last executing test programs: 4m39.576824111s ago: executing program 1 (id=737): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000161401"], 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8010) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x1, 0x52, 0x56, 0x40, 0x61d, 0xc160, 0x9bc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6d, 0x7, 0x40, 0x2, [{{0x9, 0x4, 0xa3, 0xff, 0x0, 0x11, 0x29, 0xea, 0x5}}]}}]}}, 0x0) 4m35.854431612s ago: executing program 1 (id=747): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$kvm(0x0, 0x0, 0x14d300, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000400"], 0x1c}], 0x1}, 0x310) 4m34.540228668s ago: executing program 1 (id=750): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000fff3002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m33.897078577s ago: executing program 1 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) unshare(0x2c000d80) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x14405, 0x40) r2 = memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v[Y\x9e\xb9\xefY\xc7\"\x17\xc1|\xc3\xfe\xae\xf2\x12v\xc1\x01\xbc\xef0\xe4\x97\xcfa\xff]\xcdA\x84G\xab\xf5\x00\xe4\xac\x1b\x98\x95\xcd\f\xdc\xe6[\xd8\x16\bx\xad\xfeW8\xb4M\x9b\x96\'\xf8\x8f$\x94\xd14n/\xf1\xf2]\xb9\xfa?\x91\x0e\x1d\x83\xce\xff\x830\x88S\xba\xb9]\x967\xec\xaal+\xd9mbUJ\xe2Jw\f6\x8b\x94P8\x1b\xa8\xb5s\x82\x16\xe5~\xc1\xb6\xdf \x17\xd8\xa8CyL>\xd5q\xb7\xff-\xabj0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f1ac25bd7000fedbdf251100000008000300", @ANYRES32, @ANYBLOB="cec39c434c1e6cbc30b324665f36e84a72a74b28a1cb87e3673e69374f8143531c5283693a47c697e225c2ea63518ff3e80a63c9a562e483ef353be5cfe39a7e13bce0db4b91444e3fc913c6af299aa734ae81926fabe4d2d0437266fa6481c8ca65f4fe71f13927002dba83f1668f69a4d2343f484b277c3a6b6703cbed22ee9f54ec37d4dbf5938e9e69d2bff73b509dfdea18aa73465647a974"], 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf251500000008000100", @ANYRES32, @ANYBLOB="08001100", @ANYRES32, @ANYBLOB="090014"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x82, 0x3a, 0x59, 0x40, 0x763, 0x1011, 0x72a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xf, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0xc0, 0x3, 0x3, 0xff, 0xea, 0xb0, 0x9, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x40, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0xfc, 0xdc, 0xff}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7, 0x6}}]}}]}}]}}, 0x0) 13.623126994s ago: executing program 4 (id=1728): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13.151269361s ago: executing program 4 (id=1730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 13.040473737s ago: executing program 4 (id=1731): fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() read(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149e82, 0x1) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd000001800000000000000000f0000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 11.852148484s ago: executing program 5 (id=1736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x2b000000, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/43, 0x2b, 0x1, 0x22}, @flat=@binder={0x73622a85, 0x0, 0x30}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 10.296355399s ago: executing program 5 (id=1739): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f500396d0940fd101315ce7e0dee"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x24a042) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1, 0x6, 0x4) 9.731905757s ago: executing program 4 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="780000001000190026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02250000400100001400030076657468315f766972745f776966690008002800", @ANYRES32], 0x78}}, 0x18002) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2, &(0x7f00000001c0)='\x00\x00'}], 0x1}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x101240, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x5, 0x30}, &(0x7f0000000440)=0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40001) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000200)={0x0, 0xfffffffffffffffb, 0x0, [0x70, 0x100, 0x401, 0x1e34, 0x4], [0xffffffffffff5a25, 0x4, 0x0, 0x0, 0xa, 0xff, 0x9, 0xfffffffffffffff7, 0x2, 0x9, 0x0, 0xe, 0x800, 0x9, 0x10, 0x9, 0x9, 0x1, 0x8000, 0x1, 0x7, 0x2, 0x5, 0x1e3c, 0xe, 0xffffffffffffffff, 0x7, 0x3, 0x70d, 0x7, 0xffffffffffffffff, 0x2787, 0x1, 0xc5, 0x7b7, 0xfd, 0x2, 0x2, 0x5, 0x40, 0xa, 0x9, 0x5, 0x7, 0x12, 0x81c8, 0x1, 0x1, 0x1, 0x3ff, 0xfff, 0x1, 0x9, 0x4, 0x7, 0x0, 0x10, 0x401, 0xca7d, 0x7fff, 0xffffffff, 0xb48, 0x4, 0x7f, 0x6, 0x9, 0x4, 0xd, 0x3, 0x9, 0xa, 0xa3b9, 0x127, 0x5, 0x1f75fb2c, 0xb800, 0xb3d, 0x1, 0x2, 0x80000000, 0x8000000000000000, 0x8001, 0x8, 0x200, 0x4, 0x2, 0x1, 0x8, 0x5, 0x0, 0x4, 0x401, 0x2, 0x9, 0xe40a, 0x6, 0x5, 0x9, 0x5, 0x3, 0xd2c6, 0x4, 0x0, 0x9, 0x8, 0x3, 0xfffffffffffffffe, 0xf, 0x8, 0x8, 0xffffffff, 0xa00, 0x69c, 0x100000001, 0x1, 0x2, 0x9, 0x0, 0x7fff, 0x7, 0x33]}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000a80)={r8, "3926fdff116a5de58e197a838897f941"}) 6.604417906s ago: executing program 2 (id=1752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 6.548733349s ago: executing program 5 (id=1753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) stat(0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e044f6d0c"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000001380)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) userfaultfd(0x0) fadvise64(0xffffffffffffffff, 0x18, 0xdb9c, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) memfd_create(0x0, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000880)) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x6, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6.401549788s ago: executing program 2 (id=1755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="8001000019000100000000000000000020010000000000000000000000000000ac14143500000000000000000000000000000000000000000a0000000000ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000004000000000000000000a0600000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000004000090000000000000000000000000000000100000000000000c8000800"], 0x180}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 6.311921939s ago: executing program 2 (id=1757): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) openat$urandom(0xffffffffffffff9c, 0x0, 0x40142, 0x0) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r7, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000089}, 0x800) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000008000080ef0000000b00009256867fc86a32092457b848fa31d734003b77370f330700000000000007000080060000006e6e0000030000000100000000000000"]) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000400000008000400089116110af09f3a000000000800020005000000149f93e436ee3568a3c8088bfeb0f154490fcf98483d956bf64f7b0f80db000600"], 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000100)) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x7) 6.120717919s ago: executing program 3 (id=1758): prctl$PR_SCHED_CORE(0x3e, 0x2000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4) (fail_nth: 4) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000200)=""/41, 0x29}], 0x2, 0x0, 0x2d}, 0xfffffff1}], 0x1, 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) 4.763229625s ago: executing program 2 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400481, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x2000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000240)=ANY=[@ANYBLOB]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1002}}) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r5) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 3.476506392s ago: executing program 3 (id=1761): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x8, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r1, 0x40049409, r2) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c, 0x0, 0x20010010}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) 3.332264048s ago: executing program 5 (id=1762): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 3.272120728s ago: executing program 2 (id=1763): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f500396d0940fd101315ce7e0dee"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x24a042) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1, 0x6, 0x4) 3.155261735s ago: executing program 5 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x1000000000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="ff07000000000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000feffffff1e0000000e0001006e657464657673696d0000004a0002006e657464657673696d30000008003e00000000000c008f000000000000000000d3ff90000300000000000000"], 0x9d}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000400040000", 0x27}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x81440e, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x2b, 0x3, 0x2b418842, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) msgsnd(0x0, 0xfffffffffffffffc, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x8, {0x5, 0x3, 0x7, 0x4000000000008, 0xfffffffd, 0x6, {0x42, 0x6, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0xfff, 0x8, 0xa000, 0x28001, r10, r11, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x194, 0x30, 0x1, 0x0, 0x0, {}, [{0x180, 0x1, [@m_connmark={0x17c, 0xd, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd8000000, 0x6, 0x0, 0xe1a, 0x3}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xb, 0x5, 0x5}, 0x42c3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x576, 0xfffffffb, 0x3, 0x6, 0x2}, 0xf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x0, 0x20000000, 0x3, 0x1000}, 0x7}}]}, {0xda, 0x6, "164151ba7b8858665ecc6cf33bc711bda326af2683852fc14fe10fa9ef7dd139eb703c170873230719395f8d6413011fc518efedb841b18142653739355deac0a9446a825a5b526c1adfbc47121cc1fc0906352b2cec685c3d652076682752dd3e6c6d3e7859d3a475b8d8f3559a9cd89a0c050a73127d32b27b8d300940163ee3cdda41f733f097696f3241fd22ce45af0620c606d4f882a5c849f255a05e94c8e39a2f38ccc730beb763814ba52a0bb4c9e21ef22601bdc52457a89c8e93dfdea2d069761287bdebec5c09ae5dd3935d5b0e4a2823"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x194}}, 0x0) 2.311851033s ago: executing program 5 (id=1766): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB, @ANYBLOB, @ANYRES8], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x24}}, 0x20040000) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100153a48e08f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = mq_open(&(0x7f0000000000)='sit0\x00', 0x41, 0x9, 0x0) mq_notify(r5, &(0x7f00000000c0)={0x0, 0x1d}) mq_timedsend(r5, 0x0, 0x0, 0x800, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000000e40)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={[{}]}) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001e80)={'sit0\x00', &(0x7f0000001e40)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f, 0x20}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r10}, 0x38) 2.292433357s ago: executing program 0 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100400000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.159864332s ago: executing program 0 (id=1768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/43, 0x2b, 0x1, 0x22}, @flat=@binder={0x73622a85, 0x0, 0x30}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2.095948257s ago: executing program 3 (id=1769): r0 = socket(0x2, 0x80805, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r3 = io_uring_setup(0x2bb0, &(0x7f0000000380)={0x0, 0xb594, 0x2000, 0x1, 0x217}) r4 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x4c4a, 0x400, 0x1, 0xc0, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf250200a3dea09d6dd89dfb9eedbb94ff09d6528cecf7cc5c456b68f9fe7928dfd1da497cac35883146821a70ad4f32959e70b00be7804046e58dd3dce1dc6e9e9a662d372a685c81568f04df6d98c6b4beff15847f0cdd684bafaf75a54b5e68cd8f958368f288000100277ff18c774e8ac6451fecba"], 0x14}}, 0x40) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="10002bbd7000fbdbdf25060000000500220000783354f05f4d8fd0d675e708a4c8000000d13f4c0e0a1461985b99ad37cff491205d42beca02d1764b0b6fad0304b0b4ff09a1da079f493acdf3bbbe900f00dca9bbd5e633"], 0x1c}, 0x1, 0x0, 0x0, 0xc046}, 0x20044000) (async) socket$kcm(0xa, 0x2, 0x73) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029", 0x5}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async) io_uring_enter(r4, 0x3516, 0xf864, 0x69, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000ac0)={r10, 0xd0}, &(0x7f0000000b00)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.095231952s ago: executing program 4 (id=1770): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f1ac25bd7000fedbdf251100000008000300", @ANYRES32=r6, @ANYBLOB="cec39c434c1e6cbc30b324665f36e84a72a74b28a1cb87e3673e69374f8143531c5283693a47c697e225c2ea63518ff3e80a63c9a562e483ef353be5cfe39a7e13bce0db4b91444e3fc913c6af299aa734ae81926fabe4d2d0437266fa6481c8ca65f4fe71f13927002dba83f1668f69a4d2343f484b277c3a6b6703cbed22ee9f54ec37d4dbf5938e9e69d2bff73b509dfdea18aa73465647a974"], 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf251500000008000100", @ANYRES32, @ANYBLOB="08001100", @ANYRES32, @ANYBLOB="090014"], 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4090) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES16=r9, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x82, 0x3a, 0x59, 0x40, 0x763, 0x1011, 0x72a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xf, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0xc0, 0x3, 0x3, 0xff, 0xea, 0xb0, 0x9, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x40, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0xfc, 0xdc, 0xff}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x1, 0x7, 0x6}}]}}]}}]}}, 0x0) 2.068523074s ago: executing program 0 (id=1771): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000004400fff5090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1.979296808s ago: executing program 3 (id=1772): prctl$PR_SCHED_CORE(0x3e, 0x2000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4) (fail_nth: 5) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000200)=""/41, 0x29}], 0x2, 0x0, 0x2d}, 0xfffffff1}], 0x1, 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) 1.912211956s ago: executing program 0 (id=1773): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$kvm(0x0, 0x0, 0x14d300, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000400"], 0x1c}], 0x1, 0x0, 0x0, 0x30}, 0x310) 1.101206821s ago: executing program 3 (id=1774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.043163352s ago: executing program 3 (id=1775): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4) 799.024182ms ago: executing program 0 (id=1776): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 708.258391ms ago: executing program 0 (id=1777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2e, 0x0, 0x1fff, 0x1000b49, 0xb, 0x10, 0x3, 0x3}, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x48c0) socket$inet6(0xa, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x8d) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fcntl$getown(r5, 0x9) (async) pipe(0x0) r7 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r8, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000000700000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x400, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x900}, 0x80) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t pid=10700 comm="syz.2.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa818ebe9 code=0x7ffc0000 [ 371.922961][ T5927] usb 1-1: device descriptor read/64, error -71 [ 371.930997][ T5984] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 371.949072][ T5984] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 371.959632][ T5984] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 371.969846][ T5984] usb 5-1: Product: syz [ 371.977326][ T5984] usb 5-1: Manufacturer: syz [ 371.988947][ T30] audit: type=1326 audit(1757234864.935:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.2.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3aa8190b07 code=0x7ffc0000 [ 371.993281][ T5984] usb 5-1: SerialNumber: syz [ 372.144071][T10711] Failed to initialize the IGMP autojoin socket (err -2) [ 372.163000][ T5927] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 372.176483][ T30] audit: type=1326 audit(1757234864.935:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.2.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3aa8190a7c code=0x7ffc0000 [ 372.301158][ T5927] usb 1-1: device descriptor read/64, error -71 [ 372.401859][ T5984] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 372.417218][ T5984] visor 5-1:1.0: probe with driver visor failed with error -71 [ 372.452116][ T5927] usb usb1-port1: attempt power cycle [ 372.476823][ T30] audit: type=1326 audit(1757234864.935:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10700 comm="syz.2.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3aa81909b4 code=0x7ffc0000 [ 372.492115][ T5984] usb 5-1: USB disconnect, device number 37 [ 372.817305][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'. [ 372.821657][ T5927] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 372.851054][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 372.897595][ T5927] usb 1-1: device descriptor read/8, error -71 [ 373.141119][ T5927] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 373.294071][T10729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3075 sclass=netlink_route_socket pid=10729 comm=syz.5.1147 [ 373.453246][T10730] lo speed is unknown, defaulting to 1000 [ 373.474400][T10730] lo speed is unknown, defaulting to 1000 [ 373.491617][T10730] lo speed is unknown, defaulting to 1000 [ 373.896388][T10730] infiniband sz1: set active [ 373.901411][T10730] infiniband sz1: added lo [ 373.908198][T10730] sz1: rxe_create_qp: returned err = -2 [ 373.914218][T10730] infiniband sz1: Couldn't create ib_mad QP1 [ 373.920701][T10730] infiniband sz1: Couldn't open port 1 [ 373.986023][T10730] RDS/IB: sz1: added [ 373.990578][T10730] smc: adding ib device sz1 with port count 1 [ 373.998184][T10730] smc: ib device sz1 port 1 has pnetid [ 374.008495][T10730] lo speed is unknown, defaulting to 1000 [ 374.103223][T10730] lo speed is unknown, defaulting to 1000 [ 374.203506][T10730] lo speed is unknown, defaulting to 1000 [ 374.287699][T10730] lo speed is unknown, defaulting to 1000 [ 374.370607][T10730] lo speed is unknown, defaulting to 1000 [ 374.478771][ T24] lo speed is unknown, defaulting to 1000 [ 374.491206][ T5984] lo speed is unknown, defaulting to 1000 [ 374.499014][T10727] netlink: 'syz.5.1147': attribute type 10 has an invalid length. [ 374.656274][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1147'. [ 374.670665][T10727] dummy0: entered promiscuous mode [ 374.874940][ T5927] usb 1-1: device descriptor read/8, error -71 [ 376.329028][ T5927] usb usb1-port1: unable to enumerate USB device [ 376.337197][T10727] bridge0: port 3(dummy0) entered blocking state [ 376.406109][T10727] bridge0: port 3(dummy0) entered disabled state [ 376.521795][T10727] dummy0: entered allmulticast mode [ 376.542521][T10727] bridge0: port 3(dummy0) entered blocking state [ 376.548958][T10727] bridge0: port 3(dummy0) entered forwarding state [ 376.623969][T10754] No source specified [ 376.671368][T10754] trusted_key: encrypted_key: insufficient parameters specified [ 376.683809][ T5956] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 377.002489][ T5956] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 377.075109][ T5956] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 377.092659][ T5956] usb 4-1: Product: syz [ 377.097043][ T5956] usb 4-1: Manufacturer: syz [ 377.172304][ T5956] usb 4-1: SerialNumber: syz [ 377.174677][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 377.351572][ T5956] usb 4-1: config 0 descriptor?? [ 377.375874][ T5956] ch341 4-1:0.0: ch341-uart converter detected [ 377.887867][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 377.887888][ T30] audit: type=1400 audit(1757234871.005:671): avc: denied { connect } for pid=10763 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.970964][ T30] audit: type=1400 audit(1757234871.105:672): avc: denied { connect } for pid=10763 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.368742][T10787] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1159'. [ 378.743752][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.802112][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808496][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.966931][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.161661][ T5956] usb 4-1: failed to send control message: -110 [ 379.168177][ T5956] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 379.737734][ T5984] usb 4-1: USB disconnect, device number 25 [ 379.744882][ T5984] ch341 4-1:0.0: device disconnected [ 379.765569][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1163'. [ 380.140972][ T30] audit: type=1400 audit(1757234873.165:673): avc: denied { ioctl } for pid=10797 comm="syz.5.1162" path="socket:[25982]" dev="sockfs" ino=25982 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.959454][ T5956] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 381.151719][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 381.192965][ T5956] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 381.339553][ T5956] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 381.349425][ T5956] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 381.358639][ T5956] usb 3-1: Product: syz [ 381.363082][ T5956] usb 3-1: Manufacturer: syz [ 381.367678][ T5956] usb 3-1: SerialNumber: syz [ 381.521822][ T5927] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 381.528893][T10825] CIFS: Unable to determine destination address [ 381.783655][ T5956] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 381.792102][ T5956] visor 3-1:1.0: probe with driver visor failed with error -71 [ 381.803021][ T5956] usb 3-1: USB disconnect, device number 40 [ 381.931376][ T5927] usb 6-1: device descriptor read/64, error -71 [ 382.231354][ T5927] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 382.411161][ T5927] usb 6-1: device descriptor read/64, error -71 [ 382.659452][ T5927] usb usb6-port1: attempt power cycle [ 383.314934][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.343311][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.401412][ T5927] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 383.521592][ T5984] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 383.682769][ T5927] usb 6-1: device descriptor read/8, error -71 [ 384.176828][ T5984] usb 1-1: device descriptor read/64, error -71 [ 384.602530][T10871] input: syz0 as /devices/virtual/input/input21 [ 384.861182][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 385.541224][ T5928] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 386.268627][ T5928] usb 4-1: device descriptor read/64, error -71 [ 386.310690][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1195'. [ 386.335810][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1195'. [ 386.353012][T10908] dummy0: left allmulticast mode [ 386.359674][T10908] bridge0: port 3(dummy0) entered disabled state [ 386.370336][T10908] bridge_slave_0: left allmulticast mode [ 386.376813][T10908] bridge_slave_0: left promiscuous mode [ 386.418220][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.545629][T10908] bridge_slave_1: left allmulticast mode [ 386.561418][T10908] bridge_slave_1: left promiscuous mode [ 386.592484][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.691354][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 387.308176][T10908] bond0: (slave bond_slave_0): Releasing backup interface [ 387.366973][T10908] bond0: (slave bond_slave_1): Releasing backup interface [ 387.411347][ T5928] usb 4-1: device descriptor read/64, error -71 [ 387.425954][T10908] team0: Port device team_slave_0 removed [ 387.437210][T10908] team0: Port device team_slave_1 removed [ 387.446985][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.457564][T10908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.469407][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.478568][T10908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.601360][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 387.614164][ T5928] usb usb4-port1: attempt power cycle [ 387.654935][T10913] team0: Mode changed to "loadbalance" [ 388.161115][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 388.183106][ T5928] usb 4-1: device descriptor read/8, error -71 [ 388.626661][ T30] audit: type=1400 audit(1757234881.765:674): avc: denied { write } for pid=10932 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.782490][ T30] audit: type=1400 audit(1757234881.765:675): avc: denied { nlmsg_write } for pid=10932 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.819241][T10976] netlink: 'syz.4.1212': attribute type 21 has an invalid length. [ 390.940119][T10976] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.342765][ T30] audit: type=1326 audit(1757234885.485:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 392.391210][ T5928] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 392.558583][ T30] audit: type=1326 audit(1757234885.515:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 392.662208][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.685105][ T30] audit: type=1326 audit(1757234885.575:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 392.708828][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.751250][ T5928] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 392.760337][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.768716][ T30] audit: type=1326 audit(1757234885.575:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 392.881688][ T5928] usb 6-1: config 0 descriptor?? [ 392.906585][ T30] audit: type=1326 audit(1757234885.575:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 393.018602][ T30] audit: type=1326 audit(1757234885.575:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 393.119080][ T30] audit: type=1326 audit(1757234885.575:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 393.145003][ T30] audit: type=1326 audit(1757234885.575:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7ffc0000 [ 393.215312][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 393.581662][T11010] /dev/nullb0: Can't open blockdev [ 393.765816][ T5928] samsung 0003:0419:0001.0010: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 394.615456][T11029] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1227'. [ 394.730958][T11030] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 394.767409][T11030] kvm: pic: level sensitive irq not supported [ 394.767466][T11030] kvm: pic: non byte read [ 394.789085][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 395.543732][ T5863] usb 6-1: USB disconnect, device number 16 [ 395.617962][T11045] netlink: 'syz.5.1233': attribute type 10 has an invalid length. [ 395.628282][T11045] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1233'. [ 395.732838][T11042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 395.769944][T11045] bridge0: port 1(dummy0) entered blocking state [ 395.807180][ T5170] Bluetooth: hci4: command 0x0406 tx timeout [ 395.817789][T11045] bridge0: port 1(dummy0) entered disabled state [ 395.841510][T11045] dummy0: entered allmulticast mode [ 395.854095][T11045] bridge0: port 1(dummy0) entered blocking state [ 395.860689][T11045] bridge0: port 1(dummy0) entered forwarding state [ 395.881388][ T5956] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 396.041397][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 396.837388][T11070] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1237'. [ 397.146079][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 397.165271][ T5956] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 397.175215][ T5956] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 397.189644][ T5956] usb 1-1: Product: syz [ 397.199790][ T5956] usb 1-1: Manufacturer: syz [ 397.210428][ T5956] usb 1-1: SerialNumber: syz [ 397.228389][T11071] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1236'. [ 398.404286][ T5956] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 398.412706][ T5956] visor 1-1:1.0: probe with driver visor failed with error -110 [ 399.588394][ T5984] usb 1-1: USB disconnect, device number 37 [ 401.070947][T11103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 401.311573][T11104] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 402.301365][T11113] netlink: 'syz.0.1251': attribute type 11 has an invalid length. [ 402.363525][T11120] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1250'. [ 402.425065][T11113] netlink: 'syz.0.1251': attribute type 11 has an invalid length. [ 403.396534][T11132] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1253'. [ 403.991783][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 404.991406][ T5863] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 405.251218][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 405.266192][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 405.720370][ T5863] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 405.730557][ T5863] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 405.808746][ T5863] usb 3-1: Product: syz [ 405.830655][ T5863] usb 3-1: Manufacturer: syz [ 405.889211][T11158] No source specified [ 405.904462][T11158] trusted_key: encrypted_key: insufficient parameters specified [ 406.051689][ T5863] usb 3-1: SerialNumber: syz [ 406.371333][ T5863] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 406.461695][ T5863] visor 3-1:1.0: probe with driver visor failed with error -110 [ 407.239261][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 407.427071][ T5956] usb 3-1: USB disconnect, device number 41 [ 408.042902][T11188] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1268'. [ 409.191459][ T975] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 410.082394][ T5863] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 410.121918][ T975] usb 1-1: config 255 has an invalid interface number: 181 but max is 0 [ 410.131440][ T975] usb 1-1: config 255 has no interface number 0 [ 410.138973][ T975] usb 1-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 410.152733][ T975] usb 1-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 410.168802][ T975] usb 1-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 410.187601][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.197785][ T975] usb 1-1: Product: syz [ 410.202268][ T975] usb 1-1: Manufacturer: syz [ 410.206926][ T975] usb 1-1: SerialNumber: syz [ 410.222326][T11193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 410.251409][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 410.269207][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 410.274567][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 410.278168][ T5863] usb 3-1: config index 0 descriptor too short (expected 53, got 34) [ 410.290519][ T5850] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 410.363164][ T5956] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 410.365242][ T5863] usb 3-1: config 2 has an invalid interface number: 221 but max is 0 [ 410.431427][T11206] netlink: 'syz.5.1275': attribute type 7 has an invalid length. [ 410.482675][ T5863] usb 3-1: config 2 has no interface number 0 [ 410.494329][ T975] ti_usb_3410_5052 1-1:255.181: TI USB 3410 1 port adapter converter detected [ 410.529801][ T5863] usb 3-1: config 2 interface 221 has no altsetting 0 [ 410.568484][ T5956] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 410.575932][T11206] : entered promiscuous mode [ 410.590962][ T975] ti_usb_3410_5052 1-1:255.181: missing endpoints [ 410.624943][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.627038][ T5863] usb 3-1: string descriptor 0 read error: -22 [ 410.705673][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 410.723750][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.724650][ T975] usb 1-1: USB disconnect, device number 38 [ 410.747983][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.769041][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.800301][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.822949][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.823885][ T5863] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 410.843614][ T5863] usb 3-1: No valid video chain found. [ 410.858635][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.966342][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.994951][ T975] usb 3-1: USB disconnect, device number 42 [ 411.001711][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.014478][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.026592][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.036565][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.182126][T11213] netlink: 'syz.5.1276': attribute type 17 has an invalid length. [ 411.437765][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.445610][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.460021][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.477458][ T5956] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.496046][T11215] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 411.501546][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 411.506373][T11215] macvlan3: entered allmulticast mode [ 411.518085][T11215] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 411.529394][ T5956] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 411.533391][T11215] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 411.539254][ T5956] usb 5-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 411.547788][T11215] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 411.557807][ T5956] usb 5-1: Product: syz [ 411.565447][ T5956] usb 5-1: Manufacturer: syz [ 411.570131][ T5956] usb 5-1: SerialNumber: syz [ 411.573652][ T5863] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 411.580607][ T5956] usb 5-1: config 0 descriptor?? [ 411.590552][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1278'. [ 411.597873][ T5956] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 411.610537][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.623550][ T5956] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 411.634459][ T5956] usb 5-1: media controller created [ 411.983481][ T5863] usb 6-1: config 15 has an invalid interface number: 192 but max is 0 [ 411.997184][ T5863] usb 6-1: config 15 has no interface number 0 [ 412.003809][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.004318][ T5863] usb 6-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 412.045771][ T5863] usb 6-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 412.069020][ T5863] usb 6-1: config 15 interface 192 has no altsetting 0 [ 412.149214][ T5956] DVB: Unable to find symbol tda10046_attach() [ 412.151310][ T5863] usb 6-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 412.158614][ T5956] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 412.179004][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.186439][ T5956] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 412.196585][ T5863] usb 6-1: Product: syz [ 412.196607][ T5863] usb 6-1: Manufacturer: syz [ 412.196620][ T5863] usb 6-1: SerialNumber: syz [ 412.214957][T11213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 412.223799][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 412.386959][ T5956] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 412.400793][ T5956] usb 5-1: USB disconnect, device number 38 [ 412.499316][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 412.499334][ T30] audit: type=1400 audit(1757234905.635:707): avc: denied { listen } for pid=11229 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 412.561229][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 412.570855][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 412.588622][ T5928] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 412.598091][ T5928] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 412.607135][ T5928] usb 4-1: Product: syz [ 412.611822][ T5928] usb 4-1: Manufacturer: syz [ 412.616781][ T5928] usb 4-1: SerialNumber: syz [ 413.143277][ T5928] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 413.159520][ T5928] visor 4-1:1.0: probe with driver visor failed with error -110 [ 413.302715][ T975] usb 4-1: USB disconnect, device number 30 [ 413.772425][T11238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.812403][ T30] audit: type=1400 audit(1757234906.955:708): avc: denied { create } for pid=11237 comm="syz.2.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.833337][ T30] audit: type=1400 audit(1757234906.955:709): avc: denied { ioctl } for pid=11237 comm="syz.2.1284" path="socket:[27932]" dev="sockfs" ino=27932 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.914240][ T5863] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.144163][ T30] audit: type=1400 audit(1757234907.295:710): avc: denied { setopt } for pid=11252 comm="syz.5.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 414.288082][ T5863] usb 6-1: USB disconnect, device number 17 [ 414.339121][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.390420][T11259] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 414.394997][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1292'. [ 414.423807][T11259] macvlan2: entered allmulticast mode [ 414.429234][T11259] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 414.450182][T11259] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 414.476620][T11259] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 414.532928][ T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 414.565325][ T30] audit: type=1400 audit(1757234907.685:711): avc: denied { bind } for pid=11268 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.590065][T11269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 414.621395][ T30] audit: type=1400 audit(1757234907.685:712): avc: denied { listen } for pid=11268 comm="syz.3.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.793040][ T24] usb 1-1: config 5 has an invalid descriptor of length 83, skipping remainder of the config [ 414.803611][ T24] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 414.822335][ T24] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a [ 414.831850][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.839946][ T24] usb 1-1: Product: syz [ 414.881631][ T30] audit: type=1400 audit(1757234908.035:713): avc: denied { ioctl } for pid=11277 comm="syz.3.1296" path="socket:[28868]" dev="sockfs" ino=28868 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 414.927273][ T24] usb 1-1: Manufacturer: syz [ 414.943440][ T24] usb 1-1: SerialNumber: syz [ 415.007665][T11284] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 415.112811][T11286] netlink: 'syz.2.1297': attribute type 10 has an invalid length. [ 415.179073][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1300'. [ 415.255068][ T24] usb 1-1: USB disconnect, device number 39 [ 415.400651][T11292] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1299'. [ 415.727832][ T5956] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 416.172535][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 416.192061][ T5956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 416.215054][ T5956] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 416.285038][ T5956] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 416.320744][ T5956] usb 6-1: Product: syz [ 416.332465][ T5956] usb 6-1: Manufacturer: syz [ 416.340385][ T5956] usb 6-1: SerialNumber: syz [ 416.511409][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 416.661885][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 416.663851][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 416.716949][ T5956] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 416.727144][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 416.733484][ T5956] visor 6-1:1.0: probe with driver visor failed with error -110 [ 416.989625][ T24] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 417.005815][ T24] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 417.006000][ T5956] usb 6-1: USB disconnect, device number 18 [ 417.016575][ T24] usb 4-1: Product: syz [ 417.036450][ T24] usb 4-1: Manufacturer: syz [ 417.056664][ T24] usb 4-1: SerialNumber: syz [ 417.335912][ T24] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 417.353442][ T24] visor 4-1:1.0: probe with driver visor failed with error -71 [ 417.374471][ T24] usb 4-1: USB disconnect, device number 31 [ 418.071415][ T5928] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 418.366903][ T5928] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 418.400443][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.421842][ T5928] usb 1-1: config 0 descriptor?? [ 418.443048][ T5928] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 418.682355][ T30] audit: type=1400 audit(1757234911.785:714): avc: denied { read } for pid=11322 comm="syz.2.1310" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 418.741338][ T30] audit: type=1400 audit(1757234911.785:715): avc: denied { open } for pid=11322 comm="syz.2.1310" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 418.765120][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.802726][T11309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.840736][T11309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.853998][T11335] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 418.862262][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1312'. [ 418.898600][ T5863] usb 1-1: USB disconnect, device number 40 [ 419.037921][T11315] delete_channel: no stack [ 419.153193][T11339] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 419.159765][T11339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 419.167574][T11339] vhci_hcd vhci_hcd.0: Device attached [ 419.441505][ T24] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 419.602645][T11343] overlay: filesystem on ./bus not supported as upperdir [ 419.617930][ T30] audit: type=1400 audit(1757234912.765:716): avc: denied { read } for pid=11345 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 419.705184][ T30] audit: type=1326 audit(1757234912.855:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7fc00000 [ 419.805055][ T30] audit: type=1326 audit(1757234912.955:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11330 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f626c18ebe9 code=0x7fc00000 [ 420.135086][T11340] vhci_hcd: connection reset by peer [ 420.153322][ T13] vhci_hcd: stop threads [ 420.175209][ T13] vhci_hcd: release socket [ 420.180145][ T13] vhci_hcd: disconnect device [ 420.580264][T11373] tipc: Enabling of bearer rejected, already enabled [ 421.086303][T11385] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 421.101141][T11385] macvlan3: entered allmulticast mode [ 421.106566][T11385] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 421.152875][T11385] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 421.174696][T11385] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 421.227664][ T30] audit: type=1400 audit(1757234914.375:719): avc: denied { accept } for pid=11391 comm="syz.2.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.306007][T11398] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 421.641147][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 421.673618][T11417] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1334'. [ 421.841423][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 421.852339][ T9] usb 4-1: config 0 has an invalid interface number: 236 but max is 1 [ 421.869384][ T9] usb 4-1: config 0 has an invalid interface number: 129 but max is 1 [ 421.889107][ T9] usb 4-1: config 0 has no interface number 0 [ 421.903377][ T9] usb 4-1: config 0 has no interface number 1 [ 421.917194][ T9] usb 4-1: config 0 interface 236 has no altsetting 0 [ 421.936380][ T9] usb 4-1: config 0 interface 129 has no altsetting 0 [ 421.956292][ T9] usb 4-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 421.966107][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.971087][ T975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 421.980683][ T9] usb 4-1: Product: syz [ 421.991385][ T9] usb 4-1: Manufacturer: syz [ 421.998897][ T9] usb 4-1: SerialNumber: syz [ 422.007614][ T9] usb 4-1: config 0 descriptor?? [ 422.189269][ T975] usb 6-1: too many configurations: 177, using maximum allowed: 8 [ 422.216937][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.230698][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.285289][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.297479][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.361354][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.372665][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.400205][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.420753][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.429925][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.447169][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.455868][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.468516][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.482302][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.514157][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.544219][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.555015][ T975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.568537][ T975] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 422.578473][ T975] usb 6-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 422.587659][ T975] usb 6-1: Product: syz [ 422.593075][ T975] usb 6-1: Manufacturer: syz [ 422.597944][ T975] usb 6-1: SerialNumber: syz [ 422.612677][ T975] usb 6-1: config 0 descriptor?? [ 422.623688][ T975] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 422.637349][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 422.649979][ T975] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 422.659509][ T975] usb 6-1: media controller created [ 422.686516][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.748377][ T975] DVB: Unable to find symbol tda10046_attach() [ 422.754991][ T975] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 422.765022][ T975] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 422.834378][ T975] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 422.843826][ T5863] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 422.876360][ T975] usb 6-1: USB disconnect, device number 19 [ 423.007886][ T5863] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.020801][ T5863] usb 3-1: config 0 has no interface number 0 [ 423.039774][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 423.070231][ T5863] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 423.081987][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.092832][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.107259][ T5863] usb 3-1: config 0 descriptor?? [ 423.123733][T11428] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 423.156057][ T5863] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 423.215724][T11437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 423.225234][T11437] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 423.366381][ T975] usb 3-1: USB disconnect, device number 43 [ 423.471796][ T5863] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 423.631178][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 423.644074][ T5863] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 423.655979][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.668915][ T5863] usb 5-1: config 0 descriptor?? [ 423.684370][ T5863] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 423.694625][ T5863] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 423.706477][ T5863] usb-storage 5-1:0.0: USB Mass Storage device detected [ 423.716289][ T5863] usb-storage 5-1:0.0: device ignored [ 423.751303][ T5928] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 423.891368][ T5928] usb 1-1: device descriptor read/64, error -71 [ 423.911303][ T5956] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 424.074250][ T5956] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.083265][ T5956] usb 6-1: config 0 has no interface number 0 [ 424.089509][ T5956] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 424.101076][ T5956] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 424.112028][ T5956] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.121378][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.131380][ T5956] usb 6-1: config 0 descriptor?? [ 424.137218][T11448] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 424.144732][ T5928] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 424.159683][ T5956] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 424.211149][ T5863] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 424.313678][ T5928] usb 1-1: device descriptor read/64, error -71 [ 424.323723][ T9] ir_usb 4-1:0.236: required endpoints missing [ 424.340937][ T9] usb 4-1: selecting invalid altsetting 0 [ 424.353236][ T9] usb 4-1: selecting invalid altsetting 0 [ 424.359756][ T9] usb 4-1: Found UVC 2.26 device syz (1ace:e9b2) [ 424.393156][ T9] usb 4-1: No valid video chain found. [ 424.410300][ T9] usb 4-1: USB disconnect, device number 32 [ 424.450334][ T5928] usb usb1-port1: attempt power cycle [ 424.466732][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 424.482953][ T5900] usb 6-1: USB disconnect, device number 20 [ 424.506179][ T5863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.528205][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 424.546466][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.558578][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.567508][ T5863] usb 3-1: Product: syz [ 424.573981][ T5863] usb 3-1: Manufacturer: syz [ 424.578623][ T5863] usb 3-1: SerialNumber: syz [ 424.591294][ T24] vhci_hcd: vhci_device speed not set [ 424.908813][ T5928] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 425.012142][ T5928] usb 1-1: device descriptor read/8, error -71 [ 425.081246][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 425.190524][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.199868][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.216133][ T5863] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 425.227721][ T5863] usb 3-1: USB disconnect, device number 44 [ 425.243474][ T9] usb 4-1: config 15 has an invalid interface number: 192 but max is 0 [ 425.252155][ T5928] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 425.259696][ T9] usb 4-1: config 15 has no interface number 0 [ 425.266814][ T9] usb 4-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 425.277102][ T9] usb 4-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 425.288337][ T9] usb 4-1: config 15 interface 192 has no altsetting 0 [ 425.295712][ T5928] usb 1-1: device descriptor read/8, error -71 [ 425.303892][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 425.312978][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.322119][ T9] usb 4-1: Product: syz [ 425.327992][ T9] usb 4-1: Manufacturer: syz [ 425.332946][ T9] usb 4-1: SerialNumber: syz [ 425.340694][T11459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.421641][ T5928] usb usb1-port1: unable to enumerate USB device [ 425.712497][ T5863] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 426.000130][T11472] trusted_key: encrypted_key: insufficient parameters specified [ 426.207241][ T975] usb 5-1: USB disconnect, device number 39 [ 426.282508][ T5863] usb 3-1: device descriptor read/64, error -71 [ 426.433521][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 426.461545][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 426.649044][ T5863] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 426.851309][ T5863] usb 3-1: device descriptor read/64, error -71 [ 427.569278][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.694972][ T5863] usb usb3-port1: attempt power cycle [ 427.859920][ T9] usb 4-1: USB disconnect, device number 33 [ 427.899863][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.923922][T11490] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 428.071119][ T5984] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 428.383975][ T30] audit: type=1400 audit(1757234921.315:720): avc: denied { write } for pid=11493 comm="syz.5.1359" path="socket:[28395]" dev="sockfs" ino=28395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 428.401836][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.485408][ T5984] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 428.518752][ T5984] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 428.611307][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 428.640341][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 428.683595][T11513] Failed to initialize the IGMP autojoin socket (err -2) [ 428.691232][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.725425][ T5984] usb 1-1: config 0 descriptor?? [ 428.981412][ T975] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 429.005347][T11517] binder: BINDER_SET_CONTEXT_MGR already set [ 429.036012][T11517] binder: 11516:11517 ioctl 4018620d 200000004a80 returned -16 [ 429.148431][ T975] usb 5-1: config 0 has no interfaces? [ 429.158782][ T5984] usbhid 1-1:0.0: can't add hid device: -71 [ 429.166165][ T5984] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 429.174635][ T975] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 429.191041][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.202429][ T5984] usb 1-1: USB disconnect, device number 45 [ 429.219465][ T975] usb 5-1: Product: syz [ 429.236558][ T975] usb 5-1: Manufacturer: syz [ 429.248777][ T975] usb 5-1: SerialNumber: syz [ 429.264990][ T975] usb 5-1: config 0 descriptor?? [ 429.401301][ T5900] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 429.507398][ T9] usb 5-1: USB disconnect, device number 40 [ 429.551235][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 429.557624][ T5900] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 429.567192][ T5900] usb 3-1: config 0 has no interface number 0 [ 429.575523][ T5900] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.592644][ T5900] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.608559][ T5900] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 429.825198][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 429.940852][ T5900] usb 3-1: Product: syz [ 430.008005][ T5900] usb 3-1: SerialNumber: syz [ 430.035117][ T5900] usb 3-1: config 0 descriptor?? [ 430.101391][T11531] can: request_module (can-proto-5) failed. [ 430.120546][ T5900] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 430.146055][ T30] audit: type=1400 audit(1757234923.265:721): avc: denied { getopt } for pid=11536 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.213940][ T5900] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input22 [ 430.521759][T11522] netlink: 'syz.2.1369': attribute type 8 has an invalid length. [ 430.554395][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 430.742664][ C0] cm109_urb_ctl_callback: 62 callbacks suppressed [ 430.742694][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.742898][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.743090][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.743291][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.743490][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.743684][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.743880][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.744084][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.744283][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.744477][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.864934][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 430.874445][ T5900] usb 3-1: USB disconnect, device number 48 [ 430.992179][ T5900] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 431.162407][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 431.281489][ T975] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 431.441370][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 431.448899][ T975] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 431.508358][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.548932][ T975] usb 1-1: config 0 descriptor?? [ 431.566770][ T975] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 431.669776][T11564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1379'. [ 431.961751][ T5900] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 432.286900][ T975] gspca_vc032x: reg_w err -110 [ 432.292698][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.300597][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.375434][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.375476][ T5900] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 432.410952][ T5900] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.465889][ T5900] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.469128][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.524552][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.541853][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.557231][ T30] audit: type=1400 audit(1757234925.705:722): avc: denied { read } for pid=11577 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 432.583209][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.601059][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.659549][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.680397][ T5900] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.707351][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.713040][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.775412][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.789411][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.803974][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.816980][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.915658][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.947834][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.960150][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 432.986178][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.062617][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.089997][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.214235][ T975] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.239684][ T5900] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 433.297442][ T975] gspca_vc032x: Unknown sensor... [ 433.314640][ T6496] udevd[6496]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.374408][ T975] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 433.397821][ T975] usb 1-1: USB disconnect, device number 46 [ 435.108573][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 435.133887][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 435.563878][ T5900] usb 4-1: USB disconnect, device number 34 [ 435.617230][ T30] audit: type=1400 audit(1757234928.765:723): avc: denied { write } for pid=11584 comm="syz.2.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 435.654253][T11606] netlink: 'syz.0.1391': attribute type 2 has an invalid length. [ 436.121819][T11624] trusted_key: encrypted_key: insufficient parameters specified [ 437.841184][ T5900] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 438.202985][ T5900] usb 5-1: config 15 has an invalid interface number: 192 but max is 0 [ 438.241920][ T30] audit: type=1400 audit(1757234931.365:724): avc: denied { read } for pid=11653 comm="syz.3.1404" path="socket:[29657]" dev="sockfs" ino=29657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 438.266337][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.276111][ T5900] usb 5-1: config 15 has no interface number 0 [ 438.283199][ T5900] usb 5-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 438.711309][ T5928] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 438.728605][ T5900] usb 5-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 438.779256][ T5900] usb 5-1: config 15 interface 192 has no altsetting 0 [ 438.808132][ T5900] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 438.824071][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.832602][ T5900] usb 5-1: Product: syz [ 438.836818][ T5900] usb 5-1: Manufacturer: syz [ 438.845258][ T5900] usb 5-1: SerialNumber: syz [ 438.860149][T11641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.869493][ T5928] usb 6-1: config 15 has an invalid interface number: 192 but max is 0 [ 438.878247][ T5928] usb 6-1: config 15 has no interface number 0 [ 438.890285][ T5928] usb 6-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 438.900802][ T5928] usb 6-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 438.915402][ T5928] usb 6-1: config 15 interface 192 has no altsetting 0 [ 438.925418][ T5928] usb 6-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 438.935213][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.960670][ T5928] usb 6-1: Product: syz [ 439.029989][ T5928] usb 6-1: Manufacturer: syz [ 439.036189][T11672] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 439.045429][T11672] macvlan3: entered allmulticast mode [ 439.050882][T11672] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 439.194493][T11672] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 439.209193][T11672] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 439.217283][ T5928] usb 6-1: SerialNumber: syz [ 439.226515][T11660] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 439.807985][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.825588][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.210567][T11686] No source specified [ 440.322693][T11686] trusted_key: encrypted_key: insufficient parameters specified [ 440.700083][ T5900] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.823502][ T8733] udevd[8733]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.841492][ T5900] usb 5-1: USB disconnect, device number 41 [ 441.141095][ T5928] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.970747][ T5928] usb 6-1: USB disconnect, device number 21 [ 442.167749][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.852511][T11718] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1420'. [ 443.045878][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 443.068615][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 443.741513][ T5900] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 443.810593][T11734] netlink: 'syz.4.1427': attribute type 3 has an invalid length. [ 443.827489][T11733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.901558][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 443.908273][ T5900] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 443.927642][ T5900] usb 1-1: config 179 has no interface number 0 [ 443.943240][ T5900] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 443.954970][ T5900] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 443.967084][ T5900] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 444.018941][ T5900] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 444.064573][ T5900] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 444.091650][ T5900] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 444.101438][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.225414][T11726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 444.726510][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 444.769640][ T978] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 445.003145][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.007812][ T5900] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 445.076584][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.198774][ T5900] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 445.261308][ T5900] usb 6-1: can't read configurations, error -61 [ 445.421192][ T5900] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 445.752590][ T978] usb 1-1: USB disconnect, device number 47 [ 445.758550][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 445.758595][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 445.818353][ T5900] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 445.826774][ T5900] usb 6-1: can't read configurations, error -61 [ 445.860227][ T5900] usb usb6-port1: attempt power cycle [ 446.241626][ T5900] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 446.297805][ T5900] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 446.361428][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 446.395930][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 446.462605][ T5900] usb 6-1: can't read configurations, error -61 [ 446.872819][ T5900] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 446.955343][T11782] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 447.033131][T11776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 447.055591][ T5900] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 447.088835][T11785] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 447.102021][ T5900] usb 6-1: can't read configurations, error -61 [ 447.118683][ T5900] usb usb6-port1: unable to enumerate USB device [ 447.612434][T11783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 447.618997][T11783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.627227][T11783] vhci_hcd vhci_hcd.0: Device attached [ 447.693108][T11789] vhci_hcd: connection closed [ 448.147989][ T12] vhci_hcd: stop threads [ 448.201494][ T5928] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 448.267617][ T12] vhci_hcd: release socket [ 448.272602][ T12] vhci_hcd: disconnect device [ 448.287538][ T5928] usb 37-1: enqueue for inactive port 0 [ 448.413703][ T5928] vhci_hcd: vhci_device speed not set [ 449.585513][T11809] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1445'. [ 450.557434][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 451.059444][T11832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1452'. [ 451.241764][T11834] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 451.248314][T11834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 451.256350][T11834] vhci_hcd vhci_hcd.0: Device attached [ 451.501305][ T975] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 451.531066][ T5984] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 451.840902][T11836] vhci_hcd: connection reset by peer [ 451.847014][ T3020] vhci_hcd: stop threads [ 451.868843][ T3020] vhci_hcd: release socket [ 451.878163][ T3020] vhci_hcd: disconnect device [ 451.938387][T11844] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 452.101273][T11844] macvlan2: entered allmulticast mode [ 452.106865][T11844] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 452.518412][ T5984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.530400][ T5984] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.541394][ T5984] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 452.550698][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.554328][T11844] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 452.567506][T11844] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 452.577908][ T5984] usb 1-1: config 0 descriptor?? [ 452.596008][ T5984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.603435][ T5984] dvb-usb: bulk message failed: -22 (3/0) [ 452.626827][ T5984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.639732][ T5984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.648061][ T5984] usb 1-1: media controller created [ 452.656299][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.678116][ T5984] dvb-usb: bulk message failed: -22 (6/0) [ 452.688251][ T5984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.706750][ T5984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 452.722332][ T5984] dvb-usb: schedule remote query interval to 150 msecs. [ 452.729424][ T5984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 452.893850][T11851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 452.896117][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 452.907484][ T5984] dvb-usb: error while querying for an remote control event. [ 453.201059][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 453.239759][ T5984] dvb-usb: error while querying for an remote control event. [ 453.413401][T11868] FAULT_INJECTION: forcing a failure. [ 453.413401][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 453.442134][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 453.460047][ T5984] dvb-usb: error while querying for an remote control event. [ 453.691592][T11868] CPU: 0 UID: 0 PID: 11868 Comm: syz.3.1461 Not tainted syzkaller #0 PREEMPT(full) [ 453.691621][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.691632][T11868] Call Trace: [ 453.691638][T11868] [ 453.691645][T11868] dump_stack_lvl+0x16c/0x1f0 [ 453.691673][T11868] should_fail_ex+0x512/0x640 [ 453.691695][T11868] ? fs_reclaim_acquire+0xae/0x150 [ 453.691719][T11868] ? tomoyo_encode2+0x100/0x3e0 [ 453.691743][T11868] should_failslab+0xc2/0x120 [ 453.691764][T11868] __kmalloc_noprof+0xd2/0x510 [ 453.691788][T11868] tomoyo_encode2+0x100/0x3e0 [ 453.691820][T11868] tomoyo_encode+0x29/0x50 [ 453.691844][T11868] tomoyo_realpath_from_path+0x18f/0x6e0 [ 453.691876][T11868] tomoyo_path_number_perm+0x245/0x580 [ 453.691897][T11868] ? tomoyo_path_number_perm+0x237/0x580 [ 453.691919][T11868] ? io_schedule_timeout+0x84/0x150 [ 453.691939][T11868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.691983][T11868] ? hook_file_ioctl_common+0x36/0x410 [ 453.692002][T11868] ? hook_file_ioctl_common+0x66/0x410 [ 453.692020][T11868] ? hook_file_ioctl_common+0x145/0x410 [ 453.692046][T11868] ? __rcu_read_unlock+0x2bc/0x550 [ 453.692066][T11868] ? __fget_files+0x20e/0x3c0 [ 453.692090][T11868] security_file_ioctl+0x9b/0x240 [ 453.692116][T11868] __x64_sys_ioctl+0xb7/0x210 [ 453.692145][T11868] do_syscall_64+0xcd/0x4c0 [ 453.692169][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.692185][T11868] RIP: 0033:0x7f626c18ebe9 [ 453.692200][T11868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.692215][T11868] RSP: 002b:00007f626d0ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.692231][T11868] RAX: ffffffffffffffda RBX: 00007f626c3c5fa0 RCX: 00007f626c18ebe9 [ 453.692242][T11868] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000003 [ 453.692252][T11868] RBP: 00007f626d0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 453.692261][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.692270][T11868] R13: 00007f626c3c6038 R14: 00007f626c3c5fa0 R15: 00007ffed1dd0a18 [ 453.692293][T11868] [ 453.692328][T11868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.915619][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 453.932886][ T5984] dvb-usb: error while querying for an remote control event. [ 454.191959][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 454.235614][ T5863] dvb-usb: error while querying for an remote control event. [ 454.551633][ T5984] dvb-usb: bulk message failed: -22 (1/0) [ 454.557414][ T5984] dvb-usb: error while querying for an remote control event. [ 454.784075][T11887] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1466'. [ 455.258084][T11888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1465'. [ 455.324163][ T5984] usb 1-1: USB disconnect, device number 48 [ 455.440108][ T5984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 456.157421][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.173965][T11908] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1471'. [ 456.239712][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.277204][ T30] audit: type=1400 audit(1757234949.425:725): avc: denied { watch } for pid=11912 comm="syz.4.1473" path="/326" dev="tmpfs" ino=1700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 456.309264][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.330459][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.349284][ T30] audit: type=1400 audit(1757234949.425:726): avc: denied { ioctl } for pid=11895 comm="syz.3.1469" path="socket:[30246]" dev="sockfs" ino=30246 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 456.381925][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.389825][ T5900] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 456.419483][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.457807][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.528269][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.536879][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.567144][T11910] netlink: 'syz.5.1472': attribute type 8 has an invalid length. [ 456.601526][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 456.635586][ T5900] usb 6-1: config 1 has an invalid interface number: 206 but max is 0 [ 456.770079][ T975] vhci_hcd: vhci_device speed not set [ 456.814205][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.371448][ T5900] usb 6-1: config 1 has no interface number 0 [ 457.378023][ T5900] usb 6-1: config 1 interface 206 altsetting 2 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 457.408677][ T5900] usb 6-1: config 1 interface 206 altsetting 2 bulk endpoint 0x8C has invalid maxpacket 16 [ 457.671916][ T5900] usb 6-1: config 1 interface 206 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 457.708862][ T5900] usb 6-1: config 1 interface 206 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 0 [ 457.721073][ T5900] usb 6-1: config 1 interface 206 has no altsetting 0 [ 457.758864][ T5900] usb 6-1: New USB device found, idVendor=4113, idProduct=0400, bcdDevice=80.24 [ 457.846051][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.175778][ T5900] usb 6-1: Product: syz [ 458.654347][ T5900] usb 6-1: Manufacturer: syz [ 458.659016][ T5900] usb 6-1: SerialNumber: syz [ 458.692036][T11909] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 458.798679][ T5900] ipaq 6-1:1.206: PocketPC PDA converter detected [ 458.903261][ T5900] ipaq 6-1:1.206: probe with driver ipaq failed with error -71 [ 458.923402][ T5900] usb 6-1: USB disconnect, device number 26 [ 459.206013][T11957] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1479'. [ 460.211302][T11971] Failed to initialize the IGMP autojoin socket (err -2) [ 461.183179][ T5928] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 461.470486][T11995] block nbd0: Attempted send on invalid socket [ 461.477243][T11995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 461.489586][T11995] efs: cannot read volume header [ 461.831491][ T30] audit: type=1400 audit(1757234954.975:727): avc: denied { write } for pid=11990 comm="syz.2.1487" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.881136][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.905577][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.946841][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.962523][ T30] audit: type=1400 audit(1757234954.985:728): avc: denied { open } for pid=11990 comm="syz.2.1487" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.994003][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 462.009390][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 462.022383][ T5928] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.032144][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.045635][T11979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 462.071442][ T5928] hub 4-1:1.0: bad descriptor, ignoring hub [ 462.292161][ T5928] hub 4-1:1.0: probe with driver hub failed with error -5 [ 462.312472][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 462.322412][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 462.782478][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 462.850646][ T30] audit: type=1400 audit(1757234955.065:729): avc: denied { read append } for pid=11990 comm="syz.2.1487" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.850838][ T5928] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 463.020422][ T5928] cdc_wdm 4-1:1.0: Unknown control protocol [ 463.557581][ T9] usb 4-1: USB disconnect, device number 35 [ 463.613630][ T5928] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 463.911100][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 463.959131][ T30] audit: type=1400 audit(1757234957.105:730): avc: denied { watch watch_reads } for pid=12011 comm="syz.4.1491" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 464.342327][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.427484][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 464.451525][ T30] audit: type=1400 audit(1757234957.245:731): avc: denied { setopt } for pid=12011 comm="syz.4.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 464.453150][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.503446][ T5928] usb 1-1: config 0 descriptor?? [ 464.527142][ T30] audit: type=1800 audit(1757234957.475:732): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1487" name="/" dev="9p" ino=2 res=0 errno=0 [ 464.558540][ T5928] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 465.688535][ T5928] gspca_vc032x: reg_r err -110 [ 465.706898][ T5928] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 465.983143][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 466.231005][T12027] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1495' sets config #33555589 [ 466.285463][T12018] delete_channel: no stack [ 467.783362][T12052] validate_nla: 23 callbacks suppressed [ 467.783399][T12052] netlink: 'syz.3.1501': attribute type 5 has an invalid length. [ 468.781877][ T975] usb 1-1: USB disconnect, device number 49 [ 468.926949][T12066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1504'. [ 469.121219][ T975] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 470.121221][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 470.296548][T12067] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 470.303109][T12067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.311297][T12067] vhci_hcd vhci_hcd.0: Device attached [ 470.383004][T12063] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 470.389574][T12063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.411245][T12071] vhci_hcd: connection closed [ 470.411470][T12063] vhci_hcd vhci_hcd.0: Device attached [ 471.118058][ T3020] vhci_hcd: stop threads [ 471.118201][T12078] vhci_hcd: connection closed [ 471.124240][ T975] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 471.129397][ T3020] vhci_hcd: release socket [ 471.129420][ T3020] vhci_hcd: disconnect device [ 471.196261][T12081] team0: Unable to change to the same mode the team is in [ 471.198123][ T6318] vhci_hcd: stop threads [ 471.223776][ T975] usb 1-1: config 1 has no interface number 0 [ 471.292704][ T975] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 471.307061][ T6318] vhci_hcd: release socket [ 471.324078][ T6318] vhci_hcd: disconnect device [ 471.351235][ T5984] vhci_hcd: vhci_device speed not set [ 471.416681][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1509'. [ 471.439658][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1509'. [ 472.164555][T12102] binder: 12101:12102 ioctl 4018620d 0 returned -22 [ 472.199191][ T975] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 472.236160][ T975] usb 1-1: config 1 interface 105 has no altsetting 0 [ 472.266244][ T975] usb 1-1: string descriptor 0 read error: -71 [ 472.272819][ T975] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 472.386267][T12102] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1513'. [ 472.396389][T12102] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 472.435336][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.628940][T12108] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1514'. [ 472.823894][ T5928] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 472.944843][ T975] usb 1-1: can't set config #1, error -71 [ 472.993942][ T975] usb 1-1: USB disconnect, device number 50 [ 473.092193][T12112] tipc: Enabling of bearer rejected, already enabled [ 473.168840][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 473.186872][ T5928] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 473.203444][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.211720][ T5928] usb 6-1: Product: syz [ 473.216041][ T5928] usb 6-1: Manufacturer: syz [ 473.220650][ T5928] usb 6-1: SerialNumber: syz [ 473.251752][ T5928] usb 6-1: config 0 descriptor?? [ 473.276306][ T5928] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 473.581878][ T975] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 473.679988][T12107] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1512'. [ 474.481346][ T5928] gspca_sonixj: reg_r err -110 [ 474.491540][ T5928] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 474.527691][ T5927] usb 6-1: USB disconnect, device number 27 [ 474.531002][T12130] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 474.562834][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.574627][T12122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 474.581134][T12122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.594534][T12123] vhci_hcd: connection closed [ 474.594816][T12122] vhci_hcd vhci_hcd.0: Device attached [ 474.600550][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 474.623736][ T36] vhci_hcd: stop threads [ 474.628322][ T36] vhci_hcd: release socket [ 474.632916][ T36] vhci_hcd: disconnect device [ 474.639884][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 474.652961][ T975] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 474.669756][ T975] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.679401][ T975] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.687792][ T975] usb 5-1: Manufacturer: syz [ 474.721905][ T975] usb 5-1: config 0 descriptor?? [ 474.958452][T12135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.969807][T12135] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 474.977693][T12135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1521'. [ 475.272939][ T975] rc_core: IR keymap rc-hauppauge not found [ 475.284091][ T975] Registered IR keymap rc-empty [ 475.297557][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 475.334577][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 475.520192][ T975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 476.342917][ T975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 476.736127][T12154] No source specified [ 476.791583][T12154] trusted_key: encrypted_key: insufficient parameters specified [ 477.197673][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.211810][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.295786][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.331967][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.362272][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.395324][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.408356][T12164] tipc: Enabling of bearer rejected, already enabled [ 477.421763][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.452674][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.489952][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.531898][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.559478][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.599462][ T975] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 477.659747][ T975] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 477.682326][ T975] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 477.804896][T12178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1533'. [ 478.071257][ T5928] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 478.247512][ T5928] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 478.257851][ T5928] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.273432][ T5928] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.343226][ T975] usb 5-1: USB disconnect, device number 43 [ 478.404948][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.708436][T12187] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1538'. [ 478.732949][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.033225][T12197] No source specified [ 479.145760][T12197] trusted_key: encrypted_key: insufficient parameters specified [ 479.421371][ T5928] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.448038][ T5928] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 479.976633][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1544'. [ 480.017496][T12207] tipc: Started in network mode [ 480.029901][T12207] tipc: Node identity ac1414aa, cluster identity 4711 [ 480.055440][ T6496] udevd[6496]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.088113][T12207] tipc: Enabling of bearer rejected, failed to enable media [ 480.334406][ T5984] lo speed is unknown, defaulting to 1000 [ 480.351478][ T975] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 480.366608][T12209] team0: Unable to change to the same mode the team is in [ 480.922282][ T975] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 480.933394][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.953001][ T975] usb 3-1: config 0 descriptor?? [ 481.170640][ T975] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 481.393528][ T975] hackrf 3-1:0.0: Could not detect board [ 481.416724][ T975] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 481.457132][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'. [ 481.469390][ T9] usb 4-1: USB disconnect, device number 36 [ 481.645473][ T975] usb 3-1: USB disconnect, device number 49 [ 481.971871][ T5863] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 482.121573][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 482.129451][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 482.140529][ T5863] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 482.153502][ T5863] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 482.161782][ T5863] usb 1-1: Product: syz [ 482.166007][ T5863] usb 1-1: Manufacturer: syz [ 482.170649][ T5863] usb 1-1: SerialNumber: syz [ 482.181534][ T975] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 482.345807][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.368853][ T975] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 482.424276][ T5863] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 482.460869][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.470115][ T5863] visor 1-1:1.0: probe with driver visor failed with error -71 [ 482.512544][ T5863] usb 1-1: USB disconnect, device number 51 [ 482.644848][ T975] usb 3-1: config 0 descriptor?? [ 483.178397][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.188317][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.197164][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 483.268319][ T975] cherry 0003:046A:0023.0011: unknown main item tag 0x0 [ 483.299425][ T975] cherry 0003:046A:0023.0011: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0 [ 483.420757][ T9] usb 4-1: config 15 has an invalid interface number: 192 but max is 0 [ 483.431313][ T9] usb 4-1: config 15 has no interface number 0 [ 483.450831][ T9] usb 4-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 483.556960][ T9] usb 4-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 483.570653][ T9] usb 4-1: config 15 interface 192 has no altsetting 0 [ 483.584058][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 483.595710][ T975] usb 3-1: USB disconnect, device number 50 [ 483.596577][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.072198][ T9] usb 4-1: Product: syz [ 484.077315][ T9] usb 4-1: Manufacturer: syz [ 484.082348][ T9] usb 4-1: SerialNumber: syz [ 484.092923][T12245] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.319275][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.040771][ T9] usb 4-1: USB disconnect, device number 37 [ 485.237240][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.656967][T12262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.710760][T12296] 9pnet_fd: Insufficient options for proto=fd [ 485.722574][ T30] audit: type=1400 audit(1757234978.855:733): avc: denied { write } for pid=12287 comm="syz.3.1572" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 487.646549][ T30] audit: type=1400 audit(1757234980.795:734): avc: denied { connect } for pid=12320 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 487.679577][T12322] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1579'. [ 487.688827][ T30] audit: type=1400 audit(1757234980.825:735): avc: denied { write } for pid=12317 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 487.763354][T12319] 9pnet_fd: p9_fd_create_unix (12319): problem connecting socket: ./file0: -111 [ 487.792452][T12322] orangefs_devreq_open: device cannot be opened in blocking mode [ 487.800410][ T30] audit: type=1400 audit(1757234980.945:736): avc: denied { write } for pid=12317 comm="syz.4.1579" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 487.862166][ T30] audit: type=1400 audit(1757234980.945:737): avc: denied { accept } for pid=12320 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 489.503320][T12356] tipc: Enabling of bearer rejected, already enabled [ 490.110000][T12370] binder: 12369:12370 ioctl c0306201 200000000080 returned -14 [ 490.178519][T12376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 494.832372][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1608'. [ 495.081467][ T5928] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 495.728727][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.743869][ T5928] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 495.753846][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.772115][ T5928] usb 5-1: config 0 descriptor?? [ 495.786304][ T5928] usbhid 5-1:0.0: can't add hid device: -22 [ 495.799540][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 495.981036][ T5900] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 496.001416][ T9] usb 5-1: USB disconnect, device number 44 [ 496.304327][T12436] netdevsim netdevsim2: Direct firmware load for . [ 496.304327][T12436] failed with error -2 [ 496.316802][T12436] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 496.316802][T12436] [ 496.371355][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 496.464492][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 496.479541][ T5900] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 496.490028][ T5900] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 496.719759][ T5900] usb 6-1: Product: syz [ 496.729165][ T5900] usb 6-1: Manufacturer: syz [ 496.781014][ T5863] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 496.871368][ T5900] usb 6-1: SerialNumber: syz [ 496.958664][ T5863] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 497.014687][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.066803][ T5863] usb 4-1: Product: syz [ 497.093784][ T5863] usb 4-1: Manufacturer: syz [ 497.126483][ T5863] usb 4-1: SerialNumber: syz [ 497.171759][ T5900] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 497.172391][ T5863] usb 4-1: config 0 descriptor?? [ 497.182065][ T5900] visor 6-1:1.0: probe with driver visor failed with error -71 [ 497.204188][ T5900] usb 6-1: USB disconnect, device number 28 [ 497.474568][ T5863] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 497.525751][ T5863] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 497.827240][T12459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1621'. [ 499.175958][T12470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1624'. [ 499.262515][ T5984] usb 4-1: USB disconnect, device number 38 [ 499.430336][T12470] dummy0: left allmulticast mode [ 499.436724][T12470] bridge0: port 1(dummy0) entered disabled state [ 499.687881][T12478] team0: Unable to change to the same mode the team is in [ 501.029922][T12493] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 501.043510][T12493] team0: Device hsr_slave_0 failed to register rx_handler [ 501.053854][T12481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 501.060366][T12481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 501.145794][T12485] vhci_hcd: connection closed [ 501.147530][T12481] vhci_hcd vhci_hcd.0: Device attached [ 501.168434][ T36] vhci_hcd: stop threads [ 501.185868][ T36] vhci_hcd: release socket [ 501.222330][ T36] vhci_hcd: disconnect device [ 501.253712][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.260112][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.429351][ T30] audit: type=1400 audit(1757234994.575:738): avc: denied { listen } for pid=12500 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 501.492527][ T30] audit: type=1400 audit(1757234994.605:739): avc: denied { map } for pid=12500 comm="syz.0.1633" path="socket:[32419]" dev="sockfs" ino=32419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 502.074335][T12511] No source specified [ 502.120356][T12511] trusted_key: encrypted_key: insufficient parameters specified [ 502.869922][T12473] delete_channel: no stack [ 503.037875][ T30] audit: type=1326 audit(1757234996.185:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.146584][T12517] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 503.458015][ T30] audit: type=1326 audit(1757234996.185:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.508277][ T30] audit: type=1326 audit(1757234996.215:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.541422][T12522] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 503.558066][ T30] audit: type=1326 audit(1757234996.215:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.647999][ T30] audit: type=1326 audit(1757234996.215:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.763537][ T5863] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 503.775602][ T30] audit: type=1326 audit(1757234996.215:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.802139][ T30] audit: type=1326 audit(1757234996.225:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.829596][ T30] audit: type=1326 audit(1757234996.225:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12514 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f626c18ebe9 code=0x7ffc0000 [ 503.923232][T12529] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1642'. [ 503.962236][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 504.065383][ T5863] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 504.089528][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.104516][T12533] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.112569][T12533] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 504.121232][T12533] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.128937][T12533] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 504.205609][ T5863] usb 1-1: Product: syz [ 504.298884][ T5863] usb 1-1: Manufacturer: syz [ 504.321390][ T5863] usb 1-1: SerialNumber: syz [ 504.611041][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.638011][T12545] tipc: Enabling of bearer rejected, failed to enable media [ 504.856662][T12551] No source specified [ 504.967939][T12551] trusted_key: encrypted_key: insufficient parameters specified [ 505.231138][ T5863] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 505.255318][ T5863] usb 1-1: USB disconnect, device number 52 [ 505.606358][ T6496] udevd[6496]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.715770][T12557] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1651'. [ 507.006981][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 507.006998][ T30] audit: type=1400 audit(1757235000.155:765): avc: denied { create } for pid=12572 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 507.148959][T12577] fuse: Bad value for 'fd' [ 507.253425][ T30] audit: type=1400 audit(1757235000.375:766): avc: denied { read } for pid=12574 comm="syz.3.1657" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 507.333316][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1659'. [ 507.357345][ T30] audit: type=1400 audit(1757235000.375:767): avc: denied { open } for pid=12574 comm="syz.3.1657" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 507.416169][ T30] audit: type=1400 audit(1757235000.375:768): avc: denied { ioctl } for pid=12574 comm="syz.3.1657" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 507.436858][T12581] team0: Unable to change to the same mode the team is in [ 508.522926][T12592] No source specified [ 508.538256][T12592] trusted_key: encrypted_key: insufficient parameters specified [ 509.390175][T12602] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 509.398773][T12602] overlayfs: missing 'lowerdir' [ 509.716500][T12599] comedi comedi3: 8255: I/O port conflict (0x40404f25,4) [ 509.727306][T12599] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 510.177139][T12599] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 510.917227][T12599] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 510.924909][T12599] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 510.939184][T12599] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 510.948379][T12599] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 510.960653][T12599] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 510.981012][T12599] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 510.991556][T12599] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 510.998507][T12599] comedi comedi3: 8255: I/O port conflict (0x800006,4) [ 511.005604][T12599] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 511.021191][T12599] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 511.032851][T12599] comedi comedi3: 8255: I/O port conflict (0x80402,4) [ 511.041436][T12599] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 511.323025][T12599] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 511.334699][T12599] comedi comedi3: 8255: I/O port conflict (0x41,4) [ 511.366343][T12599] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 511.522127][T12599] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 511.533982][T12599] comedi comedi3: 8255: I/O port conflict (0x8000003,4) [ 511.555664][T12599] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 512.351312][ T5900] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 512.422891][T12638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1676'. [ 512.511109][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 513.200228][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 513.218849][ T5900] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 513.228140][ T5900] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 513.236707][ T5900] usb 1-1: Product: syz [ 513.241125][ T5900] usb 1-1: Manufacturer: syz [ 513.245730][ T5900] usb 1-1: SerialNumber: syz [ 513.536484][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1680'. [ 513.561087][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1680'. [ 513.633290][ T5900] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 513.646242][ T5900] visor 1-1:1.0: probe with driver visor failed with error -71 [ 513.675803][ T5900] usb 1-1: USB disconnect, device number 53 [ 514.280017][T12665] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1683'. [ 515.085576][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 515.135914][ T30] audit: type=1400 audit(1757235008.275:769): avc: denied { bind } for pid=12676 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.147296][T12679] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 515.256392][ T30] audit: type=1400 audit(1757235008.405:770): avc: denied { connect } for pid=12667 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 515.258991][T12679] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 515.369230][T12677] netlink: 'syz.0.1689': attribute type 10 has an invalid length. [ 515.396648][T12684] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1688'. [ 515.444210][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'. [ 515.477158][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 515.509099][T12677] team0: Port device dummy0 added [ 516.695459][T12691] binder: 12690:12691 ioctl c0306201 200000000640 returned -22 [ 516.782406][T12691] netlink: 8920 bytes leftover after parsing attributes in process `syz.2.1692'. [ 517.051180][ T978] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 517.792757][ T978] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 517.883461][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.909512][ T978] usb 5-1: Product: syz [ 517.925816][ T978] usb 5-1: Manufacturer: syz [ 517.936987][ T978] usb 5-1: SerialNumber: syz [ 518.713218][ T978] rtl8150 5-1:1.0: couldn't reset the device [ 518.719543][ T978] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 518.808818][T12725] usb usb8: usbfs: process 12725 (syz.5.1702) did not claim interface 0 before use [ 519.388432][ T978] usb 5-1: USB disconnect, device number 45 [ 520.774524][T12743] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 520.798801][T12743] team0: Port device dummy0 added [ 521.271889][ T30] audit: type=1400 audit(1757235014.415:771): avc: denied { map } for pid=12749 comm="syz.0.1711" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 521.591040][ T30] audit: type=1400 audit(1757235014.415:772): avc: denied { execute } for pid=12749 comm="syz.0.1711" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 522.337981][T12727] delete_channel: no stack [ 522.810759][ T30] audit: type=1326 audit(1757235015.955:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12746 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2118ebe9 code=0x7fc00000 [ 523.020277][ T30] audit: type=1326 audit(1757235016.075:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12746 comm="syz.4.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2118ebe9 code=0x7fc00000 [ 523.043650][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.811629][ T978] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 524.599728][T12793] /dev/nullb0: Can't open blockdev [ 524.919429][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 524.931289][ T978] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 524.943269][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 524.962013][ T975] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 525.469325][ T978] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 525.478911][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.487575][ T978] usb 6-1: Product: syz [ 525.492154][ T978] usb 6-1: Manufacturer: syz [ 525.496760][ T978] usb 6-1: SerialNumber: syz [ 525.506598][ T978] usb 6-1: config 0 descriptor?? [ 525.513036][T12771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 525.520629][T12771] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 525.529539][ T978] usb 6-1: ucan: probing device on interface #0 [ 525.640800][ T975] usb 5-1: config 15 has an invalid interface number: 192 but max is 0 [ 525.658852][ T975] usb 5-1: config 15 has no interface number 0 [ 525.668856][ T975] usb 5-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 525.685347][ T975] usb 5-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 525.699809][ T975] usb 5-1: config 15 interface 192 has no altsetting 0 [ 525.709840][ T975] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 526.080754][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.089168][ T975] usb 5-1: Product: syz [ 526.093671][ T975] usb 5-1: Manufacturer: syz [ 526.098349][ T975] usb 5-1: SerialNumber: syz [ 526.180817][T12806] evm: overlay not supported [ 526.205624][ T978] usb 6-1: ucan: device reported invalid device info [ 526.206989][T12791] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 526.227447][ T978] usb 6-1: ucan: probe failed; try to update the device firmware [ 526.529703][ T978] usb 6-1: USB disconnect, device number 29 [ 526.763337][T12811] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1724'. [ 527.163394][ T30] audit: type=1400 audit(1757235020.295:775): avc: denied { open } for pid=12814 comm="syz.5.1726" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 527.652568][ T975] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.688057][ T30] audit: type=1400 audit(1757235020.835:776): avc: denied { ioctl } for pid=12814 comm="syz.5.1726" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 527.926345][ T975] usb 5-1: USB disconnect, device number 46 [ 527.975748][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.241590][ T5900] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 528.411307][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 528.427732][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 528.442314][ T5900] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 528.450823][ T5900] usb 3-1: config 8 has no interface number 0 [ 528.460643][ T5900] usb 3-1: config 8 interface 255 has no altsetting 0 [ 528.479589][ T5900] usb 3-1: string descriptor 0 read error: -22 [ 528.486558][ T5900] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice= e.bf [ 528.498513][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.641487][T12837] FAULT_INJECTION: forcing a failure. [ 528.641487][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.654738][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.5.1733 Not tainted syzkaller #0 PREEMPT(full) [ 528.654754][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.654761][T12837] Call Trace: [ 528.654764][T12837] [ 528.654768][T12837] dump_stack_lvl+0x16c/0x1f0 [ 528.654787][T12837] should_fail_ex+0x512/0x640 [ 528.654804][T12837] _copy_from_user+0x2e/0xd0 [ 528.654821][T12837] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 528.654841][T12837] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 528.654862][T12837] ? find_held_lock+0x2b/0x80 [ 528.654878][T12837] sk_getsockopt+0x13e/0x2eb0 [ 528.654892][T12837] ? avc_has_perm_noaudit+0x149/0x3b0 [ 528.654907][T12837] ? __pfx_sk_getsockopt+0x10/0x10 [ 528.654922][T12837] ? __pfx_avc_has_perm+0x10/0x10 [ 528.654934][T12837] ? __lock_acquire+0xb97/0x1ce0 [ 528.654952][T12837] ? sock_has_perm+0x259/0x2f0 [ 528.654969][T12837] ? find_held_lock+0x2b/0x80 [ 528.654980][T12837] ? __might_fault+0xe3/0x190 [ 528.654992][T12837] ? __might_fault+0xe3/0x190 [ 528.655001][T12837] ? __might_fault+0x13b/0x190 [ 528.655015][T12837] do_sock_getsockopt+0x3a3/0x440 [ 528.655032][T12837] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 528.655046][T12837] ? __fget_files+0x204/0x3c0 [ 528.655066][T12837] __sys_getsockopt+0x12f/0x260 [ 528.655081][T12837] __x64_sys_getsockopt+0xbd/0x160 [ 528.655093][T12837] ? do_syscall_64+0x91/0x4c0 [ 528.655106][T12837] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.655118][T12837] do_syscall_64+0xcd/0x4c0 [ 528.655132][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.655144][T12837] RIP: 0033:0x7f31e258ebe9 [ 528.655155][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.655165][T12837] RSP: 002b:00007f31e33dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 528.655176][T12837] RAX: ffffffffffffffda RBX: 00007f31e27c5fa0 RCX: 00007f31e258ebe9 [ 528.655183][T12837] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000004 [ 528.655188][T12837] RBP: 00007f31e33dc090 R08: 0000200000000380 R09: 0000000000000000 [ 528.655194][T12837] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 528.655200][T12837] R13: 00007f31e27c6038 R14: 00007f31e27c5fa0 R15: 00007ffdc6b938e8 [ 528.655214][T12837] [ 529.147739][T12841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 529.256701][ T30] audit: type=1800 audit(1757235022.405:777): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.1734" name="/" dev="sockfs" ino=35303 res=0 errno=0 [ 529.289553][T12826] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1729'. [ 529.336813][ T5900] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 529.845043][T12854] binder: BINDER_SET_CONTEXT_MGR already set [ 530.041742][T12854] binder: 12852:12854 ioctl 4018620d 200000004a80 returned -16 [ 530.217550][ T5900] usb 3-1: USB disconnect, device number 51 [ 530.601479][T12864] No source specified [ 530.656821][T12864] trusted_key: encrypted_key: insufficient parameters specified [ 531.236484][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 531.364819][ T5984] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 531.465987][ T30] audit: type=1400 audit(1757235024.615:778): avc: denied { watch_reads } for pid=12880 comm="syz.3.1743" path="/343" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 531.544000][ T5984] usb 6-1: no configurations [ 531.548863][ T5984] usb 6-1: can't read configurations, error -22 [ 531.693197][ T5984] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 531.792647][T12894] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1745'. [ 531.865183][ T5984] usb 6-1: no configurations [ 531.870134][ T5984] usb 6-1: can't read configurations, error -22 [ 531.898017][ T5984] usb usb6-port1: attempt power cycle [ 532.227820][ T30] audit: type=1400 audit(1757235025.375:779): avc: denied { create } for pid=12899 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 532.371325][ T5984] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 532.412564][ T5984] usb 6-1: no configurations [ 532.417240][ T5984] usb 6-1: can't read configurations, error -22 [ 533.401233][ T5984] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 533.442312][ T5984] usb 6-1: no configurations [ 533.447141][ T5984] usb 6-1: can't read configurations, error -22 [ 533.455795][T12909] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 533.482541][ T5984] usb usb6-port1: unable to enumerate USB device [ 533.542925][T12909] bridge0: port 3(dummy0) entered disabled state [ 533.571603][T12909] dummy0: left allmulticast mode [ 533.576611][T12909] dummy0: left promiscuous mode [ 533.611316][T12909] bridge0: port 3(dummy0) entered disabled state [ 533.637474][T12909] team0: Port device dummy0 added [ 535.158780][T12942] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 535.843122][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'. [ 536.193058][T12949] FAULT_INJECTION: forcing a failure. [ 536.193058][T12949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.206321][T12949] CPU: 0 UID: 0 PID: 12949 Comm: syz.3.1758 Not tainted syzkaller #0 PREEMPT(full) [ 536.206337][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.206343][T12949] Call Trace: [ 536.206347][T12949] [ 536.206351][T12949] dump_stack_lvl+0x16c/0x1f0 [ 536.206371][T12949] should_fail_ex+0x512/0x640 [ 536.206387][T12949] _copy_to_user+0x32/0xd0 [ 536.206404][T12949] copy_to_sockptr_offset+0x15c/0x1b0 [ 536.206415][T12949] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 536.206433][T12949] ? __pfx_copy_to_sockptr_offset+0x10/0x10 [ 536.206444][T12949] ? find_held_lock+0x2b/0x80 [ 536.206469][T12949] sk_getsockopt+0x2b0/0x2eb0 [ 536.206484][T12949] ? avc_has_perm_noaudit+0x149/0x3b0 [ 536.206498][T12949] ? __pfx_sk_getsockopt+0x10/0x10 [ 536.206513][T12949] ? __pfx_avc_has_perm+0x10/0x10 [ 536.206525][T12949] ? __lock_acquire+0xb97/0x1ce0 [ 536.206543][T12949] ? sock_has_perm+0x259/0x2f0 [ 536.206560][T12949] ? find_held_lock+0x2b/0x80 [ 536.206572][T12949] ? __might_fault+0xe3/0x190 [ 536.206583][T12949] ? __might_fault+0xe3/0x190 [ 536.206592][T12949] ? __might_fault+0x13b/0x190 [ 536.206606][T12949] do_sock_getsockopt+0x3a3/0x440 [ 536.206623][T12949] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 536.206637][T12949] ? __fget_files+0x204/0x3c0 [ 536.206655][T12949] __sys_getsockopt+0x12f/0x260 [ 536.206671][T12949] __x64_sys_getsockopt+0xbd/0x160 [ 536.206682][T12949] ? do_syscall_64+0x91/0x4c0 [ 536.206697][T12949] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.206709][T12949] do_syscall_64+0xcd/0x4c0 [ 536.206723][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.206734][T12949] RIP: 0033:0x7f626c18ebe9 [ 536.206744][T12949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.206754][T12949] RSP: 002b:00007f626d0ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 536.206765][T12949] RAX: ffffffffffffffda RBX: 00007f626c3c5fa0 RCX: 00007f626c18ebe9 [ 536.206772][T12949] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000004 [ 536.206778][T12949] RBP: 00007f626d0ee090 R08: 0000200000000380 R09: 0000000000000000 [ 536.206784][T12949] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 536.206790][T12949] R13: 00007f626c3c6038 R14: 00007f626c3c5fa0 R15: 00007ffed1dd0a18 [ 536.206802][T12949] [ 536.814847][T12955] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 536.821414][T12955] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 536.829263][T12955] vhci_hcd vhci_hcd.0: Device attached [ 537.831029][ T9] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 537.850478][T12957] vhci_hcd: connection closed [ 537.857601][ T13] vhci_hcd: stop threads [ 537.873340][ T13] vhci_hcd: release socket [ 537.891318][ T13] vhci_hcd: disconnect device [ 538.754718][ T975] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 538.986468][ T975] usb 3-1: no configurations [ 538.994278][ T975] usb 3-1: can't read configurations, error -22 [ 539.151095][ T975] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 539.291329][ T5900] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 539.312116][ T975] usb 3-1: no configurations [ 539.317902][ T975] usb 3-1: can't read configurations, error -22 [ 539.326185][ T975] usb usb3-port1: attempt power cycle [ 539.456465][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 539.510218][ T5900] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.674006][ T5900] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 539.903610][T12998] FAULT_INJECTION: forcing a failure. [ 539.903610][T12998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.916792][T12998] CPU: 0 UID: 0 PID: 12998 Comm: syz.3.1772 Not tainted syzkaller #0 PREEMPT(full) [ 539.916813][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.916820][T12998] Call Trace: [ 539.916824][T12998] [ 539.916828][T12998] dump_stack_lvl+0x16c/0x1f0 [ 539.916848][T12998] should_fail_ex+0x512/0x640 [ 539.916864][T12998] _copy_to_user+0x32/0xd0 [ 539.916882][T12998] simple_read_from_buffer+0xcb/0x170 [ 539.916895][T12998] proc_fail_nth_read+0x197/0x240 [ 539.916909][T12998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.916921][T12998] ? rw_verify_area+0xcf/0x6c0 [ 539.916938][T12998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.916950][T12998] vfs_read+0x1e4/0xcf0 [ 539.916963][T12998] ? __pfx___mutex_lock+0x10/0x10 [ 539.916979][T12998] ? __pfx_vfs_read+0x10/0x10 [ 539.916993][T12998] ? __fget_files+0x20e/0x3c0 [ 539.917009][T12998] ksys_read+0x12a/0x250 [ 539.917018][T12998] ? __pfx_ksys_read+0x10/0x10 [ 539.917033][T12998] do_syscall_64+0xcd/0x4c0 [ 539.917049][T12998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.917060][T12998] RIP: 0033:0x7f626c18d5fc [ 539.917070][T12998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 539.917081][T12998] RSP: 002b:00007f626d0ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.917092][T12998] RAX: ffffffffffffffda RBX: 00007f626c3c5fa0 RCX: 00007f626c18d5fc [ 539.917098][T12998] RDX: 000000000000000f RSI: 00007f626d0ee0a0 RDI: 0000000000000005 [ 539.917104][T12998] RBP: 00007f626d0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 539.917114][T12998] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 539.917120][T12998] R13: 00007f626c3c6038 R14: 00007f626c3c5fa0 R15: 00007ffed1dd0a18 [ 539.917133][T12998] [ 540.098815][ T975] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 540.110377][ T5900] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 540.122411][ T5900] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 540.131700][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.139664][ T5900] usb 6-1: Product: syz [ 540.144946][ T5900] usb 6-1: Manufacturer: syz [ 540.149521][ T5900] usb 6-1: SerialNumber: syz [ 540.154317][ T978] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 540.166632][ T5900] hso 6-1:6.0: Can't find BULK IN endpoint [ 540.204236][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 540.225807][ T975] usb 3-1: no configurations [ 540.235672][ T975] usb 3-1: can't read configurations, error -22 [ 540.313447][ T978] usb 5-1: config 15 has an invalid interface number: 192 but max is 0 [ 540.324619][ T978] usb 5-1: config 15 has no interface number 0 [ 540.331202][ T978] usb 5-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 540.342133][ T978] usb 5-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 540.354058][ T978] usb 5-1: config 15 interface 192 has no altsetting 0 [ 540.372793][ T30] audit: type=1400 audit(1757235033.525:780): avc: denied { ioctl } for pid=12982 comm="syz.5.1766" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.401326][ T978] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 540.410404][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.410494][ T975] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 540.419053][ T978] usb 5-1: Product: syz [ 540.436987][ T30] audit: type=1400 audit(1757235033.585:781): avc: denied { map } for pid=12982 comm="syz.5.1766" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.472268][ T978] usb 5-1: Manufacturer: syz [ 540.476998][ T978] usb 5-1: SerialNumber: syz [ 540.487807][T13002] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 540.500469][ T975] usb 3-1: no configurations [ 540.510464][T13008] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x547bc [ 540.526614][ T975] usb 3-1: can't read configurations, error -22 [ 540.533371][ T975] usb usb3-port1: unable to enumerate USB device [ 540.551416][T13008] memcg:ffff888055bf0d00 [ 540.556545][T13008] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 540.575157][T13008] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 540.585955][T13008] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888055bf0d00 [ 540.595486][T13008] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 540.606988][T13008] page_owner tracks the page as allocated [ 540.677561][T13008] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13008, tgid 12982 (syz.5.1766), ts 540510423435, free_ts 540482059605 [ 540.849972][T13008] post_alloc_hook+0x1c0/0x230 [ 540.876991][T13008] get_page_from_freelist+0x132b/0x38e0 [ 540.885534][ T30] audit: type=1400 audit(1757235033.765:782): avc: denied { read } for pid=5201 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 540.898791][T13008] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 540.909911][ T30] audit: type=1400 audit(1757235033.765:783): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.935782][ T30] audit: type=1400 audit(1757235033.825:784): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.957674][ T30] audit: type=1400 audit(1757235033.825:785): avc: denied { add_name } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.965981][T13008] alloc_pages_mpol+0x1fb/0x550 [ 540.979950][ T30] audit: type=1400 audit(1757235033.825:786): avc: denied { create } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.008425][T13008] folio_alloc_noprof+0x20/0x2d0 [ 541.015386][T13008] filemap_alloc_folio_noprof+0x3a1/0x470 [ 541.022008][T13008] page_cache_ra_order+0x4e1/0xd70 [ 541.027640][T13008] filemap_fault+0x152e/0x2930 [ 541.032986][T13008] __do_fault+0x10a/0x490 [ 541.039587][ T30] audit: type=1400 audit(1757235033.825:787): avc: denied { append open } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.063701][T13008] do_pte_missing+0xf50/0x3ba0 [ 541.068722][T13008] __handle_mm_fault+0x152a/0x2a50 [ 541.074519][T13008] handle_mm_fault+0x589/0xd10 [ 541.079784][ T30] audit: type=1400 audit(1757235033.825:788): avc: denied { getattr } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 541.104937][T13008] __get_user_pages+0x551/0x34a0 [ 541.115207][T13008] populate_vma_page_range+0x267/0x3f0 [ 541.120727][T13008] __mm_populate+0x1d8/0x380 [ 541.141262][T13008] vm_mmap_pgoff+0x37f/0x470 [ 541.166584][T13008] page last free pid 23 tgid 23 stack trace: [ 541.174795][T13008] __free_frozen_pages+0x7d5/0x10f0 [ 541.180147][T13008] tlb_remove_table_rcu+0x116/0x1a0 [ 541.186108][T13008] rcu_core+0x799/0x1530 [ 541.201250][T13008] handle_softirqs+0x219/0x8e0 [ 541.206075][T13008] run_ksoftirqd+0x3a/0x60 [ 541.210498][T13008] smpboot_thread_fn+0x3f7/0xae0 [ 541.251042][T13008] kthread+0x3c2/0x780 [ 541.255178][T13008] ret_from_fork+0x5d4/0x6f0 [ 541.283254][T13008] ret_from_fork_asm+0x1a/0x30 [ 541.292210][T13008] ------------[ cut here ]------------ [ 541.297708][T13008] kernel BUG at mm/filemap.c:867! [ 541.314816][T13008] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 541.321292][T13008] CPU: 1 UID: 0 PID: 13008 Comm: syz.5.1766 Not tainted syzkaller #0 PREEMPT(full) [ 541.330651][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.340688][T13008] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 541.346657][T13008] Code: 78 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 15 78 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 fe 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 f0 77 c8 ff 48 [ 541.366245][T13008] RSP: 0018:ffffc90003127460 EFLAGS: 00010246 [ 541.372298][T13008] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e2fe000 [ 541.380249][T13008] RDX: 0000000000080000 RSI: ffffffff81f3164a RDI: ffff88802f3e2884 [ 541.388200][T13008] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 541.396151][T13008] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 541.404099][T13008] R13: ffffea000151ef00 R14: 0000000000000000 R15: 000000000002c928 [ 541.412049][T13008] FS: 00007f31e33bb6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 541.420961][T13008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.427528][T13008] CR2: 00007f90cd3e6ffc CR3: 000000006aceb000 CR4: 00000000003526f0 [ 541.435483][T13008] Call Trace: [ 541.438741][T13008] [ 541.441651][T13008] ? rcu_is_watching+0x12/0xc0 [ 541.446400][T13008] ? __pfx___filemap_add_folio+0x10/0x10 [ 541.452020][T13008] filemap_add_folio+0x10e/0x220 [ 541.456939][T13008] ? __pfx_filemap_add_folio+0x10/0x10 [ 541.462389][T13008] ? css_rstat_updated+0x1c2/0x510 [ 541.467485][T13008] page_cache_ra_order+0x5a7/0xd70 [ 541.472582][T13008] filemap_fault+0x152e/0x2930 [ 541.477329][T13008] ? __pfx_filemap_fault+0x10/0x10 [ 541.482434][T13008] ? __pfx_filemap_map_pages+0x10/0x10 [ 541.487876][T13008] __do_fault+0x10a/0x490 [ 541.492191][T13008] ? __pfx_filemap_map_pages+0x10/0x10 [ 541.497626][T13008] do_pte_missing+0xf50/0x3ba0 [ 541.502381][T13008] ? mtree_range_walk+0x718/0xc00 [ 541.507389][T13008] ? find_held_lock+0x2b/0x80 [ 541.512048][T13008] __handle_mm_fault+0x152a/0x2a50 [ 541.517151][T13008] ? __pfx___handle_mm_fault+0x10/0x10 [ 541.522602][T13008] handle_mm_fault+0x589/0xd10 [ 541.527356][T13008] __get_user_pages+0x551/0x34a0 [ 541.532285][T13008] ? __pfx___get_user_pages+0x10/0x10 [ 541.537641][T13008] populate_vma_page_range+0x267/0x3f0 [ 541.543089][T13008] ? __pfx_populate_vma_page_range+0x10/0x10 [ 541.549053][T13008] ? __pfx_find_vma_intersection+0x10/0x10 [ 541.554841][T13008] ? do_mmap+0x69c/0x1210 [ 541.559154][T13008] __mm_populate+0x1d8/0x380 [ 541.563730][T13008] ? __pfx___mm_populate+0x10/0x10 [ 541.568826][T13008] ? up_write+0x1b2/0x520 [ 541.573135][T13008] vm_mmap_pgoff+0x37f/0x470 [ 541.577710][T13008] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 541.582804][T13008] ? __fget_files+0x20e/0x3c0 [ 541.587506][T13008] ksys_mmap_pgoff+0x32c/0x5c0 [ 541.592292][T13008] __x64_sys_mmap+0x125/0x190 [ 541.596976][T13008] do_syscall_64+0xcd/0x4c0 [ 541.601479][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.607362][T13008] RIP: 0033:0x7f31e258ebe9 [ 541.611816][T13008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.631409][T13008] RSP: 002b:00007f31e33bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 541.639805][T13008] RAX: ffffffffffffffda RBX: 00007f31e27c6090 RCX: 00007f31e258ebe9 [ 541.647759][T13008] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 541.655712][T13008] RBP: 00007f31e2611e19 R08: 0000000000000007 R09: 000000002c93a000 [ 541.663665][T13008] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 541.671636][T13008] R13: 00007f31e27c6128 R14: 00007f31e27c6090 R15: 00007ffdc6b938e8 [ 541.679596][T13008] [ 541.682593][T13008] Modules linked in: [ 541.687393][T13008] ---[ end trace 0000000000000000 ]--- [ 541.698729][T13008] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 541.706707][T13008] Code: 78 c8 ff 48 c7 c6 60 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 15 78 c8 ff 48 c7 c6 c0 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 fe 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 f0 77 c8 ff 48 [ 541.727145][T13008] RSP: 0018:ffffc90003127460 EFLAGS: 00010246 [ 541.733838][T13008] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e2fe000 [ 541.742338][T13008] RDX: 0000000000080000 RSI: ffffffff81f3164a RDI: ffff88802f3e2884 SYZFAIL: failed to send rpc fd=3 want=1664 sent=0 n=-1 (errno 32: Broken pipe) [ 541.750331][T13008] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 541.758998][T13008] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: 0000000000000002 [ 541.876856][T13008] R13: ffffea000151ef00 R14: 0000000000000000 R15: 000000000002c928 [ 541.885297][T13008] FS: 00007f31e33bb6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 541.900234][T13008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.056290][T13008] CR2: 00007f3aa8ef7d60 CR3: 000000006aceb000 CR4: 00000000003526f0 [ 542.121263][T13008] Kernel panic - not syncing: Fatal exception [ 542.127603][T13008] Kernel Offset: disabled [ 542.131917][T13008] Rebooting in 86400 seconds..