last executing test programs: 14.381372981s ago: executing program 3 (id=1116): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x7fff, 0x20000000, 0x0, 'queue0\x00', 0x5}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000002f6c100000004d2a2ca76331b74997e1b726df2453f45f4b68b931cd7dd1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x48) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x12, &(0x7f00000000c0)=0x7f, 0x4) 10.345846716s ago: executing program 0 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18394e49032b742c00009a0000000000850000006d0000009500"/36], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1bf1f0ad0feba606, 0x0) (async, rerun: 32) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1, 0x0) (async) recvmmsg(r7, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f00000014c0)=""/111, 0x6f}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x45, 0x40002002, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) (async) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) getpid() 10.207172343s ago: executing program 0 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCFLSH(r1, 0x540b, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) (async) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x3}}, 0x2e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) 9.86183894s ago: executing program 0 (id=1129): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x48004) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = accept4$netrom(r0, &(0x7f0000000340)={{0x3, @null}, [@bcast, @bcast, @rose, @netrom, @default, @remote, @rose]}, &(0x7f00000001c0)=0x48, 0x800) fcntl$setstatus(r4, 0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$snddsp(r0, &(0x7f00000001c0), 0x0) keyctl$setperm(0x5, 0x0, 0x30925) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d00000040000180060001000a000000"], 0x54}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000015c0)={&(0x7f0000001580)=[{0x1, 0x4200, 0x0, 0x0}, {0x1ff, 0xa800, 0x0, 0x0}], 0x2}) 9.376611194s ago: executing program 3 (id=1132): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@authinfo={0x12}], 0x18, 0xc010}], 0x1, 0x20040080) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r1, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) (async) writev(r1, &(0x7f0000003800)=[{&(0x7f0000000400)="2cacbf38", 0x4}], 0x1) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0xfffffffe, 0x1500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3, 0xc, 0x4}, 0xc) 8.21779751s ago: executing program 3 (id=1134): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x1}, 0x94) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000700), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000740)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x0, 0x2}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r6, 0x0, 0x100000000000000}, 0x38) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0xa500, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r8, 0x0, 0x160) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r11, &(0x7f0000000080)=[{&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000200)=""/247, 0xf7}], 0x2, 0xa2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ldst={0x1, 0x2, 0x6, 0x0, 0x9, 0x100}, @call={0x85, 0x0, 0x0, 0x56}, @jmp={0x5, 0x1, 0x4, 0x8, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x2, 0xa, 0xb, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xcd}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xf, 0x1, 0x0, r3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x47, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x4, 0x55700000, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r6, r7, r8, r9, r10, r11, 0xffffffffffffffff, r12, 0xffffffffffffffff, r13], &(0x7f00000005c0)=[{0x0, 0x2, 0x8, 0xc}, {0x0, 0x3, 0xd, 0x7}], 0x10, 0x1}, 0x94) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) 8.105541386s ago: executing program 2 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000200)=0x18d1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) symlink(&(0x7f0000000100)='./file2\x00', &(0x7f00000001c0)='./file0/file0\x00') chdir(&(0x7f0000000240)='./file3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740)="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", 0x124) r3 = gettid() tkill(r3, 0x12) process_vm_writev(r3, &(0x7f0000000600)=[{&(0x7f0000000400)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001a40)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}], 0x3, 0x0) 7.520566233s ago: executing program 2 (id=1137): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x65) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x0) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x7, &(0x7f0000000000)=[{0x80, 0xe1, 0x3, 0x5}, {0x2, 0x7, 0x10, 0x7fffffff}, {0x2, 0xcb, 0x9, 0x70ee}, {0x1, 0x3, 0x4, 0x6}, {0x700, 0xc, 0x26, 0xd}, {0xfff, 0x7, 0x4, 0x6}, {0x8000, 0x40, 0x3, 0x1}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x74}}, 0x0) brk(0x9) 6.911901939s ago: executing program 2 (id=1139): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) munlockall() (async) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x21, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x21, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000696000/0x12000)=nil, 0x12000, 0x2000001, 0x10, r4, 0x8000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40101, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x4827, 0x8b16}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x4827, 0x8b16}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xe5cc, 0x3}}, './file0\x00'}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000300)={0x0, 0x11, 0xd1, {0xd1, 0x24, "351bca8bfd1669d9ff9780a7047e48108cec3bf3effba7aa3d51200ed64cc7d30c150ad145387d2c4980aa36660938c159343c538842611d85d0005ad31983869b2f7a3c6683170ca2cb73adb0170cce7018467ae79ed96098fb3d694e7b7c69355e247d6b33651f9be4bf21faa7a9e66ca37cb6f9f2f10eb415291bc2c24564cc4bf8c8b58921983085ad78a5201025c346498f7f75f79a0580ab833c2706ff9c8662c9c1e43eff8d2f747ae1c5e446c2c2a5c46fb670b79ac4fc21095057ae8cde595906c244c86557d08a611e6a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0xc, 0xce, "db4789d8bf4ba2e8f62fd0b8270bcfb645547604c7019e3ee214dc4af96410c497c6200381ecfe6ad6d5e1ddb6bfbc6428bef80dfb52147917dcf328ef819dd6be200d998dc9010066b4cfafcd5f618f41cdb5163594ded5cd179b936f7ddbcdd887a1948c9db86e2fd074a4014972abc2a5c97f1c792c3d3d41e08a408136c23202bf167ea7ecc9322da77251131b1ae46eec9ef3b095d33ff734cdad3331e9e29135e94efab13014233a7de9f34dfbe687d3c060cf4cd9606951b1e9a454832a099d7682bbdf0d5ee7364c9975"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0xc0, 0x5, 0x1, "d7"}, &(0x7f0000000580)}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400af60000001d"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400af60000001d"], 0x0, 0x0}) 6.705649811s ago: executing program 2 (id=1140): r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x3, 'syz1\x00', 0x7}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x52) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x21) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mmap(&(0x7f0000422000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32], 0x3c}}, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x40000, 0x180) 6.435754004s ago: executing program 1 (id=1143): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x3, 0x4, 0xa018, 0x0, {}, {0x2, 0xc, 0x7, 0x3, 0x9, 0x1b, "3cdab13e"}, 0x6, 0x2, {&(0x7f0000000440)=[{0xc, 0x8001, {&(0x7f00000001c0)}, 0x60}, {0x3, 0x5, {&(0x7f0000000400)}, 0x100}]}, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5, @ANYRES16=r7], 0x4c}}, 0x40000) r8 = socket(0x10, 0x803, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x40000000, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f00000002c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6c02b4b136c7717d4cd4a102b896a537051c0b24c52d112a6e7fa13cc2cb9e08f2c2d3e4ef87caeaa36e18b5ee8839f52d3d40a7f5a1a5ddc17ff43dc73c98e9ba5fc84fc4df0a136d92121a7c496afd107615008161a0e69d204dfb2d04fd1b105d47e7e0271387d9461ae034cb12ccf36cd6de89b70c21e783c744e68056d562c2e2cec875a777c007dadec89b0d498c84bd7b3fca30303f77c5f08b39e7a763d035789a0cfbd9183976c52df65635e5849187036badb58ef9988aeec36d13365f6484", 0xc4}, {&(0x7f0000000580)="97cbee8c8a273e7fc4fa6f99845cf579936cae39b3641017a380cee57462d3aaecbbb857dce5ab27f5939459bb51692ffd35d5da781883c4abf295206e72ba9b703a2b6d542bfffd08edea2fe453e223dc5388ac94ec16373c30dfd12ae7dfb7be3af44038f55e9d17a4c64391090dd69bc5cfd546a5fbf0338b072a70c570eef278a65297c91f0ffe725f50dc773cf5520aacab4fe0c0ab6e4725645dd9f3782f557eeb211b540646bd4e68cb4aaedcf98390c40b1606a5d0c3f7ed2986de4a5f449107ea2e43f97b763fd7b1a22df0c2bfa7244f542b", 0xd7}], 0x2}, 0x20044000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x1493cf2c54a75087, 0xac}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094) 5.562302849s ago: executing program 3 (id=1144): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="1201bf1a98bfd52382530a213ae998b5864c4499031f5a98c30000ec13b2106d04f308280b010203010902480001000000", @ANYRES8=r3, @ANYRES64=r0], 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000001030000000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000000028005000100"/79], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r7 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) 5.562032295s ago: executing program 4 (id=1145): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000001000000070000000b00000000000000", @ANYRES32, @ANYBLOB="0039cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='status\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 5.464451573s ago: executing program 1 (id=1146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0x9}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xd, 0x6, 0xff, 0xfd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9], 0x0, [0x7f, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x20, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r7}, 0x18) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) 4.741606206s ago: executing program 0 (id=1147): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc3b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b010403"], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x60dd9000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x60dd9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x40}}, 0x0) r3 = syz_io_uring_setup(0x9dc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0x6}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x0, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x7f, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x8, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0xc}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0x6}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x0, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x7f, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfb}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x8, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0xc}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x7f, 0x1, 0x1, 0x0, 0x0, 0x2, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0xb, 0x90, 0xd}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x7f, 0x1, 0x1, 0x0, 0x0, 0x2, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0xb, 0x90, 0xd}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd_index=0x8, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="001804"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="410f040000004a1d1714"], 0x0, 0x0, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)={0x20, 0x3, 0x1, 0x68}}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) munlockall() (async) munlockall() 4.468800224s ago: executing program 4 (id=1148): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd08, 0x1, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.088355295s ago: executing program 2 (id=1149): socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[{}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_emit_vhci(0x0, 0x0) 3.926079442s ago: executing program 4 (id=1150): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002692f17200000000000000007030109022c00010106800709040d09058d10642404a40109050d0cff0303600e080b1c4502b46a9d000000000000d84993"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(r0, 0x5, &(0x7f0000000000)={0xfffffffffffffff0, 0x7c1}, 0x0) 3.826378868s ago: executing program 1 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006e80)="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", 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x80800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, r4, 0x65364000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000a00)=""/4092, 0xffc}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000001b00)=""/166, 0xa6}], 0x6}, 0xfffffffe}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/151, 0x97}, {}, {&(0x7f0000002c80)=""/142, 0x8e}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/201, 0xc9}], 0x6, &(0x7f0000000640)=""/133, 0x85}, 0x4}, {{&(0x7f0000002dc0)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/219, 0xdb}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000003e40)=""/212, 0xd4}], 0x4, &(0x7f0000004040)=""/251, 0xfb}, 0xa}], 0x3, 0x20023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x1e, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f0000977000/0x3000)=nil, 0x9, 0x0, 0x0, 0x1c, 0x46, 0x4, 0x0, 0x67}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340)={{0x0, @private=0xa010102, 0x4c64, 0x4, 'nq\x00', 0x8, 0x8001, 0x44}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x6, 0x3, 0x3fd}}, 0x44) sendmsg(r6, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) socket$netlink(0x10, 0x3, 0xb) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @empty, 0x1000}, 0x1c) recvmmsg(r3, &(0x7f0000000000), 0x0, 0x2000, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) 3.474124498s ago: executing program 0 (id=1152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socket$inet(0xa, 0x801, 0x84) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.105864131s ago: executing program 4 (id=1153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.979330639s ago: executing program 2 (id=1154): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x5411, &(0x7f0000000180)={0xfa, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') read$FUSE(r2, &(0x7f0000001880)={0x2020}, 0x2020) r3 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) read$char_usb(r4, &(0x7f00000002c0)=""/151, 0x97) syz_usb_disconnect(r3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000080)={0x4, 0x0, 0x1, 0x7}) 2.364285756s ago: executing program 3 (id=1155): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 32) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) (async, rerun: 32) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='team_slave_1\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.205396798s ago: executing program 4 (id=1156): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x3, 0x4, 0xa018, 0x0, {}, {0x2, 0xc, 0x7, 0x3, 0x9, 0x1b, "3cdab13e"}, 0x6, 0x2, {&(0x7f0000000440)=[{0xc, 0x8001, {&(0x7f00000001c0)}, 0x60}, {0x3, 0x5, {&(0x7f0000000400)}, 0x100}]}, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5, @ANYRES16=r7], 0x4c}}, 0x40000) r8 = socket(0x10, 0x803, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x40000000, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f00000002c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6c02b4b136c7717d4cd4a102b896a537051c0b24c52d112a6e7fa13cc2cb9e08f2c2d3e4ef87caeaa36e18b5ee8839f52d3d40a7f5a1a5ddc17ff43dc73c98e9ba5fc84fc4df0a136d92121a7c496afd107615008161a0e69d204dfb2d04fd1b105d47e7e0271387d9461ae034cb12ccf36cd6de89b70c21e783c744e68056d562c2e2cec875a777c007dadec89b0d498c84bd7b3fca30303f77c5f08b39e7a763d035789a0cfbd9183976c52df65635e5849187036badb58ef9988aeec36d13365f6484", 0xc4}, {&(0x7f0000000580)="97cbee8c8a273e7fc4fa6f99845cf579936cae39b3641017a380cee57462d3aaecbbb857dce5ab27f5939459bb51692ffd35d5da781883c4abf295206e72ba9b703a2b6d542bfffd08edea2fe453e223dc5388ac94ec16373c30dfd12ae7dfb7be3af44038f55e9d17a4c64391090dd69bc5cfd546a5fbf0338b072a70c570eef278a65297c91f0ffe725f50dc773cf5520aacab4fe0c0ab6e4725645dd9f3782f557eeb211b540646bd4e68cb4aaedcf98390c40b1606a5d0c3f7ed2986de4a5f449107ea2e43f97b763fd7b1a22df0c2bfa7244f542b", 0xd7}], 0x2}, 0x20044000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x1493cf2c54a75087, 0xac}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094) 1.420841373s ago: executing program 1 (id=1157): r0 = socket(0x2, 0x2, 0x1) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008880) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'rr\x00', 0xa, 0x3, 0x43}, 0x2c) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="38000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) 1.256692847s ago: executing program 4 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0x182, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x170, 0x2, 0x1, 0x57, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "548ffa59"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x27d, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x30}, [@mdlm_detail={0x2b, 0x24, 0x13, 0xf6, "91feba709c9dbdda23ef9b88149d5ae50585ca59876c6e1d051ea5b8c8d2ac575bb660795efa8d"}, @mdlm_detail={0x68, 0x24, 0x13, 0x7, "39a98579f86f05b90d91b030986196aba70f14bbd6c325815cc20a9d90daa824b20cf3ab548ef7db374df58f0b4ef760f25426a4a7734b9b377ac8d280e5a226a049d357f81d56dfdea30e535c9db334fe0c6086d78d8aa1a051c9573cdca3f8af68b082"}, @mdlm_detail={0x65, 0x24, 0x13, 0x4, "7dbbb724818e6c34bde4fe56610b06fad182bb87bb40e3b1cdaf46defcf7c24c33c6c268466b0c18494052f9f020588b483353d849dca066aba81a0b988d690d9cd10b3cbcff18e553d2de4fea99052bc0364a4187f1dbff795d66a378833c9053"}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x3, 0x4, 0xb, 0x6, 0x33}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xc, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x8e, 0x9}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0xc, 0x0, 0xff, 0x1}, 0x2a, &(0x7f0000000100)={0x5, 0xf, 0x2a, 0x3, [@generic={0xa, 0x10, 0x3, "1593dfb7641d7c"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "724fd6982d05e6282a7d58cacb6dbe4c"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x9}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io(r1, &(0x7f0000000940)={0x2c, &(0x7f00000005c0)={0x20, 0xa, 0xe0, {0xe0, 0x23, "c06ee6d86a3d9727ad0f652a79c831964c4d9d394b0f11d4d5dc6b6ceeea314acd88dc1d2a595047d13277a5c652b91376c263b386fcfdc03423f184ded94d83f753590686c9f93e5cbc55c60d97859368cc5ab43e3c6e9ba4b47987fa91f9cf0d2ddc4ac67f3120b08e1810f97ce33633dbe517498c4b16775b2a98ac8458fc555cca7940adee58d6b22b9f7be351096fca2c10bf18a1038e4e913a61db2425ace81cc238818dca29f740155a6f04e20fce629b43e55acd4ed0e4fcdbbb511614745af77ed16921d6939c6b71f0b8c553b304e31616f649e3c93d61f0fd"}}, &(0x7f00000006c0)={0x0, 0x3, 0xce, @string={0xce, 0x3, "0820f3af517bce41d25302c997ff05ee5103c3fbd8608459dca4f3fea003087683a3a2507915f5c14af38d03d668e4ef75459efa7c26037170317399b451d409de1dfdddc11ab4d8622f3a1df80d35cf472943a3919aca2398fe519bed674f0b4054eda7a6db40bc7eeeeb751e8f3410581f6b1dcb1daca7efcb3958bcdea9544b8f3eb5cc01482dfdc48be42254119fd032b730090c5f52d76553b2152ade7f8d8410673890dfffbd51ea568ea89bf91bd64a7638abb8930d4271c0b58f3275eaf0e4b23189259dd03bcf90"}}, &(0x7f0000000840)={0x0, 0xf, 0x5a, {0x5, 0xf, 0x5a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "63825a4ec96ca752499c8292094bf554"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8a172ed055b7eacf07273c03f9bd8a8c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0xd7, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x9, 0xf78f, 0x1000, [0xfffedf, 0xff3fcf, 0x30, 0xf, 0x0]}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x4, 0x4, "ff013c84", "1e6728d8"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x2a, 0x7f, 0x9, 0x6, 0xfbff}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x18, 0x42, "60b6ad024f6e871e5c47b98e29af83f1de94b2f9ee34e4a1d9107a8103253b9b2c67c061ca5970d09a3cd977f16814b9d52b90944dda67eee88a73f44a3d48de972b"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "ab58"}, 0xfffffffffffffffc, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9b651b4b8998"}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c40)={0x40, 0x19, 0x2, 'gL'}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x37b5}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) close_range(r3, r4, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x119, 0x1b, 0x0, &(0x7f0000000200)) connect$unix(r5, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) fanotify_init(0x10, 0x101000) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090300000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.202917365s ago: executing program 0 (id=1159): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000004000/0x3000)=nil, 0x3000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000200)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000340)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18r\x8e\x9a\xc8\xb09Bl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j\x03\\\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8Nt\xf0\x9fV\xf3\x03XV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?IO\xdf\x14+\xcd\xe66\x0f\xb6\xb1$i\x11\xde\xa7w\xf9}\a\xdd6}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x13\xe1\x05\xd8]\"\xeaD%\xc5\r', 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 1.113699591s ago: executing program 1 (id=1160): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{&(0x7f00000022c0)=@nfc_llcp, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=""/57}, 0x6}, {{&(0x7f00000025c0)=@generic, 0xffffffffffffffc0, &(0x7f00000029c0)=[{&(0x7f0000002640)=""/214}, {&(0x7f0000002740)=""/127}, {&(0x7f00000028c0)=""/227}], 0x0, &(0x7f0000002800)=""/3}}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRES64=r7, @ANYRESOCT=r2, @ANYRESHEX=r7]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6577206c656661756c74207573b997c8113de165723a28797a203030c7c89c1ae68860303130303030300029683d30"], 0x2a, 0x0) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) 546.367268ms ago: executing program 3 (id=1161): r0 = semget$private(0x0, 0x6, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x8, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000480)) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) read$msr(r1, &(0x7f0000000100)=""/231, 0xe7) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) shmdt(0x0) 0s ago: executing program 1 (id=1162): creat(&(0x7f0000000100)='./file0\x00', 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) kernel console output (not intermixed with test programs): 831932][ T8018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.475'. [ 242.841478][ T8011] vhci_hcd vhci_hcd.0: Device attached [ 242.861843][ T8014] vhci_hcd: connection closed [ 242.870334][ T6550] vhci_hcd: stop threads [ 242.909844][ T6550] vhci_hcd: release socket [ 242.935675][ T6550] vhci_hcd: disconnect device [ 242.995367][ T5910] vhci_hcd: vhci_device speed not set [ 243.119925][ T8026] warning: `syz.2.479' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 243.844827][ T30] audit: type=1400 audit(1757519171.564:479): avc: denied { listen } for pid=8024 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.003970][ T30] audit: type=1400 audit(1757519172.464:480): avc: denied { mount } for pid=8033 comm="syz.1.482" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 246.254862][ T30] audit: type=1400 audit(1757519174.714:481): avc: denied { getopt } for pid=8061 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 247.085537][ T30] audit: type=1800 audit(1757519175.544:482): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.494" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 247.134732][ T8079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.493'. [ 247.170794][ T25] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 247.595888][ T30] audit: type=1400 audit(1757519176.064:483): avc: denied { ioctl } for pid=8080 comm="syz.0.495" path="socket:[16195]" dev="sockfs" ino=16195 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.640698][ T8088] netlink: 'syz.1.497': attribute type 4 has an invalid length. [ 247.694492][ T8091] netlink: 'syz.1.497': attribute type 4 has an invalid length. [ 249.278674][ T8111] overlayfs: failed to resolve './bus': -2 [ 249.680136][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 249.846913][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.864241][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.909251][ T9] usb 2-1: Product: syz [ 249.929379][ T9] usb 2-1: Manufacturer: syz [ 249.940889][ T9] usb 2-1: SerialNumber: syz [ 251.235481][ T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 251.241933][ T9] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 251.449384][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.463374][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.999081][ T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 252.088165][ T8155] binder: 8151:8155 ioctl c018620c 200000000240 returned -1 [ 252.115454][ T8155] loop4: detected capacity change from 0 to 2560 [ 252.331568][ T8155] buffer_io_error: 310 callbacks suppressed [ 252.331632][ T8155] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 252.348527][ T8155] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 252.358027][ T8155] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 252.371369][ T8155] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 252.380775][ T8155] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 252.389845][ T8155] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 252.400969][ T5982] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 252.403434][ T8155] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 252.420437][ T8155] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 252.432075][ T8155] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 252.632102][ T9] usb 2-1: USB disconnect, device number 22 [ 252.652322][ T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 253.589229][ T8166] delete_channel: no stack [ 255.443819][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.450217][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.361155][ T8207] binder: 8203:8207 ioctl c018620c 200000000240 returned -1 [ 256.431398][ T8207] loop4: detected capacity change from 0 to 2560 [ 258.161462][ T30] audit: type=1400 audit(1757519186.624:484): avc: denied { ioctl } for pid=8229 comm="syz.0.532" path="socket:[17131]" dev="sockfs" ino=17131 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.735494][ T8248] overlayfs: invalid redirect ((null)) [ 259.816405][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 259.847748][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 259.865553][ T30] audit: type=1400 audit(1757519188.274:485): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.881429][ T8258] netlink: 'syz.4.539': attribute type 19 has an invalid length. [ 259.934918][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 260.052058][ T30] audit: type=1326 audit(1757519188.314:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6563b8eba9 code=0x7fc00000 [ 260.075294][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.093238][ T30] audit: type=1326 audit(1757519188.334:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.4.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6563b8eba9 code=0x7fc00000 [ 261.414489][ T30] audit: type=1400 audit(1757519189.764:488): avc: denied { create } for pid=8278 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 261.488680][ T30] audit: type=1400 audit(1757519189.954:489): avc: denied { append } for pid=8278 comm="syz.0.543" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.500590][ T8282] tmpfs: Unknown parameter 'usrquo' [ 261.573492][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 261.807943][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 261.818874][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 261.852191][ T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 261.861642][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.901887][ T24] usb 4-1: Product: syz [ 261.916110][ T24] usb 4-1: Manufacturer: syz [ 261.929681][ T24] usb 4-1: SerialNumber: syz [ 261.940832][ T24] usb 4-1: config 0 descriptor?? [ 261.950559][ T8280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 261.960096][ T8280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.205951][ T8280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.222101][ T8280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.561730][ T30] audit: type=1400 audit(1757519191.024:490): avc: denied { ioctl } for pid=8294 comm="syz.0.547" path="socket:[17496]" dev="sockfs" ino=17496 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 262.649256][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 262.820957][ T8304] vivid-000: ================= START STATUS ================= [ 262.828984][ T8304] vivid-000: Radio HW Seek Mode: Bounded [ 262.835712][ T8304] vivid-000: Radio Programmable HW Seek: false [ 262.841978][ T8304] vivid-000: RDS Rx I/O Mode: Block I/O [ 262.850655][ T8304] vivid-000: Generate RBDS Instead of RDS: false [ 262.859298][ T8304] vivid-000: RDS Reception: true [ 262.863279][ T5934] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 262.866120][ T8304] vivid-000: RDS Program Type: 0 inactive [ 262.886239][ T8304] vivid-000: RDS PS Name: inactive [ 262.893608][ T8304] vivid-000: RDS Radio Text: inactive [ 262.912808][ T8304] vivid-000: RDS Traffic Announcement: false inactive [ 262.920902][ T8304] vivid-000: RDS Traffic Program: false inactive [ 262.931559][ T8304] vivid-000: RDS Music: false inactive [ 262.949246][ T8304] vivid-000: ================== END STATUS ================== [ 263.050508][ T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 263.063563][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 263.098128][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.130400][ T24] usb 4-1: USB disconnect, device number 12 [ 263.161575][ T5934] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.196655][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.231767][ T5934] usb 2-1: config 0 descriptor?? [ 263.424310][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 263.472409][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 263.484059][ T8308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.539762][ T8309] geneve2: entered promiscuous mode [ 263.546215][ T8309] geneve2: entered allmulticast mode [ 263.563720][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 263.691975][ T5934] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 263.697551][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 263.739669][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.778615][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.792867][ T8317] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 263.809604][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.607597][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.617324][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.792048][ T9] usb 1-1: config 0 descriptor?? [ 265.007947][ T5934] usb 2-1: USB disconnect, device number 23 [ 265.021830][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 265.352838][ T9] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 265.393905][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 266.239391][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'. [ 266.423303][ T30] audit: type=1400 audit(1757519194.874:491): avc: denied { write } for pid=8335 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.535573][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 266.953617][ T5934] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 266.981077][ T24] usb 1-1: USB disconnect, device number 12 [ 267.213494][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 267.225152][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.239464][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.250344][ T5934] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.260526][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.278365][ T5934] usb 4-1: config 0 descriptor?? [ 267.292312][ T5934] hub 4-1:0.0: USB hub found [ 267.377658][ T8362] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.385605][ T8362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.397307][ T8362] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.405380][ T8362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 267.478833][ T8361] loop7: detected capacity change from 0 to 7 [ 267.519434][ T5934] hub 4-1:0.0: 1 port detected [ 267.675511][ T5851] Dev loop7: unable to read RDB block 7 [ 267.687588][ T5851] loop7: unable to read partition table [ 267.695943][ T5851] loop7: partition table beyond EOD, truncated [ 267.702160][ T30] audit: type=1400 audit(1757519196.164:492): avc: denied { load_policy } for pid=8364 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 268.323224][ T5960] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 268.461807][ T8361] Dev loop7: unable to read RDB block 7 [ 268.502277][ T8361] loop7: unable to read partition table [ 268.554048][ T8361] loop7: partition table beyond EOD, truncated [ 268.580814][ T8361] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 268.631441][ T5960] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 268.646398][ T5960] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 268.769278][ T8381] binder: 8378:8381 ioctl c018620c 200000000240 returned -1 [ 268.791573][ T8381] loop4: detected capacity change from 0 to 2560 [ 268.830848][ T8381] buffer_io_error: 635 callbacks suppressed [ 268.830868][ T8381] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 268.845939][ T8381] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 268.855241][ T8381] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 268.864288][ T8381] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 268.901889][ T8381] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 268.904035][ T5851] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 268.912680][ T8381] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 268.929792][ T8381] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 268.941028][ T8381] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 268.950273][ T8381] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 268.969539][ T5960] usb 3-1: config 0 has no interface number 0 [ 269.235363][ T10] usb 4-1: USB disconnect, device number 13 [ 269.235726][ T5960] usb 3-1: config 0 interface 135 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 269.251604][ T5934] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 269.331603][ T5960] usb 3-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.468667][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 269.505670][ T5960] usb 3-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00 [ 269.544081][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.613404][ T5960] usb 3-1: Product: syz [ 269.621839][ T5960] usb 3-1: Manufacturer: syz [ 269.631960][ T5960] usb 3-1: SerialNumber: syz [ 269.645553][ T5960] usb 3-1: config 0 descriptor?? [ 269.665467][ T5960] usb-storage 3-1:0.135: USB Mass Storage device detected [ 269.673366][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.706977][ T5960] usb-storage 3-1:0.135: Quirks match for vid 0482 pid 0101: 8 [ 269.853759][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 269.860934][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.878370][ T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 269.891118][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 269.913304][ T10] usb 4-1: config 4 has no interface number 0 [ 269.929762][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 269.947878][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.978469][ T5960] usb 3-1: USB disconnect, device number 26 [ 269.979249][ T10] usb 4-1: Product: syz [ 269.991226][ T10] usb 4-1: Manufacturer: syz [ 270.001775][ T10] usb 4-1: SerialNumber: syz [ 270.183269][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.286143][ T10] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 270.294629][ T10] usb 4-1: No valid video chain found. [ 270.321131][ T10] usb 4-1: USB disconnect, device number 14 [ 270.343658][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 270.350684][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.367070][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.387353][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.396952][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.407845][ T9] usb 1-1: Product: syz [ 270.412137][ T9] usb 1-1: Manufacturer: syz [ 270.418064][ T9] usb 1-1: SerialNumber: syz [ 270.426287][ T9] usb 1-1: config 0 descriptor?? [ 270.436424][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.448290][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 271.173259][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 271.301414][ T9] em28xx 1-1:0.0: chip ID is em28178 [ 271.475235][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 271.484541][ T10] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 271.492935][ T10] usb 3-1: config 0 has no interface number 0 [ 271.507233][ T5930] usb 1-1: USB disconnect, device number 13 [ 271.514780][ T5930] em28xx 1-1:0.0: Disconnecting em28xx [ 271.525068][ T8410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 271.530344][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 271.531594][ T8410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.548134][ T8410] vhci_hcd vhci_hcd.0: Device attached [ 271.749084][ T5960] vhci_hcd: vhci_device speed not set [ 272.022847][ T5930] em28xx 1-1:0.0: Freeing device [ 272.032308][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.043088][ T10] usb 3-1: Product: syz [ 272.049592][ T10] usb 3-1: Manufacturer: syz [ 272.055325][ T10] usb 3-1: SerialNumber: syz [ 272.062658][ T10] usb 3-1: config 0 descriptor?? [ 272.071434][ T10] usb 3-1: bad CDC descriptors [ 272.133266][ T5960] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 272.248777][ T8413] vhci_hcd: connection closed [ 272.250340][ T6551] vhci_hcd: stop threads [ 272.264964][ T6551] vhci_hcd: release socket [ 272.312573][ T6551] vhci_hcd: disconnect device [ 272.323066][ T5960] usb 39-1: enqueue for inactive port 0 [ 272.968575][ T5960] vhci_hcd: vhci_device speed not set [ 273.430908][ T8427] binder: 8425:8427 ioctl c018620c 200000000240 returned -1 [ 273.486518][ T8427] loop4: detected capacity change from 0 to 2560 [ 273.761956][ T8431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.833893][ T8427] buffer_io_error: 400 callbacks suppressed [ 273.833921][ T8427] Buffer I/O error on dev loop4, logical block 85, lost async page write [ 273.861974][ T8427] Buffer I/O error on dev loop4, logical block 86, lost async page write [ 273.879473][ T8427] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 273.893779][ T8427] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 273.914890][ T8427] Buffer I/O error on dev loop4, logical block 89, lost async page write [ 273.933741][ T8427] Buffer I/O error on dev loop4, logical block 90, lost async page write [ 273.956791][ T8427] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 273.975631][ T8427] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 273.997310][ T8427] Buffer I/O error on dev loop4, logical block 93, lost async page write [ 274.030385][ T5960] usb 3-1: USB disconnect, device number 27 [ 274.054784][ T8427] Buffer I/O error on dev loop4, logical block 94, lost async page write [ 274.718563][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 274.729077][ T8447] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.584'. [ 274.763978][ T8447] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 275.110915][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.126835][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.156075][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 275.218532][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.235911][ T10] usb 3-1: config 0 descriptor?? [ 275.478855][ T8442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.528590][ T8442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.583877][ T8442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.612974][ T8442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.659005][ T8458] fuse: Bad value for 'fd' [ 275.669145][ T8442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.243545][ T10] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -22 [ 276.699820][ T10] uclogic 0003:256C:006D.0007: failed probing parameters: -22 [ 276.707507][ T10] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -22 [ 276.733228][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.157237][ T30] audit: type=1400 audit(1757519205.624:493): avc: denied { write } for pid=8471 comm="syz.3.589" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 277.750971][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.762536][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.770664][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.777030][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.853339][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 279.608469][ T5970] usb 3-1: USB disconnect, device number 28 [ 280.194605][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.261095][ T8518] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 280.683296][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 280.684271][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.599'. [ 280.789555][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 280.801547][ T8525] tipc: Started in network mode [ 280.809144][ T8525] tipc: Node identity caf8c6abf39f, cluster identity 4711 [ 280.828111][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.835117][ T8525] tipc: Enabled bearer , priority 0 [ 280.852975][ T10] usb 2-1: Product: syz [ 280.868678][ T10] usb 2-1: Manufacturer: syz [ 280.873836][ T8529] syzkaller0: entered promiscuous mode [ 280.883950][ T8529] syzkaller0: entered allmulticast mode [ 281.114824][ T10] usb 2-1: SerialNumber: syz [ 281.387279][ T10] usb 2-1: config 0 descriptor?? [ 281.409022][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 281.431504][ T10] usb 2-1: Detected FT232H [ 281.610538][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 281.631353][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 281.651311][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 281.668961][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 281.672080][ T8546] Bluetooth: MGMT ver 1.23 [ 281.844469][ T10] usb 2-1: USB disconnect, device number 24 [ 282.061616][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 282.174973][ T24] tipc: Node number set to 963102379 [ 282.202550][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 282.219938][ T10] ftdi_sio 2-1:0.0: device disconnected [ 283.026396][ T30] audit: type=1400 audit(1757519211.054:494): avc: denied { mounton } for pid=8556 comm="syz.2.608" path="/proc/453/cgroup" dev="proc" ino=18745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 283.153454][ T5960] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 283.400848][ T5960] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 283.410706][ T5960] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.479307][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.537007][ T5960] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.583442][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 283.699794][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.715854][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.836854][ T5960] usb 3-1: Product: syz [ 283.845898][ T5960] usb 3-1: Manufacturer: syz [ 283.858344][ T5960] usb 3-1: SerialNumber: syz [ 283.869684][ T5960] usb 3-1: config 0 descriptor?? [ 283.877803][ T5960] hub 3-1:0.0: bad descriptor, ignoring hub [ 283.884023][ T5960] hub 3-1:0.0: probe with driver hub failed with error -5 [ 283.900594][ T8581] ip6gre1: entered allmulticast mode [ 283.920337][ T5960] usb 3-1: selecting invalid altsetting 0 [ 284.344406][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.353002][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.184960][ T10] usb 3-1: USB disconnect, device number 29 [ 285.810582][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 286.167689][ T8604] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.188942][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 286.218250][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.224269][ T24] IPVS: starting estimator thread 0... [ 286.238131][ T10] usb 3-1: config 0 has no interface number 0 [ 286.307704][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 286.341346][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.343239][ T8607] IPVS: using max 36 ests per chain, 86400 per kthread [ 286.349903][ T10] usb 3-1: Product: syz [ 286.360734][ T10] usb 3-1: Manufacturer: syz [ 286.370662][ T10] usb 3-1: SerialNumber: syz [ 286.524073][ T10] usb 3-1: config 0 descriptor?? [ 287.460895][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 287.524273][ T10] usb 3-1: selecting invalid altsetting 1 [ 287.559201][ T30] audit: type=1400 audit(1757519216.024:495): avc: denied { write } for pid=8616 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.559603][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 287.901537][ T8618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 288.018208][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.232791][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 288.243039][ T10] usb 3-1: media controller created [ 288.268015][ T30] audit: type=1400 audit(1757519216.734:496): avc: denied { module_request } for pid=8625 comm="syz.0.627" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.270411][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.346716][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 288.995402][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 289.029643][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 289.066059][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 289.134389][ T8640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.628'. [ 289.182452][ T30] audit: type=1400 audit(1757519217.624:497): avc: denied { accept } for pid=8637 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 289.259793][ T10] usb 3-1: USB disconnect, device number 30 [ 289.315226][ T30] audit: type=1400 audit(1757519217.774:498): avc: denied { ioctl } for pid=8644 comm="syz.4.630" path="socket:[18868]" dev="sockfs" ino=18868 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.479506][ T8651] 9pnet_fd: Insufficient options for proto=fd [ 292.704252][ T30] audit: type=1400 audit(1757519221.164:499): avc: denied { listen } for pid=8693 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.729003][ T8699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8699 comm=syz.2.643 [ 293.013271][ T30] audit: type=1400 audit(1757519221.464:500): avc: denied { map } for pid=8693 comm="syz.3.641" path="socket:[19636]" dev="sockfs" ino=19636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.797282][ T30] audit: type=1400 audit(1757519221.464:501): avc: denied { read } for pid=8693 comm="syz.3.641" path="socket:[19636]" dev="sockfs" ino=19636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 293.936108][ T30] audit: type=1400 audit(1757519221.504:502): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 295.119524][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 295.273947][ T10] usb 4-1: device descriptor read/64, error -71 [ 295.608234][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 295.951271][ T30] audit: type=1400 audit(1757519224.364:503): avc: denied { ioctl } for pid=8736 comm="syz.0.651" path="socket:[19712]" dev="sockfs" ino=19712 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 297.237798][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 297.387634][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 299.373822][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 299.385921][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 299.772429][ T8770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.814537][ T8770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.820731][ T8770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.828346][ T8770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.834746][ T8770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.193444][ T5960] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 300.367137][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 300.383097][ T5960] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 300.393788][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.401789][ T5960] usb 1-1: Product: syz [ 300.406092][ T5960] usb 1-1: Manufacturer: syz [ 300.410686][ T5960] usb 1-1: SerialNumber: syz [ 300.417721][ T5960] usb 1-1: config 0 descriptor?? [ 300.425289][ T5960] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 300.483692][ T5970] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 300.562168][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.571899][ T5931] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 300.854190][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 301.002557][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 301.010119][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.021668][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.032015][ T5931] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 301.040515][ T5970] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 301.050267][ T5931] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 301.059239][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 301.068376][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.110730][ T5931] usb 2-1: config 1 has no interface number 0 [ 301.126639][ T5970] usb 3-1: config 0 descriptor?? [ 301.133841][ T5931] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 301.166181][ T5931] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 301.179206][ T5931] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 301.188527][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.232029][ T5931] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 301.835949][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.842247][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.842333][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.867427][ T5931] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 301.893463][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 301.906232][ T5970] usbhid 3-1:0.0: can't add hid device: -71 [ 301.912242][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.923209][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.932719][ T30] audit: type=1400 audit(1757519230.374:504): avc: denied { read write } for pid=8801 comm="syz.2.666" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.969612][ T30] audit: type=1400 audit(1757519230.374:505): avc: denied { open } for pid=8801 comm="syz.2.666" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 302.031746][ T8820] input: syz0 as /devices/virtual/input/input15 [ 302.106715][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 302.120416][ T5970] usb 3-1: USB disconnect, device number 31 [ 302.196156][ T5930] usb 2-1: USB disconnect, device number 25 [ 302.223824][ T5930] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 302.325997][ T5931] usb 1-1: USB disconnect, device number 14 [ 302.654002][ T5970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 303.173275][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 303.187455][ T5970] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 303.320019][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.368640][ T5970] usb 4-1: config 0 descriptor?? [ 303.487046][ T5970] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 303.599099][ T8844] netlink: 5 bytes leftover after parsing attributes in process `syz.4.677'. [ 303.619643][ T5970] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 303.628685][ T8844] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 303.773324][ T5960] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 303.833943][ T8844] 0ªX¹¦D: entered allmulticast mode [ 303.839271][ T8844] veth0_macvtap: entered allmulticast mode [ 303.845700][ T8844] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 304.023353][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 304.055419][ T5960] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 304.133415][ T5960] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 304.160469][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.922640][ T5960] usb 2-1: string descriptor 0 read error: -71 [ 304.930081][ T5960] hub 2-1:32.0: bad descriptor, ignoring hub [ 304.936410][ T5960] hub 2-1:32.0: probe with driver hub failed with error -5 [ 304.993590][ T5960] usb 2-1: USB disconnect, device number 26 [ 305.083679][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 305.441105][ T5931] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 305.449496][ T5931] usb 1-1: config 0 has no interface number 0 [ 305.455804][ T5931] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 305.511272][ T5931] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.620891][ T5931] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 305.640145][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.661189][ T5931] usb 1-1: Product: syz [ 305.895953][ T5931] usb 1-1: Manufacturer: syz [ 305.911304][ T5931] usb 1-1: SerialNumber: syz [ 305.936365][ T5931] usb 1-1: config 0 descriptor?? [ 305.944077][ T8859] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 305.954003][ T5931] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 305.967343][ T5931] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 307.403966][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 307.421634][ T5931] usb 4-1: USB disconnect, device number 17 [ 308.001909][ T5930] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.364057][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 308.377001][ T5930] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 308.413174][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.433984][ T5930] usb 2-1: Product: syz [ 308.438330][ T5930] usb 2-1: Manufacturer: syz [ 308.490230][ T5930] usb 2-1: SerialNumber: syz [ 308.508740][ T5930] usb 2-1: config 0 descriptor?? [ 308.653353][ T5910] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 308.719860][ T5970] usb 1-1: USB disconnect, device number 15 [ 308.734953][ T5970] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 308.747380][ T5970] cyberjack 1-1:0.69: device disconnected [ 308.813459][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 308.825954][ T5910] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 308.859219][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.890216][ T5910] usb 4-1: config 0 descriptor?? [ 308.908545][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 308.935616][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.684'. [ 309.154095][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.162620][ T5930] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 309.174944][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.176886][ T5930] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 309.206456][ T5930] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 309.208636][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.340482][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 309.357006][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.469702][ T5910] usb 4-1: string descriptor 0 read error: -71 [ 309.514188][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 309.515033][ T5930] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 309.683102][ T5930] usb 2-1: USB disconnect, device number 27 [ 309.710831][ T5910] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 309.788776][ T5910] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 309.788805][ T30] audit: type=1400 audit(1757519238.254:506): avc: denied { firmware_load } for pid=5910 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 312.744019][ T30] audit: type=1400 audit(1757519241.174:507): avc: denied { ioctl } for pid=8948 comm="syz.0.701" path="socket:[19266]" dev="sockfs" ino=19266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.968392][ T30] audit: type=1400 audit(1757519241.434:508): avc: denied { bind } for pid=8945 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.422079][ T30] audit: type=1400 audit(1757519241.434:509): avc: denied { listen } for pid=8945 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.556465][ T8959] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 313.579154][ T30] audit: type=1400 audit(1757519241.434:510): avc: denied { accept } for pid=8945 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.614789][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 313.884007][ T30] audit: type=1400 audit(1757519242.324:511): avc: denied { setopt } for pid=8956 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.948252][ T8969] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 313.999469][ T8969] SELinux: failed to load policy [ 316.288571][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 316.979110][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.993259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.053709][ T9011] binder: 8996:9011 ioctl c018620c 200000000240 returned -1 [ 317.227552][ T9001] loop4: detected capacity change from 0 to 2560 [ 317.335967][ T9001] buffer_io_error: 225 callbacks suppressed [ 317.336000][ T9001] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 317.354726][ T9001] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 317.363373][ T9001] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 317.372233][ T9001] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 317.385894][ T9001] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 317.398650][ T9001] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 317.409127][ T9001] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 317.418173][ T9001] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 317.427440][ T9001] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 317.440824][ T9001] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 318.094278][ T30] audit: type=1400 audit(1757519246.504:512): avc: denied { mount } for pid=9013 comm="syz.1.715" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 318.647911][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 318.713478][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 328.144049][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.189566][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 328.379365][ T9057] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 328.423775][ T9057] netlink: 244 bytes leftover after parsing attributes in process `syz.0.727'. [ 329.100281][ T30] audit: type=1400 audit(1757519257.564:513): avc: denied { ioctl } for pid=9069 comm="syz.4.732" path="socket:[20520]" dev="sockfs" ino=20520 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 329.205175][ T9056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.220120][ T9056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.228835][ T9056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.236577][ T9056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.242668][ T9056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.503614][ T5970] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 329.675309][ T5970] usb 3-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 329.719396][ T5970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.746348][ T5970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.758286][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.787409][ T9081] 9pnet: Could not find request transport: ì± [ 329.823204][ T5970] usb 3-1: Product: syz [ 329.838163][ T5970] usb 3-1: Manufacturer: syz [ 329.842790][ T5970] usb 3-1: SerialNumber: syz [ 329.865743][ T9083] 9pnet_fd: Insufficient options for proto=fd [ 330.634301][ T5970] usb 3-1: unknown interface protocol 0x95, assuming v1 [ 330.642451][ T5970] usb 3-1: cannot find UAC_HEADER [ 330.669665][ T5970] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 330.691142][ T5970] usb 3-1: USB disconnect, device number 32 [ 330.728656][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.795680][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 330.997599][ T30] audit: type=1400 audit(1757519259.414:514): avc: denied { setopt } for pid=9089 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 331.273190][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.279528][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.281426][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.316211][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.461493][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 331.793308][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 331.870181][ T30] audit: type=1400 audit(1757519260.334:515): avc: denied { ioctl } for pid=9108 comm="syz.2.743" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.991448][ T9111] ======================================================= [ 331.991448][ T9111] WARNING: The mand mount option has been deprecated and [ 331.991448][ T9111] and is ignored by this kernel. Remove the mand [ 331.991448][ T9111] option from the mount to silence this warning. [ 331.991448][ T9111] ======================================================= [ 332.092073][ T9112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9112 comm=syz.2.743 [ 332.124036][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 332.135626][ T5934] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 332.193859][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.206256][ T24] usb 1-1: config 0 has no interface number 0 [ 332.215894][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.227976][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.349782][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 332.360118][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.399088][ T24] usb 1-1: config 0 descriptor?? [ 332.424855][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 332.436463][ T5934] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 332.445549][ T5934] usb 2-1: config 0 has no interface number 0 [ 332.452572][ T5934] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.466948][ T5934] usb 2-1: config 0 interface 85 has no altsetting 0 [ 332.480469][ T5934] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 332.489883][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.502266][ T5934] usb 2-1: Product: syz [ 332.506991][ T5934] usb 2-1: Manufacturer: syz [ 332.511663][ T5934] usb 2-1: SerialNumber: syz [ 332.529186][ T5934] usb 2-1: config 0 descriptor?? [ 333.319575][ T5934] appletouch 2-1:0.85: Geyser mode initialized. [ 333.331092][ T5934] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input17 [ 333.393053][ T9115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.406189][ T9115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.427325][ T5934] usb 2-1: USB disconnect, device number 28 [ 333.436990][ T9115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.464098][ T9115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.539800][ T9115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.708173][ T5934] appletouch 2-1:0.85: input: appletouch disconnected [ 334.085206][ T9135] vcan0: entered allmulticast mode [ 334.090786][ T9135] vcan0: left allmulticast mode [ 334.633290][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.752176][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 335.063200][ T30] audit: type=1400 audit(1757519263.394:516): avc: denied { read } for pid=9142 comm="syz.1.751" dev="sockfs" ino=21654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.087014][ T30] audit: type=1400 audit(1757519263.414:517): avc: denied { watch watch_reads } for pid=9142 comm="syz.1.751" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 335.287637][ T9147] 9pnet_fd: Insufficient options for proto=fd [ 335.433706][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.523471][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.523468][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.603485][ T24] usbhid 1-1:0.1: can't add hid device: -71 [ 335.607969][ T5931] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 335.609484][ T24] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 335.627964][ T24] usb 1-1: USB disconnect, device number 16 [ 335.634860][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 335.793235][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 335.800091][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 335.822416][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 335.843442][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 335.869702][ T5931] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 335.878950][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.898127][ T5931] usb 2-1: Product: syz [ 335.910725][ T5931] usb 2-1: Manufacturer: syz [ 335.923656][ T5931] usb 2-1: SerialNumber: syz [ 335.932084][ T5931] usb 2-1: config 0 descriptor?? [ 335.951531][ T5931] appledisplay 2-1:0.0: Submitting URB failed [ 335.960049][ T5931] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 335.996807][ T9165] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 337.028550][ T9175] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 337.035397][ T9175] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 337.043354][ T9175] 0ªî{X¹¦: entered promiscuous mode [ 337.049122][ T9175] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 337.055872][ T9175] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 337.070835][ T30] audit: type=1400 audit(1757519265.534:518): avc: denied { connect } for pid=9174 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.042724][ T9183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 338.049260][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.065886][ T9183] vhci_hcd vhci_hcd.0: Device attached [ 338.087306][ T9183] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 338.093847][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.102099][ T9183] vhci_hcd vhci_hcd.0: Device attached [ 338.243227][ T24] vhci_hcd: vhci_device speed not set [ 338.292080][ T5931] usb 2-1: USB disconnect, device number 29 [ 338.323355][ T24] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 338.364602][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 338.604423][ T9179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.616010][ T9179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.625259][ T9179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.632980][ T9179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.084787][ T9179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.949982][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.024855][ T9211] can0: slcan on ptm0. [ 340.634216][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.634305][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.640300][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.875884][ T9210] can0 (unregistered): slcan off ptm0. [ 341.077992][ T9186] vhci_hcd: connection closed [ 341.078691][ T3508] vhci_hcd: stop threads [ 341.092279][ T9184] vhci_hcd: connection reset by peer [ 341.113469][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.142488][ T3508] vhci_hcd: release socket [ 341.224802][ T3508] vhci_hcd: disconnect device [ 341.254601][ T3508] vhci_hcd: stop threads [ 341.275601][ T3508] vhci_hcd: release socket [ 341.298946][ T3508] vhci_hcd: disconnect device [ 341.716771][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 342.032774][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 343.499254][ T9265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.518928][ T9265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.545008][ T9265] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.567514][ T24] vhci_hcd: vhci_device speed not set [ 343.613855][ T9265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.626555][ T9265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 343.893188][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 344.144832][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.153641][ T44] usb 1-1: config 0 has no interface number 0 [ 344.171291][ T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 344.214863][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.251299][ T44] usb 1-1: Product: syz [ 344.263505][ T44] usb 1-1: Manufacturer: syz [ 344.282492][ T9297] syzkaller1: entered promiscuous mode [ 344.292583][ T44] usb 1-1: SerialNumber: syz [ 344.300741][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 344.304937][ T9297] syzkaller1: entered allmulticast mode [ 344.323256][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.324139][ T44] usb 1-1: config 0 descriptor?? [ 344.557262][ T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 344.686757][ T5934] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 344.697997][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.713018][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 344.723213][ T44] usb 1-1: media controller created [ 344.741068][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 344.749112][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.784586][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 344.865893][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.954613][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.027699][ T5934] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 345.066415][ T44] usb 1-1: USB disconnect, device number 17 [ 345.074348][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.127804][ T5934] usb 3-1: config 0 descriptor?? [ 345.593818][ T9319] : renamed from bridge_slave_0 (while UP) [ 345.603749][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 345.609773][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.776966][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 345.780825][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.925377][ T9338] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 348.158607][ T9340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=9340 comm=syz.1.794 [ 348.824901][ T9349] binder: 9347:9349 ioctl c018620c 200000000240 returned -1 [ 348.851804][ T9349] loop4: detected capacity change from 0 to 2560 [ 348.900259][ T9349] buffer_io_error: 315 callbacks suppressed [ 348.900296][ T9349] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 348.915298][ T9349] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 348.925362][ T9349] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 348.937253][ T9349] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 348.946553][ T9349] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 348.948623][ T5851] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 348.958304][ T9349] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 348.964137][ T5851] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 348.972203][ T9349] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 348.991111][ T9349] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 349.299862][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 349.332394][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.368000][ T9355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.798'. [ 349.423235][ T5934] usb 3-1: USB disconnect, device number 33 [ 350.593457][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 350.864184][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 350.902310][ T5934] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 351.145733][ T5934] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 351.266194][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.504331][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 351.516474][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 352.312396][ T5934] usb 2-1: string descriptor 0 read error: -71 [ 352.322814][ T5934] hub 2-1:32.0: bad descriptor, ignoring hub [ 352.337085][ T5934] hub 2-1:32.0: probe with driver hub failed with error -5 [ 352.409853][ T30] audit: type=1400 audit(1757519280.864:519): avc: denied { append } for pid=9380 comm="syz.2.805" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.473505][ T5934] usb 2-1: USB disconnect, device number 30 [ 354.218320][ T30] audit: type=1400 audit(1757519282.684:520): avc: denied { read } for pid=9408 comm="syz.0.815" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 354.246818][ T5846] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 354.314233][ T30] audit: type=1400 audit(1757519282.684:521): avc: denied { open } for pid=9408 comm="syz.0.815" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 354.341900][ T30] audit: type=1400 audit(1757519282.714:522): avc: denied { audit_write } for pid=9411 comm="syz.3.816" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 354.364502][ T5934] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 354.463277][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 354.629950][ T30] audit: type=1400 audit(1757519282.934:523): avc: denied { ioctl } for pid=9408 comm="syz.0.815" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 354.656309][ T5934] usb 2-1: no configurations [ 354.660917][ T5934] usb 2-1: can't read configurations, error -22 [ 354.683266][ T5846] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 354.703685][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.725723][ T5846] usb 3-1: config 0 descriptor?? [ 354.738641][ T5846] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 354.776237][ T9417] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 354.785421][ T9417] netlink: 144 bytes leftover after parsing attributes in process `syz.3.817'. [ 354.795675][ T5846] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 354.804832][ T9417] netlink: 'syz.3.817': attribute type 2 has an invalid length. [ 354.813568][ T9417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.817'. [ 354.843224][ T5934] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 355.055961][ T5934] usb 2-1: no configurations [ 355.060596][ T5934] usb 2-1: can't read configurations, error -22 [ 355.082059][ T5934] usb usb2-port1: attempt power cycle [ 355.116514][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 355.523253][ T5934] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 355.615082][ T5934] usb 2-1: no configurations [ 355.619839][ T5934] usb 2-1: can't read configurations, error -22 [ 355.897397][ T5934] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 355.924519][ T5934] usb 2-1: no configurations [ 355.929174][ T5934] usb 2-1: can't read configurations, error -22 [ 355.959881][ T5934] usb usb2-port1: unable to enumerate USB device [ 357.689401][ T30] audit: type=1400 audit(1757519286.134:524): avc: denied { watch } for pid=9442 comm="syz.4.822" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 357.895141][ T5970] usb 3-1: USB disconnect, device number 34 [ 358.498290][ T9460] 9pnet_fd: Insufficient options for proto=fd [ 358.775874][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 359.051489][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 359.396613][ T9475] binder: 9473:9475 ioctl c018620c 200000000240 returned -1 [ 359.425102][ T9475] loop4: detected capacity change from 0 to 2560 [ 359.437935][ T5851] buffer_io_error: 310 callbacks suppressed [ 359.437945][ T5851] Buffer I/O error on dev loop4, logical block 0, async page read [ 359.594291][ T9475] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 359.602752][ T9475] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 359.611175][ T9475] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 359.619615][ T9475] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 359.628031][ T9475] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 359.979473][ T9480] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 359.988896][ T9475] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 360.006544][ T9475] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 360.014936][ T9475] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 360.023355][ T9475] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 360.070941][ T30] audit: type=1400 audit(1757519287.894:525): avc: denied { read write } for pid=9473 comm="syz.2.831" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.313777][ T9488] TCP: TCP_TX_DELAY enabled [ 360.320039][ T30] audit: type=1400 audit(1757519287.894:526): avc: denied { open } for pid=9473 comm="syz.2.831" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 361.299321][ T30] audit: type=1400 audit(1757519289.134:527): avc: denied { ioctl } for pid=9486 comm="syz.1.834" path="socket:[21158]" dev="sockfs" ino=21158 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.793419][ T5846] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 363.944436][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 363.951581][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.968236][ T5846] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 364.496019][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.510081][ T5846] usb 1-1: config 0 descriptor?? [ 364.917298][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.940560][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.588957][ T5846] usbhid 1-1:0.0: can't add hid device: -71 [ 365.604059][ T5846] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 365.624047][ T5846] usb 1-1: USB disconnect, device number 18 [ 365.684741][ T30] audit: type=1400 audit(1757519294.154:528): avc: denied { map } for pid=9552 comm="syz.4.848" path="socket:[22409]" dev="sockfs" ino=22409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.711158][ T30] audit: type=1400 audit(1757519294.154:529): avc: denied { accept } for pid=9552 comm="syz.4.848" path="socket:[22409]" dev="sockfs" ino=22409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.258676][ T30] audit: type=1400 audit(1757519294.724:530): avc: denied { create } for pid=9557 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 366.346599][ T30] audit: type=1400 audit(1757519294.814:531): avc: denied { append } for pid=9557 comm="syz.2.850" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 367.861805][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.855'. [ 370.223824][ T30] audit: type=1400 audit(1757519298.674:532): avc: denied { write } for pid=9595 comm="syz.4.860" name="file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.356082][ T30] audit: type=1400 audit(1757519298.674:533): avc: denied { open } for pid=9595 comm="syz.4.860" path="/211/file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 370.464786][ T30] audit: type=1400 audit(1757519298.674:534): avc: denied { ioctl } for pid=9595 comm="syz.4.860" path="/211/file0" dev="tmpfs" ino=1160 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 371.313771][ T9605] program syz.3.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.367967][ T9605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.286772][ T30] audit: type=1400 audit(1757519300.454:535): avc: denied { map } for pid=9606 comm="syz.2.865" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 372.569928][ T30] audit: type=1400 audit(1757519300.454:536): avc: denied { execute } for pid=9606 comm="syz.2.865" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 373.417832][ T5910] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 373.453782][ T5910] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 374.490275][ T5910] usb 4-1: USB disconnect, device number 18 [ 374.668729][ T9638] bridge_slave_0: left allmulticast mode [ 374.675429][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.836196][ T9652] binder: 9646:9652 ioctl c018620c 200000000240 returned -1 [ 376.047293][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 378.320603][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.327497][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.893295][ T5970] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 381.075352][ T5970] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 381.102715][ T5970] usb 3-1: config 0 has no interface number 0 [ 381.110285][ T5970] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24 [ 381.127343][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.150032][ T5970] usb 3-1: config 0 descriptor?? [ 381.163189][ T5910] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 381.343282][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 381.368598][ T5910] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 381.380095][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.411196][ T5910] usb 4-1: config 0 descriptor?? [ 381.470348][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.489886][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.508492][ T5970] snd-usb-audio 3-1:0.227: probe with driver snd-usb-audio failed with error -71 [ 381.539390][ T5970] usb 3-1: USB disconnect, device number 35 [ 381.572623][ T5910] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 381.594838][ T5910] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 382.235651][ T30] audit: type=1400 audit(1757519310.694:537): avc: denied { listen } for pid=9712 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.606866][ T9736] netlink: 9 bytes leftover after parsing attributes in process `syz.2.894'. [ 383.643598][ T9736] gretap0: entered promiscuous mode [ 383.668986][ T9738] netlink: 5 bytes leftover after parsing attributes in process `syz.2.894'. [ 383.753809][ T9738] 0ªî{X¹¦: renamed from gretap0 [ 383.804551][ T9738] 0ªî{X¹¦: left promiscuous mode [ 383.850258][ T9738] 0ªî{X¹¦: entered allmulticast mode [ 383.901154][ T9740] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 383.909115][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.981698][ T5970] usb 4-1: USB disconnect, device number 19 [ 384.026691][ T9738] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 385.356381][ T9758] input: syz1 as /devices/virtual/input/input21 [ 385.445791][ T44] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 385.624542][ T44] usb 1-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 385.650310][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.787933][ T9761] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 385.794565][ T9761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.805959][ T9761] vhci_hcd vhci_hcd.0: Device attached [ 386.483660][ T5970] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 387.279025][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.288329][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.296373][ T44] usb 1-1: Product: syz [ 387.300577][ T44] usb 1-1: Manufacturer: syz [ 387.305213][ T44] usb 1-1: SerialNumber: syz [ 387.314920][ T9762] vhci_hcd: connection reset by peer [ 387.333577][ T6551] vhci_hcd: stop threads [ 387.338098][ T6551] vhci_hcd: release socket [ 387.344799][ T6551] vhci_hcd: disconnect device [ 387.616682][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.903'. [ 387.642583][ T30] audit: type=1400 audit(1757519316.104:538): avc: denied { shutdown } for pid=9768 comm="syz.3.903" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.700305][ T44] usb 1-1: unknown interface protocol 0x95, assuming v1 [ 387.708062][ T44] usb 1-1: cannot find UAC_HEADER [ 387.737081][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 387.748208][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 388.322135][ T30] audit: type=1400 audit(1757519316.584:539): avc: denied { mount } for pid=9768 comm="syz.3.903" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 388.761510][ T44] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 388.802613][ T44] usb 1-1: USB disconnect, device number 19 [ 388.876837][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.545773][ T30] audit: type=1400 audit(1757519319.014:540): avc: denied { write } for pid=9809 comm="syz.0.915" path="socket:[23747]" dev="sockfs" ino=23747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.687176][ T9813] Bluetooth: MGMT ver 1.23 [ 390.834375][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 391.613963][ T5970] vhci_hcd: vhci_device speed not set [ 391.772897][ T30] audit: type=1400 audit(1757519320.234:541): avc: denied { lock } for pid=9823 comm="syz.3.918" path="socket:[23017]" dev="sockfs" ino=23017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 391.873526][ T5846] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 392.033932][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 392.055137][ T5846] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 392.116286][ T5846] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 392.153962][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.661180][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 392.673339][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 393.546696][ T5846] usb 3-1: string descriptor 0 read error: -71 [ 393.582018][ T5846] hub 3-1:32.0: bad descriptor, ignoring hub [ 393.589292][ T5846] hub 3-1:32.0: probe with driver hub failed with error -5 [ 393.725275][ T5846] usb 3-1: USB disconnect, device number 36 [ 394.186499][ T5931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 394.254411][ T5970] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 394.343643][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 394.353933][ T5931] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 394.362217][ T5931] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 394.370846][ T5931] usb 4-1: config 0 has no interface number 0 [ 394.377737][ T5931] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.389816][ T5931] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 394.401843][ T5931] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 394.415460][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.427821][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 394.439147][ T5931] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 394.449833][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 394.458145][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.470984][ T5931] usb 4-1: Product: syz [ 394.478311][ T5931] usb 4-1: config 0 descriptor?? [ 394.484282][ T5970] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 394.498599][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.507725][ T9854] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 394.554450][ T5970] usb 1-1: config 0 descriptor?? [ 394.567542][ T9853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.745881][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 394.986656][ T30] audit: type=1400 audit(1757519323.294:542): avc: denied { connect } for pid=9868 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 395.219722][ T5931] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input23 [ 395.237100][ T5970] usbhid 1-1:0.0: can't add hid device: -71 [ 395.265116][ T5970] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 395.331535][ T5970] usb 1-1: USB disconnect, device number 20 [ 395.447184][ T5931] usb 4-1: USB disconnect, device number 20 [ 395.453143][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 395.869484][ T30] audit: type=1400 audit(1757519324.334:543): avc: denied { ioctl } for pid=9881 comm="syz.0.936" path="pid:[4026532785]" dev="nsfs" ino=4026532785 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.012178][ T9889] binder: 9885:9889 ioctl c018620c 200000000240 returned -1 [ 396.037443][ T9889] loop4: detected capacity change from 0 to 2560 [ 396.145624][ T9889] buffer_io_error: 311 callbacks suppressed [ 396.145659][ T9889] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 396.160459][ T9889] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 396.169970][ T9889] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 396.180706][ T9889] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 396.190044][ T9889] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 396.199389][ T9889] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 396.242587][ T9889] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 396.252242][ T9889] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 396.261666][ T9889] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 396.272395][ T9889] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 398.356654][ T30] audit: type=1400 audit(1757519326.824:544): avc: denied { write } for pid=9909 comm="syz.3.943" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 398.403726][ T30] audit: type=1400 audit(1757519326.824:545): avc: denied { open } for pid=9909 comm="syz.3.943" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 398.754240][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 398.763430][ T9918] chnl_net:caif_netlink_parms(): no params data found [ 399.494799][ T9928] bridge2: entered allmulticast mode [ 400.907790][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 401.879891][ T30] audit: type=1400 audit(1757519330.344:546): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 403.095059][ T30] audit: type=1400 audit(1757519331.514:547): avc: denied { setopt } for pid=9968 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 404.708853][ T30] audit: type=1326 audit(1757519333.164:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 404.741283][ T30] audit: type=1326 audit(1757519333.164:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 404.832421][ T9983] program syz.1.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.851294][ T30] audit: type=1326 audit(1757519333.164:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 404.900051][ T9983] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 404.912936][ T30] audit: type=1326 audit(1757519333.164:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 404.943416][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 405.042797][ T30] audit: type=1326 audit(1757519333.164:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 405.138295][ T30] audit: type=1326 audit(1757519333.164:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 405.167545][ T9986] netlink: 'syz.4.961': attribute type 13 has an invalid length. [ 405.168683][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 405.189252][ T30] audit: type=1326 audit(1757519333.164:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 405.242201][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 405.356967][ T44] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 405.376081][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.392990][ T44] usb 1-1: Product: syz [ 405.723552][ T44] usb 1-1: Manufacturer: syz [ 405.727200][ T30] audit: type=1326 audit(1757519333.164:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9975 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fea9f78eba9 code=0x7ffc0000 [ 405.728173][ T44] usb 1-1: SerialNumber: syz [ 406.041290][ T44] usb 1-1: config 0 descriptor?? [ 406.174061][ T9980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.174241][ T9980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.390714][ T9980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.459388][ T9980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.773624][ T5930] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 406.880878][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 406.933437][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 406.942235][T10013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.952198][ T5930] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 406.980447][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 407.004207][ T5930] usb 4-1: can't read configurations, error -61 [ 407.154075][ T5930] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 407.663426][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 407.911920][ T5930] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 408.229732][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.262379][ T5930] usb 4-1: can't read configurations, error -61 [ 408.292557][ T44] Error reading MAC address [ 408.296477][ T5930] usb usb4-port1: attempt power cycle [ 408.338896][ T44] usb 1-1: USB disconnect, device number 21 [ 408.753811][ T5930] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 408.784312][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 408.790244][ T5930] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 408.800206][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.813766][ T5930] usb 4-1: can't read configurations, error -61 [ 408.953885][ T5930] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 409.014928][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 409.028610][ T5930] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 409.051025][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 409.140136][ T5930] usb 4-1: can't read configurations, error -61 [ 409.147546][ T5930] usb usb4-port1: unable to enumerate USB device [ 409.322600][T10036] block nbd0: Attempted send on invalid socket [ 409.330791][T10036] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 409.365878][T10036] efs: cannot read volume header [ 409.883158][ T5930] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 410.195855][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.208933][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.232096][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.264597][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.283593][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.299861][ T5930] usb 4-1: config 0 descriptor?? [ 410.812439][ T5930] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 410.850962][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.858313][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.885106][ T5930] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 410.963357][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 411.802040][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.837993][ T5931] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 411.909415][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.945848][ T5931] usb 2-1: config 0 descriptor?? [ 412.073967][ T5970] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 412.102821][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.148056][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.244179][ T10] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 412.253003][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 412.277747][ T5970] usb 1-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 412.290334][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.301448][ T5970] usb 1-1: Product: syz [ 412.306293][ T5970] usb 1-1: Manufacturer: syz [ 412.311673][ T5970] usb 1-1: SerialNumber: syz [ 412.326619][ T5970] usb 1-1: config 0 descriptor?? [ 412.366657][ T5970] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 412.387361][T10053] : entered promiscuous mode [ 412.413410][T10055] netlink: 6 bytes leftover after parsing attributes in process `syz.4.980'. [ 412.413696][ T5931] lua 0003:1E7D:2C2E.0009: hidraw1: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 412.438510][T10055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.469866][ T3508] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.496921][ T3508] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.538489][ T3508] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.567583][ T3508] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.601062][ T3508] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.657806][ T3508] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.671728][ T5934] usb 2-1: USB disconnect, device number 35 [ 412.786062][T10086] binder: 10081:10086 ioctl c018620c 200000000240 returned -1 [ 412.878403][ T3508] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.032662][ T3508] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.042685][T10086] loop4: detected capacity change from 0 to 2560 [ 413.150698][ T5982] buffer_io_error: 315 callbacks suppressed [ 413.150716][ T5982] Buffer I/O error on dev loop4, logical block 0, async page read [ 413.152009][ T5970] gspca_sn9c20x: Write register 1001 failed -110 [ 413.171716][ T5970] gspca_sn9c20x: Device initialization failed [ 413.183602][ T5970] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 413.190285][ T5982] Buffer I/O error on dev loop4, logical block 0, async page read [ 413.212912][ T5982] Buffer I/O error on dev loop4, logical block 0, async page read [ 413.225489][ T5982] Buffer I/O error on dev loop4, logical block 0, async page read [ 413.372222][ T5982] Buffer I/O error on dev loop4, logical block 0, async page read [ 413.477965][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 413.532177][ T5930] usb 4-1: USB disconnect, device number 25 [ 413.635325][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 414.276330][ T5910] usb 1-1: USB disconnect, device number 22 [ 415.568281][T10126] netlink: 27 bytes leftover after parsing attributes in process `syz.0.995'. [ 415.884812][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 415.884823][ T30] audit: type=1400 audit(1757519344.354:615): avc: denied { map } for pid=10131 comm="syz.4.998" path="socket:[24646]" dev="sockfs" ino=24646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 415.918263][ T30] audit: type=1400 audit(1757519344.384:616): avc: denied { read accept } for pid=10131 comm="syz.4.998" path="socket:[24646]" dev="sockfs" ino=24646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 416.013579][ T5910] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 416.212667][ T5910] usb 2-1: config index 0 descriptor too short (expected 21266, got 18) [ 416.420070][ T5910] usb 2-1: config 255 has an invalid interface number: 225 but max is 0 [ 416.449308][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 416.493139][ T5910] usb 2-1: config 255 has no interface number 0 [ 416.521392][ T5910] usb 2-1: too many endpoints for config 255 interface 225 altsetting 132: 86, using maximum allowed: 30 [ 416.545452][ T5910] usb 2-1: config 255 interface 225 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 416.559438][ T5910] usb 2-1: config 255 interface 225 has no altsetting 0 [ 416.696872][ T5910] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.08 [ 416.707235][ T5910] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 416.718169][ T5910] usb 2-1: Product: syz [ 416.722451][ T5910] usb 2-1: Manufacturer: syz [ 416.727215][ T5910] usb 2-1: SerialNumber: syz [ 417.550114][T10130] 9pnet_fd: Insufficient options for proto=fd [ 417.651196][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 417.677595][ T5910] ch341 2-1:255.225: ch341-uart converter detected [ 417.793715][ T5934] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 418.561371][ T5910] usb 2-1: failed to receive control message: -71 [ 418.580537][ T5910] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 418.603007][ T5910] usb 2-1: USB disconnect, device number 36 [ 418.640684][ T5910] ch341 2-1:255.225: device disconnected [ 418.713436][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 418.736216][ T5934] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 418.765634][ T5934] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 418.784476][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.953584][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 419.363263][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 419.372314][ T10] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 419.383398][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 419.392101][ T10] usb 3-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 419.418225][ T5934] usb 1-1: string descriptor 0 read error: -71 [ 419.425088][ T5934] hub 1-1:32.0: bad descriptor, ignoring hub [ 419.436527][ T5934] hub 1-1:32.0: probe with driver hub failed with error -5 [ 419.439246][ T10] usb 3-1: config 0 has no interface number 0 [ 419.507053][ T10] usb 3-1: config 0 interface 5 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.521208][ T10] usb 3-1: config 0 interface 5 has no altsetting 0 [ 419.534314][ T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=1061, bcdDevice=f5.65 [ 419.544305][ T5934] usb 1-1: USB disconnect, device number 23 [ 419.560393][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.610603][ T10] usb 3-1: Product: syz [ 419.627086][ T10] usb 3-1: Manufacturer: syz [ 419.631705][ T10] usb 3-1: SerialNumber: syz [ 419.674575][ T10] usb 3-1: config 0 descriptor?? [ 419.693148][ T5910] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 419.854803][ T5910] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 419.869407][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.898397][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.903683][ T5910] usb 2-1: config 0 descriptor?? [ 419.920162][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.934222][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 419.958552][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.967339][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.075958][T10175] veth0: entered promiscuous mode [ 420.088174][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 420.196035][ T5934] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 420.280591][ T5910] usb 2-1: string descriptor 0 read error: -71 [ 421.022153][ T5934] usb 4-1: device descriptor read/64, error -71 [ 422.455845][ T5910] ath6kl: Failed to submit usb control message: -71 [ 422.491861][ T5910] ath6kl: unable to send the bmi data to the device: -71 [ 422.506325][T10182] netlink: 755 bytes leftover after parsing attributes in process `syz.0.1011'. [ 422.517344][ T5910] ath6kl: Unable to send get target info: -71 [ 422.524646][ T5910] ath6kl: Failed to init ath6kl core: -71 [ 422.534550][ T5910] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 422.561305][ T5910] usb 2-1: USB disconnect, device number 37 [ 422.621140][ T10] option 3-1:0.5: GSM modem (1-port) converter detected [ 422.665889][ T10] usb 3-1: USB disconnect, device number 37 [ 422.684312][ T10] option 3-1:0.5: device disconnected [ 422.726295][ T5934] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 422.863224][ T5934] usb 4-1: device descriptor read/64, error -71 [ 422.922382][T10189] binder: 10188:10189 ioctl c0306201 0 returned -14 [ 422.976507][ T5934] usb usb4-port1: attempt power cycle [ 422.992457][ T5910] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 423.292164][ T5910] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 423.308754][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.321308][ T5910] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 423.336083][ T30] audit: type=1400 audit(1757519351.804:617): avc: denied { create } for pid=10191 comm="syz.3.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 423.336547][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 423.368741][ T5910] usb 2-1: Product: syz [ 423.377089][ T5910] usb 2-1: Manufacturer: syz [ 423.381833][ T5910] usb 2-1: SerialNumber: syz [ 423.391509][ T5910] usb 2-1: config 0 descriptor?? [ 423.409423][ T5910] usb 2-1: selecting invalid altsetting 0 [ 424.581832][ T5934] usb 2-1: USB disconnect, device number 38 [ 425.005221][ T30] audit: type=1400 audit(1757519353.474:618): avc: denied { module_load } for pid=10221 comm="syz.0.1021" path="/212/bus" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 425.007807][T10224] Invalid ELF header magic: != ELF [ 425.028269][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.115211][T10226] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1022'. [ 425.126340][T10226] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 426.183626][ T5934] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 426.375442][ T5934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.486696][ T5934] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.497028][ T5934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.506172][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.542635][T10231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.560875][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.687916][T10243] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (pcl818) [ 427.800619][ T5934] usb 2-1: USB disconnect, device number 39 [ 427.852218][T10254] sctp: [Deprecated]: syz.3.1027 (pid 10254) Use of int in maxseg socket option. [ 427.852218][T10254] Use struct sctp_assoc_value instead [ 428.913377][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 429.458209][T10274] 9pnet_fd: Insufficient options for proto=fd [ 429.475405][ T30] audit: type=1400 audit(2000000003.570:619): avc: denied { append } for pid=10273 comm="syz.1.1032" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 429.596468][ T30] audit: type=1400 audit(2000000003.690:620): avc: denied { map } for pid=10273 comm="syz.1.1032" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 429.685327][ T30] audit: type=1400 audit(2000000003.690:621): avc: denied { write execute } for pid=10273 comm="syz.1.1032" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 430.463169][ T30] audit: type=1400 audit(2000000004.550:622): avc: denied { getopt } for pid=10276 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 431.143918][ T30] audit: type=1326 audit(2000000005.240:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 431.679903][ T30] audit: type=1326 audit(2000000005.240:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 431.799010][ T30] audit: type=1326 audit(2000000005.240:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 431.862760][ T30] audit: type=1326 audit(2000000005.240:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 431.925796][ T30] audit: type=1326 audit(2000000005.240:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 431.959254][ T30] audit: type=1326 audit(2000000005.270:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f36d7f8eba9 code=0x7ffc0000 [ 432.377249][T10326] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1046'. [ 432.937326][T10326] block nbd3: Attempted send on invalid socket [ 432.945035][T10326] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 432.956598][T10326] hfsplus: unable to find HFS+ superblock [ 433.323125][ T5934] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 433.643182][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 433.683284][ T5934] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 433.703134][ T5934] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 433.729341][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.426959][T10339] block device autoloading is deprecated and will be removed. [ 434.945396][ T5934] usb 2-1: string descriptor 0 read error: -71 [ 434.971672][ T5934] hub 2-1:32.0: bad descriptor, ignoring hub [ 435.010502][ T5934] hub 2-1:32.0: probe with driver hub failed with error -5 [ 435.037005][T10352] binder_alloc: binder_alloc_mmap_handler: 10351 200000ffe000-200001000000 already mapped failed -16 [ 435.094990][ T5934] usb 2-1: USB disconnect, device number 40 [ 435.543124][ T5910] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 435.753311][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 436.075797][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.085866][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.095966][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.112371][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.272087][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.313330][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.546809][ T5910] usb 4-1: GET_CAPABILITIES returned 0 [ 436.552341][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 436.956633][ T5970] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 437.134707][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 437.172203][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 7 [ 437.202162][T10384] evm: overlay not supported [ 437.240374][ T5930] usb 4-1: USB disconnect, device number 29 [ 437.265839][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25687, setting to 1024 [ 437.316488][ T5970] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 437.395122][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.412671][ T5970] usb 3-1: Product: syz [ 437.421481][ T5970] usb 3-1: Manufacturer: syz [ 437.436012][ T5970] usb 3-1: SerialNumber: syz [ 437.457994][ T5970] usb 3-1: config 0 descriptor?? [ 437.478573][ T5970] hub 3-1:0.0: bad descriptor, ignoring hub [ 437.499846][ T5970] hub 3-1:0.0: probe with driver hub failed with error -5 [ 437.530325][ T5970] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 437.623213][ T5910] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 437.813332][T10372] binder: 10370:10372 ioctl c0306201 0 returned -14 [ 437.901506][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 437.930020][ T5910] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 437.970927][ T5910] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 438.108599][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.000024][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 439.014205][ T5910] hub 1-1:32.0: bad descriptor, ignoring hub [ 439.028249][ T5910] hub 1-1:32.0: probe with driver hub failed with error -5 [ 439.389286][ T5910] usb 1-1: USB disconnect, device number 24 [ 439.693891][ T10] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 439.804393][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.813105][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.953358][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 439.973182][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.054095][ T10] usb 2-1: config 0 descriptor?? [ 440.099631][T10411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.127931][T10411] fuse: Unknown parameter '/dev/dsp' [ 440.143820][ T5205] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 440.493195][T10404] netlink: 'syz.1.1066': attribute type 10 has an invalid length. [ 440.516891][T10404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.569155][T10404] team0: Port device bond0 added [ 440.576913][ T5205] usb 3-1: device reset changed ep0 maxpacket size! [ 440.590358][ T5934] usb 3-1: USB disconnect, device number 38 [ 440.642668][T10404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.673960][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 440.685951][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 440.702859][ T10] usb 2-1: USB disconnect, device number 41 [ 440.753144][ T5934] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 440.853149][ T5910] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 440.906776][ T5934] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.915719][ T5934] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 440.934345][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.943871][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 440.955864][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 440.968895][ T5934] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.978489][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.986912][ T5934] usb 3-1: Product: syz [ 440.991300][ T5934] usb 3-1: Manufacturer: syz [ 441.028790][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 441.035886][ T5910] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 441.046224][ T5910] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 441.066348][ T5934] cdc_wdm 3-1:1.0: skipping garbage [ 441.079371][ T5934] cdc_wdm 3-1:1.0: skipping garbage [ 441.084970][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.256289][ T5934] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 441.327135][ T5934] cdc_wdm 3-1:1.0: Unknown control protocol [ 441.336667][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 441.336682][ T30] audit: type=1400 audit(2000000015.420:656): avc: denied { read write } for pid=10426 comm="syz.0.1073" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.382642][ T30] audit: type=1400 audit(2000000015.420:657): avc: denied { open } for pid=10426 comm="syz.0.1073" path="/226/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.416488][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.433230][ T5856] Bluetooth: hci0: unexpected event for opcode 0x54e0 [ 441.451231][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.816102][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 441.863272][ T30] audit: type=1400 audit(2000000015.430:658): avc: denied { ioctl } for pid=10426 comm="syz.0.1073" path="/226/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.990009][ T5910] usb 4-1: string descriptor 0 read error: -71 [ 442.005807][ T5910] hub 4-1:32.0: bad descriptor, ignoring hub [ 442.011828][ T5910] hub 4-1:32.0: probe with driver hub failed with error -5 [ 442.045521][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.056299][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 442.092451][ T30] audit: type=1400 audit(2000000016.170:659): avc: denied { execmem } for pid=10432 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 442.118469][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.134366][ T5910] usb 4-1: USB disconnect, device number 30 [ 442.175433][ T10] usb 1-1: config 0 descriptor?? [ 442.202605][ T10] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 442.401602][ T10] pwc: send_video_command error -71 [ 442.409437][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 442.431764][ T10] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 442.457475][ T10] usb 1-1: USB disconnect, device number 25 [ 442.609368][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 443.389723][T10466] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 443.456329][ T5934] usb 3-1: USB disconnect, device number 39 [ 444.783165][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 444.943500][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 444.955910][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.974892][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.014684][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.055597][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 445.208719][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.243589][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.710768][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.724223][ T10] usb 4-1: Manufacturer: syz [ 445.745988][ T10] usb 4-1: config 0 descriptor?? [ 446.074711][ T10] rc_core: IR keymap rc-hauppauge not found [ 446.087245][ T10] Registered IR keymap rc-empty [ 446.106241][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.143250][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.159943][T10500] Invalid logical block size (4) [ 446.185949][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 446.229022][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 446.280171][T10495] netlink: 'syz.0.1087': attribute type 29 has an invalid length. [ 446.294069][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.334560][T10501] netlink: 'syz.0.1087': attribute type 29 has an invalid length. [ 446.334939][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.684004][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.691393][T10491] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1087'. [ 446.693314][ T30] audit: type=1400 audit(2000000020.770:660): avc: denied { create } for pid=10489 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.705073][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'. [ 446.730040][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 446.739223][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'. [ 446.751013][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'. [ 446.795348][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.811881][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 446.823814][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.826722][ T30] audit: type=1400 audit(2000000020.780:661): avc: denied { write } for pid=10489 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.854419][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.874981][ T30] audit: type=1400 audit(2000000020.780:662): avc: denied { nlmsg_write } for pid=10489 comm="syz.0.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 446.903842][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.923238][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 446.945608][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 447.336469][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 447.374849][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 447.420026][ T10] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 447.462206][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 447.737023][ T10] usb 4-1: USB disconnect, device number 31 [ 448.146894][T10531] smb3: Unknown parameter 'aclory.events' [ 449.793301][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 450.091862][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.169500][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.253145][ T24] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 450.290021][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.386668][ T24] usb 4-1: config 0 descriptor?? [ 450.793767][T10559] 9pnet_fd: p9_fd_create_tcp (10559): problem connecting socket to 127.0.0.1 [ 450.839698][ T6892] Bluetooth: hci5: Frame reassembly failed (-84) [ 450.909512][ T69] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 452.741312][T10594] netlink: 'syz.1.1109': attribute type 21 has an invalid length. [ 452.773271][T10594] netlink: 'syz.1.1109': attribute type 22 has an invalid length. [ 452.919294][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 452.931388][T10595] chnl_net:caif_netlink_parms(): no params data found [ 452.981394][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 452.997443][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 453.133469][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 453.165467][T10594] netlink: 'syz.1.1109': attribute type 23 has an invalid length. [ 453.173963][T10594] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1109'. [ 453.190376][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 453.199324][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 453.229954][ T24] usb 4-1: USB disconnect, device number 32 [ 454.875440][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'. [ 455.100047][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 457.493731][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 457.503464][T10651] chnl_net:caif_netlink_parms(): no params data found [ 457.797619][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 457.826386][ T30] audit: type=1400 audit(2000000031.430:663): avc: denied { create } for pid=10649 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 457.882949][T10650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.962259][ T30] audit: type=1400 audit(2000000031.430:664): avc: denied { connect } for pid=10649 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 460.306710][T10682] openvswitch: netlink: EtherType 0 is less than min 600 [ 460.410582][ T10] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 460.591152][T10705] overlayfs: workdir and upperdir must be separate subtrees [ 460.623769][ T10] usb 1-1: device descriptor read/64, error -71 [ 460.644012][ T5910] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 460.919972][ T30] audit: type=1400 audit(2000000035.000:665): avc: denied { map } for pid=10707 comm="syz.1.1136" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 460.971824][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 461.052765][ T5910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 461.079052][ T5910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 461.147049][ T10] usb 1-1: device descriptor read/64, error -71 [ 461.205533][ T5910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 461.229829][ T5910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.241203][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.343652][ T10] usb usb1-port1: attempt power cycle [ 461.438428][T10702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 461.465517][T10702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 461.523926][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.584373][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.597969][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.683653][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 461.736197][ T10] usb 1-1: device descriptor read/8, error -71 [ 461.831403][ T9] usb 4-1: USB disconnect, device number 33 [ 462.093245][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 462.319036][T10738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.936372][ T10] usb 1-1: device descriptor read/8, error -71 [ 463.066132][ T10] usb usb1-port1: unable to enumerate USB device [ 463.999285][ T44] libceph: connect (1)[c::]:6789 error -101 [ 464.022650][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 464.043146][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 464.172690][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 464.173294][ T9] usb 4-1: device descriptor read/64, error -71 [ 464.181797][T10764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.198871][T10764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.207389][T10764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.214792][T10764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.332176][T10755] ceph: No mds server is up or the cluster is laggy [ 464.400444][ T30] audit: type=1400 audit(2000000038.490:666): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 464.420293][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.523991][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 464.663475][ T9] usb 4-1: device descriptor read/64, error -71 [ 464.773627][ T9] usb usb4-port1: attempt power cycle [ 465.027789][ T30] audit: type=1400 audit(2000000039.120:667): avc: denied { create } for pid=10774 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 465.122657][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 465.325438][ T9] usb 4-1: device descriptor read/8, error -71 [ 465.511845][T10788] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.513104][ T30] audit: type=1400 audit(2000000039.600:668): avc: denied { ioctl } for pid=10787 comm="syz.2.1154" path="socket:[27918]" dev="sockfs" ino=27918 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 465.519686][T10788] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 465.563325][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 465.606742][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 466.074916][ T9] usb 4-1: device descriptor read/8, error -71 [ 466.103630][T10788] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 466.136103][T10788] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 466.213451][ T9] usb usb4-port1: unable to enumerate USB device [ 466.383614][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 466.597102][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 466.965776][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.997870][ T10] usb 3-1: config 0 has no interface number 0 [ 467.035068][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.063731][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 467.102985][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.132526][T10801] IPVS: set_ctl: invalid protocol: 46 172.30.1.2:20001 [ 467.139553][ T30] audit: type=1400 audit(2000000041.220:669): avc: denied { setopt } for pid=10800 comm="syz.1.1157" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.236643][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 467.292578][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 467.333791][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.454269][ T10] usb 3-1: config 0 descriptor?? [ 467.505720][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 467.665385][T10814] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 467.688945][T10814] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 467.759299][T10815] trusted_key: encrypted_key: insufficient parameters specified [ 467.866725][ T10] usb 3-1: USB disconnect, device number 41 [ 467.872717][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 468.376324][T10788] ldusb: No device or device unplugged -19 [ 468.376339][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 468.510964][T10821] ------------[ cut here ]------------ [ 468.517165][T10821] WARNING: CPU: 1 PID: 10821 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 468.527555][T10821] Modules linked in: [ 468.531788][T10821] CPU: 1 UID: 0 PID: 10821 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT(full) [ 468.541207][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.551440][T10821] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 468.558347][T10821] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 468.578110][T10821] RSP: 0018:ffffc9001cc877f0 EFLAGS: 00010246 [ 468.584288][T10821] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 468.592271][T10821] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 468.600330][T10821] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 468.608394][T10821] R10: 000000000000001c R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 468.616405][T10821] R13: 1ffff92003990f13 R14: ffffffff9ae7fa24 R15: 000000000000001c [ 468.624401][T10821] FS: 00007f43bd2e56c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 468.633359][T10821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.639927][T10821] CR2: 0000200000001000 CR3: 0000000076443000 CR4: 00000000003526f0 [ 468.647914][T10821] Call Trace: [ 468.651193][T10821] [ 468.654135][T10821] ? do_syscall_64+0xcd/0x4c0 [ 468.658822][T10821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.664922][T10821] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 468.671245][T10821] ? kasan_quarantine_put+0x10a/0x240 [ 468.676689][T10821] ? lockdep_hardirqs_on+0x7c/0x110 [ 468.681876][T10821] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.687803][T10821] ? policy_nodemask+0xea/0x4e0 [ 468.692638][T10821] alloc_pages_mpol+0x1fb/0x550 [ 468.697543][T10821] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 468.702916][T10821] ? v9fs_fid_get_acl+0x7a/0x120 [ 468.707944][T10821] ___kmalloc_large_node+0xed/0x160 [ 468.713360][T10821] ? v9fs_fid_get_acl+0x7a/0x120 [ 468.718409][T10821] __kmalloc_large_node_noprof+0x1c/0x70 [ 468.724127][T10821] __kmalloc_noprof.cold+0xc/0x61 [ 468.729177][T10821] ? __pfx_iget5_locked+0x10/0x10 [ 468.734245][T10821] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 468.740223][T10821] v9fs_fid_get_acl+0x7a/0x120 [ 468.745017][T10821] v9fs_get_acl+0xee/0x530 [ 468.749420][T10821] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 468.754986][T10821] v9fs_mount+0x4fd/0xa90 [ 468.759302][T10821] ? __pfx_v9fs_mount+0x10/0x10 [ 468.764158][T10821] ? cap_capable+0xb3/0x250 [ 468.768659][T10821] ? __pfx_v9fs_mount+0x10/0x10 [ 468.773525][T10821] legacy_get_tree+0x10c/0x220 [ 468.778271][T10821] vfs_get_tree+0x8b/0x340 [ 468.782669][T10821] path_mount+0x1513/0x2000 [ 468.787186][T10821] ? __pfx_path_mount+0x10/0x10 [ 468.792045][T10821] ? kmem_cache_free+0x2d1/0x4d0 [ 468.796994][T10821] ? putname+0x154/0x1a0 [ 468.801232][T10821] ? putname+0x154/0x1a0 [ 468.805522][T10821] ? __x64_sys_mount+0x28d/0x310 [ 468.810445][T10821] __x64_sys_mount+0x28d/0x310 [ 468.815271][T10821] ? __pfx___x64_sys_mount+0x10/0x10 [ 468.820549][T10821] do_syscall_64+0xcd/0x4c0 [ 468.825089][T10821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.830974][T10821] RIP: 0033:0x7f43bc38eba9 [ 468.835427][T10821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.855086][T10821] RSP: 002b:00007f43bd2e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 468.863546][T10821] RAX: ffffffffffffffda RBX: 00007f43bc5d5fa0 RCX: 00007f43bc38eba9 [ 468.871519][T10821] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 468.879527][T10821] RBP: 00007f43bc411e19 R08: 0000200000000500 R09: 0000000000000000 [ 468.887510][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.895489][T10821] R13: 00007f43bc5d6038 R14: 00007f43bc5d5fa0 R15: 00007fff60ef1a88 [ 468.903496][T10821] [ 468.906510][T10821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.913765][T10821] CPU: 1 UID: 0 PID: 10821 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT(full) [ 468.923108][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.933137][T10821] Call Trace: [ 468.936394][T10821] [ 468.939304][T10821] dump_stack_lvl+0x3d/0x1f0 [ 468.943874][T10821] vpanic+0x6e8/0x7a0 [ 468.947836][T10821] ? __pfx_vpanic+0x10/0x10 [ 468.952324][T10821] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 468.958391][T10821] panic+0xca/0xd0 [ 468.962095][T10821] ? __pfx_panic+0x10/0x10 [ 468.966501][T10821] check_panic_on_warn+0xab/0xb0 [ 468.971418][T10821] __warn+0xf6/0x3c0 [ 468.975286][T10821] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 468.981331][T10821] report_bug+0x3c3/0x580 [ 468.985636][T10821] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 468.991677][T10821] handle_bug+0x184/0x210 [ 468.995986][T10821] exc_invalid_op+0x17/0x50 [ 469.000469][T10821] asm_exc_invalid_op+0x1a/0x20 [ 469.005294][T10821] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 469.011949][T10821] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7f c1 7e 0e 00 75 0b c6 05 76 c1 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 469.031532][T10821] RSP: 0018:ffffc9001cc877f0 EFLAGS: 00010246 [ 469.037602][T10821] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 469.045549][T10821] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000000000040d40 [ 469.053496][T10821] RBP: 000000000000001c R08: 0000000000000005 R09: 0000000000000009 [ 469.061444][T10821] R10: 000000000000001c R11: ffffffff8b93f0cd R12: 0000000000040d40 [ 469.069393][T10821] R13: 1ffff92003990f13 R14: ffffffff9ae7fa24 R15: 000000000000001c [ 469.077349][T10821] ? do_syscall_64+0xcd/0x4c0 [ 469.082016][T10821] ? do_syscall_64+0xcd/0x4c0 [ 469.086670][T10821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.092718][T10821] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 469.099032][T10821] ? kasan_quarantine_put+0x10a/0x240 [ 469.104382][T10821] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.109558][T10821] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.115432][T10821] ? policy_nodemask+0xea/0x4e0 [ 469.120264][T10821] alloc_pages_mpol+0x1fb/0x550 [ 469.125096][T10821] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 469.130447][T10821] ? v9fs_fid_get_acl+0x7a/0x120 [ 469.135366][T10821] ___kmalloc_large_node+0xed/0x160 [ 469.140544][T10821] ? v9fs_fid_get_acl+0x7a/0x120 [ 469.145463][T10821] __kmalloc_large_node_noprof+0x1c/0x70 [ 469.151076][T10821] __kmalloc_noprof.cold+0xc/0x61 [ 469.156081][T10821] ? __pfx_iget5_locked+0x10/0x10 [ 469.161084][T10821] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 469.167062][T10821] v9fs_fid_get_acl+0x7a/0x120 [ 469.171820][T10821] v9fs_get_acl+0xee/0x530 [ 469.176229][T10821] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 469.181771][T10821] v9fs_mount+0x4fd/0xa90 [ 469.186081][T10821] ? __pfx_v9fs_mount+0x10/0x10 [ 469.190911][T10821] ? cap_capable+0xb3/0x250 [ 469.195397][T10821] ? __pfx_v9fs_mount+0x10/0x10 [ 469.200225][T10821] legacy_get_tree+0x10c/0x220 [ 469.204977][T10821] vfs_get_tree+0x8b/0x340 [ 469.209383][T10821] path_mount+0x1513/0x2000 [ 469.213872][T10821] ? __pfx_path_mount+0x10/0x10 [ 469.218710][T10821] ? kmem_cache_free+0x2d1/0x4d0 [ 469.223628][T10821] ? putname+0x154/0x1a0 [ 469.227857][T10821] ? putname+0x154/0x1a0 [ 469.232084][T10821] ? __x64_sys_mount+0x28d/0x310 [ 469.237002][T10821] __x64_sys_mount+0x28d/0x310 [ 469.241754][T10821] ? __pfx___x64_sys_mount+0x10/0x10 [ 469.247056][T10821] do_syscall_64+0xcd/0x4c0 [ 469.251544][T10821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.257414][T10821] RIP: 0033:0x7f43bc38eba9 [ 469.261805][T10821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.281393][T10821] RSP: 002b:00007f43bd2e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 469.289787][T10821] RAX: ffffffffffffffda RBX: 00007f43bc5d5fa0 RCX: 00007f43bc38eba9 [ 469.297739][T10821] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 469.305695][T10821] RBP: 00007f43bc411e19 R08: 0000200000000500 R09: 0000000000000000 [ 469.313651][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.321601][T10821] R13: 00007f43bc5d6038 R14: 00007f43bc5d5fa0 R15: 00007fff60ef1a88 [ 469.329574][T10821] [ 469.332792][T10821] Kernel Offset: disabled [ 469.337112][T10821] Rebooting in 86400 seconds..