] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 209.172596][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.181775][ T29] audit: type=1400 audit(1736082882.922:689): avc: denied { read } for pid=8282 comm="syz.4.610" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 209.238263][ T5861] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 209.320589][ T29] audit: type=1400 audit(1736082883.062:690): avc: denied { search } for pid=5482 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=16983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 209.658979][ T8294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.843691][ T5133] block nbd2: Receive control failed (result -32) [ 209.844238][ T8279] block nbd2: shutting down sockets [ 209.859747][ T5861] usb 1-1: USB disconnect, device number 22 [ 210.310297][ T8307] kvm: emulating exchange as write [ 210.988493][ T29] audit: type=1400 audit(1736082884.722:691): avc: denied { setopt } for pid=8311 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 211.077265][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 211.100751][ T29] audit: type=1400 audit(1736082884.842:692): avc: denied { create } for pid=8311 comm="syz.1.616" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.689763][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.943932][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 211.954582][ T29] audit: type=1400 audit(1736082885.692:693): avc: denied { bind } for pid=8349 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.982005][ T5861] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.998519][ T5861] usb 3-1: config 7 interface 0 has no altsetting 0 [ 212.019013][ T5861] usb 3-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=bc.45 [ 212.043576][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.082188][ T5861] usb 3-1: Product: syz [ 212.096565][ T5861] usb 3-1: Manufacturer: syz [ 212.115964][ T5861] usb 3-1: SerialNumber: syz [ 212.378986][ T8148] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 212.672850][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.791522][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.837885][ T8331] Illegal XDP return value 4294967294 on prog (id 122) dev N/A, expect packet loss! [ 212.878632][ T8148] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.669652][ T8148] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.678553][ T8148] usb 1-1: config 1 has no interface number 0 [ 213.687283][ T8148] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.702273][ T8148] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.719952][ T8148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.749612][ T8148] usb 1-1: Product: syz [ 213.753818][ T8148] usb 1-1: Manufacturer: syz [ 213.759334][ T8148] usb 1-1: SerialNumber: syz [ 213.820931][ T5861] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 213.835321][ T8148] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 213.852824][ T8148] cdc_ncm 1-1:1.1: bind() failure [ 213.920393][ T5861] pwc: Failed to set LED on/off time (-71) [ 213.939068][ T5861] pwc: send_video_command error -71 [ 213.949713][ T5845] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.964996][ T5861] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 213.978675][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 213.990009][ T5861] Philips webcam 3-1:7.0: probe with driver Philips webcam failed with error -71 [ 214.007084][ T29] audit: type=1400 audit(1736082887.742:694): avc: denied { sys_chroot } for pid=8378 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 214.028189][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.049749][ T5861] usb 3-1: USB disconnect, device number 24 [ 214.094368][ T29] audit: type=1400 audit(1736082887.742:695): avc: denied { setgid } for pid=8378 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 214.109641][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 214.133263][ T29] audit: type=1400 audit(1736082887.742:696): avc: denied { setrlimit } for pid=8378 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 214.158106][ T5845] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 214.175806][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.199024][ T5845] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.216080][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.227463][ T8148] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 214.238897][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.255868][ T5845] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 214.266166][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.277830][ T5845] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.290031][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.301446][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.314051][ T5845] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 214.327819][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.349541][ T5845] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.370087][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.382362][ T5976] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.400166][ T5845] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.411586][ T8148] usb 4-1: Using ep0 maxpacket: 16 [ 214.424467][ T8148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.437535][ T8148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.448055][ T5845] usb 2-1: string descriptor 0 read error: -22 [ 214.460538][ T5845] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 214.473392][ T8148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.488634][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.510624][ T5845] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 214.522512][ T8148] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.544564][ T5976] usb 5-1: Using ep0 maxpacket: 16 [ 214.601020][ T5976] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 214.669660][ T8148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.703389][ T5976] usb 5-1: config 0 has no interface number 0 [ 214.712248][ T5976] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.750331][ T8148] usb 4-1: config 0 descriptor?? [ 214.760702][ T5861] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 214.767779][ T5976] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.954270][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.959647][ T5976] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 214.976148][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.994311][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 215.002550][ T5976] usb 5-1: Product: syz [ 215.003050][ T5861] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 215.006743][ T5976] usb 5-1: SerialNumber: syz [ 215.025648][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.066736][ T5861] usb 3-1: config 0 descriptor?? [ 215.091591][ T5976] usb 5-1: config 0 descriptor?? [ 215.100295][ T51] usb 2-1: USB disconnect, device number 21 [ 215.122294][ T5976] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 215.164563][ T5976] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 215.226775][ T5976] ------------[ cut here ]------------ [ 215.232715][ T5976] URB ffff888033a41600 submitted while active [ 215.250184][ T29] audit: type=1400 audit(1736082888.992:697): avc: denied { append } for pid=8382 comm="syz.3.632" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.252955][ T5976] WARNING: CPU: 0 PID: 5976 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 215.283359][ T5976] Modules linked in: [ 215.287268][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: kworker/0:5 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 215.298168][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.305936][ T29] audit: type=1400 audit(1736082888.992:698): avc: denied { map } for pid=8382 comm="syz.3.632" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.308286][ T5976] Workqueue: usb_hub_wq hub_event [ 215.331565][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.342685][ T5976] [ 215.345008][ T5976] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 215.350701][ T5976] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 0e e0 ae fa c6 05 68 b5 5c 09 01 90 48 c7 c7 60 20 2e 8c 48 89 de e8 87 19 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 215.370688][ T5976] RSP: 0018:ffffc9000438ef10 EFLAGS: 00010286 [ 215.376776][ T5976] RAX: 0000000000000000 RBX: ffff888033a41600 RCX: ffffc9001b801000 [ 215.384960][ T5976] RDX: 0000000000100000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 215.392997][ T5976] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 215.397333][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.401012][ T5976] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888036352810 [ 215.401030][ T5976] R13: ffff8880363528a0 R14: ffff888036352850 R15: 0000000000000000 [ 215.401044][ T5976] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 215.401065][ T5976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.401079][ T5976] CR2: 000000110c3479e6 CR3: 0000000024f62000 CR4: 00000000003526f0 [ 215.401091][ T5976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.401104][ T5976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.401123][ T5976] Call Trace: [ 215.401131][ T5976] [ 215.410525][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.417431][ T5976] ? __warn+0xea/0x3c0 [ 215.483337][ T5976] ? usb_submit_urb+0x14da/0x1730 [ 215.488392][ T5976] ? report_bug+0x3c0/0x580 [ 215.492967][ T5976] ? handle_bug+0x54/0xa0 [ 215.497321][ T5976] ? exc_invalid_op+0x17/0x50 [ 215.502043][ T5976] ? asm_exc_invalid_op+0x1a/0x20 [ 215.507090][ T5976] ? __warn_printk+0x1a6/0x350 [ 215.511896][ T5976] ? usb_submit_urb+0x14da/0x1730 [ 215.516938][ T5976] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 215.522841][ T5976] cm109_input_open+0x271/0x480 [ 215.527702][ T5976] input_open_device+0x22c/0x390 [ 215.532673][ T5976] ? __pfx_cm109_input_open+0x10/0x10 [ 215.538061][ T5976] kbd_connect+0x103/0x160 [ 215.542528][ T5976] input_attach_handler.isra.0+0x181/0x260 [ 215.548356][ T5976] input_register_device+0xa84/0x1110 [ 215.553797][ T5976] cm109_usb_probe+0x122f/0x17c0 [ 215.558023][ T5861] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 215.558743][ T5976] usb_probe_interface+0x300/0x9c0 [ 215.558777][ T5976] ? __pfx_usb_probe_interface+0x10/0x10 [ 215.576772][ T5976] really_probe+0x23e/0xa90 [ 215.581317][ T5976] __driver_probe_device+0x1de/0x440 [ 215.583508][ T5861] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 215.586605][ T5976] driver_probe_device+0x4c/0x1b0 [ 215.586636][ T5976] __device_attach_driver+0x1df/0x310 [ 215.604020][ T5976] ? __pfx___device_attach_driver+0x10/0x10 [ 215.609968][ T5976] bus_for_each_drv+0x157/0x1e0 [ 215.614804][ T5976] ? __pfx_bus_for_each_drv+0x10/0x10 [ 215.620271][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.625476][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 215.631332][ T5976] __device_attach+0x1e8/0x4b0 [ 215.636112][ T5976] ? __pfx___device_attach+0x10/0x10 [ 215.641440][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 215.646657][ T5976] bus_probe_device+0x17f/0x1c0 [ 215.651544][ T5976] device_add+0x114b/0x1a70 [ 215.656047][ T5976] ? __pfx_device_add+0x10/0x10 [ 215.660911][ T5976] ? mark_held_locks+0x9f/0xe0 [ 215.665674][ T5976] usb_set_configuration+0x10cb/0x1c50 [ 215.671322][ T5976] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 215.677416][ T5976] usb_generic_driver_probe+0xb1/0x110 [ 215.683126][ T5976] usb_probe_device+0xec/0x3e0 [ 215.687888][ T5976] ? __pfx_usb_probe_device+0x10/0x10 [ 215.693302][ T5976] really_probe+0x23e/0xa90 [ 215.697801][ T5976] __driver_probe_device+0x1de/0x440 [ 215.703089][ T5976] ? usb_driver_applicable+0x1c7/0x220 [ 215.708549][ T5976] driver_probe_device+0x4c/0x1b0 [ 215.713611][ T5976] __device_attach_driver+0x1df/0x310 [ 215.718979][ T5976] ? __pfx___device_attach_driver+0x10/0x10 [ 215.724893][ T5976] bus_for_each_drv+0x157/0x1e0 [ 215.729847][ T5976] ? __pfx_bus_for_each_drv+0x10/0x10 [ 215.735204][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.740419][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 215.746221][ T5976] __device_attach+0x1e8/0x4b0 [ 215.751041][ T5976] ? __pfx___device_attach+0x10/0x10 [ 215.756333][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 215.761560][ T5976] bus_probe_device+0x17f/0x1c0 [ 215.766422][ T5976] device_add+0x114b/0x1a70 [ 215.770951][ T5976] ? __pfx_device_add+0x10/0x10 [ 215.775951][ T5976] ? add_device_randomness+0xb8/0xf0 [ 215.781394][ T5976] usb_new_device+0xd90/0x1a10 [ 215.786159][ T5976] ? __pfx_usb_new_device+0x10/0x10 [ 215.791462][ T5976] hub_event+0x2d9a/0x4e10 [ 215.795920][ T5976] ? __pfx_hub_event+0x10/0x10 [ 215.800729][ T5976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 215.806379][ T5976] ? rcu_is_watching+0x12/0xc0 [ 215.811227][ T5976] ? trace_lock_acquire+0x14e/0x1f0 [ 215.814409][ T5861] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 215.816431][ T5976] ? process_one_work+0x921/0x1ba0 [ 215.816460][ T5976] ? lock_acquire+0x2f/0xb0 [ 215.816480][ T5976] ? process_one_work+0x921/0x1ba0 [ 215.834744][ T5861] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 215.838153][ T5976] process_one_work+0x9c5/0x1ba0 [ 215.838198][ T5976] ? __pfx_hcd_resume_work+0x10/0x10 [ 215.845879][ T29] audit: type=1400 audit(1736082888.992:699): avc: denied { execute } for pid=8382 comm="syz.3.632" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.850095][ T5976] ? __pfx_process_one_work+0x10/0x10 [ 215.856942][ T29] audit: type=1400 audit(1736082889.232:700): avc: denied { accept } for pid=8382 comm="syz.3.632" lport=35594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.879054][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.879274][ T5976] ? rcu_is_watching+0x12/0xc0 [ 215.879318][ T5976] ? assign_work+0x1a0/0x250 [ 215.879344][ T5976] worker_thread+0x6c8/0xf00 [ 215.879375][ T5976] ? __kthread_parkme+0x148/0x220 [ 215.899649][ T5861] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 215.905246][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 215.942343][ T5976] kthread+0x2c1/0x3a0 [ 215.946432][ T5976] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.951668][ T5976] ? __pfx_kthread+0x10/0x10 [ 215.956280][ T5976] ret_from_fork+0x45/0x80 [ 215.960737][ T5976] ? __pfx_kthread+0x10/0x10 [ 215.965332][ T5976] ret_from_fork_asm+0x1a/0x30 [ 215.970145][ T5976] [ 215.973172][ T5976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.980444][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: kworker/0:5 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 215.991245][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.001302][ T5976] Workqueue: usb_hub_wq hub_event [ 216.006318][ T5976] Call Trace: [ 216.009583][ T5976] [ 216.012504][ T5976] dump_stack_lvl+0x3d/0x1f0 [ 216.017094][ T5976] panic+0x71d/0x800 [ 216.020973][ T5976] ? __pfx_panic+0x10/0x10 [ 216.025381][ T5976] ? show_trace_log_lvl+0x29d/0x3d0 [ 216.030567][ T5976] ? usb_submit_urb+0x14da/0x1730 [ 216.035587][ T5976] check_panic_on_warn+0xab/0xb0 [ 216.040508][ T5976] __warn+0xf6/0x3c0 [ 216.044398][ T5976] ? usb_submit_urb+0x14da/0x1730 [ 216.049412][ T5976] report_bug+0x3c0/0x580 [ 216.053744][ T5976] handle_bug+0x54/0xa0 [ 216.057904][ T5976] exc_invalid_op+0x17/0x50 [ 216.062411][ T5976] asm_exc_invalid_op+0x1a/0x20 [ 216.067248][ T5976] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 216.072874][ T5976] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 0e e0 ae fa c6 05 68 b5 5c 09 01 90 48 c7 c7 60 20 2e 8c 48 89 de e8 87 19 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 216.092472][ T5976] RSP: 0018:ffffc9000438ef10 EFLAGS: 00010286 [ 216.098530][ T5976] RAX: 0000000000000000 RBX: ffff888033a41600 RCX: ffffc9001b801000 [ 216.106496][ T5976] RDX: 0000000000100000 RSI: ffffffff815a5146 RDI: 0000000000000001 [ 216.114454][ T5976] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 216.122406][ T5976] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888036352810 [ 216.130359][ T5976] R13: ffff8880363528a0 R14: ffff888036352850 R15: 0000000000000000 [ 216.138313][ T5976] ? __warn_printk+0x1a6/0x350 [ 216.143087][ T5976] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 216.148886][ T5976] cm109_input_open+0x271/0x480 [ 216.153733][ T5976] input_open_device+0x22c/0x390 [ 216.158646][ T5976] ? __pfx_cm109_input_open+0x10/0x10 [ 216.163995][ T5976] kbd_connect+0x103/0x160 [ 216.168393][ T5976] input_attach_handler.isra.0+0x181/0x260 [ 216.174203][ T5976] input_register_device+0xa84/0x1110 [ 216.179568][ T5976] cm109_usb_probe+0x122f/0x17c0 [ 216.184506][ T5976] usb_probe_interface+0x300/0x9c0 [ 216.189611][ T5976] ? __pfx_usb_probe_interface+0x10/0x10 [ 216.195243][ T5976] really_probe+0x23e/0xa90 [ 216.199752][ T5976] __driver_probe_device+0x1de/0x440 [ 216.205043][ T5976] driver_probe_device+0x4c/0x1b0 [ 216.210059][ T5976] __device_attach_driver+0x1df/0x310 [ 216.215445][ T5976] ? __pfx___device_attach_driver+0x10/0x10 [ 216.221342][ T5976] bus_for_each_drv+0x157/0x1e0 [ 216.226187][ T5976] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.231564][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.236763][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.242576][ T5976] __device_attach+0x1e8/0x4b0 [ 216.247340][ T5976] ? __pfx___device_attach+0x10/0x10 [ 216.252703][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 216.257894][ T5976] bus_probe_device+0x17f/0x1c0 [ 216.262735][ T5976] device_add+0x114b/0x1a70 [ 216.267247][ T5976] ? __pfx_device_add+0x10/0x10 [ 216.272081][ T5976] ? mark_held_locks+0x9f/0xe0 [ 216.276839][ T5976] usb_set_configuration+0x10cb/0x1c50 [ 216.282322][ T5976] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 216.288408][ T5976] usb_generic_driver_probe+0xb1/0x110 [ 216.293861][ T5976] usb_probe_device+0xec/0x3e0 [ 216.298612][ T5976] ? __pfx_usb_probe_device+0x10/0x10 [ 216.303973][ T5976] really_probe+0x23e/0xa90 [ 216.308485][ T5976] __driver_probe_device+0x1de/0x440 [ 216.313763][ T5976] ? usb_driver_applicable+0x1c7/0x220 [ 216.319209][ T5976] driver_probe_device+0x4c/0x1b0 [ 216.324231][ T5976] __device_attach_driver+0x1df/0x310 [ 216.329603][ T5976] ? __pfx___device_attach_driver+0x10/0x10 [ 216.335500][ T5976] bus_for_each_drv+0x157/0x1e0 [ 216.340364][ T5976] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.345745][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.350960][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.356778][ T5976] __device_attach+0x1e8/0x4b0 [ 216.361555][ T5976] ? __pfx___device_attach+0x10/0x10 [ 216.366826][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 216.372040][ T5976] bus_probe_device+0x17f/0x1c0 [ 216.376890][ T5976] device_add+0x114b/0x1a70 [ 216.381405][ T5976] ? __pfx_device_add+0x10/0x10 [ 216.386255][ T5976] ? add_device_randomness+0xb8/0xf0 [ 216.391535][ T5976] usb_new_device+0xd90/0x1a10 [ 216.396296][ T5976] ? __pfx_usb_new_device+0x10/0x10 [ 216.401494][ T5976] hub_event+0x2d9a/0x4e10 [ 216.405911][ T5976] ? __pfx_hub_event+0x10/0x10 [ 216.410656][ T5976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 216.416273][ T5976] ? rcu_is_watching+0x12/0xc0 [ 216.421026][ T5976] ? trace_lock_acquire+0x14e/0x1f0 [ 216.426222][ T5976] ? process_one_work+0x921/0x1ba0 [ 216.431333][ T5976] ? lock_acquire+0x2f/0xb0 [ 216.435827][ T5976] ? process_one_work+0x921/0x1ba0 [ 216.440922][ T5976] process_one_work+0x9c5/0x1ba0 [ 216.445839][ T5976] ? __pfx_hcd_resume_work+0x10/0x10 [ 216.451115][ T5976] ? __pfx_process_one_work+0x10/0x10 [ 216.456502][ T5976] ? rcu_is_watching+0x12/0xc0 [ 216.461281][ T5976] ? assign_work+0x1a0/0x250 [ 216.465870][ T5976] worker_thread+0x6c8/0xf00 [ 216.470464][ T5976] ? __kthread_parkme+0x148/0x220 [ 216.475481][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 216.480576][ T5976] kthread+0x2c1/0x3a0 [ 216.484630][ T5976] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.489821][ T5976] ? __pfx_kthread+0x10/0x10 [ 216.494408][ T5976] ret_from_fork+0x45/0x80 [ 216.498821][ T5976] ? __pfx_kthread+0x10/0x10 [ 216.503408][ T5976] ret_from_fork_asm+0x1a/0x30 [ 216.508181][ T5976] [ 216.511483][ T5976] Kernel Offset: disabled [ 216.515851][ T5976] Rebooting in 86400 seconds..