last executing test programs: 11.135079177s ago: executing program 3 (id=1625): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000012000302000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c"], 0x70}}, 0x0) 11.005166717s ago: executing program 3 (id=1627): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x59a7, &(0x7f0000000340)={0x0, 0x8c59, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9.855886901s ago: executing program 1 (id=1629): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x8, 0x1, 0x3c3}, &(0x7f0000000dc0), &(0x7f0000000340)) (async) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x8, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 9.782449075s ago: executing program 3 (id=1630): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffffffeffffff00"], 0x1b) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) r7 = getpid() sched_setattr(r7, &(0x7f0000000080)={0x38, 0x5, 0x41, 0x6, 0x1ff, 0x1, 0x1, 0x3, 0x3, 0x4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x9, 0x0, 0x0, 0x2}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 7.142249072s ago: executing program 0 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000080), 0x1003) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r1, 0x5411, 0xffefff1f00000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket(0x2b, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) getpid() open(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r4 = socket$caif_stream(0x25, 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000007ca0100000002303"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/253, 0xfd}], 0x1, &(0x7f000001b240)=""/4096, 0x1000}, 0x452}], 0x1, 0x40000000, &(0x7f0000000280)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume_offset', 0x100, 0x2) r6 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000001041f61c0904005e0103010108092180000401223401090581030004c02bc77f050203000408050800"/63], &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x20, 0x3, 0x20, 0xd}, 0x65, &(0x7f0000000140)={0x5, 0xf, 0x65, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x2, 0xff00, 0xb, [0x30, 0xc0, 0xf, 0x6000, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "fa9b8a8b334eeffc7c850ad22ae6ffaa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x9, 0x6}, @generic={0x22, 0x10, 0xa, "00458cc65978e0869ec27dfb3aab2a86ab985c2407e74b487ee2f3e7732283"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x181e3fd05285f05e}}]}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.621877234s ago: executing program 1 (id=1641): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x24004080) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x2d, {0x2d, 0xf, "ed9fbb70062796a31c5e4cb771b61b8a9ee4b9d1c550e251272154aa167d77a766f997e864adcfe7bcfe9a"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000400)={0x34, &(0x7f0000000100)={0x40, 0x5, 0xcb, "486d5733dc598c4b71358e86614f1e9f85a77895eb934744ee1b2c107e107321b8b9c872a1336678396982ae25960199bf89a6e4b4660d670a7b98d88e59281754f1b5237ee365b6e53e8320fe935ed551715758114d38ca1bae781e4bae435568f24253e1c8ac0ed638e3bfa297a43294c3c88b83329263827047e7a27312239a9fea1fa56b4dff1a4142caa1689d9cf17876a272ebfce7dca9893f5e14caf74f3419382c0b4151f7a3a61cf50b64b55eb56d97a79c63628f35a3935ffff191972a397f1522473afea261"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000280)={0x20, 0x0, 0x89, {0x87, "75990a848d91e616c7d2a5bda4502d8aac8949c8585679c0d5634699e99173e9e71468206112a5f1665b4ecf7b2624fc9c8d6645c6b85393b9a30254b2675c63e4e3a834423af597a9d847030109158b5ee4ff61afab30ab21f485afc4c3c6bbc6c2e2b69ee76955b35fc6233e647d2ce1c2814f22e53b4b42d0241dfdab83c5450ca3decf8d06"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x12}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.071536442s ago: executing program 4 (id=1642): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x20, @private1, 0xff}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd7) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) r8 = socket$kcm(0x2, 0x7, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000280)={0x2c, &(0x7f0000000400)={0x20, 0x6, 0x5, {0x5, 0x31, "3cc1e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.875768723s ago: executing program 3 (id=1643): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r0, &(0x7f0000000180)=""/183, 0xb7) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x3, 0x0, &(0x7f0000000280)=[{0x7, 0xe}, {0x800, 0xa454}, {0x9, 0x200055d}]}) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4.133960731s ago: executing program 3 (id=1644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x8, 0x6a, 0x8001}) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x201) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x0, 0x0, 0x0, 0x0}) bind$inet6(r0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000200)=0x4d) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000480)=0x81, 0x4) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 3.921556393s ago: executing program 0 (id=1645): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) getrusage(0x1, &(0x7f0000000440)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x4c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) (async) getrusage(0x1, &(0x7f0000000440)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x4c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) 3.533932051s ago: executing program 2 (id=1646): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101080, 0x100, 0x16}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) fchdir(r0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x8010, r1, 0x0) close_range(r0, r0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x408d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x167e) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x48000) r4 = dup(r2) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000400)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={r1, 0x1, 0x7f, 0x9}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000480)) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000500)=@arm64_fp={0x604000000010006c, &(0x7f00000004c0)}) ioctl$FIOCLEX(r0, 0x5451) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r4, r3, 0x37, 0x14, r5, @void, @value=r7}, 0x20) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r6) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x404, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040845}, 0x40014) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000810) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r1, r5, 0x34, 0x0, @void}, 0x10) 3.414411374s ago: executing program 1 (id=1647): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$VT_RESIZEX(r3, 0x4b3d, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x17) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000040)={0x2, {0xc, 0x9, 0x745d, 0x40}, {0x3, 0x80, 0xabe, 0xa}, {0x5099, 0x5667}}) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 3.344928225s ago: executing program 2 (id=1648): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x26, 0x6, 0x0, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x10, 0x1, 0x10}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file2\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xdf, 0x4, 0x9}) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0xf, r1, 0x5, r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x26, 0x6, 0x0, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x10, 0x1, 0x10}}) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x8) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) symlink(&(0x7f0000002040)='./file2\x00', &(0x7f0000000000)='./file0\x00') (async) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xdf, 0x4, 0x9}) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0xf, r1, 0x5, r2}, 0x10) (async) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) (async) 3.284038481s ago: executing program 1 (id=1649): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000012000302000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c"], 0x70}}, 0x0) 3.21769196s ago: executing program 0 (id=1650): socket(0x23, 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000020000000004000000180e0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x200, 0x200, 0x2e8, 0x110, 0x2e8, 0x4, 0x0, {[{{@arp={@loopback, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESHEX=r2], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r3}, 0xfffffffffffffd76) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x7, 0xd0, &(0x7f0000000840)=""/208, 0x40f00, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2000000300000000000000000000000000110006cb8eb1521b7b2c65b60b754d17351f133a7b5dca99f03ced3c1fd9ebec55dfb81beb5fdaa0ed8db59aa0dbe77b1324dc99f3188f08be9f55d8546614f2b3a5359a4c23f4475c707992fa059b593c0670ca5c2a391eb39393ea8c32f0533e19913ae9f57412e54cd85bd043796a3a0055330364385231469f42a0387627de7853ca18f8025c4517dd3abc5860d502573c94445d8f3f97037b8251c12896a2c19412ce6e1b20b3280fee70776707739dc4e637ac6903f7a700dd566c4f4ac8e8034056d96b697619702852e037b860a9098894ab304e1ddcf710a515e67924cce3360eb439635998a1d4269d1bd483d487", @ANYRES32=0x0, @ANYBLOB="8000020008000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, 0x0) 3.093204893s ago: executing program 1 (id=1651): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000200)=0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0xf2c, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x40000005, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0x4, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x8, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x2000003, 0x81, 0x48c93690, 0x46, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff001, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xfffffff4, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000fc0)="69b6b54d3a8bc11e9f5a230ae13e00c43c9cba6f33d4737aa6da1ae9c0cc2bd2db8128142e119f56068505fc9424d66e7cd33cdc7fcd5bed06ff41787d09b703f304795be02d9a14b64908ce8b03c899b116628939db81fcc4aeea84749f7ab4c36d13e95786a40e9590358b0b08b5bae33f5e1c8f4168d00a0edd89c04c44cc0960a846eb31abd0f89217232566664c74374bdc77c552bc5f0fcb76e5", 0x9d}, {&(0x7f0000001e80)="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", 0x1c2}], 0x2}}], 0x1, 0x24840) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x4010, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.867437506s ago: executing program 0 (id=1652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x5a, &(0x7f00000001c0)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18) syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x149441) timer_create(0x3, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) bind$nfc_llcp(r5, 0x0, 0x11) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 2.718157027s ago: executing program 2 (id=1653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000febfffff00"/28], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000001400)=""/51, 0x33}], 0x3, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r9, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) unshare(0x2c060000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) unshare(0x24020400) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f00000044c0)) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0), &(0x7f0000000300)) 2.560682288s ago: executing program 4 (id=1654): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x5, 0x1, 0x0, 0x2}) (async) pipe(0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c021) (async) close_range(r3, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000600)={0x80}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x20, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.556102641s ago: executing program 1 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) 2.149984336s ago: executing program 0 (id=1656): syz_usb_connect(0x0, 0x3f0, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3ceb4a3a28d93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da07250101000300090507080800040406b505bce3"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0xfff2, 0x0, 0x6}]}) 2.066521221s ago: executing program 4 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x11) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec2b7) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) (rerun: 64) chdir(&(0x7f0000000040)='./bus\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 1.817413948s ago: executing program 2 (id=1658): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f0000000240), 0x4003) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) socket$kcm(0x29, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 1.808911473s ago: executing program 4 (id=1659): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x10015c0, 0x0, 0x0, 0x0) (async) rename(0x0, 0x0) (async) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "1204000000f2aa1d1e0d494f6c4903de8a08e2328997b8ac46b04400", "a04027fa124125c63a5b0e4412c6ab5c", {"4186dbba08364dba146d6e8dda52d97b", "ff027abe261f352c54d03f15919eb36c"}}}}}}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000140)=""/69, 0x45}], 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xca, 0xa2, 0x4d, 0x20, 0x1604, 0x8007, 0x6467, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x100, 0x6, [{{0x9, 0x4, 0x24, 0x4, 0x1, 0x60, 0x1e, 0x28, 0xc, [], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0x8, 0x6, [@generic={0x9, 0x4, "059ce294a3e8fc"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) 938.392835ms ago: executing program 4 (id=1660): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001640)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_usb_connect(0x3, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x6, "04f3e9ae6bf7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000001000/0x2000)=nil, 0x2000}) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) close(0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 827.036067ms ago: executing program 2 (id=1661): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000012000302000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c"], 0x70}}, 0x0) 698.48602ms ago: executing program 2 (id=1662): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) 142.061291ms ago: executing program 3 (id=1663): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0xff, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xffffff00, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x14, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @common=@ipv6header={{0x28}, {0x21, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0024360000003607ad6667e44bb2cd26c7f872b2a6ba743febfd81b4a5ceb58e9c8690a139a795dbb34c976e696cd965"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 117.429266ms ago: executing program 0 (id=1664): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x1d6, &(0x7f0000000800)={@random, @empty, @val={@void, {0x8100, 0x7}}, {@ipv6={0x86dd, @udp={0x4, 0x6, "70eac3", 0x19c, 0x11, 0x1, @empty, @loopback, {[@srh={0xff, 0x8, 0x4, 0x4, 0x3, 0x30, 0xff16, [@dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x2e, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x67}, @srh={0x11, 0x10, 0x4, 0x8, 0x4, 0x8, 0x6, [@mcast1, @empty, @mcast1, @private2, @loopback, @mcast1, @loopback, @remote]}, @dstopts={0xff, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x10}, @hao={0xc9, 0x10, @private1}]}, @fragment={0x32, 0x0, 0x43, 0x0, 0x0, 0x1, 0x65}, @srh={0x8, 0x2, 0x4, 0x1, 0xc, 0x8, 0x8, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x2c}, @fragment={0x0, 0x0, 0x8, 0x1, 0x0, 0x14, 0x68}], {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "bf60757d505976c41330541713bde6e3e67e5bd5c311637025a5a6abe394daba", "0caefebf2d91fc017e4d634ae90bd054", {"c36b16496bbf180941e995a2244989c9", "823b2fc1b91015bbd96886f51df2f2de"}}}}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "81bf02a8"}]}}, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@window={0x3, 0x3, 0x40}]}}}}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 0s ago: executing program 4 (id=1665): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0xa0002009}) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x8001, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18d63142470000000700000000000000f5ffffff94000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, 0x0) eventfd2(0x8, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) kernel console output (not intermixed with test programs): tting 0 [ 629.311196][ T5898] usb 1-1: selecting invalid altsetting 0 [ 629.318168][ T5898] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 629.341124][ T5898] usb 1-1: USB disconnect, device number 53 [ 629.900371][T11087] vlan4: entered promiscuous mode [ 629.954463][T11087] bridge0: entered promiscuous mode [ 630.214121][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 630.223286][T11087] bridge_slave_1: left allmulticast mode [ 630.229252][T11087] bridge_slave_1: left promiscuous mode [ 630.235345][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.967160][T11087] bridge_slave_0: left allmulticast mode [ 631.004610][T11087] bridge_slave_0: left promiscuous mode [ 631.012296][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.259223][T11104] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1136'. [ 631.884774][T11085] lo speed is unknown, defaulting to 1000 [ 634.405854][ T7465] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 634.542816][T11121] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 634.584444][ T7465] usb 1-1: Using ep0 maxpacket: 16 [ 634.596612][ T7465] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 634.615680][ T7465] usb 1-1: config 0 has no interface number 0 [ 634.644430][ T7465] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 634.677422][ T7465] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 634.694920][ T7465] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 634.709224][ T7465] usb 1-1: Product: syz [ 634.719607][ T7465] usb 1-1: SerialNumber: syz [ 634.781688][ T7465] usb 1-1: config 0 descriptor?? [ 634.815498][ T7465] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 635.039582][ T10] usb 1-1: USB disconnect, device number 54 [ 635.669516][ T30] audit: type=1400 audit(1765839360.732:739): avc: denied { ioctl } for pid=11129 comm="syz.1.1145" path="socket:[28962]" dev="sockfs" ino=28962 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 636.748064][T11136] team0 (unregistering): Port device team_slave_0 removed [ 636.760498][T11136] team0 (unregistering): Port device team_slave_1 removed [ 636.784410][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 636.871396][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 636.878218][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 636.944702][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 636.951597][ T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 636.960038][ T10] usb 2-1: config 0 has no interface number 0 [ 636.966460][ T10] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 636.982530][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 636.991835][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.000135][ T10] usb 2-1: Product: syz [ 637.013598][ T10] usb 2-1: Manufacturer: syz [ 637.018746][ T10] usb 2-1: SerialNumber: syz [ 637.030303][ T10] usb 2-1: config 0 descriptor?? [ 637.040271][T11152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 637.144688][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 637.151239][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 637.252910][T11152] vivid-007: disconnect [ 637.265352][ T10] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 637.283497][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 637.293020][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 637.301968][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 637.320192][ T6021] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 637.348960][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 637.389529][T11163] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 637.401095][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 637.465029][T11151] vivid-007: reconnect [ 637.470071][ T8456] usb 2-1: USB disconnect, device number 39 [ 637.484786][ T8456] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 637.494563][ T6021] usb 1-1: Using ep0 maxpacket: 16 [ 637.502091][ T6021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.516273][ T8456] keyspan 2-1:0.133: device disconnected [ 637.578470][ T6021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.651037][ T6021] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 637.672052][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 637.681435][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 637.694857][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 637.701617][ T6021] usb 1-1: Product: syz [ 637.706216][T11157] ceph: No mds server is up or the cluster is laggy [ 637.713375][ T6021] usb 1-1: SerialNumber: syz [ 637.805279][T11169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'. [ 637.815476][T11172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.816302][ T30] audit: type=1400 audit(1765839362.882:740): avc: denied { write } for pid=11168 comm="syz.4.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 637.962909][ T6021] usb 1-1: 0:2 : does not exist [ 637.977002][ T6021] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 638.036754][ T6021] usb 1-1: USB disconnect, device number 55 [ 638.093711][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.493820][T11180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 638.506497][T11181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 639.365769][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 639.737596][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.754434][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 639.763876][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 639.808149][ T7465] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 639.822618][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 639.833001][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.847697][T11186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 639.860962][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 639.868046][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 639.875876][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 639.882530][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 640.013094][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 640.024411][ T7465] usb 4-1: Using ep0 maxpacket: 8 [ 640.031546][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 640.504633][ T7465] usb 4-1: unable to get BOS descriptor or descriptor too short [ 640.515644][ T7465] usb 4-1: config 4 interface 0 has no altsetting 0 [ 640.532239][ T7465] usb 4-1: string descriptor 0 read error: -22 [ 640.538780][ T7465] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 640.540583][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.549142][ T7465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.609883][ T7465] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 640.618733][T11204] bond3: (slave lo): Releasing backup interface [ 640.631222][T11204] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 640.644920][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.668862][ T7465] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 640.689997][T11204] bond0: (slave bond_slave_0): Releasing backup interface [ 640.697997][ T7465] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 640.710640][ T7465] usb 4-1: media controller created [ 640.722341][T11204] bond0: (slave bond_slave_1): Releasing backup interface [ 640.741025][ T7465] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.763173][T11204] team0: Port device team_slave_0 removed [ 640.776881][T11204] team0: Port device team_slave_1 removed [ 640.783256][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.792240][T11204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.817695][T11204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.825689][T11204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.837926][T11204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.855799][ T791] usb 3-1: USB disconnect, device number 36 [ 640.966267][ T318] bond4: (slave vlan3): link status definitely down, disabling slave [ 641.176954][ T318] bond4: now running without any active interface! [ 641.388683][ T30] audit: type=1326 audit(1765839366.422:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.447947][ T30] audit: type=1326 audit(1765839366.422:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.479206][ T30] audit: type=1326 audit(1765839366.422:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.521084][ T30] audit: type=1326 audit(1765839366.422:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.576537][ T30] audit: type=1326 audit(1765839366.422:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.671043][T11226] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1168'. [ 641.693059][T11226] netlink: 'syz.1.1168': attribute type 8 has an invalid length. [ 641.821861][ T30] audit: type=1326 audit(1765839366.422:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.924644][ T30] audit: type=1326 audit(1765839366.442:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 641.965235][ T7465] usb 4-1: USB disconnect, device number 40 [ 642.117431][ T30] audit: type=1326 audit(1765839366.442:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 642.144542][ T3554] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 642.144740][ T30] audit: type=1326 audit(1765839366.442:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 642.184417][ T30] audit: type=1326 audit(1765839366.442:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.4.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x7ffc0000 [ 642.364446][ T7465] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 642.639329][T11242] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 643.144420][ T7465] usb 1-1: Using ep0 maxpacket: 16 [ 643.151063][ T7465] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.161849][ T7465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.173553][ T7465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 643.236536][ T7465] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 643.284142][ T7465] usb 1-1: Product: syz [ 643.298196][ T7465] usb 1-1: SerialNumber: syz [ 643.733631][ T7465] usb 1-1: 0:2 : does not exist [ 643.743394][ T7465] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 643.849376][ T7465] usb 1-1: USB disconnect, device number 56 [ 643.951529][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.259809][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 644.353794][T11273] netlink: 'syz.4.1180': attribute type 21 has an invalid length. [ 644.362009][T11273] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1180'. [ 644.372169][T11273] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1180'. [ 644.407111][ T5989] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 644.595411][ T5989] usb 2-1: config index 0 descriptor too short (expected 8192, got 96) [ 644.660550][ T5989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.707142][ T5989] usb 2-1: config 0 has no interfaces? [ 644.721831][ T5989] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.764400][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 644.771476][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 644.788183][ T10] usb 4-1: config 0 has no interface number 0 [ 644.803760][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 644.827245][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.835824][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.843879][ T5989] usb 2-1: Product: syz [ 644.848339][ T5989] usb 2-1: Manufacturer: syz [ 644.852416][ T10] usb 4-1: Product: syz [ 644.863756][ T10] usb 4-1: Manufacturer: syz [ 644.874217][ T10] usb 4-1: SerialNumber: syz [ 644.892924][ T10] usb 4-1: config 0 descriptor?? [ 644.922215][ T10] smsc95xx v2.0.0 [ 644.999884][ T5989] usb 2-1: config 0 descriptor?? [ 645.012745][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 645.044064][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 645.443943][ T5989] usb 2-1: USB disconnect, device number 40 [ 645.480797][ T6022] usb 4-1: USB disconnect, device number 41 [ 646.083444][ T10] libceph: connect (1)[c::]:6789 error -13 [ 646.100933][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 646.374487][ T5898] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 646.384758][ T10] libceph: connect (1)[c::]:6789 error -13 [ 646.390802][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 646.415269][T11312] vlan0: entered allmulticast mode [ 646.421391][T11312] dummy0: entered allmulticast mode [ 646.479675][T11312] vlan0: entered allmulticast mode [ 646.554749][ T5898] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 646.584479][ T5898] usb 2-1: config 0 has no interface number 0 [ 646.599575][ T5898] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 646.616565][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.625319][ T5898] usb 2-1: Product: syz [ 646.629693][ T5898] usb 2-1: Manufacturer: syz [ 646.635779][ T5898] usb 2-1: SerialNumber: syz [ 646.648508][ T5898] usb 2-1: config 0 descriptor?? [ 646.665187][T11301] ceph: No mds server is up or the cluster is laggy [ 648.625437][ T5898] usb 2-1: Firmware version (0.0) predates our first public release. [ 648.678529][ T5898] usb 2-1: Please update to version 0.2 or newer [ 648.689506][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.702022][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.782357][ T10] usb 2-1: USB disconnect, device number 41 [ 649.122380][T11356] input: syz1 as /devices/virtual/input/input33 [ 649.403432][T11362] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1200'. [ 649.485372][T11363] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1200'. [ 650.131280][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 650.131296][ T30] audit: type=1400 audit(1765839375.192:793): avc: denied { lock } for pid=11369 comm="syz.1.1205" path="socket:[30181]" dev="sockfs" ino=30181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 650.645809][T11373] Process accounting resumed [ 650.857007][ T30] audit: type=1400 audit(1765839375.922:794): avc: denied { write } for pid=11371 comm="syz.0.1206" path="socket:[30202]" dev="sockfs" ino=30202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 651.459007][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 651.468943][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 652.226058][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 652.234325][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 652.250154][T11375] ceph: No mds server is up or the cluster is laggy [ 652.459164][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.012027][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.075425][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 653.084740][T11397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.138731][ T7465] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 653.445290][T11397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.563979][T11414] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 653.653027][T11414] sit1: entered allmulticast mode [ 653.772363][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 654.574483][T11422] 9p: Bad value for 'rfdno' [ 654.585357][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 654.739807][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 656.367614][T11456] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 656.378219][T11456] block device autoloading is deprecated and will be removed. [ 656.389389][ T30] audit: type=1400 audit(1765839381.292:795): avc: denied { read } for pid=11446 comm="syz.3.1225" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 656.462954][ T30] audit: type=1400 audit(1765839381.292:796): avc: denied { open } for pid=11446 comm="syz.3.1225" path="/240/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 656.982792][ T5898] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 657.055576][T11478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1231'. [ 657.244357][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 657.253713][T11480] netlink: 'syz.1.1233': attribute type 9 has an invalid length. [ 657.254933][ T5898] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 657.261782][T11480] netlink: 'syz.1.1233': attribute type 11 has an invalid length. [ 657.278025][ T5898] usb 3-1: config 0 has no interface number 0 [ 657.308450][T11480] netlink: 'syz.1.1233': attribute type 12 has an invalid length. [ 657.336824][T11480] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1233'. [ 657.343013][ T5898] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 657.371487][ T5898] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 657.382179][ T5898] usb 3-1: config 0 interface 126 has no altsetting 0 [ 657.465064][ T5898] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 657.484335][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.579586][ T5898] usb 3-1: Product: syz [ 657.598703][ T5898] usb 3-1: Manufacturer: syz [ 657.613326][ T5898] usb 3-1: SerialNumber: syz [ 657.840759][ T30] audit: type=1400 audit(1765839382.902:797): avc: denied { watch watch_reads } for pid=11479 comm="syz.1.1233" path="/237/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 658.174879][ T5898] usb 3-1: config 0 descriptor?? [ 658.617796][T11465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 658.639667][T11465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 658.889629][ T30] audit: type=1400 audit(1765839383.952:798): avc: denied { write } for pid=11492 comm="syz.3.1235" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 658.976627][ T30] audit: type=1400 audit(1765839383.982:799): avc: denied { open } for pid=11492 comm="syz.3.1235" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 659.020961][ T8456] libceph: connect (1)[c::]:6789 error -101 [ 659.076335][ T8456] libceph: mon0 (1)[c::]:6789 connect error [ 659.231841][ T5898] ir_usb 3-1:0.126: IR Dongle converter detected [ 659.334984][ T8456] libceph: connect (1)[c::]:6789 error -101 [ 659.359275][ T8456] libceph: mon0 (1)[c::]:6789 connect error [ 659.460831][ T5898] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 659.501917][T11493] cgroup: fork rejected by pids controller in /syz3 [ 659.626542][T11503] siw: device registration error -23 [ 659.794575][T11498] ceph: No mds server is up or the cluster is laggy [ 660.092218][T11696] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1242'. [ 660.164527][ T7465] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 660.173863][ T30] audit: type=1326 audit(1765839385.232:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11693 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbef78f749 code=0x7fc00000 [ 660.315764][ T7465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 660.325699][ T7465] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 660.335476][ T7465] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 660.345277][ T7465] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 660.355218][ T8138] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 660.363314][ T7465] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 660.372794][ T7465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.384890][ T7465] usb 1-1: config 0 descriptor?? [ 660.504386][ T8138] usb 2-1: device descriptor read/64, error -71 [ 660.548192][T11700] netlink: 111 bytes leftover after parsing attributes in process `syz.4.1243'. [ 660.560909][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 660.592713][ T7465] hdpvr 1-1:0.0: firmware version 0x0 dated [ 660.605685][ T7465] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 660.658780][ T10] usb 3-1: USB disconnect, device number 37 [ 660.678619][ T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 660.691508][ T10] ir_usb 3-1:0.126: device disconnected [ 660.744606][ T8138] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 660.972187][ T8138] usb 2-1: device descriptor read/64, error -71 [ 660.996988][ T30] audit: type=1326 audit(1765839385.942:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11693 comm="syz.3.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbef7865e7 code=0x7fc00000 [ 661.538885][ T8138] usb usb2-port1: attempt power cycle [ 661.548455][ T7465] hdpvr 1-1:0.0: Could not setup controls [ 661.555356][ T7465] hdpvr 1-1:0.0: registering videodev failed [ 661.914388][ T8138] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 662.044179][ T7465] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 662.078630][ T8138] usb 2-1: device descriptor read/8, error -71 [ 662.160737][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 662.168824][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 662.194868][ T7465] usb 1-1: USB disconnect, device number 58 [ 662.246918][ T30] audit: type=1400 audit(1765839387.312:802): avc: denied { nlmsg_read } for pid=11725 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 662.302394][ T30] audit: type=1400 audit(1765839387.362:803): avc: denied { create } for pid=11725 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 662.344516][ T8138] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 662.387153][ T8138] usb 2-1: device descriptor read/8, error -71 [ 662.399116][T11712] ceph: No mds server is up or the cluster is laggy [ 662.637204][ T8138] usb usb2-port1: unable to enumerate USB device [ 662.684504][ T5898] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 662.897898][ T8138] libceph: connect (1)[c::]:6789 error -13 [ 662.904530][ T8138] libceph: mon0 (1)[c::]:6789 connect error [ 662.919915][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 662.947842][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.008815][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.080331][ T5898] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 663.091946][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.305187][ T8138] libceph: connect (1)[c::]:6789 error -13 [ 663.373949][ T8138] libceph: mon0 (1)[c::]:6789 connect error [ 663.474772][ T5898] usb 3-1: config 0 descriptor?? [ 663.524750][T11731] ceph: No mds server is up or the cluster is laggy [ 663.784877][ T8138] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 663.957560][ T8138] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 663.966839][ T8138] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 664.039279][ T5898] hid-multitouch 0003:0457:07DA.0012: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 664.085584][ T8138] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 664.175736][ T8138] usb 2-1: config 220 has no interface number 2 [ 664.204706][ T8138] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 664.241078][ T8138] usb 2-1: config 220 interface 0 has no altsetting 0 [ 664.258840][ T8138] usb 2-1: config 220 interface 76 has no altsetting 0 [ 664.276256][ T8138] usb 2-1: config 220 interface 1 has no altsetting 0 [ 664.295426][ T8138] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 664.319570][ T8138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.407391][ T8138] usb 2-1: Product: syz [ 664.414577][ T8138] usb 2-1: Manufacturer: syz [ 664.434368][ T8138] usb 2-1: SerialNumber: syz [ 664.714991][ T5989] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 664.825122][ T30] audit: type=1400 audit(1765839389.882:804): avc: denied { create } for pid=11744 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 664.953478][ T30] audit: type=1400 audit(1765839389.882:805): avc: denied { write } for pid=11744 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 665.095407][ T5989] usb 1-1: Using ep0 maxpacket: 8 [ 665.104084][ T5989] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.136612][ T5989] usb 1-1: New USB device found, idVendor=8945, idProduct=617a, bcdDevice=c4.6d [ 665.170296][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.208056][ T5989] usb 1-1: Product: syz [ 665.221996][ T5989] usb 1-1: Manufacturer: syz [ 665.227139][ T5989] usb 1-1: SerialNumber: syz [ 665.256350][ T5989] usb 1-1: config 0 descriptor?? [ 665.383281][T11760] fuse: Bad value for 'fd' [ 665.482853][ T5989] usb 1-1: USB disconnect, device number 59 [ 665.708248][ T5989] usb 3-1: USB disconnect, device number 38 [ 665.744969][ T791] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 665.994384][ T791] usb 4-1: Using ep0 maxpacket: 16 [ 666.001818][ T791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.175038][ T791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.275060][ T791] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 666.286140][ T791] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 666.344552][ T791] usb 4-1: Product: syz [ 666.348883][ T791] usb 4-1: SerialNumber: syz [ 666.398780][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 666.428061][ T8138] usb 2-1: selecting invalid altsetting 0 [ 666.437894][ T8138] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 666.457175][ T8138] uvcvideo 2-1:220.0: No valid video chain found. [ 666.477558][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 666.509551][ T8138] usb 2-1: selecting invalid altsetting 0 [ 666.523612][ T8138] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 666.539263][ T8138] usb 2-1: USB disconnect, device number 46 [ 666.586957][ T791] usb 4-1: 0:2 : does not exist [ 666.601701][ T791] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 666.659454][ T791] usb 4-1: USB disconnect, device number 42 [ 666.694858][ T7465] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 666.718595][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.822476][T11780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1263'. [ 666.865861][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 666.866185][T11780] lo speed is unknown, defaulting to 1000 [ 667.024524][ T7465] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 667.040268][ T791] lo speed is unknown, defaulting to 1000 [ 667.184435][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 667.355183][ T7465] usb usb3-port1: attempt power cycle [ 667.494533][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 667.669055][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 667.678846][ T10] usb 1-1: config 219 has an invalid interface number: 209 but max is 0 [ 667.692241][ T10] usb 1-1: config 219 has no interface number 0 [ 667.702939][ T10] usb 1-1: config 219 interface 209 has no altsetting 0 [ 667.710257][ T7465] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 667.725036][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice= a.36 [ 667.736092][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 667.772255][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.790520][ T10] usb 1-1: Product: syz [ 667.804843][ T10] usb 1-1: Manufacturer: syz [ 667.820174][ T10] usb 1-1: SerialNumber: syz [ 667.894635][ T7465] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 667.915314][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 667.921282][ T7465] usb usb3-port1: unable to enumerate USB device [ 668.044442][ T8138] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 668.321862][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 668.361508][ T10] uvcvideo 1-1:219.209: Found UVC 0.00 device syz (8086:0b07) [ 668.717266][ T10] uvcvideo 1-1:219.209: No valid video chain found. [ 668.727968][ T10] usb 1-1: USB disconnect, device number 60 [ 668.805233][ T30] audit: type=1400 audit(1765839393.622:806): avc: denied { ioctl } for pid=11808 comm="syz.3.1272" path="socket:[30592]" dev="sockfs" ino=30592 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 668.869591][T11818] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 668.968554][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 669.045042][ T8138] usb 2-1: Using ep0 maxpacket: 16 [ 669.053217][ T8138] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.071413][ T8138] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.102716][ T8138] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 669.144584][ T8138] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 669.168099][ T8138] usb 2-1: Product: syz [ 669.178888][ T8138] usb 2-1: SerialNumber: syz [ 669.418204][ T10] libceph: connect (1)[c::]:6789 error -101 [ 669.627061][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 669.826982][ T8138] usb 2-1: 0:2 : does not exist [ 669.847022][ T8138] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 670.154918][ T10] libceph: connect (1)[c::]:6789 error -101 [ 670.171383][T11829] ceph: No mds server is up or the cluster is laggy [ 670.180876][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 670.208616][ T8138] usb 2-1: USB disconnect, device number 47 [ 670.361213][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.475198][ T8456] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 670.665239][ T5898] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 670.684579][ T8456] usb 1-1: Using ep0 maxpacket: 16 [ 670.706705][T11842] virtiofs: Unknown parameter 'always' [ 670.707164][ T8456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.782692][ T8456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.834736][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 670.888509][ T5898] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 670.915928][ T8456] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 670.934637][ T5898] usb 3-1: config 0 has no interface number 0 [ 670.941161][ T5898] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 670.954355][ T8456] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 670.963203][ T8456] usb 1-1: Product: syz [ 670.974072][ T5898] usb 3-1: config 0 interface 196 has no altsetting 0 [ 670.983176][ T8456] usb 1-1: SerialNumber: syz [ 670.996225][ T5898] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 671.067506][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.084837][ T5898] usb 3-1: Product: syz [ 671.095131][ T5898] usb 3-1: Manufacturer: syz [ 671.102455][ T5898] usb 3-1: SerialNumber: syz [ 671.123403][ T5898] usb 3-1: config 0 descriptor?? [ 671.135846][T11840] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 671.209012][ T8456] usb 1-1: 0:2 : does not exist [ 671.235549][ T8456] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 671.316870][ T8456] usb 1-1: USB disconnect, device number 61 [ 671.382473][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.409537][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 671.420812][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1282'. [ 671.608108][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.621048][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.964830][ T5898] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 672.037522][T11869] rtc_cmos 00:00: Alarms can be up to one day in the future [ 672.218073][ T5898] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 672.240440][ T5898] usb 3-1: USB disconnect, device number 43 [ 672.362276][ T5898] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 672.379789][ T30] audit: type=1400 audit(1765839397.442:807): avc: denied { bind } for pid=11877 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 672.688604][T11891] virtiofs: Unknown parameter 'always' [ 672.754412][ T791] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 673.146285][ T791] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 673.250736][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.269418][ T791] usb 4-1: config 0 descriptor?? [ 673.858188][ T30] audit: type=1400 audit(1765839398.922:808): avc: denied { append } for pid=11907 comm="syz.0.1298" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 673.885556][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 673.894783][T11883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1291'. [ 674.087867][ T30] audit: type=1400 audit(1765839399.152:809): avc: denied { setattr } for pid=11912 comm="syz.1.1299" name="route" dev="proc" ino=4026533375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 674.145754][ T2996] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 674.801570][T11921] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 675.284513][ T6022] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 675.354381][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 675.435261][ T791] usb 4-1: Cannot read MAC address [ 675.443234][ T791] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 675.461898][ T791] usb 4-1: USB disconnect, device number 43 [ 675.514988][ T6022] usb 2-1: Using ep0 maxpacket: 16 [ 675.534871][ T6022] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 675.545112][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 675.553041][ T6022] usb 2-1: config 0 has no interface number 0 [ 675.558875][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 675.574387][ T10] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 675.574856][ T6022] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 675.582856][ T10] usb 1-1: Product: syz [ 675.614453][ T10] usb 1-1: Manufacturer: syz [ 675.625364][ T10] usb 1-1: SerialNumber: syz [ 675.634369][ T6022] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 675.636663][ T10] usb 1-1: config 0 descriptor?? [ 675.661017][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 675.703151][ T6022] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 675.726827][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 675.735935][ T6022] usb 2-1: Product: syz [ 675.741988][ T6022] usb 2-1: SerialNumber: syz [ 675.777968][ T6022] usb 2-1: config 0 descriptor?? [ 675.796510][ T6022] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 675.815205][ T6022] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input34 [ 675.992978][ C1] cm109_urb_ctl_callback: 3325 callbacks suppressed [ 675.993014][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.007996][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.015313][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.022532][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.032101][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.039473][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.046770][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.054017][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.061567][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.068790][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.093395][ T6022] usb 2-1: USB disconnect, device number 48 [ 676.099418][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 676.122692][ T10] gspca_zc3xx: reg_r err -32 [ 676.132287][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 676.144445][ T5989] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 676.182858][ T10] usb 1-1: USB disconnect, device number 62 [ 676.334335][ T6022] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 676.344348][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 676.351669][ T5989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.367967][ T5989] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 676.447202][T11949] fuse: Bad value for 'group_id' [ 676.452271][T11949] fuse: Bad value for 'group_id' [ 676.624142][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.654368][ T5989] usb 3-1: Product: syz [ 676.666668][ T5989] usb 3-1: Manufacturer: syz [ 676.679988][ T5989] usb 3-1: SerialNumber: syz [ 676.690818][ T5989] usb 3-1: config 0 descriptor?? [ 676.708337][ T5989] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 677.270192][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.404632][T11970] bond0: (slave rose0): Enslaving as an active interface with an up link [ 678.187741][ T791] libceph: connect (1)[c::]:6789 error -22 [ 678.201277][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 678.280497][ T5989] pwc: Failed to set LED on/off time (-71) [ 678.447764][ T5989] pwc: send_video_command error -71 [ 678.457620][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'. [ 678.468995][ T5989] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 678.501494][ T791] libceph: connect (1)[c::]:6789 error -22 [ 678.518194][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 678.539662][ T5989] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 678.600745][ T5989] usb 3-1: USB disconnect, device number 44 [ 678.882264][T12013] hub 1-0:1.0: USB hub found [ 678.905466][T12013] hub 1-0:1.0: 1 port detected [ 678.955368][T11998] ceph: No mds server is up or the cluster is laggy [ 679.834382][ T791] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 680.703271][ T791] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 680.729205][ T791] usb 1-1: config 0 has no interface number 0 [ 680.760028][ T791] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 680.794097][ T791] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 680.828081][ T791] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 680.954359][ T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.967373][ T791] usb 1-1: config 0 descriptor?? [ 680.984395][ T791] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 681.023292][ T5989] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 681.215161][ T5989] usb 3-1: Using ep0 maxpacket: 8 [ 681.236274][ T5989] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 681.264590][ T5989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.281798][ T5989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 681.314061][ T5989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 64 [ 681.329095][ T5989] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.329492][ T791] usb 1-1: USB disconnect, device number 63 [ 681.364994][ T6022] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 681.383116][ T5989] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 681.392879][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.446404][ T5989] usbtmc 3-1:16.0: bulk endpoints not found [ 681.566406][ T6022] usb 2-1: config 12 has an invalid interface number: 82 but max is 1 [ 681.582999][ T6022] usb 2-1: config 12 has an invalid interface number: 91 but max is 1 [ 681.594793][ T6022] usb 2-1: config 12 has no interface number 0 [ 681.601184][ T6022] usb 2-1: config 12 has no interface number 1 [ 681.620691][ T6022] usb 2-1: config 12 interface 82 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 681.632689][ T6022] usb 2-1: config 12 interface 82 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 0 [ 681.654542][ T6022] usb 2-1: config 12 interface 91 altsetting 7 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 681.680889][ T6022] usb 2-1: config 12 interface 82 has no altsetting 0 [ 681.688762][ T6022] usb 2-1: config 12 interface 91 has no altsetting 0 [ 681.729380][ T6022] usb 2-1: New USB device found, idVendor=2040, idProduct=b111, bcdDevice=d5.77 [ 681.741480][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.749896][ T5989] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 681.759574][ T6022] usb 2-1: Product: syz [ 681.769960][ T6022] usb 2-1: Manufacturer: syz [ 681.779660][ T6022] usb 2-1: SerialNumber: syz [ 681.792429][ T6022] usb 2-1: Interface #82 referenced by multiple IADs [ 681.808124][ T6022] usb 2-1: Interface #91 referenced by multiple IADs [ 681.924382][ T5989] usb 4-1: Using ep0 maxpacket: 32 [ 681.936427][ T5989] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 681.949868][ T5989] usb 4-1: config 0 has no interface number 0 [ 681.960604][ T5989] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 681.973056][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.981588][ T5989] usb 4-1: Product: syz [ 682.001247][ T5989] usb 4-1: Manufacturer: syz [ 682.008422][ T5989] usb 4-1: SerialNumber: syz [ 682.137700][ T30] audit: type=1400 audit(1765839407.082:810): avc: denied { getopt } for pid=12046 comm="syz.1.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 682.163419][ T5989] usb 4-1: config 0 descriptor?? [ 682.224877][ T5989] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 682.274678][ T791] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 682.435555][ T5989] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 682.469984][ T5989] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 682.534786][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 682.545630][ T791] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 682.555379][ T791] usb 1-1: config 0 has no interface number 0 [ 682.565555][ T791] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 682.581874][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.590473][ T791] usb 1-1: Product: syz [ 682.598250][ T791] usb 1-1: Manufacturer: syz [ 682.608995][ T791] usb 1-1: SerialNumber: syz [ 682.633089][ T791] usb 1-1: config 0 descriptor?? [ 682.672332][ T791] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 682.699317][ T791] uvcvideo 1-1:0.105: No valid video chain found. [ 682.844983][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 682.855354][ T791] usb 4-1: USB disconnect, device number 44 [ 682.876866][ T5870] usb 1-1: USB disconnect, device number 64 [ 682.910693][ T791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 682.948839][ T791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 682.969281][ T791] quatech2 4-1:0.51: device disconnected [ 685.057779][ T5989] usb 3-1: USB disconnect, device number 45 [ 685.225275][ T6022] usb 2-1: USB disconnect, device number 49 [ 685.643564][ T10] libceph: connect (1)[c::]:6789 error -13 [ 685.653923][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 685.672819][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.694523][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.371908][ T10] libceph: connect (1)[c::]:6789 error -13 [ 686.378743][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 686.451207][T12103] ceph: No mds server is up or the cluster is laggy [ 687.020923][T12120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 687.390588][ T5898] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 687.494611][ T5870] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 687.600181][ T30] audit: type=1400 audit(1765839412.662:811): avc: denied { read } for pid=12125 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 687.986323][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.026681][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.038385][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 688.064382][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.084698][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 688.091883][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.165700][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.182254][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 688.202072][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.218664][ T5870] usb 4-1: config 0 descriptor?? [ 688.230629][ T5870] hub 4-1:0.0: USB hub found [ 688.301845][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.326017][ T5898] usb 1-1: config 0 descriptor?? [ 688.786728][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.870916][T12139] program syz.1.1346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.872482][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.903554][ T30] audit: type=1400 audit(1765839413.962:812): avc: denied { connect } for pid=12136 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 688.917107][T12124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.940298][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 688.972600][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 688.986441][ T5870] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 688.990433][ T5898] usb 1-1: USB disconnect, device number 65 [ 688.998952][ T30] audit: type=1400 audit(1765839414.042:813): avc: denied { write } for pid=12136 comm="syz.1.1346" path="socket:[31665]" dev="sockfs" ino=31665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 689.050823][ T5870] usbhid 4-1:0.0: can't add hid device: -71 [ 689.074729][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 689.117382][ T5870] usb 4-1: USB disconnect, device number 45 [ 689.124376][ T6021] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 689.304654][ T6021] usb 3-1: Using ep0 maxpacket: 16 [ 689.459561][ T6021] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 689.484949][ T6021] usb 3-1: too many endpoints for config 0 interface 0 altsetting 47: 156, using maximum allowed: 30 [ 689.522957][ T6021] usb 3-1: config 0 interface 0 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 156 [ 690.035555][ T6021] usb 3-1: config 0 interface 0 has no altsetting 0 [ 690.078340][ T6021] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 690.114880][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.131106][ T6021] usb 3-1: Product: syz [ 690.135705][ T6021] usb 3-1: Manufacturer: syz [ 690.141803][ T6021] usb 3-1: SerialNumber: syz [ 690.258704][ T6021] usb 3-1: config 0 descriptor?? [ 690.409670][ T6021] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 690.545383][ T6021] usb 3-1: Detected FT232H [ 690.697315][T12165] SQUASHFS error: Failed to read block 0x0: -5 [ 690.738420][ T6021] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 690.779595][T12165] unable to read squashfs_super_block [ 691.363061][ T30] audit: type=1400 audit(1765839416.422:814): avc: denied { unmount } for pid=12140 comm="syz.2.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 691.407366][ T6021] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 691.422773][ T6021] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 691.584452][ T5870] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 691.744514][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 691.751993][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 691.763520][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.772674][ T791] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 691.787006][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 691.879818][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 691.888103][ T5870] usb 2-1: Product: syz [ 691.892966][ T5870] usb 2-1: SerialNumber: syz [ 691.954631][ T791] usb 1-1: Using ep0 maxpacket: 32 [ 691.962281][ T791] usb 1-1: config 13 has an invalid interface number: 176 but max is 0 [ 691.971185][ T791] usb 1-1: config 13 has an invalid descriptor of length 88, skipping remainder of the config [ 691.981968][ T791] usb 1-1: config 13 has no interface number 0 [ 691.988749][ T791] usb 1-1: config 13 interface 176 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 692.004142][ T791] usb 1-1: config 13 interface 176 has no altsetting 0 [ 692.016460][ T791] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a31, bcdDevice=b3.08 [ 692.025799][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.034090][ T791] usb 1-1: Product: syz [ 692.038501][ T791] usb 1-1: Manufacturer: syz [ 692.043789][ T791] usb 1-1: SerialNumber: syz [ 692.116233][ T5870] usb 2-1: 0:2 : does not exist [ 692.131419][ T5870] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 692.156647][ T5870] usb 2-1: USB disconnect, device number 50 [ 692.181905][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.258854][T12179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.267902][T12179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.877919][ T791] usb 3-1: USB disconnect, device number 46 [ 692.897524][ T791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 692.922222][ T791] ftdi_sio 3-1:0.0: device disconnected [ 692.992501][ T30] audit: type=1400 audit(1765839418.052:815): avc: denied { getopt } for pid=12199 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 693.954620][ T791] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 694.010141][T12213] netlink: 'syz.4.1366': attribute type 4 has an invalid length. [ 694.019629][T12213] fuse: Bad value for 'fd' [ 694.044373][ T30] audit: type=1400 audit(1765839419.082:816): avc: denied { mounton } for pid=12211 comm="syz.4.1366" path="/290/file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 694.073872][ T30] audit: type=1400 audit(1765839419.092:817): avc: denied { read write } for pid=12211 comm="syz.4.1366" name="file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 694.102883][ T30] audit: type=1400 audit(1765839419.092:818): avc: denied { open } for pid=12211 comm="syz.4.1366" path="/290/file0" dev="tmpfs" ino=1552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 694.144476][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 694.163817][ T791] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 694.173427][ T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.197089][ T791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 694.243277][ T791] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.257576][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.270812][ T791] usb 3-1: Product: syz [ 694.280899][ T791] usb 3-1: Manufacturer: syz [ 694.294633][ T791] usb 3-1: SerialNumber: syz [ 694.719061][ T791] usb 3-1: 0:2 : does not exist [ 694.774524][ T30] audit: type=1400 audit(1765839419.842:819): avc: denied { ioctl } for pid=12227 comm="syz.3.1369" path="socket:[32806]" dev="sockfs" ino=32806 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 694.844197][T12228] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 695.077243][T12233] overlayfs: failed to clone upperpath [ 695.515601][ T5898] usb 1-1: USB disconnect, device number 66 [ 695.625315][ T6021] usb 3-1: USB disconnect, device number 47 [ 695.650777][T12248] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 695.658790][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 695.704899][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 696.490837][T12262] can0: slcan on ptm0. [ 696.580604][T12266] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 696.788409][T12261] can0 (unregistered): slcan off ptm0. [ 697.567608][ T30] audit: type=1400 audit(1765839422.632:820): avc: denied { read } for pid=12275 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 698.165886][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 698.431229][T12307] openvswitch: netlink: Message has 2688 unknown bytes. [ 700.434209][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 700.657814][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 700.854364][ T5961] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 702.205393][ T5961] usb 2-1: Invalid ep0 maxpacket: 16 [ 702.271965][ T30] audit: type=1400 audit(1765839426.902:821): avc: denied { ioctl } for pid=12342 comm="syz.2.1393" path="socket:[33038]" dev="sockfs" ino=33038 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 702.344468][ T5961] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 702.389728][T12351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12351 comm=syz.4.1383 [ 702.415512][T12351] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 702.449067][T12351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.525526][ T5961] usb 2-1: Invalid ep0 maxpacket: 16 [ 702.536742][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'. [ 702.547830][T12351] bond5: entered promiscuous mode [ 702.554333][T12351] bond5: entered allmulticast mode [ 702.569809][T12351] bond5: (slave dummy0): making interface the new active one [ 702.577440][T12351] dummy0: entered promiscuous mode [ 702.583114][T12351] dummy0: entered allmulticast mode [ 702.589717][T12351] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 702.615145][ T5961] usb usb2-port1: attempt power cycle [ 702.899410][T12351] bond5 (unregistering): (slave dummy0): Releasing active interface [ 702.907579][T12351] dummy0: left promiscuous mode [ 702.912639][T12351] dummy0: left allmulticast mode [ 702.919798][T12351] bond5 (unregistering): Released all slaves [ 702.959786][ T30] audit: type=1400 audit(1765839428.022:822): avc: denied { map } for pid=12357 comm="syz.0.1396" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 703.024948][ T30] audit: type=1400 audit(1765839428.022:823): avc: denied { execute } for pid=12357 comm="syz.0.1396" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 703.085418][ T5961] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 703.119632][ T5961] usb 2-1: device descriptor read/8, error -71 [ 703.439956][T12378] virtiofs: Unknown parameter 'always' [ 704.033561][T12380] serio: Serial port ptm0 [ 704.392327][ T5870] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 704.674396][ T5870] usb 1-1: device descriptor read/64, error -71 [ 704.933101][ T30] audit: type=1326 audit(1765839429.992:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 704.966376][ T30] audit: type=1326 audit(1765839429.992:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 704.992385][ T5961] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 705.041424][ T30] audit: type=1326 audit(1765839429.992:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 705.076210][ T30] audit: type=1326 audit(1765839429.992:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 705.122644][ T30] audit: type=1326 audit(1765839429.992:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 705.174399][ T5961] usb 3-1: device descriptor read/64, error -71 [ 705.219488][ T30] audit: type=1326 audit(1765839429.992:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 705.244390][ T30] audit: type=1326 audit(1765839429.992:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.1.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690858f749 code=0x7ffc0000 [ 705.476472][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 705.604522][ T5961] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 705.814417][ T5961] usb 3-1: device descriptor read/64, error -71 [ 705.924905][ T5961] usb usb3-port1: attempt power cycle [ 706.010051][ T5870] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 706.184535][ T3460] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.273944][ T5989] libceph: connect (1)[c::]:6789 error -22 [ 706.280664][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 706.334567][ T5870] usb 1-1: Invalid ep0 maxpacket: 16 [ 706.342443][ T5870] usb usb1-port1: attempt power cycle [ 706.545335][ T5989] libceph: connect (1)[c::]:6789 error -22 [ 706.552405][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 706.594451][ T5961] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 706.614783][ T5961] usb 3-1: device descriptor read/8, error -71 [ 706.694734][ T5870] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 706.716136][ T5870] usb 1-1: Invalid ep0 maxpacket: 16 [ 706.723452][T12417] ceph: No mds server is up or the cluster is laggy [ 706.773315][ T7465] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 706.845208][ T5870] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 706.874444][ T5961] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 706.887402][ T5870] usb 1-1: Invalid ep0 maxpacket: 16 [ 706.893521][ T5870] usb usb1-port1: unable to enumerate USB device [ 706.905095][ T5961] usb 3-1: device descriptor read/8, error -71 [ 706.936785][ T7465] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.944980][ T7465] usb 4-1: config 0 has no interface number 0 [ 706.951682][ T7465] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.963125][ T7465] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.973437][ T7465] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 706.982599][ T7465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.992467][ T7465] usb 4-1: config 0 descriptor?? [ 707.025366][ T5961] usb usb3-port1: unable to enumerate USB device [ 707.109629][T12440] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1419'. [ 707.114577][ T5989] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 707.130292][T12439] lo speed is unknown, defaulting to 1000 [ 707.286534][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.304342][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.314122][ T5989] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 707.341361][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.355286][ T5989] usb 2-1: config 0 descriptor?? [ 707.409678][ T7465] uclogic 0003:256C:006D.0013: unknown main item tag 0x0 [ 707.417946][ T7465] uclogic 0003:256C:006D.0013: unknown main item tag 0x0 [ 707.426662][ T7465] uclogic 0003:256C:006D.0013: unknown main item tag 0x0 [ 707.434752][ T7465] uclogic 0003:256C:006D.0013: unknown main item tag 0x0 [ 707.452781][ T7465] uclogic 0003:256C:006D.0013: unknown main item tag 0x0 [ 707.477109][ T7465] uclogic 0003:256C:006D.0013: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 707.614368][ T7465] usb 4-1: USB disconnect, device number 46 [ 707.853013][T12450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.904979][ T5989] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 707.913401][T12449] mmap: syz.4.1421 (12449): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 707.927803][ T5989] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 707.964456][ T5989] hid-thrustmaster 0003:044F:B65D.0014: Wrong number of endpoints? [ 708.066403][ C1] hid-thrustmaster 0003:044F:B65D.0014: URB to get model id failed with error -71 [ 708.067642][ T5870] usb 2-1: USB disconnect, device number 55 [ 708.197378][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 708.197398][ T30] audit: type=1400 audit(1765839433.232:861): avc: denied { module_load } for pid=12456 comm="syz.2.1423" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=34183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 708.305900][ T30] audit: type=1400 audit(1765839433.372:862): avc: denied { bpf } for pid=12462 comm="syz.3.1424" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.434424][T12464] 9p: Bad value for 'rfdno' [ 708.911182][ T30] audit: type=1400 audit(1765839433.972:863): avc: denied { perfmon } for pid=12465 comm="syz.0.1425" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 709.284906][ T5961] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 709.704408][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 709.713724][ T5961] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 709.729832][ T5961] usb 1-1: config 0 has no interface number 0 [ 709.736543][ T5961] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 709.748981][ T5961] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 709.760919][ T5961] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.775655][ T5961] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.790607][ T5961] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 709.800781][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.817582][ T5961] usb 1-1: config 0 descriptor?? [ 709.838862][ T5961] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 709.935399][ T5870] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 710.146847][ T5898] usb 1-1: USB disconnect, device number 71 [ 710.608796][ T5870] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.617451][ T5870] usb 2-1: config 0 has no interface number 0 [ 710.625106][ T5870] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 710.637200][ T5870] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 710.649020][ T5870] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.669388][ T5898] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 710.676904][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.706285][ T5870] usb 2-1: config 0 descriptor?? [ 710.718468][T12485] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 710.733889][ T5870] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 711.621150][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.674752][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.684883][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.724816][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.738934][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1437'. [ 712.161949][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 712.477495][ T5870] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 712.814387][ T5870] usb 4-1: Invalid ep0 maxpacket: 16 [ 712.944359][ T5870] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 713.009855][ T5961] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 713.164584][ T5870] usb 4-1: Invalid ep0 maxpacket: 16 [ 713.166204][ T5898] usb 2-1: USB disconnect, device number 56 [ 713.184452][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 713.193610][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.218095][ T5870] usb usb4-port1: attempt power cycle [ 713.227989][ T5961] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 713.261207][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.321504][ T5961] usb 3-1: config 0 descriptor?? [ 713.345199][ T5961] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 713.574937][ T5870] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 713.703707][ T5870] usb 4-1: Invalid ep0 maxpacket: 16 [ 713.940481][T12549] input: syz0 as /devices/virtual/input/input36 [ 714.325057][T12551] bond0: (slave wg0): Error: Device can not be enslaved while up [ 714.425183][T12548] block device autoloading is deprecated and will be removed. [ 714.717095][ T5870] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 714.935709][ T7465] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 714.956713][ T5870] usb 4-1: device not accepting address 50, error -71 [ 714.965088][ T5870] usb usb4-port1: unable to enumerate USB device [ 715.127837][ T7465] usb 1-1: config index 0 descriptor too short (expected 1316, got 36) [ 715.137782][ T7465] usb 1-1: config 7 has an invalid interface number: 204 but max is -1 [ 715.149239][ T7465] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 715.158737][ T7465] usb 1-1: config 7 has no interface number 0 [ 715.166358][ T7465] usb 1-1: config 7 interface 204 has no altsetting 0 [ 715.177389][ T7465] usb 1-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 715.186977][ T7465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.195837][ T7465] usb 1-1: Product: syz [ 715.200212][ T7465] usb 1-1: Manufacturer: syz [ 715.205040][ T7465] usb 1-1: SerialNumber: syz [ 715.254679][ T5870] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 715.422123][ T5870] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 715.431761][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.441582][ T5870] usb 4-1: Product: syz [ 715.446666][ T5870] usb 4-1: Manufacturer: syz [ 715.452793][ T7465] smsc95xx v2.0.0 [ 715.457622][ T5870] usb 4-1: SerialNumber: syz [ 715.462498][ T7465] smsc95xx 1-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 715.477762][ T5870] usb 4-1: config 0 descriptor?? [ 715.485672][ T7465] smsc95xx 1-1:7.204: probe with driver smsc95xx failed with error -22 [ 715.499233][ T7465] usbhid 1-1:7.204: couldn't find an input interrupt endpoint [ 715.512349][ T7465] usb 1-1: USB disconnect, device number 72 [ 715.782922][ T5173] bcm5974 3-1:0.0: could not read from device [ 715.844537][ T5173] bcm5974 3-1:0.0: could not read from device [ 715.847683][ T5961] usb 3-1: USB disconnect, device number 52 [ 715.960406][T12571] CUSE: unknown device info "" [ 715.996467][T12571] CUSE: unknown device info "@" [ 716.001474][T12571] CUSE: DEVNAME unspecified [ 716.105945][ T5870] usb 4-1: Firmware: major: 0, minor: 113, hardware type: ATUSB (0) [ 716.141237][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 716.151668][T12577] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1452'. [ 716.234166][T12579] overlayfs: failed to clone upperpath [ 716.241957][T12579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12579 comm=syz.4.1452 [ 716.308304][ T5870] usb 4-1: failed to fetch extended address, random address set [ 716.420299][ T5870] usb 4-1: USB disconnect, device number 51 [ 716.767414][ T5961] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 716.786594][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 716.808458][T12586] netlink: 'syz.2.1450': attribute type 9 has an invalid length. [ 716.840406][T12586] netlink: 7954 bytes leftover after parsing attributes in process `syz.2.1450'. [ 716.954375][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 716.961858][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.982381][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.013686][ T5961] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 717.034046][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 717.062945][ T5961] usb 1-1: Product: syz [ 717.075600][ T5961] usb 1-1: SerialNumber: syz [ 717.127869][ T30] audit: type=1326 audit(1765839442.192:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.3.1455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbef78f749 code=0x0 [ 717.303430][ T5961] usb 1-1: 0:2 : does not exist [ 717.331650][ T5961] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 717.420376][ T5961] usb 1-1: USB disconnect, device number 73 [ 717.458906][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 717.516396][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.604877][ T8456] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 717.710055][ T30] audit: type=1400 audit(1765839442.772:865): avc: denied { append } for pid=12597 comm="syz.2.1457" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 717.738635][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1457'. [ 717.749468][ T50] wlan0: Trigger new scan to find an IBSS to join [ 717.785903][ T8456] usb 4-1: Using ep0 maxpacket: 16 [ 717.803484][ T8456] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.828464][ T8456] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.851487][ T8456] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.862969][ T8456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 717.878652][ T8456] usb 4-1: SerialNumber: syz [ 718.117090][ T30] audit: type=1400 audit(1765839443.182:866): avc: denied { block_suspend } for pid=12602 comm="syz.4.1460" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.765272][ T5989] libceph: connect (1)[c::]:6789 error -13 [ 718.777289][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 718.890502][T12610] ceph: No mds server is up or the cluster is laggy [ 719.364372][ T5961] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 719.531350][ T5961] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 719.547019][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.566830][ T5961] usb 1-1: Product: syz [ 719.571493][ T5961] usb 1-1: Manufacturer: syz [ 719.577081][ T5961] usb 1-1: SerialNumber: syz [ 719.995953][ T5961] gspca_main: pac207-2.14.0 probing 093a:2476 [ 720.860728][ T5961] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 720.882342][ T5961] uvcvideo 1-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 720.912656][ T5961] uvcvideo 1-1:13.0: No valid video chain found. [ 720.959390][ T5961] usb 1-1: USB disconnect, device number 74 [ 720.996699][ T8456] usb 4-1: USB disconnect, device number 52 [ 721.161064][T12643] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 721.616995][ T30] audit: type=1400 audit(1765839446.662:867): avc: denied { create } for pid=12645 comm="syz.3.1469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 721.747194][ T50] wlan0: Trigger new scan to find an IBSS to join [ 722.058685][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 722.226243][T12654] syz.0.1471 (12654) used obsolete PPPIOCDETACH ioctl [ 722.313684][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.321273][T12659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.574411][ T8456] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 722.734482][ T8456] usb 3-1: Using ep0 maxpacket: 32 [ 722.744985][ T8456] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 722.761030][ T8456] usb 3-1: config 0 has no interface number 0 [ 722.773913][ T8456] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.802045][ T8456] usb 3-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 722.849424][ T8456] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 722.859349][ T8456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.878878][ T8456] usb 3-1: Product: syz [ 722.894398][ T8456] usb 3-1: Manufacturer: syz [ 722.927499][ T8456] usb 3-1: SerialNumber: syz [ 722.948880][ T8456] usb 3-1: config 0 descriptor?? [ 722.972622][ T8456] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 723.001594][ T8456] em28xx 3-1:0.89: Video interface 89 found: [ 723.424659][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.903550][ T8456] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 723.959759][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1476'. [ 723.995640][T12672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1476'. [ 724.115353][T12672] tipc: Can't bind to reserved service type 0 [ 724.564704][ T30] audit: type=1400 audit(1765839449.632:868): avc: denied { read } for pid=12675 comm="syz.0.1478" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 724.661479][ T30] audit: type=1400 audit(1765839449.632:869): avc: denied { open } for pid=12675 comm="syz.0.1478" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 724.712936][ T30] audit: type=1400 audit(1765839449.652:870): avc: denied { ioctl } for pid=12675 comm="syz.0.1478" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 724.747547][T12680] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 724.759841][ T8456] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 724.782976][ T8456] em28xx 3-1:0.89: board has no eeprom [ 724.864692][ T8456] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 724.878168][ T8456] em28xx 3-1:0.89: analog set to bulk mode. [ 724.892951][ T5898] em28xx 3-1:0.89: Registering V4L2 extension [ 724.893843][ T30] audit: type=1400 audit(1765839449.952:871): avc: denied { write } for pid=12681 comm="syz.3.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 724.929972][ T8456] usb 3-1: USB disconnect, device number 53 [ 724.930208][T12682] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 724.945895][ T8456] em28xx 3-1:0.89: Disconnecting em28xx [ 725.000210][ T5898] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 725.021204][ T5898] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 725.037150][ T5898] em28xx 3-1:0.89: No AC97 audio processor [ 725.067251][ T5898] usb 3-1: Decoder not found [ 725.078753][ T5898] em28xx 3-1:0.89: failed to create media graph [ 725.092507][ T5898] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 725.110930][ T5898] em28xx 3-1:0.89: Registering snapshot button... [ 725.130107][ T5898] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input37 [ 725.170765][ T5898] em28xx 3-1:0.89: Remote control support is not available for this card. [ 725.208384][ T8456] em28xx 3-1:0.89: Closing input extension [ 725.214485][ T8456] em28xx 3-1:0.89: Deregistering snapshot button [ 725.307328][T12697] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 725.309825][ T8456] em28xx 3-1:0.89: Freeing device [ 725.335290][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 725.342238][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 725.406416][T12697] bond4: entered promiscuous mode [ 725.420431][T12697] bond4: entered allmulticast mode [ 725.550555][T12697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 725.732438][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 725.741852][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 725.742357][ T8456] libceph: connect (1)[c::]:6789 error -101 [ 725.782225][T12704] netlink: 'syz.0.1483': attribute type 12 has an invalid length. [ 725.796303][T12704] netlink: 'syz.0.1483': attribute type 11 has an invalid length. [ 725.810903][ T8456] libceph: mon0 (1)[c::]:6789 connect error [ 725.862402][T12699] erspan1: entered allmulticast mode [ 725.872806][T12699] bond4: (slave erspan1): making interface the new active one [ 725.881039][T12699] erspan1: entered promiscuous mode [ 725.918343][T12699] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 725.948875][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 726.036810][T12693] ceph: No mds server is up or the cluster is laggy [ 726.094560][ T5961] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 726.206922][T12717] F2FS-fs: Conflicting test_dummy_encryption options [ 726.247533][ T5961] usb 3-1: Invalid ep0 maxpacket: 16 [ 726.510031][ T7465] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 726.517812][ T5961] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 726.561349][T12729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.576868][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 726.602488][T12729] bridge_slave_0: left allmulticast mode [ 726.633194][T12729] bridge_slave_0: left promiscuous mode [ 726.641764][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.663020][T12731] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 726.671867][T12731] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1492'. [ 726.681691][ T7465] usb 4-1: Using ep0 maxpacket: 8 [ 726.689452][ T5961] usb 3-1: Invalid ep0 maxpacket: 16 [ 726.693773][T12729] bridge_slave_1: left allmulticast mode [ 726.696202][ T5961] usb usb3-port1: attempt power cycle [ 726.701240][T12729] bridge_slave_1: left promiscuous mode [ 726.714119][ T7465] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.743880][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.753656][ T7465] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 726.764391][ T8456] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 726.794749][ T7465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.872793][ T7465] usb 4-1: config 0 descriptor?? [ 726.893431][T12729] bond0: (slave bond_slave_0): Releasing backup interface [ 726.900027][ T7465] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 726.918815][T12729] bond0: (slave bond_slave_1): Releasing backup interface [ 726.966546][T12729] team0: Port device team_slave_0 removed [ 726.985856][T12729] team0: Port device team_slave_1 removed [ 726.992595][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.024663][ T8456] usb 1-1: Using ep0 maxpacket: 16 [ 727.040607][T12729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.064384][ T5961] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 727.072947][ T8456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.084057][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.097714][ T5961] usb 3-1: Invalid ep0 maxpacket: 16 [ 727.164317][ T8456] usb 1-1: config 0 has no interfaces? [ 727.170167][ T8456] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 727.179350][T12729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.186643][ T8456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.198394][T12729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 727.218451][ T8456] usb 1-1: config 0 descriptor?? [ 727.269777][T12731] team0: entered promiscuous mode [ 727.275667][T12731] bridge0: port 1(team0) entered blocking state [ 727.282901][T12731] bridge0: port 1(team0) entered disabled state [ 727.290129][T12731] team0: entered allmulticast mode [ 727.301220][T12731] bridge0: port 1(team0) entered blocking state [ 727.307822][T12731] bridge0: port 1(team0) entered forwarding state [ 727.316007][ T5961] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 727.355635][ T5961] usb 3-1: Invalid ep0 maxpacket: 16 [ 727.361657][ T5961] usb usb3-port1: unable to enumerate USB device [ 727.366720][ T2996] bridge0: port 1(team0) entered disabled state [ 727.390725][ T7465] gspca_vc032x: reg_w err -71 [ 727.400575][ T7465] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 727.424726][ T7465] usb 4-1: USB disconnect, device number 53 [ 727.839094][ T10] usb 1-1: USB disconnect, device number 75 [ 728.517383][T12763] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 728.544458][ T7465] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 728.594404][ T5933] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 728.684919][ T7465] usb 2-1: device descriptor read/64, error -71 [ 728.756475][ T5933] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.767204][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 728.774070][ T5933] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 728.829433][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.848444][ T5933] usb 4-1: config 0 descriptor?? [ 728.974409][ T7465] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 729.104763][ T7465] usb 2-1: device descriptor read/64, error -71 [ 729.234738][ T7465] usb usb2-port1: attempt power cycle [ 729.287509][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.302550][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.316873][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.331374][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.352328][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.359985][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.398705][ T5933] elecom 0003:056E:00FD.0015: unknown main item tag 0x0 [ 729.418983][ T5933] elecom 0003:056E:00FD.0015: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 729.552103][ T30] audit: type=1400 audit(1765839454.612:872): avc: denied { mounton } for pid=12772 comm="syz.0.1502" path="/proc/1146/task" dev="proc" ino=34653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 729.575273][ T7465] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 729.687079][ T7465] usb 2-1: device descriptor read/8, error -71 [ 729.806956][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 729.912136][ T5961] usb 4-1: USB disconnect, device number 54 [ 729.974435][ T7465] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 729.995087][ T7465] usb 2-1: device descriptor read/8, error -71 [ 730.104714][ T7465] usb usb2-port1: unable to enumerate USB device [ 730.636009][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 730.663382][T12791] macvlan2: entered promiscuous mode [ 730.671890][T12791] macvlan2: entered allmulticast mode [ 730.677819][T12791] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 730.871151][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 730.974744][ T5933] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 731.266695][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 731.290150][T12803] bond2: Invalid ad_actor_system MAC address. [ 731.296520][ T5989] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 731.304162][T12803] bond2: option ad_actor_system: invalid value (1) [ 731.314643][T12803] bond2 (unregistering): Released all slaves [ 731.328134][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.342273][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.350776][ T5933] usb 1-1: Product: syz [ 731.355210][ T5933] usb 1-1: Manufacturer: syz [ 731.359925][ T5933] usb 1-1: SerialNumber: syz [ 731.454861][ T5989] usb 3-1: Invalid ep0 maxpacket: 16 [ 731.569086][T12807] /dev/nullb0: Can't open blockdev [ 731.914568][ T5989] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 732.084435][ T5989] usb 3-1: Invalid ep0 maxpacket: 16 [ 732.094398][ T5989] usb usb3-port1: attempt power cycle [ 732.205971][ T5933] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 732.217501][ T5933] cdc_ncm 1-1:1.0: bind() failure [ 732.237473][ T5933] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 732.254703][ T5933] cdc_ncm 1-1:1.1: bind() failure [ 732.444547][ T5989] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 732.464889][ T5989] usb 3-1: Invalid ep0 maxpacket: 16 [ 732.480288][T12822] syzkaller0: entered promiscuous mode [ 732.494339][T12822] syzkaller0: entered allmulticast mode [ 732.594457][ T5989] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 732.616166][ T5989] usb 3-1: Invalid ep0 maxpacket: 16 [ 732.622623][ T5989] usb usb3-port1: unable to enumerate USB device [ 732.754625][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 732.934690][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 732.979500][ T10] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 732.994873][ T7465] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 733.064777][ T10] usb 4-1: config 0 has no interface number 0 [ 733.072070][ T10] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 733.094614][ T10] usb 4-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 733.106608][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.130922][ T10] usb 4-1: Product: syz [ 733.157112][ T10] usb 4-1: Manufacturer: syz [ 733.164628][ T10] usb 4-1: SerialNumber: syz [ 733.189720][ T10] usb 4-1: config 0 descriptor?? [ 733.209030][T12817] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 733.325027][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 733.963656][T12848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1521'. [ 734.274787][ T5961] usb 1-1: USB disconnect, device number 76 [ 734.469707][ T30] audit: type=1326 audit(1765839459.492:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.4.1526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fcdb8f749 code=0x0 [ 734.601213][ T30] audit: type=1400 audit(1765839459.662:874): avc: denied { mount } for pid=12852 comm="syz.1.1523" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 734.626460][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 734.636154][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'. [ 734.724384][ T30] audit: type=1400 audit(1765839459.692:875): avc: denied { getopt } for pid=12868 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 735.051271][ T5989] usb 4-1: USB disconnect, device number 55 [ 735.233112][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 735.280398][T12884] fuse: Bad value for 'fd' [ 735.484492][ T7465] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 735.637801][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 735.660183][T12895] netlink: 'syz.0.1534': attribute type 14 has an invalid length. [ 736.204400][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 736.364394][ T7465] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 736.514426][ T5989] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 737.008412][ T5989] usb 2-1: Using ep0 maxpacket: 16 [ 737.087971][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.094434][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 737.133226][ T7465] usb usb3-port1: attempt power cycle [ 737.134602][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.158208][ T5989] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 737.171532][ T5989] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 737.180441][ T5989] usb 2-1: Manufacturer: syz [ 737.191085][ T5989] usb 2-1: config 0 descriptor?? [ 737.504563][ T7465] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 737.524926][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 737.617438][ T5989] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 737.625312][ T5989] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 737.632400][ T5989] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 737.642565][ T5989] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 737.651979][ T5989] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 737.654394][ T7465] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 737.660009][ T5989] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 737.696838][ T7465] usb 3-1: Invalid ep0 maxpacket: 16 [ 737.711053][ T7465] usb usb3-port1: unable to enumerate USB device [ 738.123156][T12922] netlink: 'syz.1.1537': attribute type 10 has an invalid length. [ 738.222340][T12922] bridge0: port 1(team0) entered disabled state [ 738.232667][T12922] team0: left allmulticast mode [ 738.238755][T12922] team0: left promiscuous mode [ 738.248290][T12922] bridge0: port 1(team0) entered disabled state [ 738.279663][ T2983] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 738.359414][T12922] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.403457][T12922] bond0: (slave team0): Enslaving as an active interface with an up link [ 738.417139][T12925] bridge0: entered promiscuous mode [ 738.433727][T12927] bridge0: left promiscuous mode [ 738.487526][ T7465] usb 2-1: USB disconnect, device number 62 [ 738.944389][ T7465] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 738.998940][T12939] virtiofs: Unknown parameter 'always 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 18 nlmon0 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 21 vxcan0 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 22 vxcan1 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 23 veth0 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 24 veth1 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 25 wg0 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 26 wg1 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 27 wg2 : 1 V3 [ 738.998940][T12939] 010000E0 1 0:00000000 0 [ 738.998940][T12939] 28 veth0_to_bridge: 1 ' [ 739.134531][ T30] audit: type=1400 audit(1765839464.182:876): avc: denied { map } for pid=12934 comm="syz.4.1546" path="socket:[36184]" dev="sockfs" ino=36184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 739.184498][ T7465] usb 3-1: Using ep0 maxpacket: 16 [ 739.345863][ T7465] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.429583][ T7465] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 739.452040][ T7465] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 2.40 [ 739.486505][ T7465] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 739.502028][ T7465] usb 3-1: Product: syz [ 739.513534][ T7465] usb 3-1: SerialNumber: syz [ 739.843321][ T7465] usb 3-1: 0:2 : does not exist [ 740.166519][ T8456] libceph: connect (1)[c::]:6789 error -22 [ 740.172690][ T8456] libceph: mon0 (1)[c::]:6789 connect error [ 740.197941][ T7465] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 740.318834][ T7465] usb 3-1: USB disconnect, device number 66 [ 740.455298][ T5989] libceph: connect (1)[c::]:6789 error -22 [ 740.465295][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 740.476842][ T8212] udevd[8212]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.502142][T12954] ceph: No mds server is up or the cluster is laggy [ 741.621649][ T30] audit: type=1400 audit(1765839465.972:877): avc: denied { wake_alarm } for pid=12966 comm="syz.1.1553" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 742.040150][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 742.261730][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 742.284670][ T8456] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 742.606777][T12992] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1556'. [ 742.994316][ T8456] usb 2-1: Invalid ep0 maxpacket: 16 [ 743.124400][ T8456] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 743.213449][T13002] virtiofs: Unknown parameter 'always 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 23 veth0 : 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 24 veth1 : 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 26 wg1 : 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 27 wg2 : 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 28 veth0_to_bridge: 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 29 bridge_slave_0: 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 30 veth1_to_bridge: 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 31 bridge_slave_1: 1 V3 [ 743.213449][T13002] 010000E0 1 0:00000000 0 [ 743.213449][T13002] 32 veth' [ 743.385089][ T8456] usb 2-1: Invalid ep0 maxpacket: 16 [ 743.686623][ T8456] usb usb2-port1: attempt power cycle [ 743.693058][T13004] virtiofs: Unknown parameter 'always' [ 743.709994][ T5961] libceph: connect (1)[c::]:6789 error -13 [ 743.720612][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 743.984954][ T5961] libceph: connect (1)[c::]:6789 error -13 [ 744.000392][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 744.054708][ T8456] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 744.085040][ T8456] usb 2-1: Invalid ep0 maxpacket: 16 [ 744.184654][T13009] ceph: No mds server is up or the cluster is laggy [ 744.224547][ T8456] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 744.254420][ T5933] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 744.273461][ T8456] usb 2-1: Invalid ep0 maxpacket: 16 [ 744.285722][ T8456] usb usb2-port1: unable to enumerate USB device [ 744.466104][ T5933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.474860][ T5933] usb 3-1: config 0 has no interface number 0 [ 744.481602][ T5933] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 744.494081][ T5933] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 744.505784][ T5933] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 744.985367][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.053348][ T5933] usb 3-1: config 0 descriptor?? [ 745.087545][T13013] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 745.119490][ T5933] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 745.480492][ T5933] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 745.501482][ T8456] usb 3-1: USB disconnect, device number 67 [ 745.587141][T13042] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 745.955076][ T30] audit: type=1400 audit(1765839470.662:878): avc: denied { relabelto } for pid=13030 comm="syz.4.1570" name="343" dev="tmpfs" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 745.987957][ T30] audit: type=1400 audit(1765839470.662:879): avc: denied { associate } for pid=13030 comm="syz.4.1570" name="343" dev="tmpfs" ino=1829 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 746.019219][ T30] audit: type=1400 audit(1765839470.672:880): avc: denied { mounton } for pid=13030 comm="syz.4.1570" path="/343" dev="tmpfs" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 746.124585][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 746.131625][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.148074][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.180993][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.192964][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 746.208476][ T5933] usb 2-1: SerialNumber: syz [ 746.234554][T13046] mkiss: ax0: crc mode is auto. [ 746.330342][ T30] audit: type=1400 audit(1765839471.392:881): avc: denied { remove_name } for pid=5817 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 746.437273][ T30] audit: type=1400 audit(1765839471.442:882): avc: denied { rmdir } for pid=5817 comm="syz-executor" name="343" dev="tmpfs" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 746.484167][ T5933] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 746.496408][ T5933] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 746.502882][ T5933] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 747.312434][T13053] syz1: rxe_newlink: already configured on lo [ 747.408801][ T5933] usb 2-1: USB disconnect, device number 67 [ 747.415153][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.423108][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.249286][ T5933] libceph: connect (1)[c::]:6789 error -13 [ 748.271505][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 748.282543][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 748.534960][ T7465] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 748.575199][ T8456] libceph: connect (1)[c::]:6789 error -13 [ 748.581457][ T8456] libceph: mon0 (1)[c::]:6789 connect error [ 748.702539][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 748.746884][T13071] ceph: No mds server is up or the cluster is laggy [ 748.845811][ T7465] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 749.084378][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 749.097059][ T7465] usb usb2-port1: attempt power cycle [ 749.895494][ T7465] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 750.134912][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 750.274424][ T7465] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 750.309055][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 750.322661][ T7465] usb usb2-port1: unable to enumerate USB device [ 750.403900][T13110] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 752.004487][ T5898] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 752.499747][ T5898] usb 2-1: device descriptor read/all, error -71 [ 753.404639][T13143] netlink: 'syz.0.1594': attribute type 16 has an invalid length. [ 753.412573][T13143] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1594'. [ 753.969273][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 754.188902][ T5898] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 754.224690][ T8456] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 754.445815][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 754.474334][ T8456] usb 1-1: Invalid ep0 maxpacket: 16 [ 754.526441][ T5898] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 754.607554][ T5898] usb 3-1: config 0 has no interface number 0 [ 754.613746][ T5898] usb 3-1: config 0 interface 150 has no altsetting 0 [ 754.684514][ T8456] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 754.693363][ T5898] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 754.723184][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.764310][ T5898] usb 3-1: Product: syz [ 754.768583][ T5898] usb 3-1: Manufacturer: syz [ 754.784311][ T5898] usb 3-1: SerialNumber: syz [ 754.820246][ T5898] usb 3-1: config 0 descriptor?? [ 754.825295][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 754.835711][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 754.861914][ T5898] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 754.875139][ T8456] usb 1-1: Invalid ep0 maxpacket: 16 [ 754.884624][ T8456] usb usb1-port1: attempt power cycle [ 755.154375][ T5961] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 755.254600][ T7465] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 755.518102][ T5898] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 755.538457][ T5898] pac7311 3-1:0.150: probe with driver pac7311 failed with error -110 [ 755.585412][ T8456] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 755.614886][ T8456] usb 1-1: Invalid ep0 maxpacket: 16 [ 755.795159][ T5961] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 755.824378][ T8456] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 755.958184][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.971502][ T5961] usb 4-1: config 0 descriptor?? [ 755.977572][ T7465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.989678][ T7465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.000568][ T8456] usb 1-1: Invalid ep0 maxpacket: 16 [ 756.002983][ T5961] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 756.014795][ T7465] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 756.030608][ T7465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.064490][T10284] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 756.077204][ T7465] usb 2-1: config 0 descriptor?? [ 756.110118][ T8456] usb usb1-port1: unable to enumerate USB device [ 756.187395][ T8138] usb 3-1: USB disconnect, device number 68 [ 756.247493][ T5961] gspca_sn9c2028: read1 error -32 [ 756.261732][ T5961] gspca_sn9c2028: read1 error -32 [ 756.556798][ T7465] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 756.596142][ T7465] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 756.603834][ T7465] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 756.648519][ T7465] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 756.671241][ T7465] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 756.832536][ T7465] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 758.515741][ T5989] usb 4-1: USB disconnect, device number 56 [ 758.628641][ T30] audit: type=1400 audit(1765839483.692:883): avc: denied { getopt } for pid=13197 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 759.467699][T13209] : entered promiscuous mode [ 760.587122][ T7465] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 9: -71 [ 760.640243][ T7465] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -71 [ 760.685937][ T7465] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 760.733490][ T7465] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 760.808109][ T7465] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 761.201563][ T7465] usb 2-1: USB disconnect, device number 74 [ 761.377605][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 761.452431][ T30] audit: type=1400 audit(1765839486.512:884): avc: denied { shutdown } for pid=13235 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.874372][ T7465] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 761.948201][T13240] lo speed is unknown, defaulting to 1000 [ 761.953983][T13240] lo speed is unknown, defaulting to 1000 [ 761.960970][T13240] lo speed is unknown, defaulting to 1000 [ 761.969068][T13240] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 761.981376][T13240] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 762.005670][T13240] lo speed is unknown, defaulting to 1000 [ 762.012763][T13240] lo speed is unknown, defaulting to 1000 [ 762.021405][T13240] lo speed is unknown, defaulting to 1000 [ 762.028076][T13240] lo speed is unknown, defaulting to 1000 [ 762.034850][T13240] lo speed is unknown, defaulting to 1000 [ 762.209710][T13249] delete_channel: no stack [ 762.239710][ T5870] kernel write not supported for file /vcs (pid: 5870 comm: kworker/0:4) [ 762.261157][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 762.436980][ T7465] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 762.499343][T13260] virtiofs: Unknown parameter 'always 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 18 nlmon0 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 21 vxcan0 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 22 vxcan1 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 23 veth0 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 24 veth1 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 25 wg0 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 26 wg1 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 27 wg2 : 1 V3 [ 762.499343][T13260] 010000E0 1 0:00000000 0 [ 762.499343][T13260] 28 veth0_to_bridge: 1 ' [ 763.247581][ T30] audit: type=1400 audit(1765839488.312:885): avc: denied { write } for pid=13254 comm="syz.3.1627" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 763.337424][ T7465] usb 2-1: Invalid ep0 maxpacket: 16 [ 763.342980][ T7465] usb usb2-port1: attempt power cycle [ 763.738504][T13273] bridge0: left allmulticast mode [ 764.084444][ T5870] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 764.145651][T13281] syz1: rxe_newlink: already configured on lo [ 765.254580][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 765.381942][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 765.534380][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.862408][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 765.871623][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.940964][ T5870] usb 4-1: Product: syz [ 765.953906][ T5870] usb 4-1: Manufacturer: syz [ 765.974146][ T5870] usb 4-1: SerialNumber: syz [ 765.995086][ T5870] usb 4-1: config 0 descriptor?? [ 766.015327][ T5870] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 766.064616][ T5870] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 766.248859][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 766.494994][ T5933] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 766.644470][ T5933] usb 1-1: Invalid ep0 maxpacket: 16 [ 766.794409][ T5933] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 766.845055][ T5870] em28xx 4-1:0.0: chip ID is em2874 [ 766.874613][ T7465] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 766.954710][ T5961] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 767.004357][ T5933] usb 1-1: Invalid ep0 maxpacket: 16 [ 767.030020][ T5933] usb usb1-port1: attempt power cycle [ 767.037163][ T7465] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.071232][ T7465] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.108155][ T7465] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 767.134743][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 767.159369][ T5961] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 767.172624][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.189787][ T7465] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.210009][ T5961] usb 2-1: config 0 descriptor?? [ 767.229828][ T5961] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 767.248085][ T7465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.259766][ T7465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.282593][ T7465] usb 3-1: Product: syz [ 767.290016][ T7465] usb 3-1: Manufacturer: syz [ 767.297113][ T7465] usb 3-1: SerialNumber: syz [ 767.424391][ T5933] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 767.455023][ T5933] usb 1-1: Invalid ep0 maxpacket: 16 [ 767.594364][ T5933] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 767.635289][ T5933] usb 1-1: Invalid ep0 maxpacket: 16 [ 767.656535][ T5933] usb usb1-port1: unable to enumerate USB device [ 768.326763][ T5870] usb 4-1: USB disconnect, device number 57 [ 768.345038][ T5870] em28xx 4-1:0.0: Disconnecting em28xx [ 768.355078][ T5870] em28xx 4-1:0.0: Freeing device [ 769.245819][ T5961] gspca_sonixj: reg_r err -32 [ 769.251344][ T5961] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 769.282551][ T5961] usb 2-1: USB disconnect, device number 78 [ 769.388938][ T30] audit: type=1400 audit(1765839494.452:886): avc: denied { read } for pid=13328 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 769.473742][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1645'. [ 769.519383][ T7465] cdc_ncm 3-1:1.0: bind() failure [ 769.546103][ T7465] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 769.575744][ T7465] cdc_ncm 3-1:1.1: bind() failure [ 769.612816][ T7465] usb 3-1: USB disconnect, device number 69 [ 770.449003][T13366] binder: 13360:13366 ioctl 4018620d 0 returned -22 [ 770.627470][ T30] audit: type=1400 audit(1765839495.692:887): avc: denied { append } for pid=13369 comm="syz.0.1652" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 771.165200][ T5961] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 771.229932][T13397] overlayfs: failed to clone upperpath [ 771.327860][ T5961] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 771.340702][ T5961] usb 2-1: config 0 has no interface number 0 [ 771.359275][ T5961] usb 2-1: config 0 interface 98 has no altsetting 0 [ 771.374059][ T5870] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 771.397308][ T5961] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 771.429406][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.461346][ T5961] usb 2-1: Product: syz [ 771.472738][ T5961] usb 2-1: Manufacturer: syz [ 771.478505][ T5961] usb 2-1: SerialNumber: syz [ 771.493994][ T5961] usb 2-1: config 0 descriptor?? [ 771.606551][ T5870] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 771.616362][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.627226][ T5870] usb 1-1: config 0 has no interface number 0 [ 771.633418][ T5870] usb 1-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 771.647054][ T5870] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 771.697429][ T5870] usb 1-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 772.177766][ T5870] usb 1-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 772.194972][ T5870] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 772.209225][ T5961] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 772.232321][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.255891][ T5870] usb 1-1: Product: syz [ 772.265837][ T5870] usb 1-1: Manufacturer: syz [ 772.282606][ T5870] usb 1-1: SerialNumber: syz [ 772.308456][ T5870] usb 1-1: config 0 descriptor?? [ 772.331710][ T5870] symbolserial 1-1:0.175: symbol converter detected [ 772.356918][ T5870] usb 1-1: symbol converter now attached to ttyUSB0 [ 772.584783][ T5870] usb 1-1: USB disconnect, device number 85 [ 772.694096][ T5870] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 772.717041][ T5870] symbolserial 1-1:0.175: device disconnected [ 772.879323][ T5961] usb 2-1: reset high-speed USB device number 79 using dummy_hcd [ 772.904368][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 773.070728][ T10] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 773.099547][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.136631][ T10] usb 3-1: config 0 descriptor?? [ 773.150553][T13440] netlink: 'syz.0.1664': attribute type 23 has an invalid length. [ 773.294784][T13444] lo speed is unknown, defaulting to 1000 [ 773.307939][ T5898] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 773.322521][ T5961] usb 2-1: failed to restore interface 98 altsetting 4 (error=-71) [ 773.356928][T13446] veth0_vlan: entered allmulticast mode [ 773.371947][ T10] kaweth 3-1:0.0: Firmware present in device. [ 773.382556][ T5961] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 773.391409][ T5961] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 773.400429][ T5870] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 773.421064][ T30] audit: type=1400 audit(1765839498.482:888): avc: denied { firmware_load } for pid=5870 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 773.449327][ T5870] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 773.459538][ T5961] usb 2-1: USB disconnect, device number 79 [ 773.474649][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 773.488557][ T5870] ------------[ cut here ]------------ [ 773.494784][ T5870] WARNING: fs/kernfs/dir.c:537 at kernfs_get.part.0+0x6e/0x80, CPU#0: kworker/0:4/5870 [ 773.503867][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.505298][ T5870] Modules linked in: [ 773.522839][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.536701][ T5870] Tainted: [L]=SOFTLOCKUP [ 773.541640][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.550512][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.553956][ T5870] Workqueue: events request_firmware_work_func [ 773.572292][ T5870] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 773.578437][ T5870] Code: f8 9a 54 ff 85 ed 74 1c e8 4f a0 54 ff be 04 00 00 00 48 89 df e8 92 7d be ff f0 ff 03 5b 5d e9 d8 df 10 09 e8 33 a0 54 ff 90 <0f> 0b 90 eb d9 48 89 df e8 75 75 be ff eb c0 0f 1f 00 90 90 90 90 [ 773.594082][ T5898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 773.598609][ T5870] RSP: 0018:ffffc90003017718 EFLAGS: 00010293 [ 773.613782][ T5870] RAX: 0000000000000000 RBX: ffff88807775d4b0 RCX: ffffffff826a43a8 [ 773.622379][ T5870] RDX: ffff8880340b24c0 RSI: ffffffff826a43cd RDI: 0000000000000005 [ 773.630442][ T5870] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 773.632290][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.638601][ T5870] R10: 0000000000000000 R11: ffff8880340b2ff0 R12: ffff888059dec0b0 [ 773.638623][ T5870] R13: ffff8880314102b0 R14: 0000000000000000 R15: ffff8880314102a8 [ 773.638635][ T5870] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 773.638653][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.638664][ T5870] CR2: 000000110c45d5ae CR3: 0000000036127000 CR4: 00000000003526f0 [ 773.638676][ T5870] Call Trace: [ 773.638684][ T5870] [ 773.638695][ T5870] kernfs_get+0x1f/0x30 [ 773.700875][ T5870] kobject_add_internal+0x353/0x9d0 [ 773.706291][ T5870] kobject_add+0x16e/0x240 [ 773.710838][ T5870] ? __pfx_kobject_add+0x10/0x10 [ 773.715904][ T5870] get_device_parent+0x399/0x4e0 [ 773.720967][ T5870] device_add+0x1ad/0x1980 [ 773.725450][ T5870] ? __pfx_device_add+0x10/0x10 [ 773.730428][ T5870] ? __init_waitqueue_head+0xca/0x150 [ 773.735930][ T5870] firmware_fallback_sysfs+0x2ec/0xc40 [ 773.741697][ T5870] _request_firmware+0x101c/0x14e0 [ 773.747118][ T5870] ? __pfx__request_firmware+0x10/0x10 [ 773.752651][ T5870] ? do_raw_spin_unlock+0x172/0x230 [ 773.758042][ T5870] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 773.759733][ T5898] usb 4-1: config 0 descriptor?? [ 773.763870][ T5870] ? debug_object_deactivate+0x1ec/0x3a0 [ 773.763906][ T5870] ? finish_task_switch.isra.0+0x202/0xbd0 [ 773.763938][ T5870] request_firmware_work_func+0xea/0x250 [ 773.786407][ T5870] ? __pfx_request_firmware_work_func+0x10/0x10 [ 773.793376][ T5870] ? rcu_is_watching+0x12/0xc0 [ 773.798737][ T5870] process_one_work+0x9ba/0x1b20 [ 773.803809][ T5870] ? __pfx_process_one_work+0x10/0x10 [ 773.809424][ T5870] ? assign_work+0x1a0/0x250 [ 773.814044][ T5870] worker_thread+0x6c8/0xf10 [ 773.818890][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 773.824146][ T5870] kthread+0x3c5/0x780 [ 773.828346][ T5870] ? __pfx_kthread+0x10/0x10 [ 773.832965][ T5870] ? rcu_is_watching+0x12/0xc0 [ 773.837895][ T5870] ? __pfx_kthread+0x10/0x10 [ 773.842517][ T5870] ret_from_fork+0x983/0xb10 [ 773.847312][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 773.852544][ T5870] ? __switch_to+0x7af/0x10d0 [ 773.857345][ T5870] ? __pfx_kthread+0x10/0x10 [ 773.862049][ T5870] ret_from_fork_asm+0x1a/0x30 [ 773.867045][ T5870] [ 773.870076][ T5870] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 773.877368][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.889106][ T5870] Tainted: [L]=SOFTLOCKUP [ 773.893438][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.903730][ T5870] Workqueue: events request_firmware_work_func [ 773.910108][ T5870] Call Trace: [ 773.913467][ T5870] [ 773.916487][ T5870] dump_stack_lvl+0x3d/0x1f0 [ 773.921265][ T5870] vpanic+0x640/0x6f0 [ 773.925241][ T5870] ? kernfs_get.part.0+0x6e/0x80 [ 773.930268][ T5870] panic+0xca/0xd0 [ 773.934004][ T5870] ? __pfx_panic+0x10/0x10 [ 773.938423][ T5870] ? check_panic_on_warn+0x1f/0xb0 [ 773.943639][ T5870] check_panic_on_warn+0xab/0xb0 [ 773.948617][ T5870] __warn+0x108/0x3c0 [ 773.952590][ T5870] __report_bug+0x2a0/0x520 [ 773.957283][ T5870] ? kernfs_get.part.0+0x6e/0x80 [ 773.962216][ T5870] ? __pfx___report_bug+0x10/0x10 [ 773.967242][ T5870] ? find_held_lock+0x2b/0x80 [ 773.971912][ T5870] ? kernfs_add_one+0x37d/0x840 [ 773.976761][ T5870] ? up_write+0x282/0x4e0 [ 773.981099][ T5870] ? kernfs_get.part.0+0x6e/0x80 [ 773.986026][ T5870] report_bug+0xb2/0x220 [ 773.990428][ T5870] ? kernfs_get.part.0+0x6e/0x80 [ 773.995362][ T5870] handle_bug+0x127/0x260 [ 773.999714][ T5870] exc_invalid_op+0x17/0x50 [ 774.004213][ T5870] asm_exc_invalid_op+0x1a/0x20 [ 774.009067][ T5870] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 774.014634][ T5870] Code: f8 9a 54 ff 85 ed 74 1c e8 4f a0 54 ff be 04 00 00 00 48 89 df e8 92 7d be ff f0 ff 03 5b 5d e9 d8 df 10 09 e8 33 a0 54 ff 90 <0f> 0b 90 eb d9 48 89 df e8 75 75 be ff eb c0 0f 1f 00 90 90 90 90 [ 774.034318][ T5870] RSP: 0018:ffffc90003017718 EFLAGS: 00010293 [ 774.040622][ T5870] RAX: 0000000000000000 RBX: ffff88807775d4b0 RCX: ffffffff826a43a8 [ 774.048780][ T5870] RDX: ffff8880340b24c0 RSI: ffffffff826a43cd RDI: 0000000000000005 [ 774.056747][ T5870] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 774.064709][ T5870] R10: 0000000000000000 R11: ffff8880340b2ff0 R12: ffff888059dec0b0 [ 774.072712][ T5870] R13: ffff8880314102b0 R14: 0000000000000000 R15: ffff8880314102a8 [ 774.080856][ T5870] ? kernfs_get.part.0+0x48/0x80 [ 774.085799][ T5870] ? kernfs_get.part.0+0x6d/0x80 [ 774.090722][ T5870] ? kernfs_get.part.0+0x6d/0x80 [ 774.095739][ T5870] kernfs_get+0x1f/0x30 [ 774.099884][ T5870] kobject_add_internal+0x353/0x9d0 [ 774.105078][ T5870] kobject_add+0x16e/0x240 [ 774.109491][ T5870] ? __pfx_kobject_add+0x10/0x10 [ 774.114458][ T5870] get_device_parent+0x399/0x4e0 [ 774.119481][ T5870] device_add+0x1ad/0x1980 [ 774.124060][ T5870] ? __pfx_device_add+0x10/0x10 [ 774.128896][ T5870] ? __init_waitqueue_head+0xca/0x150 [ 774.134385][ T5870] firmware_fallback_sysfs+0x2ec/0xc40 [ 774.139932][ T5870] _request_firmware+0x101c/0x14e0 [ 774.145049][ T5870] ? __pfx__request_firmware+0x10/0x10 [ 774.151821][ T5870] ? do_raw_spin_unlock+0x172/0x230 [ 774.157402][ T5870] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 774.165485][ T5870] ? debug_object_deactivate+0x1ec/0x3a0 [ 774.171666][ T5870] ? finish_task_switch.isra.0+0x202/0xbd0 [ 774.177808][ T5870] request_firmware_work_func+0xea/0x250 [ 774.183646][ T5870] ? __pfx_request_firmware_work_func+0x10/0x10 [ 774.190216][ T5870] ? rcu_is_watching+0x12/0xc0 [ 774.195271][ T5870] process_one_work+0x9ba/0x1b20 [ 774.200231][ T5870] ? __pfx_process_one_work+0x10/0x10 [ 774.205630][ T5870] ? assign_work+0x1a0/0x250 [ 774.210239][ T5870] worker_thread+0x6c8/0xf10 [ 774.214926][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 774.220204][ T5870] kthread+0x3c5/0x780 [ 774.224276][ T5870] ? __pfx_kthread+0x10/0x10 [ 774.228914][ T5870] ? rcu_is_watching+0x12/0xc0 [ 774.233803][ T5870] ? __pfx_kthread+0x10/0x10 [ 774.238517][ T5870] ret_from_fork+0x983/0xb10 [ 774.243133][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 774.248346][ T5870] ? __switch_to+0x7af/0x10d0 [ 774.253230][ T5870] ? __pfx_kthread+0x10/0x10 [ 774.258178][ T5870] ret_from_fork_asm+0x1a/0x30 [ 774.262961][ T5870] [ 774.266356][ T5870] Kernel Offset: disabled [ 774.270708][ T5870] Rebooting in 86400 seconds..