last executing test programs: 7.10053448s ago: executing program 0 (id=2316): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) sendfile(0xffffffffffffffff, r0, 0x0, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) mmap$usbmon(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x4, 0x110, r2, 0x4) setxattr$incfs_metadata(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffff7f}}, './file0\x00'}) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, r1, &(0x7f0000000200)='./file0\x00') write$sndseq(r0, &(0x7f0000000280)=[{0x40, 0x7, 0x7, 0x7, @tick=0x10, {0x1, 0x4}, {0x5, 0x2}, @quote={{0x5, 0xc}, 0x8000, &(0x7f0000000240)={0x2, 0x3, 0x0, 0xff, @tick=0x7fffffff, {0xe4, 0x7f}, {0xc, 0x76}, @result={0x800, 0xde4}}}}, {0x1, 0x1, 0x80, 0x2, @tick=0x8001, {0x0, 0xcf}, {0x6, 0x99}, @result={0x0, 0x800}}, {0x5, 0x8, 0x6, 0xfa, @tick=0xc9a0672, {0x40, 0x5}, {0x7f, 0x7}, @queue={0x0, {0x4, 0x6}}}, {0x7, 0x59, 0x7, 0x7, @time={0x4}, {0x3, 0xe5}, {0x9, 0x5}, @connect={{0x2, 0x5}, {0x40, 0x1}}}, {0x1, 0xef, 0x4, 0x5, @tick=0x10, {0x0, 0xe6}, {0x43, 0x11}, @connect={{0x5, 0xe}, {0x2a, 0x2}}}], 0x8c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r6 = dup3(r0, r5, 0x80000) io_setup(0x2, &(0x7f0000000380)=0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', 0x0, r0, 0x2}, 0x50) io_submit(r7, 0x3, &(0x7f0000000680)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0xab3, r8, &(0x7f0000000440)="9da47bc63e7761fcc85f95f0facb30e371125770430f4e82c7470473c0fdfda710d979f51a9f94e1e2280a2c4dbcc675db73494bf83c97a0c1dbca7150db8f134b1bb1bd315fa6faf30282f6115da2ec7adf7b31e7514ce8592edba81f0200f9f4a3024acfafc51663", 0x69, 0x7, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x7f, r2, &(0x7f0000000500)="bb18756dcfbf246d737be1400d3e7f754afe047bc26264c0398c2844088b85a9c633c08223a0913a4095b3d111aea9ba5fb78fe86c357c720b28601863241a0e5c1e5d168953081b930f45f273d3146fa65bca2326afab", 0x57, 0x1, 0x0, 0x1, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x331, r2, &(0x7f00000005c0)="4ebfc98f78954aa6eb8961415380b11ca576f1282a59ed6cb6d73b968161a7c4c46a1df574b65df3cef7017beeeb7169f3630547463c582557329ed55c97309b37ba033aa4a5951b99c3e6a6c7c6a6b946ada824978e3fc136ebfc276c5c9d3fc962eda261c5ac56295f97909bf6e69f54ed0c088501fd06", 0x78, 0x1, 0x0, 0x1, r0}]) timer_create(0x4, &(0x7f00000006c0)={0x0, 0x0, 0x1}, &(0x7f0000000700)=0x0) timer_settime(r9, 0x0, &(0x7f0000000740)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000780)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r6, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x1c, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x5, 0x5, 0x6, 0xa3f, 0x2, r2, 0x2, '\x00', r10, r2, 0x2, 0x5, 0x5}, 0x50) lsetxattr$trusted_overlay_redirect(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x8, 0x2) ftruncate(r4, 0x5b85) sendfile(r0, r6, &(0x7f0000000c00)=0x6, 0xa) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000c40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r2, r8, 0x0) timer_settime(r9, 0x0, &(0x7f0000000cc0)={{}, {0x77359400}}, &(0x7f0000000d00)) socket$nl_generic(0x10, 0x3, 0x10) io_pgetevents(r7, 0x56, 0x5, &(0x7f0000000d40)=[{}, {}, {}, {}, {}], &(0x7f0000000e00)={0x0, 0x3938700}, &(0x7f0000000e80)={&(0x7f0000000e40)={[0x2474]}, 0x8}) pwrite64(r5, &(0x7f0000000ec0)="8870d1579349cd73fc26d9a5f5ac5031942ebc3eec9db42dc3f8a156ddb9e0347c405fd3cd42e7b529543cb16c1cb3e94f623398a2fdfca47dd29a692396e6cd72afc78105272034a3eea258fa1089e73fe8d3d65de8cc9b70805651cec7112b48cedd0d7c32ace493e1bc2cf27c7421671af8029d2e2201b8da46954365af9586c6933bc807", 0x86, 0x3) 6.960141448s ago: executing program 3 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x4, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100"], 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 6.873478438s ago: executing program 0 (id=2319): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x81) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 6.613016473s ago: executing program 4 (id=2321): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}}}, 0x26) 6.133865229s ago: executing program 3 (id=2323): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89e0, 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x81) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 5.832940954s ago: executing program 4 (id=2324): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'veth1_to_hsr\x00', {0x1}, 0x8}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009040100011870f500090582020002"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xffffffffffffff33, &(0x7f0000000000)=ANY=[]) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@ipv4_newroute={0x20, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0xffffff7f, 0x0, 0x20040800}, 0x400048c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x59) creat(&(0x7f00000000c0)='./file0\x00', 0xc) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) renameat2(r7, &(0x7f0000000140)='./file0\x00', r8, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010329bd7000fcdbdf25240000001800018014000200746576655f30000000000251da6902e6e3346651a787cd224a8d481df40000db3daf0f10b011e446447a2b51"], 0x2c}}, 0x0) 5.783810656s ago: executing program 2 (id=2325): r0 = syz_open_dev$dri(0x0, 0x0, 0x202) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0xe108, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r4, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000}, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 5.247992978s ago: executing program 1 (id=2328): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r2, @ANYBLOB="ce2cb59827c9cbf50cb81f73e871d9a454cb8e4a9fd7d2179b5b50f6826d8a3ea8a54e73321a5d2139061411649026df4f929716026db110f26f13950f00a0a03179089fdccf81e502175c186b470d80ae0ab2d2e6916088af16f6d1baf71eab28487a5676fade2a942a8b4396d6e86e70ed59420ca54652749094fd8c1ab6910357861edcaae29263e0498c2ae2f49b3982e09cb708a733"], 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$TCFLSH(r6, 0x800455cc, 0x2) 5.188977778s ago: executing program 1 (id=2329): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @loopback, 0x3}, {0xa, 0x4e23, 0x2, @empty, 0xa4a1}, 0xffffffffffffffff, 0x7}}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x428480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x7c}}}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x369e}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x632}, @value=@ver_80211n={0x0, 0x7ffe, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2000, 0x1000, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfff, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x9, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14880}, 0x2000) 4.357121282s ago: executing program 2 (id=2330): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.293983238s ago: executing program 1 (id=2331): syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x48000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x2006) dup2(r1, r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) 4.218750928s ago: executing program 2 (id=2332): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x3460}, {0x1}], @llc={@snap={0x1, 0xaa, "84bc", "cfd820", 0xf9, "a572af0bb74307a0053a682d4f65dff222a5f4ab8ce8731bc6f60a3612623b4bbed857990a7299"}}}}}}, 0x0) syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x8000000000000000) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') 3.455339296s ago: executing program 0 (id=2333): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 3.342976885s ago: executing program 2 (id=2334): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0xca) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free_batched\x00', r1, 0x0, 0x8000000000000000}, 0x18) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 3.311418896s ago: executing program 3 (id=2335): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r1, &(0x7f0000000300), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xd, @loopback, 0x3}, {0xa, 0x4e23, 0x2, @empty, 0xa4a1}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x428480, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x7c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x800, 0x7c}}}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x369e}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0x632}, @value=@ver_80211n={0x0, 0x7ffe, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2000, 0x1000, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfff, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x9, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14880}, 0x2000) 2.983972116s ago: executing program 2 (id=2336): ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000001400000000000000010000000100", @ANYRES32=r1, @ANYBLOB], 0x30, 0x4040040}, 0x4004011) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40500, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7e) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000000000)=""/42, 0x1b, 0x2a, 0x1, 0x6}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 2.150104457s ago: executing program 0 (id=2337): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 2.138263416s ago: executing program 4 (id=2338): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x890d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) gettid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) 2.071777289s ago: executing program 3 (id=2339): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendto$inet(r0, &(0x7f0000000280)="97d937bcfd66a4ef9af12601488eec0027763a528f66c27c25b91dc9d7fc46bfd5b58df5d8fe55f218528ca42fe730f40425", 0x32, 0x810, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x1, 0xc, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="b1", 0x0, 0x4, 0x10, 0x40002, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x7fffefff) socket$nl_generic(0x10, 0x3, 0x10) 2.069042748s ago: executing program 2 (id=2340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x81, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000300)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) fcntl$addseals(r6, 0x409, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 2.036054169s ago: executing program 0 (id=2341): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000480), 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x4, 0x80, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB="24fce2e22e335bc4c7d01307cc8eb751b2a32ffcabbd6dbadfdafb7435f24e3900d271fa7d8d6812f7148f50254f2b5fa633"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x14900) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r10, 0x40bc5311, &(0x7f00000005c0)={0x2, 0x1, 'client0\x00', 0x0, "51c40345fd231a38", "7ebc540c1d58fc02818ed9750acaf35971ac030cd70907280d7b029059fda92c", 0x4, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.108722502s ago: executing program 3 (id=2342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)=""/4089, 0xff9}, {&(0x7f00000036c0)=""/136, 0x88}, {&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f0000003b40)=""/222, 0xde}], 0x5}, 0x1c0}], 0x1, 0x40002162, 0x0) 1.095751424s ago: executing program 0 (id=2343): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) symlink(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0xea) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x3, 0x3, 0x3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7472796c6f630900000034351d5dee63b5c802fe2c21910c21be9d5c8f0000000000"], 0xf) creat(0x0, 0xecf86c37d53048cc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100112201040ac0501854e9e0102030109021b0001000090000904a000010e010000092505030800000010"], 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x81) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) 1.094061978s ago: executing program 1 (id=2344): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @local, @void, {@mpls_uc={0x8847, {[{0x3460}, {0x1}], @llc={@snap={0x1, 0xaa, "84bc", "cfd820", 0xf9, "a572af0bb74307a0053a682d4f65dff222a5f4ab8ce8731bc6f60a3612623b4bbed857990a7299"}}}}}}, 0x0) syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000080)=0x1) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x8000000000000000) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') 1.011581791s ago: executing program 3 (id=2345): openat$random(0xffffffffffffff9c, 0x0, 0x40202, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x5}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000006200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 637.771446ms ago: executing program 4 (id=2346): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @sdr={0x31435641, 0xf}}) 619.254219ms ago: executing program 1 (id=2347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)=""/4089, 0xff9}, {&(0x7f00000036c0)=""/136, 0x88}, {&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f0000003b40)=""/222, 0xde}], 0x5}, 0x1c0}], 0x1, 0x40002162, 0x0) 548.646118ms ago: executing program 1 (id=2348): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) close(r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000501, r6, &(0x7f0000000140)) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450c00780000000000019078ac1e0001ac1414aa0304907803000000470000002f0000ac1414aae0000001440cbb230a01010200000001070b010100000000137fffffff000033ef00000000000000080000010144086390000000034404093100000000040000000000000000000000000000000000000028501c487c87facd3c204a4444c299d907"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 172.289554ms ago: executing program 4 (id=2349): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r0, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x8, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x6, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x8, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x7, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xb, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x7, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 0s ago: executing program 4 (id=2350): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000010000000000000000000004"], 0x0) kernel console output (not intermixed with test programs): =system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 666.688538][ T5900] usb 4-1: config 0 has no interface number 0 [ 666.706862][ T5900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.867487][ T5900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.887736][ T5900] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 667.857071][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.055463][ T5900] usb 4-1: config 0 descriptor?? [ 668.123834][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 668.303019][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 668.347362][ T5900] usbhid 4-1:0.1: can't add hid device: -71 [ 668.375134][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 668.386809][ T5900] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 668.410363][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 668.433067][ T5900] usb 4-1: USB disconnect, device number 82 [ 668.462485][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 668.943945][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.009795][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 669.019533][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 669.029672][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 480 [ 669.056669][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 669.066067][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.077015][ T10] usb 3-1: Product: syz [ 669.083345][ T10] usb 3-1: Manufacturer: syz [ 669.090680][ T10] usb 3-1: SerialNumber: syz [ 669.102197][ T10] usb 3-1: config 0 descriptor?? [ 669.112524][T12940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.124516][T12940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.145987][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.199832][T12966] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1842'. [ 670.209281][T12966] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 670.279241][T12966] 0ªX¹¦D: entered allmulticast mode [ 670.286236][T12966] veth0_macvtap: entered allmulticast mode [ 670.293553][T12966] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 670.364017][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 670.386158][T12966] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1842' sets config #0 [ 670.406028][T12980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.418417][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'. [ 670.430306][T12980] : renamed from ip6gre0 (while UP) [ 670.450422][T12978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.524032][T12978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.552445][ T10] usb 3-1: USB disconnect, device number 54 [ 670.874908][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 671.480699][T12992] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1847'. [ 671.501345][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 671.560912][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.570456][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.580149][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 671.584478][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.605414][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.659035][T12992] bridge_slave_0: left allmulticast mode [ 671.665575][T12992] bridge_slave_0: left promiscuous mode [ 671.671413][T12992] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.749737][T12992] bridge_slave_1: left allmulticast mode [ 671.757562][T12992] bridge_slave_1: left promiscuous mode [ 671.766537][T12992] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.781011][T12996] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=12996 comm=syz.3.1848 [ 671.926859][T12992] bond0: (slave bond_slave_0): Releasing backup interface [ 672.433896][T12992] bond0: (slave bond_slave_1): Releasing backup interface [ 672.446473][T12992] team_slave_0: left promiscuous mode [ 672.452129][T12992] team_slave_0: left allmulticast mode [ 672.593299][T12992] team0: Port device team_slave_0 removed [ 672.599597][T12992] team_slave_1: left promiscuous mode [ 672.610447][T12992] team_slave_1: left allmulticast mode [ 673.087856][ T30] audit: type=1326 audit(673.049:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.102710][T12992] team0: Port device team_slave_1 removed [ 673.150116][T12992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.160690][ T30] audit: type=1326 audit(673.049:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.194287][T12992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.211597][ T30] audit: type=1326 audit(673.059:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.235712][ T30] audit: type=1326 audit(673.059:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.366895][ T30] audit: type=1326 audit(673.059:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.642560][T12992] bond1: (slave vcan1): Releasing backup interface [ 673.642578][T12992] vcan1: left promiscuous mode [ 673.677610][ T30] audit: type=1326 audit(673.059:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.677654][ T30] audit: type=1326 audit(673.059:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.677692][ T30] audit: type=1326 audit(673.059:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.677732][ T30] audit: type=1326 audit(673.059:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.677770][ T30] audit: type=1326 audit(673.059:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13002 comm="syz.4.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 673.771940][ T10] ip6gretap0 speed is unknown, defaulting to 1000 [ 673.840040][T11140] syz!: Port: 1 Link DOWN [ 673.884377][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.249209][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.485729][T13037] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=13037 comm=syz.3.1861 [ 675.813785][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1860'. [ 676.676714][T13024] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 678.078267][T13073] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 678.683434][ T92] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 678.870316][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.889610][ T92] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 678.906264][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.931214][ T92] usb 2-1: config 0 descriptor?? [ 678.988834][ T92] pwc: Askey VC010 type 2 USB webcam detected. [ 680.530866][ T92] pwc: recv_control_msg error -32 req 02 val 2b00 [ 680.563814][ T92] pwc: recv_control_msg error -32 req 02 val 2700 [ 680.605858][ T92] pwc: recv_control_msg error -32 req 02 val 2c00 [ 680.829299][T13109] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=13109 comm=syz.3.1876 [ 680.878538][T13108] netlink: 'syz.4.1875': attribute type 4 has an invalid length. [ 680.937576][ T92] pwc: recv_control_msg error -32 req 04 val 1000 [ 680.939273][T13111] netlink: 'syz.4.1875': attribute type 4 has an invalid length. [ 680.972686][ T92] pwc: recv_control_msg error -32 req 04 val 1300 [ 681.546095][T13091] lo speed is unknown, defaulting to 1000 [ 681.572085][T13091] tunl0 speed is unknown, defaulting to 1000 [ 681.585047][ T92] pwc: recv_control_msg error -71 req 02 val 2100 [ 681.610588][ T92] pwc: recv_control_msg error -71 req 04 val 1500 [ 681.634718][ T92] pwc: recv_control_msg error -71 req 02 val 2500 [ 681.651387][ T92] pwc: recv_control_msg error -71 req 02 val 2400 [ 681.727517][ T92] pwc: recv_control_msg error -71 req 02 val 2600 [ 681.741295][ T92] pwc: recv_control_msg error -71 req 02 val 2900 [ 681.755132][ T92] pwc: recv_control_msg error -71 req 02 val 2800 [ 681.764949][ T92] pwc: recv_control_msg error -71 req 04 val 1100 [ 681.771617][ T92] pwc: recv_control_msg error -71 req 04 val 1200 [ 681.809686][ T92] pwc: Registered as video103. [ 681.822067][T13116] fuse: Bad value for 'fd' [ 681.827195][T13116] fuse: Bad value for 'fd' [ 681.831958][T13116] fuse: Bad value for 'fd' [ 681.868311][ T92] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 681.956417][ T92] usb 2-1: USB disconnect, device number 52 [ 682.163995][T13104] lo speed is unknown, defaulting to 1000 [ 682.468691][T13104] tunl0 speed is unknown, defaulting to 1000 [ 682.470030][T13091] ip6gretap0 speed is unknown, defaulting to 1000 [ 682.867931][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 683.450620][T13104] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.557083][T13139] SQUASHFS error: Failed to read block 0x0: -5 [ 683.564057][T13139] unable to read squashfs_super_block [ 683.612126][T13137] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1882'. [ 683.838052][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1883'. [ 685.732832][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.741193][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.240351][T13170] tipc: Started in network mode [ 686.245414][T13170] tipc: Node identity 080211, cluster identity 4711 [ 686.252711][T13170] tipc: Enabled bearer , priority 0 [ 687.073982][ T5900] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 687.073982][ T24] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 687.090711][T13180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.109595][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 687.364085][ T10] tipc: Node number set to 134353152 [ 687.392962][ T5900] usb 4-1: device descriptor read/64, error -71 [ 687.838029][ T24] usb 3-1: device descriptor read/64, error -32 [ 687.903008][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 688.032962][ T9] usb 1-1: device descriptor read/64, error -71 [ 688.103067][ T5900] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 688.103185][ T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 688.423129][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 688.783000][ T9] usb 1-1: device descriptor read/64, error -71 [ 688.806055][ T24] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 688.843214][ T24] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 688.864180][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 688.894893][ T9] usb usb1-port1: attempt power cycle [ 688.903255][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.923311][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 688.952940][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.043736][ T24] usb 3-1: config 0 descriptor?? [ 689.065658][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 689.243085][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 689.287011][ T9] usb 1-1: device descriptor read/8, error -71 [ 689.323233][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 689.483527][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 689.494685][ T24] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 689.510105][ T24] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 689.537305][ T24] usb 2-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.544255][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 689.580477][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 689.599314][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.616668][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.639697][ T24] usb 2-1: Product: syz [ 689.650592][ T24] usb 2-1: Manufacturer: syz [ 689.665348][ T24] usb 2-1: SerialNumber: syz [ 689.680207][ T9] usb 1-1: device descriptor read/8, error -71 [ 689.680392][T13213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 689.703052][T13213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 689.853328][ T9] usb usb1-port1: unable to enumerate USB device [ 690.008250][T13228] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1899'. [ 690.359356][ T9] usb 3-1: USB disconnect, device number 56 [ 690.510453][T13242] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1902'. [ 690.773762][T13246] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 691.279548][T13242] SQUASHFS error: Failed to read block 0x0: -5 [ 691.286965][T13242] unable to read squashfs_super_block [ 692.297080][T13266] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1907'. [ 692.827258][ T24] usb 2-1: bad CDC descriptors [ 692.900542][ T24] usb 2-1: USB disconnect, device number 53 [ 693.958628][T13249] lo speed is unknown, defaulting to 1000 [ 693.995031][T13249] tunl0 speed is unknown, defaulting to 1000 [ 693.998548][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 693.998559][ T30] audit: type=1326 audit(693.979:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 694.403523][ T30] audit: type=1326 audit(694.019:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 694.501496][ T30] audit: type=1326 audit(694.019:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 694.592515][ T30] audit: type=1326 audit(694.019:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 695.026482][T13306] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1914'. [ 695.035770][T13306] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 695.468113][ T30] audit: type=1326 audit(694.019:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13284 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054458eec9 code=0x7ffc0000 [ 695.503627][ T30] audit: type=1400 audit(694.149:1588): avc: denied { bind } for pid=13289 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 695.553711][T13306] 0ªî{X¹¦: entered allmulticast mode [ 695.559290][T13306] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 695.645873][T13249] ip6gretap0 speed is unknown, defaulting to 1000 [ 696.932952][ T5900] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 697.390973][ T5900] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 697.407697][ T5900] usb 2-1: config 160 has no interface number 0 [ 697.440255][ T5900] usb 2-1: config 160 interface 200 has no altsetting 0 [ 697.501858][T13317] lo speed is unknown, defaulting to 1000 [ 697.511531][T13317] tunl0 speed is unknown, defaulting to 1000 [ 697.528507][ T5900] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 697.588578][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.669931][ T5900] usb 2-1: Product: syz [ 697.695605][ T5900] usb 2-1: Manufacturer: syz [ 697.715476][ T5900] usb 2-1: SerialNumber: syz [ 697.802592][ T30] audit: type=1800 audit(697.779:1589): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1915" name="/" dev="9p" ino=2 res=0 errno=0 [ 698.055405][T13317] ip6gretap0 speed is unknown, defaulting to 1000 [ 699.533998][ T5900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.542613][ T5900] usb 2-1: MIDIStreaming interface descriptor not found [ 699.777352][T13357] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1923'. [ 699.806655][T13357] SQUASHFS error: Failed to read block 0x0: -5 [ 699.821542][T13357] unable to read squashfs_super_block [ 700.082329][ T5900] usb 2-1: USB disconnect, device number 54 [ 700.962130][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.127069][T13360] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 702.199781][T13369] syz.1.1926 (13369): drop_caches: 2 [ 703.523393][ T5928] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 704.870057][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 705.333135][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 705.423485][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 705.430809][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 705.437985][ T5928] usb 4-1: device descriptor read/all, error -32 [ 705.731040][T13429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1937'. [ 706.938433][T10361] udevd[10361]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.496231][ T7428] udevd[7428]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.570518][T13445] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1942'. [ 707.745847][T13428] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 708.423004][ T973] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 708.563482][ T30] audit: type=1400 audit(708.089:1590): avc: denied { connect } for pid=13450 comm="syz.2.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 708.582562][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 708.665791][ T973] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 708.672607][ T30] audit: type=1400 audit(708.099:1591): avc: denied { read } for pid=13450 comm="syz.2.1945" laddr=fe80::c44c:e0ff:fe36:dd86 lport=2 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 708.704617][ T973] usb 3-1: config 0 has no interface number 0 [ 708.801710][ T973] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 708.869572][ T973] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 709.298004][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.388790][ T973] usb 3-1: Product: syz [ 709.403094][ T973] usb 3-1: Manufacturer: syz [ 709.407784][ T973] usb 3-1: SerialNumber: syz [ 709.417895][ T973] usb 3-1: config 0 descriptor?? [ 709.425456][ T973] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 709.442509][ T973] em28xx 3-1:0.132: Video interface 132 found: [ 709.812953][ T5928] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 709.872535][T13455] netlink: 'syz.2.1945': attribute type 2 has an invalid length. [ 709.881048][T13455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1945'. [ 710.026015][T13480] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 710.534668][ T5928] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 710.543190][ T5928] usb 2-1: config 0 has no interface number 0 [ 710.549480][ T5928] usb 2-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.568584][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 710.578234][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.586625][ T5928] usb 2-1: Product: syz [ 710.590936][ T5928] usb 2-1: Manufacturer: syz [ 710.596561][ T5928] usb 2-1: SerialNumber: syz [ 710.614150][ T5928] usb 2-1: config 0 descriptor?? [ 710.622845][ T5928] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 710.629610][ T5928] usb 2-1: No valid video chain found. [ 710.733828][ T973] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 710.840773][ T973] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 710.851525][ T973] em28xx 3-1:0.132: board has no eeprom [ 710.914595][ T973] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 710.952766][ T973] em28xx 3-1:0.132: analog set to bulk mode. [ 710.969367][ T5900] em28xx 3-1:0.132: Registering V4L2 extension [ 711.443258][ T973] usb 3-1: USB disconnect, device number 57 [ 711.477751][ T973] em28xx 3-1:0.132: Disconnecting em28xx [ 711.998942][ T5900] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 712.095536][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 712.426420][ T5900] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 712.434631][ T5900] em28xx 3-1:0.132: No AC97 audio processor [ 712.464181][ T5900] usb 3-1: Decoder not found [ 712.464320][T13501] 9pnet_fd: Insufficient options for proto=fd [ 712.479892][ T5900] em28xx 3-1:0.132: failed to create media graph [ 712.494135][ T5900] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 712.510621][ T5900] em28xx 3-1:0.132: Remote control support is not available for this card. [ 712.520158][ T973] em28xx 3-1:0.132: Closing input extension [ 712.568161][ T973] em28xx 3-1:0.132: Freeing device [ 712.613252][T13501] Unsupported ieee802154 address type: 0 [ 712.712978][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 713.456850][ T9] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 713.471357][ T9] usb 1-1: config 160 has no interface number 0 [ 713.486426][ T9] usb 1-1: config 160 interface 200 has no altsetting 0 [ 713.504972][ T9] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 713.514434][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.522416][ T9] usb 1-1: Product: syz [ 713.859953][ T9] usb 1-1: Manufacturer: syz [ 713.869056][T13521] hub 9-0:1.0: USB hub found [ 713.875398][T13521] hub 9-0:1.0: 1 port detected [ 713.933457][ T9] usb 1-1: SerialNumber: syz [ 714.335521][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 714.342479][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 714.481387][ T9] usb 1-1: USB disconnect, device number 78 [ 714.993630][ T30] audit: type=1400 audit(714.569:1592): avc: denied { ioctl } for pid=13525 comm="syz.4.1963" path="socket:[37984]" dev="sockfs" ino=37984 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 715.024271][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.077251][ T5928] usb 2-1: USB disconnect, device number 55 [ 715.124505][ T30] audit: type=1400 audit(714.569:1593): avc: denied { write } for pid=13525 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 715.418607][ T30] audit: type=1400 audit(714.569:1594): avc: denied { read } for pid=13525 comm="syz.4.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 716.047667][ T30] audit: type=1400 audit(715.109:1595): avc: denied { read write } for pid=5835 comm="syz-executor" name="loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.078115][ T30] audit: type=1400 audit(715.109:1596): avc: denied { open } for pid=5835 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.113705][ T30] audit: type=1400 audit(715.109:1597): avc: denied { ioctl } for pid=5835 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 716.160036][ T30] audit: type=1400 audit(715.429:1598): avc: denied { read } for pid=13534 comm="syz.4.1965" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 716.212316][ T30] audit: type=1400 audit(715.429:1599): avc: denied { open } for pid=13534 comm="syz.4.1965" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 716.253115][ T30] audit: type=1400 audit(715.429:1600): avc: denied { read } for pid=13534 comm="syz.4.1965" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 716.275176][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.460996][ T30] audit: type=1400 audit(715.429:1601): avc: denied { open } for pid=13534 comm="syz.4.1965" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 716.505590][T13535] kvm: pic: non byte read [ 716.510196][T13535] kvm: pic: non byte read [ 716.514594][T13535] kvm: pic: non byte read [ 716.518970][T13535] kvm: pic: non byte read [ 716.523556][T13535] kvm: pic: non byte read [ 716.527901][T13535] kvm: pic: non byte read [ 716.532256][T13535] kvm: pic: non byte read [ 716.536986][T13535] kvm: pic: non byte read [ 716.541382][T13535] kvm: pic: non byte read [ 716.545951][T13535] kvm: pic: non byte read [ 717.614041][T13559] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 717.991986][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1972'. [ 719.383397][ T92] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 719.512947][ T5928] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 719.534146][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.545526][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.555331][ T92] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 719.568451][ T92] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 719.577659][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.587982][ T92] usb 2-1: config 0 descriptor?? [ 719.664365][ T5928] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 719.672543][ T5928] usb 4-1: config 1 has no interface number 0 [ 719.679091][ T5928] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 719.690997][ T5928] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 719.700885][ T5928] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 719.711412][ T5928] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.727814][ T5928] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 719.736934][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.853309][ T5928] usb 4-1: Product: syz [ 719.857504][ T5928] usb 4-1: Manufacturer: syz [ 719.862102][ T5928] usb 4-1: SerialNumber: syz [ 719.889101][T13585] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 719.898650][T13585] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 720.117104][T13589] program syz.0.1978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.463285][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 720.463304][ T30] audit: type=1400 audit(720.099:1657): avc: denied { write } for pid=13586 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 720.489375][ T30] audit: type=1400 audit(720.109:1658): avc: denied { write } for pid=13586 comm="syz.0.1978" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 720.681469][ T30] audit: type=1400 audit(720.499:1659): avc: denied { create } for pid=13584 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 720.702932][ T30] audit: type=1400 audit(720.499:1660): avc: denied { read } for pid=13584 comm="syz.3.1977" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 720.859090][ T30] audit: type=1400 audit(720.499:1661): avc: denied { open } for pid=13584 comm="syz.3.1977" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 721.247047][ T92] usbhid 2-1:0.0: can't add hid device: -71 [ 721.258944][ T30] audit: type=1400 audit(720.539:1662): avc: denied { allowed } for pid=13584 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 721.282840][ T30] audit: type=1400 audit(720.539:1663): avc: denied { create } for pid=13584 comm="syz.3.1977" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 721.358235][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 721.361247][ T30] audit: type=1400 audit(720.539:1664): avc: denied { map } for pid=13584 comm="syz.3.1977" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 721.424076][ T92] usb 2-1: USB disconnect, device number 56 [ 721.451588][ T30] audit: type=1400 audit(720.539:1665): avc: denied { read write } for pid=13584 comm="syz.3.1977" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 721.567739][ T30] audit: type=1400 audit(720.539:1666): avc: denied { read } for pid=13584 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.984545][T13630] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1987'. [ 724.678995][ T5928] usb 4-1: Error in usbnet_get_endpoints (-71) [ 724.702665][ T5928] usb 4-1: USB disconnect, device number 87 [ 726.001166][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 726.001176][ T30] audit: type=1400 audit(725.979:1709): avc: denied { create } for pid=13651 comm="syz.0.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 726.384242][ T30] audit: type=1400 audit(726.059:1710): avc: denied { write } for pid=13647 comm="syz.2.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 726.386389][ T5928] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 726.501875][T13639] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 726.509725][ T30] audit: type=1400 audit(726.069:1711): avc: denied { read } for pid=13647 comm="syz.2.1990" name="sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 726.509766][ T30] audit: type=1400 audit(726.069:1712): avc: denied { ioctl } for pid=13647 comm="syz.2.1990" path="/dev/sg0" dev="devtmpfs" ino=754 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 726.509807][ T30] audit: type=1400 audit(725.969:1708): avc: denied { create } for pid=13637 comm="syz.1.1989" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 726.533192][T13639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 726.632792][ T30] audit: type=1400 audit(726.609:1713): avc: denied { mount } for pid=13651 comm="syz.0.1994" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 726.887910][ T5928] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 726.919510][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.929498][T13639] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 726.939102][T13639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 726.962053][ T30] audit: type=1400 audit(726.859:1714): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 726.984447][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 727.031385][ T5928] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 727.041270][ T30] audit: type=1400 audit(726.989:1715): avc: denied { read } for pid=13656 comm="syz.2.1995" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 727.068436][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.208925][ T5928] usb 4-1: config 0 descriptor?? [ 727.268061][ T30] audit: type=1400 audit(726.989:1716): avc: denied { open } for pid=13656 comm="syz.2.1995" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 727.304786][ T30] audit: type=1400 audit(726.989:1717): avc: denied { ioctl } for pid=13656 comm="syz.2.1995" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 727.333025][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 727.436325][T13644] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1991'. [ 727.493055][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 727.508146][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 727.541937][ T9] usb 3-1: config 0 has no interface number 0 [ 727.586095][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 727.629141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.658992][ T5928] holtek_kbd 0003:04D9:A055.0020: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 727.686572][ T9] usb 3-1: Product: syz [ 727.698972][ T9] usb 3-1: Manufacturer: syz [ 727.740613][ T9] usb 3-1: SerialNumber: syz [ 727.765396][ T9] usb 3-1: config 0 descriptor?? [ 727.835077][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 727.861056][ T9] usb 3-1: selecting invalid altsetting 1 [ 727.866926][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 727.868160][ T5928] usb 4-1: USB disconnect, device number 88 [ 727.879531][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 727.912994][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 727.941575][ T9] usb 3-1: media controller created [ 727.968702][T13663] fido_id[13663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 728.059491][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.431590][T13665] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1997'. [ 728.557663][T13668] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1998'. [ 729.326635][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 729.336083][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 729.345373][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 729.391747][ T9] usb 3-1: USB disconnect, device number 58 [ 729.713065][ T5928] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 729.802369][T13688] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 730.234533][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 730.271957][ T5928] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 730.291136][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.330851][ T5928] usb 2-1: config 0 descriptor?? [ 730.783178][T13694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2007'. [ 730.853079][T13694] team0: entered promiscuous mode [ 730.858154][T13694] team0: entered allmulticast mode [ 731.008867][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.021616][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.084665][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 731.084679][ T30] audit: type=1400 audit(731.069:1742): avc: denied { connect } for pid=13704 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 731.120229][T13706] bridge: RTM_NEWNEIGH with invalid ether address [ 731.139606][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 731.159509][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 731.190609][ T5928] usb 2-1: USB disconnect, device number 57 [ 731.313453][ T30] audit: type=1400 audit(731.069:1743): avc: denied { ioctl } for pid=13704 comm="syz.2.2009" path="socket:[39306]" dev="sockfs" ino=39306 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 731.341230][ T30] audit: type=1400 audit(731.289:1744): avc: denied { listen } for pid=13704 comm="syz.2.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 732.268531][T13723] NILFS (loop1): device size too small [ 732.293119][ T30] audit: type=1400 audit(732.249:1745): avc: denied { write } for pid=13722 comm="syz.1.2014" name="protocols" dev="proc" ino=4026533255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 732.325604][ T30] audit: type=1400 audit(732.249:1746): avc: denied { mounton } for pid=13722 comm="syz.1.2014" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 732.453055][ T973] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 732.632896][ T5928] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 732.656508][ T30] audit: type=1400 audit(732.589:1747): avc: denied { mac_admin } for pid=13728 comm="syz.4.2017" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 732.778328][ T30] audit: type=1400 audit(732.589:1748): avc: denied { relabelto } for pid=13728 comm="syz.4.2017" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 732.816443][ T973] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 732.825674][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.835434][ T973] usb 4-1: Product: syz [ 732.839646][ T973] usb 4-1: Manufacturer: syz [ 732.844393][ T973] usb 4-1: SerialNumber: syz [ 732.887544][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 732.898253][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.920939][ T5928] usb 2-1: config 0 descriptor?? [ 732.937309][ T30] audit: type=1400 audit(732.599:1749): avc: denied { associate } for pid=13728 comm="syz.4.2017" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 733.062342][ T973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 733.083694][ T973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 733.111563][ T973] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 733.428572][ T5928] logitech 0003:046D:C218.0021: unknown main item tag 0x0 [ 733.455080][ T5928] logitech 0003:046D:C218.0021: hidraw0: USB HID v0.00 Device [HID 046d:c218] on usb-dummy_hcd.1-1/input0 [ 733.465140][ T30] audit: type=1400 audit(733.429:1750): avc: denied { read } for pid=13732 comm="syz.0.2018" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 733.466570][ T5928] logitech 0003:046D:C218.0021: no inputs found [ 733.624534][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.921088][ T30] audit: type=1400 audit(733.429:1751): avc: denied { open } for pid=13732 comm="syz.0.2018" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 733.959040][ T973] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 733.977597][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.045008][ T973] usb 4-1: USB disconnect, device number 89 [ 734.606140][T13747] Unsupported ieee802154 address type: 0 [ 734.946786][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2022'. [ 735.494193][ T973] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 735.913222][ T973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 735.942913][T13755] sp0: Synchronizing with TNC [ 736.011138][ T973] usb 1-1: not running at top speed; connect to a high speed hub [ 736.025689][ T973] usb 1-1: config 7 has an invalid interface number: 211 but max is 0 [ 736.038493][ T973] usb 1-1: config 7 has no interface number 0 [ 736.046375][ T973] usb 1-1: config 7 interface 211 has no altsetting 0 [ 736.056784][T13754] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[13754] [ 736.069237][ T973] usb 1-1: New USB device found, idVendor=1342, idProduct=0204, bcdDevice=90.f4 [ 736.094195][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 736.094209][ T30] audit: type=1326 audit(736.069:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.131131][T13761] NILFS (loop4): device size too small [ 736.137960][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.166033][ T973] usb 1-1: Product: syz [ 736.171571][ T973] usb 1-1: Manufacturer: á Š [ 736.225750][ T30] audit: type=1326 audit(736.069:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.225851][ T973] usb 1-1: SerialNumber: syz [ 736.232311][ T92] usb 2-1: USB disconnect, device number 58 [ 736.307610][ T30] audit: type=1326 audit(736.069:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.350701][ T30] audit: type=1326 audit(736.069:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.662315][ T30] audit: type=1326 audit(736.069:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.687591][ T30] audit: type=1326 audit(736.069:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.713822][ T30] audit: type=1326 audit(736.069:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.737565][ T30] audit: type=1326 audit(736.069:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 736.773697][ T30] audit: type=1326 audit(736.069:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 737.138379][T13774] binder: Bad value for 'max' [ 737.355526][ T30] audit: type=1326 audit(736.069:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.2.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7fc00000 [ 737.398301][ T973] hub 1-1:7.211: bad descriptor, ignoring hub [ 737.407878][ T973] hub 1-1:7.211: probe with driver hub failed with error -5 [ 737.633774][ T973] kaweth 1-1:7.211: Firmware present in device. [ 737.782266][ T973] kaweth 1-1:7.211: Error reading configuration (-71), no net device created [ 737.796236][ T973] kaweth 1-1:7.211: probe with driver kaweth failed with error -5 [ 737.868823][ T973] usb 1-1: USB disconnect, device number 79 [ 737.987906][T13781] ceph: No mds server is up or the cluster is laggy [ 738.333052][ T9] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 738.362975][ T5967] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 738.533730][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 738.553381][ T5967] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 738.564209][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.572306][ T5967] usb 1-1: Product: syz [ 738.577535][ T5967] usb 1-1: Manufacturer: syz [ 738.589042][ T5967] usb 1-1: SerialNumber: syz [ 738.601113][ T5967] usb 1-1: config 0 descriptor?? [ 738.902985][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 738.914424][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 738.922808][ T9] usb 4-1: can't read configurations, error -71 [ 739.038526][ T5967] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 739.048170][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 739.058174][ T5967] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 739.066530][ T5967] usb 1-1: media controller created [ 739.080617][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.089508][ T5900] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 739.281487][ T5967] zl10353_read_register: readreg error (reg=127, ret==0) [ 739.289117][ T5967] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 739.297605][ T5967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 739.313084][ T5967] usb 1-1: USB disconnect, device number 80 [ 739.323460][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 739.332777][ T5900] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 739.348796][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 739.360860][ T5900] usb 3-1: can't read configurations, error -61 [ 739.368462][ T5967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 739.513097][ T5900] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 739.653198][ T92] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 739.683220][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 739.801452][ T5900] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 740.000997][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 740.107806][ T5900] usb 3-1: can't read configurations, error -61 [ 740.121992][ T5900] usb usb3-port1: attempt power cycle [ 740.253195][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 740.258928][ T92] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 740.268303][ T92] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 740.276173][ T92] usb 2-1: can't read configurations, error -61 [ 740.383042][ T5967] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 740.464428][ T92] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 740.472947][ T5900] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 740.508635][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 740.514408][ T5900] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 740.542610][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 740.550623][ T5900] usb 3-1: can't read configurations, error -61 [ 740.563685][ T5967] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 740.572209][ T5967] usb 1-1: config 0 has no interface number 0 [ 740.578803][ T5967] usb 1-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.597439][ T5967] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 740.606883][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.615340][ T5967] usb 1-1: Product: syz [ 740.619822][ T5967] usb 1-1: Manufacturer: syz [ 740.624629][ T5967] usb 1-1: SerialNumber: syz [ 740.638723][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 740.723113][ T5900] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 740.809022][ T92] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 740.812802][ T5967] usb 1-1: config 0 descriptor?? [ 740.970226][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 740.982188][ T5900] usb 3-1: too many configurations: 140, using maximum allowed: 8 [ 740.988485][ T92] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.007463][ T5900] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 741.015562][ T5967] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 741.030256][ T92] usb 2-1: can't read configurations, error -61 [ 741.036856][ T5900] usb 3-1: can't read configurations, error -61 [ 741.043630][ T5967] usb 1-1: No valid video chain found. [ 741.045028][ T92] usb usb2-port1: attempt power cycle [ 741.051426][ T5900] usb usb3-port1: unable to enumerate USB device [ 741.272681][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 741.272696][ T30] audit: type=1400 audit(741.249:1901): avc: denied { create } for pid=13818 comm="syz.0.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 741.361333][T13827] lo speed is unknown, defaulting to 1000 [ 741.367797][T13827] tunl0 speed is unknown, defaulting to 1000 [ 741.392024][ T30] audit: type=1400 audit(741.289:1902): avc: denied { connect } for pid=13818 comm="syz.0.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 741.401914][T13829] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 741.426697][ T92] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 741.496170][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 741.498179][ T30] audit: type=1400 audit(741.339:1903): avc: denied { write } for pid=13818 comm="syz.0.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 741.520594][ T92] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 741.531826][ T92] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.550516][ T92] usb 2-1: can't read configurations, error -61 [ 741.550637][ T30] audit: type=1400 audit(741.369:1904): avc: denied { create } for pid=13828 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 741.934688][ T30] audit: type=1400 audit(741.529:1905): avc: denied { listen } for pid=13828 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 742.201761][T13839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 742.660179][ T92] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 742.924755][T13846] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 743.238848][ T92] usb 2-1: device not accepting address 62, error -71 [ 743.265728][ T92] usb usb2-port1: unable to enumerate USB device [ 743.303360][ T5928] usb 1-1: USB disconnect, device number 81 [ 743.340188][T13848] syzkaller1: entered promiscuous mode [ 743.368557][T13848] syzkaller1: entered allmulticast mode [ 743.712697][T13827] ip6gretap0 speed is unknown, defaulting to 1000 [ 744.162028][ T30] audit: type=1400 audit(744.139:1906): avc: denied { mount } for pid=13858 comm="syz.1.2054" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 744.165879][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 744.256526][ T1322] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.265652][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 744.278200][ T1322] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.308659][ T1322] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.317526][ T30] audit: type=1400 audit(744.289:1907): avc: denied { create } for pid=13864 comm="syz.0.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 744.339659][ T1322] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.350853][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 744.391225][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 744.473383][ T5967] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 744.844646][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 744.856080][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.879087][ T5967] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 744.905671][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.980898][ T5967] usb 2-1: config 0 descriptor?? [ 745.030461][ T30] audit: type=1400 audit(744.989:1908): avc: denied { read write } for pid=13874 comm="syz.2.2058" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 745.085736][ T30] audit: type=1400 audit(744.989:1909): avc: denied { open } for pid=13874 comm="syz.2.2058" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 745.191280][T13876] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2058'. [ 745.251471][T13876] SQUASHFS error: Failed to read block 0x0: -5 [ 745.265066][T13876] unable to read squashfs_super_block [ 745.342317][T13880] 9pnet_fd: Insufficient options for proto=fd [ 745.351307][ T30] audit: type=1400 audit(745.319:1910): avc: denied { mounton } for pid=13877 comm="syz.4.2059" path="/428/file0" dev="tmpfs" ino=2306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 745.467904][ T5967] bigben 0003:146B:0902.0022: unexpected rdesc, please submit for review [ 745.524968][ T5967] bigben 0003:146B:0902.0022: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 745.563177][ T5967] bigben 0003:146B:0902.0022: not enough fields in HID_OUTPUT_REPORT 0 [ 745.574219][ T5967] bigben 0003:146B:0902.0022: no output report found [ 745.719158][ T92] usb 2-1: USB disconnect, device number 63 [ 745.882806][T13881] fido_id[13881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 746.054717][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 746.193029][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 746.370338][T13896] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 746.386004][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 746.724196][ T30] audit: type=1400 audit(746.299:1911): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 746.747639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.763527][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.814419][ T9] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 746.995992][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 747.012201][ T9] usb 4-1: can't read configurations, error -61 [ 747.133538][ T30] audit: type=1400 audit(747.109:1912): avc: denied { write } for pid=13900 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.183916][ T30] audit: type=1400 audit(747.139:1913): avc: denied { accept } for pid=13900 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.207365][ T30] audit: type=1400 audit(747.139:1914): avc: denied { read } for pid=13900 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.230672][ T30] audit: type=1400 audit(747.209:1915): avc: denied { read } for pid=13906 comm="syz.0.2067" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.254870][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 747.301706][ T30] audit: type=1400 audit(747.209:1916): avc: denied { open } for pid=13906 comm="syz.0.2067" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.386450][ T30] audit: type=1400 audit(747.249:1917): avc: denied { ioctl } for pid=13906 comm="syz.0.2067" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.448880][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 747.495692][ T30] audit: type=1400 audit(747.249:1918): avc: denied { set_context_mgr } for pid=13906 comm="syz.0.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 747.730540][ T9] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 747.743502][ T30] audit: type=1400 audit(747.279:1919): avc: denied { map } for pid=13906 comm="syz.0.2067" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.768809][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 747.768889][ T30] audit: type=1400 audit(747.719:1920): avc: denied { create } for pid=13915 comm="syz.2.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 747.805510][ T9] usb 4-1: can't read configurations, error -61 [ 748.035682][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 748.052296][ T9] usb usb4-port1: attempt power cycle [ 748.072170][T13925] bridge0: port 3(team0) entered disabled state [ 748.079505][T13925] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.087025][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.327285][T13936] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 748.432874][T13939] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 748.445847][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 748.494759][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 748.512948][ T5967] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 748.530766][ T9] usb 4-1: too many configurations: 140, using maximum allowed: 8 [ 748.614401][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 748.725348][ T9] usb 4-1: can't read configurations, error -61 [ 748.743141][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 748.768704][ T5967] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.781582][ T5967] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 748.848747][ T5967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 748.860206][ T5967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 748.871578][ T5967] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 748.880737][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.896490][ T5967] hub 2-1:1.0: bad descriptor, ignoring hub [ 748.902403][ T5967] hub 2-1:1.0: probe with driver hub failed with error -5 [ 748.920600][ T5967] cdc_wdm 2-1:1.0: skipping garbage [ 748.926069][ T5967] cdc_wdm 2-1:1.0: skipping garbage [ 748.935213][ T5967] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 748.941119][ T5967] cdc_wdm 2-1:1.0: Unknown control protocol [ 749.224613][ T973] usb 2-1: USB disconnect, device number 64 [ 749.232453][T13933] cdc_wdm 2-1:1.0: Error autopm - -16 [ 749.306829][T13956] mkiss: ax0: crc mode is auto. [ 749.435989][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 749.437706][T13950] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 749.917097][ T973] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 749.958176][ T9] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 750.049801][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 750.175275][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 750.190229][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 750.207030][ T9] usb 4-1: Product: syz [ 750.223264][ T973] usb 2-1: unable to get BOS descriptor or descriptor too short [ 750.233274][ T9] usb 4-1: Manufacturer: syz [ 750.240383][ T973] usb 2-1: no configurations [ 750.302709][T13969] trusted_key: syz.4.2088 sent an empty control message without MSG_MORE. [ 750.328976][ T9] usb 4-1: SerialNumber: syz [ 750.334071][ T973] usb 2-1: can't read configurations, error -22 [ 750.352510][ T9] usb 4-1: config 0 descriptor?? [ 750.633181][ T92] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 750.635245][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 750.674943][ T7428] udevd[7428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 750.783308][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 750.796724][ T92] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 750.818786][ T92] usb 1-1: config 0 has no interface number 0 [ 750.831182][T13947] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 750.909014][T13947] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 750.983282][ T92] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.995778][ T92] usb 1-1: config 0 interface 85 has no altsetting 0 [ 751.006001][ T92] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 751.015264][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.023805][ T92] usb 1-1: Product: syz [ 751.027964][ T92] usb 1-1: Manufacturer: syz [ 751.032572][ T92] usb 1-1: SerialNumber: syz [ 751.041117][ T92] usb 1-1: config 0 descriptor?? [ 751.139749][ T6002] usb 4-1: USB disconnect, device number 95 [ 751.404864][ T973] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 751.832910][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 751.839472][ T973] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 751.897472][ T973] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 752.007799][ T973] usb 2-1: can't read configurations, error -61 [ 752.049557][ T973] usb usb2-port1: attempt power cycle [ 752.092336][ T92] appletouch 1-1:0.85: Geyser mode initialized. [ 752.100427][ T92] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input24 [ 752.172219][ C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 752.182663][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 752.182673][ T30] audit: type=1400 audit(752.149:1952): avc: denied { read } for pid=5178 comm="acpid" name="mouse1" dev="devtmpfs" ino=3499 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.221130][ T30] audit: type=1400 audit(752.149:1953): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3499 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.482970][ T973] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 752.505031][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 752.511953][ T973] usb 2-1: too many configurations: 140, using maximum allowed: 8 [ 752.534478][T13995] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 752.899645][ T973] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 752.917058][ T92] usb 1-1: USB disconnect, device number 82 [ 752.922338][ T30] audit: type=1400 audit(752.149:1954): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3499 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.954866][ T973] usb 2-1: can't read configurations, error -61 [ 753.026651][ T92] appletouch 1-1:0.85: input: appletouch disconnected [ 753.268475][T14003] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 753.632358][ T30] audit: type=1400 audit(753.609:1955): avc: denied { read } for pid=13996 comm="syz.4.2095" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 753.668657][ T973] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 753.672944][ T30] audit: type=1400 audit(753.609:1956): avc: denied { open } for pid=13996 comm="syz.4.2095" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 753.700674][ T30] audit: type=1400 audit(753.609:1957): avc: denied { ioctl } for pid=13996 comm="syz.4.2095" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 753.765214][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 753.834551][ T30] audit: type=1400 audit(753.819:1958): avc: denied { create } for pid=14004 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 753.993665][ T973] usb 2-1: device descriptor read/all, error -71 [ 754.006167][ T973] usb usb2-port1: unable to enumerate USB device [ 754.475377][T14018] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 754.593094][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.806763][T14020] NILFS (loop3): device size too small [ 755.190315][T14025] NILFS (loop1): device size too small [ 755.199272][T14012] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 755.288869][T14027] input: syz1 as /devices/virtual/input/input25 [ 755.300792][ T30] audit: type=1400 audit(755.249:1959): avc: denied { read write } for pid=14023 comm="syz.2.2102" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 756.273119][ T92] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 756.733509][ T30] audit: type=1400 audit(755.249:1960): avc: denied { open } for pid=14023 comm="syz.2.2102" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 756.894849][ T30] audit: type=1400 audit(755.259:1961): avc: denied { ioctl } for pid=14023 comm="syz.2.2102" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 756.921641][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 756.929604][ T92] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 756.938090][ T92] usb 3-1: config 0 has no interface number 0 [ 756.947786][ T92] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 756.960357][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.969859][ T92] usb 3-1: Product: syz [ 756.975185][ T92] usb 3-1: Manufacturer: syz [ 756.980068][ T92] usb 3-1: SerialNumber: syz [ 757.236942][ T92] usb 3-1: config 0 descriptor?? [ 757.253961][ T92] smsc95xx v2.0.0 [ 757.265896][ T92] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 757.280915][T14034] netlink: 'syz.1.2104': attribute type 2 has an invalid length. [ 757.333081][ T92] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 758.373049][T14047] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 758.643895][T11140] usb 3-1: USB disconnect, device number 63 [ 758.917159][ T30] audit: type=1400 audit(758.889:1962): avc: denied { create } for pid=14065 comm="syz.4.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 759.070431][T14064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2113'. [ 759.159179][ T30] audit: type=1400 audit(759.139:1963): avc: denied { read } for pid=14070 comm="syz.0.2116" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 759.469323][ T30] audit: type=1400 audit(759.139:1964): avc: denied { open } for pid=14070 comm="syz.0.2116" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 759.602924][ T30] audit: type=1400 audit(759.199:1965): avc: denied { bind } for pid=14070 comm="syz.0.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 760.013195][T11140] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 760.161647][ T30] audit: type=1400 audit(760.139:1966): avc: denied { mount } for pid=14079 comm="syz.4.2118" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 760.293201][T11140] usb 3-1: Using ep0 maxpacket: 16 [ 760.306218][T11140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.349544][T14091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.386670][T14091] sctp: [Deprecated]: syz.1.2121 (pid 14091) Use of int in max_burst socket option deprecated. [ 760.386670][T14091] Use struct sctp_assoc_value instead [ 760.435436][T11140] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 760.452472][T11140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.472045][T11140] usb 3-1: Product: syz [ 760.481028][T11140] usb 3-1: Manufacturer: syz [ 760.492186][T11140] usb 3-1: SerialNumber: syz [ 760.516810][ T30] audit: type=1400 audit(760.499:1967): avc: denied { ioctl } for pid=14094 comm="syz.0.2123" path="socket:[39865]" dev="sockfs" ino=39865 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 760.518863][T11140] usb 3-1: config 0 descriptor?? [ 760.663964][T11140] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 761.770326][T14104] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 762.245369][ T30] audit: type=1400 audit(762.219:1968): avc: denied { create } for pid=14114 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 762.294263][ T30] audit: type=1400 audit(762.219:1969): avc: denied { name_connect } for pid=14114 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 762.412991][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 762.604405][ T9] usb 1-1: config 0 has no interfaces? [ 762.610087][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 762.614023][ T30] audit: type=1400 audit(762.419:1970): avc: denied { read } for pid=14123 comm="syz.3.2132" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 762.666746][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.678729][ T30] audit: type=1400 audit(762.419:1971): avc: denied { open } for pid=14123 comm="syz.3.2132" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 762.721756][ T9] usb 1-1: config 0 descriptor?? [ 762.833429][T11140] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 763.068706][T11140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.091234][T11140] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 763.100851][T11140] usb 2-1: config 0 has no interface number 1 [ 763.111737][T11140] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 763.706560][T11140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.746394][T11140] usb 2-1: config 0 descriptor?? [ 764.053880][T11140] usb 2-1: unknown number of interfaces: 2 [ 764.194553][T11140] usb 3-1: USB disconnect, device number 64 [ 764.311885][T14146] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 765.037424][ T9] usb 2-1: USB disconnect, device number 69 [ 765.194257][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 765.218360][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 765.229115][T11140] usb 1-1: USB disconnect, device number 83 [ 765.278614][T14153] bridge0: port 4(macvlan3) entered disabled state [ 765.286744][T14153] bridge0: port 3(erspan0) entered disabled state [ 765.293325][T14153] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.326912][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 765.326927][ T30] audit: type=1400 audit(765.309:1974): avc: denied { mount } for pid=14157 comm="syz.4.2144" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 765.357197][ T30] audit: type=1400 audit(765.309:1975): avc: denied { mounton } for pid=14157 comm="syz.4.2144" path="/446/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 765.427422][ T30] audit: type=1400 audit(765.409:1976): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 765.578565][ T5900] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 765.724767][T14170] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 766.473197][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 766.505866][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.830162][ T5900] usb 4-1: config 0 descriptor?? [ 766.989795][T14188] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30235 sclass=netlink_xfrm_socket pid=14188 comm=syz.2.2152 [ 767.112204][ T30] audit: type=1400 audit(766.969:1977): avc: denied { write } for pid=14187 comm="syz.2.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 767.725280][ T5900] logitech 0003:046D:C218.0023: unknown main item tag 0x0 [ 767.776427][ T5900] logitech 0003:046D:C218.0023: hidraw0: USB HID v0.00 Device [HID 046d:c218] on usb-dummy_hcd.3-1/input0 [ 767.817965][ T5900] logitech 0003:046D:C218.0023: no inputs found [ 768.031150][T14155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.050585][ T30] audit: type=1400 audit(768.029:1978): avc: denied { ioctl } for pid=14186 comm="syz.1.2153" path="socket:[41093]" dev="sockfs" ino=41093 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 768.075162][T14155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.268499][ T30] audit: type=1400 audit(768.249:1979): avc: denied { read open } for pid=14204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.390392][ T30] audit: type=1400 audit(768.279:1980): avc: denied { getattr } for pid=14204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.415792][ T5900] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 768.459984][T14207] Unsupported ieee802154 address type: 0 [ 768.555044][ T30] audit: type=1800 audit(768.539:1981): pid=14209 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2155" name="/" dev="9p" ino=2 res=0 errno=0 [ 768.568172][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 768.586201][ T5900] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 768.609068][ T5900] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 768.638218][ T5900] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 768.647407][ T5900] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 768.665934][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.677852][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 768.711427][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 768.726516][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 768.743137][ T5900] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 768.752272][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.762062][ T5900] usb 3-1: Product: syz [ 768.775876][ T5900] usb 3-1: Manufacturer: syz [ 768.782881][ T5900] usb 3-1: SerialNumber: syz [ 768.893200][ T5900] usb 3-1: config 0 descriptor?? [ 768.922642][T14198] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 768.985186][ T30] audit: type=1400 audit(768.959:1982): avc: denied { read append } for pid=14212 comm="syz.0.2156" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 769.396350][ T30] audit: type=1400 audit(768.959:1983): avc: denied { open } for pid=14212 comm="syz.0.2156" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 769.452177][ T5900] hub 3-1:0.0: bad descriptor, ignoring hub [ 769.469472][ T5900] hub 3-1:0.0: probe with driver hub failed with error -5 [ 770.151557][ T5900] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 770.281776][T11140] usb 4-1: USB disconnect, device number 96 [ 770.407514][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 770.407530][ T30] audit: type=1400 audit(770.389:1987): avc: denied { add_name } for pid=14203 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.559307][ T30] audit: type=1400 audit(770.419:1988): avc: denied { create } for pid=14203 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.800128][ T30] audit: type=1400 audit(770.419:1989): avc: denied { write } for pid=14203 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=8614 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.858292][ T30] audit: type=1400 audit(770.419:1990): avc: denied { append } for pid=14203 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=8614 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 771.504806][ T973] usb 3-1: USB disconnect, device number 65 [ 771.510734][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 771.543434][ T30] audit: type=1400 audit(770.689:1991): avc: denied { bind } for pid=14223 comm="syz.4.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 771.661742][ T30] audit: type=1400 audit(770.689:1992): avc: denied { getopt } for pid=14223 comm="syz.4.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 771.681765][ T30] audit: type=1400 audit(771.119:1993): avc: denied { ioctl } for pid=14232 comm="syz.0.2160" path="socket:[40531]" dev="sockfs" ino=40531 ioctlcmd=0x73 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 771.788545][ T30] audit: type=1400 audit(771.119:1994): avc: denied { read write } for pid=14232 comm="syz.0.2160" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 771.822218][ T30] audit: type=1400 audit(771.119:1995): avc: denied { open } for pid=14232 comm="syz.0.2160" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 771.858537][ T30] audit: type=1400 audit(771.509:1996): avc: denied { remove_name } for pid=14230 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=8614 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.911188][T14254] Process accounting resumed [ 774.363089][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 774.373867][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 774.685003][T14250] lo speed is unknown, defaulting to 1000 [ 774.719397][T14250] tunl0 speed is unknown, defaulting to 1000 [ 775.133318][ T5900] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 775.268164][T14258] lo speed is unknown, defaulting to 1000 [ 775.312944][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 775.339904][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.341423][T14293] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 775.395869][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.711206][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 775.720470][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.728644][ T5900] usb 4-1: Product: syz [ 775.732914][ T5900] usb 4-1: Manufacturer: syz [ 775.739622][ T5900] usb 4-1: SerialNumber: syz [ 775.799044][ T5900] usb 4-1: config 0 descriptor?? [ 775.854349][ T5900] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 775.868217][T14258] tunl0 speed is unknown, defaulting to 1000 [ 775.875423][T14250] ip6gretap0 speed is unknown, defaulting to 1000 [ 775.892584][ T5900] gspca_stv06xx: st6422 sensor detected [ 776.659388][T14258] ip6gretap0 speed is unknown, defaulting to 1000 [ 777.232902][T11140] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 777.834783][ T5928] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 777.853218][T11140] usb 2-1: Using ep0 maxpacket: 32 [ 777.859836][T11140] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 777.869741][T11140] usb 2-1: config 0 has no interface number 0 [ 777.878335][T11140] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.890579][T11140] usb 2-1: config 0 interface 85 has no altsetting 0 [ 777.900608][T11140] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 777.909964][T11140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.942465][T11140] usb 2-1: Product: syz [ 777.959969][T11140] usb 2-1: Manufacturer: syz [ 777.975606][T11140] usb 2-1: SerialNumber: syz [ 777.993545][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 778.012053][T11140] usb 2-1: config 0 descriptor?? [ 778.024527][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.080026][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.097850][ T5900] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 778.189229][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.210238][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 778.220254][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.232705][T14322] netlink: 'syz.2.2180': attribute type 2 has an invalid length. [ 778.250032][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 778.250046][ T30] audit: type=1400 audit(778.229:2002): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 778.318988][ T5928] usb 1-1: config 0 descriptor?? [ 778.353194][ T5900] usb 4-1: USB disconnect, device number 97 [ 778.635167][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 778.870859][T14329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.903404][T11140] appletouch 2-1:0.85: Geyser mode initialized. [ 779.056757][T11140] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input27 [ 779.560520][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.569408][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.618698][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 779.781399][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 779.816474][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 779.862935][ T30] audit: type=1400 audit(779.839:2003): avc: denied { mount } for pid=14337 comm="syz.3.2185" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 779.890250][T14339] overlay: ./file0 is not a directory [ 779.917992][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 779.932656][T11140] usb 2-1: USB disconnect, device number 70 [ 780.069238][T11140] appletouch 2-1:0.85: input: appletouch disconnected [ 780.357820][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 781.053001][ T5928] usbhid 1-1:0.0: can't add hid device: -71 [ 781.063372][ T5928] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 781.075712][ T5928] usb 1-1: USB disconnect, device number 84 [ 782.307401][ T30] audit: type=1400 audit(782.278:2004): avc: denied { getopt } for pid=14366 comm="syz.0.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 782.398111][ T30] audit: type=1400 audit(782.308:2005): avc: denied { write } for pid=14366 comm="syz.0.2194" path="socket:[41455]" dev="sockfs" ino=41455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 782.586240][T11140] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 782.636679][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 782.652108][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 782.685572][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 782.706708][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 782.820867][ T30] audit: type=1400 audit(782.778:2006): avc: denied { ioctl } for pid=14374 comm="syz.4.2196" path="socket:[40898]" dev="sockfs" ino=40898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.845570][T11140] usb 1-1: Using ep0 maxpacket: 32 [ 783.158602][T11140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.407766][ T5928] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 783.459970][T11140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.563535][T11140] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 783.616377][ T5928] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 783.888965][T11140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.897029][ T5928] usb 3-1: config 0 has no interface number 0 [ 783.903959][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.918352][T11140] usb 1-1: config 0 descriptor?? [ 783.970402][ T5928] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 783.998224][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 784.010517][ T5928] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 784.022673][ T5928] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 784.039841][ T5928] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 784.096317][T14400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 784.553002][ T5928] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 784.562526][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.571431][T11140] usbhid 1-1:0.0: can't add hid device: -71 [ 784.584754][ T5928] usb 3-1: config 0 descriptor?? [ 784.589917][T11140] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 784.613224][T14380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 784.641892][T14380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 784.837786][ T5928] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 784.854151][T11140] usb 1-1: USB disconnect, device number 85 [ 787.234524][ T9] usb 3-1: USB disconnect, device number 66 [ 787.263943][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 787.557161][ T5900] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 787.977017][ T30] audit: type=1400 audit(787.948:2007): avc: denied { connect } for pid=14428 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 788.094637][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 788.102160][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.130654][ T5900] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 788.156116][T14424] lo speed is unknown, defaulting to 1000 [ 788.162954][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.264562][T14424] tunl0 speed is unknown, defaulting to 1000 [ 788.291622][ T5900] usb 1-1: config 0 descriptor?? [ 789.172389][ T5900] usbhid 1-1:0.0: can't add hid device: -71 [ 789.216869][T14424] ip6gretap0 speed is unknown, defaulting to 1000 [ 789.223829][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 789.333169][T14453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.514602][ T5900] usb 1-1: USB disconnect, device number 86 [ 790.158700][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 790.964059][T14478] fuse: Bad value for 'fd' [ 790.982895][ T973] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 791.193089][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 791.281056][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.504541][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.637520][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 791.666318][ T973] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 791.680996][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.705534][T14489] tipc: Started in network mode [ 791.707336][ T973] usb 4-1: config 0 descriptor?? [ 791.710508][T14489] tipc: Node identity fe7f000000000000000000000000001, cluster identity 4711 [ 791.728052][T14489] tipc: Enabling of bearer rejected, failed to enable media [ 792.745114][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.752456][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.760098][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.767571][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.775025][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.782549][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.790484][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.798572][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.806041][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.813961][ T973] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 792.835019][ T973] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0024/input/input29 [ 792.866332][ T973] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 792.879580][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.888300][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.312020][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 794.558856][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.570630][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.604620][ T973] usb 4-1: USB disconnect, device number 98 [ 795.049068][T14530] fuse: Bad value for 'fd' [ 795.098995][ T30] audit: type=1800 audit(795.078:2008): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2238" name="/" dev="9p" ino=2 res=0 errno=0 [ 795.373127][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 795.464228][ T5928] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 795.543915][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 795.553352][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.570863][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 795.586135][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 795.616200][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 795.634609][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 795.649292][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.668820][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 795.683302][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 795.686479][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 796.021786][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 796.033908][ T5928] usb 3-1: device descriptor read/all, error -71 [ 796.046710][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 796.120275][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 796.152233][ T30] audit: type=1400 audit(796.128:2009): avc: denied { write } for pid=14553 comm="syz.1.2248" name="renderD128" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 796.172495][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 796.503901][ T9] usb 1-1: USB disconnect, device number 87 [ 796.963444][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 798.064403][ T30] audit: type=1400 audit(798.028:2010): avc: denied { read } for pid=14588 comm="syz.0.2260" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 798.121193][T14591] dvmrp0: entered allmulticast mode [ 798.141767][ T30] audit: type=1400 audit(798.028:2011): avc: denied { open } for pid=14588 comm="syz.0.2260" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 799.384983][ T5928] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 799.817520][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 799.974746][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 800.793363][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 800.811728][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 800.824671][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 801.282035][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 801.293830][ T5928] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 801.404330][ T30] audit: type=1400 audit(801.338:2012): avc: denied { create } for pid=14627 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 801.431001][T14628] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 801.432129][T14629] mkiss: ax0: crc mode is auto. [ 801.446565][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.466627][ T30] audit: type=1400 audit(801.408:2013): avc: denied { load_policy } for pid=14627 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 801.491827][T14628] SELinux: failed to load policy [ 801.501115][ T5928] usb 1-1: can't set config #1, error -71 [ 801.518138][ T5928] usb 1-1: USB disconnect, device number 88 [ 801.829592][T14646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.901742][T14646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.921944][T14646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.959464][T14646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.995734][ T5928] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 802.153338][ T5928] usb 1-1: too many configurations: 67, using maximum allowed: 8 [ 802.176852][ T5928] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 802.189934][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.198064][ T5928] usb 1-1: Product: syz [ 802.202285][ T5928] usb 1-1: Manufacturer: syz [ 802.210167][ T5928] usb 1-1: SerialNumber: syz [ 802.233559][ T5928] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 802.242768][ T30] audit: type=1400 audit(802.218:2014): avc: denied { firmware_load } for pid=11140 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 802.302553][T11140] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 802.346034][ T30] audit: type=1800 audit(802.318:2015): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2276" name="/" dev="9p" ino=2 res=0 errno=0 [ 802.738355][T14655] dvmrp0: left allmulticast mode [ 803.142994][ T9] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 803.370822][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 803.729366][ T30] audit: type=1400 audit(803.698:2016): avc: denied { read } for pid=14658 comm="syz.4.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 803.755715][T11140] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 804.177949][ T9] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 804.186953][T11140] ath9k_htc: Failed to initialize the device [ 804.197828][ T30] audit: type=1400 audit(803.758:2017): avc: denied { write } for pid=14658 comm="syz.4.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 804.219110][ T9] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 804.239359][T11140] usb 1-1: ath9k_htc: USB layer deinitialized [ 804.254537][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 804.266689][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 804.267579][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.291564][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.302106][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.318357][ T30] audit: type=1400 audit(804.248:2018): avc: denied { nlmsg_write } for pid=14674 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 804.342441][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 804.351900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.365087][ T9] usb 4-1: config 0 descriptor?? [ 804.546742][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 804.703408][T14683] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 805.033072][ T5967] usb 1-1: USB disconnect, device number 89 [ 805.041063][ T9] hid_parser_main: 5 callbacks suppressed [ 805.041084][ T9] lg-g15 0003:046D:C225.0025: unknown main item tag 0x0 [ 805.064971][ T9] lg-g15 0003:046D:C225.0025: unknown main item tag 0x0 [ 805.071951][ T9] lg-g15 0003:046D:C225.0025: unknown main item tag 0x0 [ 805.079223][ T9] lg-g15 0003:046D:C225.0025: unknown main item tag 0x0 [ 805.086239][ T9] lg-g15 0003:046D:C225.0025: unknown main item tag 0x0 [ 805.096000][ T9] lg-g15 0003:046D:C225.0025: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 805.183007][ T5900] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 805.273480][ T5928] usb 4-1: USB disconnect, device number 99 [ 805.542865][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 805.549608][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.559732][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 805.568777][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 805.579917][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 805.591075][ T5900] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 805.595195][ T30] audit: type=1400 audit(805.568:2019): avc: denied { mount } for pid=14696 comm="syz.2.2288" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 805.600131][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.622513][T11140] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 805.640249][ T5900] hub 2-1:1.0: bad descriptor, ignoring hub [ 805.649075][ T5900] hub 2-1:1.0: probe with driver hub failed with error -5 [ 805.656685][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 805.661935][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 805.669888][ T30] audit: type=1400 audit(805.568:2020): avc: denied { unmount } for pid=14696 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 805.670639][ T5900] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 805.695289][ T5900] cdc_wdm 2-1:1.0: Unknown control protocol [ 805.716600][ T30] audit: type=1400 audit(805.698:2021): avc: denied { create } for pid=14698 comm="syz.2.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 805.904296][T11140] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.914491][T11140] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 805.924033][T11140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.934627][T11140] usb 1-1: config 0 descriptor?? [ 806.375417][T11140] pwc: Askey VC010 type 2 USB webcam detected. [ 806.396367][ T5900] usb 2-1: USB disconnect, device number 71 [ 807.252309][T11140] pwc: recv_control_msg error -32 req 02 val 2b00 [ 807.377464][T11140] pwc: recv_control_msg error -32 req 02 val 2700 [ 807.411641][T11140] pwc: recv_control_msg error -32 req 02 val 2c00 [ 807.474213][T11140] pwc: recv_control_msg error -32 req 04 val 1000 [ 807.504298][T11140] pwc: recv_control_msg error -32 req 04 val 1300 [ 807.555090][T11140] pwc: recv_control_msg error -32 req 04 val 1400 [ 807.578176][T14728] syzkaller1: entered promiscuous mode [ 807.584667][T14728] syzkaller1: entered allmulticast mode [ 807.669791][T14731] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 807.702100][T14731] CIFS mount error: No usable UNC path provided in device string! [ 807.702100][T14731] [ 807.712608][T14731] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 808.038550][T11140] pwc: recv_control_msg error -71 req 02 val 2100 [ 808.045960][T11140] pwc: recv_control_msg error -71 req 04 val 1500 [ 808.052727][T11140] pwc: recv_control_msg error -71 req 02 val 2500 [ 808.059984][T11140] pwc: recv_control_msg error -71 req 02 val 2400 [ 808.067088][T11140] pwc: recv_control_msg error -71 req 02 val 2600 [ 808.074001][T11140] pwc: recv_control_msg error -71 req 02 val 2900 [ 808.081553][T11140] pwc: recv_control_msg error -71 req 02 val 2800 [ 808.089184][T11140] pwc: recv_control_msg error -71 req 04 val 1100 [ 808.103467][T11140] pwc: recv_control_msg error -71 req 04 val 1200 [ 808.108640][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 808.108689][ T30] audit: type=1800 audit(808.088:2023): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2298" name="/" dev="9p" ino=2 res=0 errno=0 [ 808.136203][T11140] pwc: Registered as video103. [ 808.142378][T11140] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 808.176081][ T92] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 808.176945][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.190615][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.192490][T11140] usb 1-1: USB disconnect, device number 90 [ 808.385834][ T92] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 808.397030][ T92] usb 3-1: config 0 has no interface number 0 [ 808.403733][ T92] usb 3-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.437758][ T30] audit: type=1400 audit(808.398:2024): avc: denied { kexec_image_load } for pid=14740 comm="syz.4.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 808.539472][ T92] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 808.549605][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.622937][ T9] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 808.816642][ T9] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 808.831139][ T9] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 808.841524][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 808.861438][ T92] usb 3-1: Product: syz [ 808.884687][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 808.906110][ T92] usb 3-1: Manufacturer: syz [ 808.909339][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.921709][ T92] usb 3-1: SerialNumber: syz [ 808.944806][ T92] usb 3-1: config 0 descriptor?? [ 808.952640][ T92] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 808.959080][ T92] usb 3-1: No valid video chain found. [ 808.973596][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.005955][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 809.015472][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.028198][ T9] usb 4-1: config 0 descriptor?? [ 809.243270][ T5900] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 809.428496][ T5900] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 809.437098][ T5900] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 809.453477][ T5900] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 809.483328][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 809.496942][ T9] lg-g15 0003:046D:C225.0026: unknown main item tag 0x0 [ 809.513200][ T9] lg-g15 0003:046D:C225.0026: unknown main item tag 0x0 [ 809.528118][ T9] lg-g15 0003:046D:C225.0026: unknown main item tag 0x0 [ 809.536330][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.556681][ T9] lg-g15 0003:046D:C225.0026: unknown main item tag 0x0 [ 809.753652][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.804129][ T9] lg-g15 0003:046D:C225.0026: unknown main item tag 0x0 [ 809.878178][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 809.887464][ T9] lg-g15 0003:046D:C225.0026: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 809.898659][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.916302][ T9] usb 4-1: USB disconnect, device number 100 [ 809.924992][ T5900] usb 1-1: config 0 descriptor?? [ 810.171586][ T9] usb 3-1: USB disconnect, device number 69 [ 810.237021][T14770] syzkaller1: entered promiscuous mode [ 810.242508][T14770] syzkaller1: entered allmulticast mode [ 810.345610][ T5900] lg-g15 0003:046D:C225.0027: unknown main item tag 0x0 [ 810.355929][ T5900] lg-g15 0003:046D:C225.0027: unknown main item tag 0x0 [ 810.364304][ T5900] lg-g15 0003:046D:C225.0027: unknown main item tag 0x0 [ 810.371753][ T5900] lg-g15 0003:046D:C225.0027: unknown main item tag 0x0 [ 810.383546][ T5900] lg-g15 0003:046D:C225.0027: unknown main item tag 0x0 [ 810.399874][ T5900] lg-g15 0003:046D:C225.0027: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 810.556925][ T24] usb 1-1: USB disconnect, device number 91 [ 811.524409][ T30] audit: type=1400 audit(810.668:2025): avc: denied { map } for pid=14774 comm="syz.3.2312" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 811.987626][T14786] FAULT_INJECTION: forcing a failure. [ 811.987626][T14786] name failslab, interval 1, probability 0, space 0, times 0 [ 812.000365][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.3.2314 Not tainted syzkaller #0 PREEMPT(full) [ 812.000389][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.000399][T14786] Call Trace: [ 812.000406][T14786] [ 812.000413][T14786] dump_stack_lvl+0x16c/0x1f0 [ 812.000441][T14786] should_fail_ex+0x512/0x640 [ 812.000463][T14786] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 812.000491][T14786] should_failslab+0xc2/0x120 [ 812.000509][T14786] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 812.000534][T14786] ? __alloc_skb+0x2b2/0x380 [ 812.000559][T14786] __alloc_skb+0x2b2/0x380 [ 812.000579][T14786] ? __pfx___alloc_skb+0x10/0x10 [ 812.000602][T14786] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 812.000631][T14786] netlink_alloc_large_skb+0x69/0x130 [ 812.000661][T14786] netlink_sendmsg+0x6a1/0xdd0 [ 812.000690][T14786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.000723][T14786] ____sys_sendmsg+0xa98/0xc70 [ 812.000751][T14786] ? copy_msghdr_from_user+0x10a/0x160 [ 812.000772][T14786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.000811][T14786] ___sys_sendmsg+0x134/0x1d0 [ 812.000835][T14786] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.000888][T14786] __sys_sendmsg+0x16d/0x220 [ 812.000910][T14786] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.000948][T14786] do_syscall_64+0xcd/0x4e0 [ 812.000975][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.000993][T14786] RIP: 0033:0x7fe353b8eec9 [ 812.001008][T14786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.001025][T14786] RSP: 002b:00007fe351dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.001043][T14786] RAX: ffffffffffffffda RBX: 00007fe353de6180 RCX: 00007fe353b8eec9 [ 812.001056][T14786] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 812.001067][T14786] RBP: 00007fe351dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 812.001078][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.001089][T14786] R13: 00007fe353de6218 R14: 00007fe353de6180 R15: 00007ffdb7a90a98 [ 812.001114][T14786] [ 812.724582][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.801635][T14797] netlink: 'syz.1.2318': attribute type 4 has an invalid length. [ 812.828786][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.853140][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.868907][ T92] lo speed is unknown, defaulting to 1000 [ 812.881463][ T92] syz0: Port: 1 Link DOWN [ 813.123237][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 813.357855][T14803] syzkaller1: entered promiscuous mode [ 813.388016][T14803] syzkaller1: entered allmulticast mode [ 813.543541][ T24] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 813.566366][ T24] usb 1-1: config 0 has no interface number 0 [ 813.627295][ T24] usb 1-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.761254][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 813.773477][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.800079][ T24] usb 1-1: Product: syz [ 813.810182][ T24] usb 1-1: Manufacturer: syz [ 813.819476][ T24] usb 1-1: SerialNumber: syz [ 813.830376][ T24] usb 1-1: config 0 descriptor?? [ 813.849667][ T24] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 813.870337][ T24] usb 1-1: No valid video chain found. [ 813.900267][ T30] audit: type=1400 audit(813.878:2026): avc: denied { ioctl } for pid=14810 comm="syz.4.2324" path="socket:[43110]" dev="sockfs" ino=43110 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 814.012949][ T92] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 814.164444][ T92] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 814.172904][ T92] usb 4-1: config 0 has no interface number 0 [ 814.180424][ T92] usb 4-1: config 0 interface 160 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.228252][ T92] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 814.241919][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.270270][ T92] usb 4-1: Product: syz [ 814.282314][ T92] usb 4-1: Manufacturer: syz [ 814.291101][ T92] usb 4-1: SerialNumber: syz [ 814.320402][ T92] usb 4-1: config 0 descriptor?? [ 814.341169][ T92] usb 4-1: Found UVC 0.00 device syz (05ac:8501) [ 814.355125][ T30] audit: type=1400 audit(814.328:2027): avc: denied { name_bind } for pid=14819 comm="syz.1.2327" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 814.383030][ T92] usb 4-1: No valid video chain found. [ 815.417502][ T9] usb 1-1: USB disconnect, device number 92 [ 815.711337][ T92] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 815.853525][ T24] usb 4-1: USB disconnect, device number 101 [ 815.962865][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 815.969589][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.981819][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.990814][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 816.002372][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 816.014210][ T92] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 816.023343][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.033948][ T92] hub 2-1:1.0: bad descriptor, ignoring hub [ 816.039826][ T92] hub 2-1:1.0: probe with driver hub failed with error -5 [ 816.047185][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 816.052356][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 816.059210][ T92] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 816.065162][ T92] cdc_wdm 2-1:1.0: Unknown control protocol [ 816.259187][T14838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.398421][ T30] audit: type=1326 audit(816.378:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.425535][ T30] audit: type=1326 audit(816.378:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.458055][ T30] audit: type=1326 audit(816.378:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.485139][ T30] audit: type=1326 audit(816.378:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.512107][ T30] audit: type=1326 audit(816.378:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.547139][ T92] usb 2-1: USB disconnect, device number 72 [ 816.561197][ T30] audit: type=1326 audit(816.378:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.589734][ T30] audit: type=1326 audit(816.378:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 816.634356][ T30] audit: type=1326 audit(816.378:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14840 comm="syz.2.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbed1f8eec9 code=0x7ffc0000 [ 817.682924][ T92] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 817.869224][ T92] usb 2-1: unable to get BOS descriptor or descriptor too short [ 818.030121][ T92] usb 2-1: no configurations [ 818.040565][ T92] usb 2-1: can't read configurations, error -22 [ 819.519944][ T92] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 819.591627][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 819.651729][T14895] bridge0: left allmulticast mode [ 819.719549][T14898] ------------[ cut here ]------------ [ 819.725072][T14898] WARNING: CPU: 1 PID: 14898 at fs/nsfs.c:493 nsfs_fh_to_dentry+0x9de/0xe10 [ 819.733937][T14898] Modules linked in: [ 819.737822][T14898] CPU: 1 UID: 0 PID: 14898 Comm: syz.4.2350 Not tainted syzkaller #0 PREEMPT(full) [ 819.747215][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.757680][T14898] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 819.763564][T14898] Code: 0c 50 ff e9 63 fe ff ff e8 bf 30 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 b1 30 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 a3 30 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 95 30 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 819.783354][T14898] RSP: 0018:ffffc90005407b38 EFLAGS: 00010283 [ 819.789398][T14898] RAX: 0000000000000083 RBX: 0000000000000000 RCX: ffffc9000c759000 [ 819.797491][T14898] RDX: 0000000000080000 RSI: ffffffff8246e85d RDI: 0000000000000004 [ 819.805649][T14898] RBP: ffff888078be9808 R08: 0000000000000004 R09: 00000000effffffe [ 819.813689][T14898] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000a80f68 [ 819.821647][T14898] R13: ffffffff90445d58 R14: 00000000effffffe R15: 0000000000000001 [ 819.829825][T14898] FS: 00007f05454986c0(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 819.838771][T14898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.845670][T14898] CR2: 0000200000000000 CR3: 0000000055c9e000 CR4: 00000000003526f0 [ 819.853703][T14898] Call Trace: [ 819.857170][T14898] [ 819.860079][T14898] ? do_handle_open+0x564/0xc90 [ 819.865274][T14898] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 819.870722][T14898] ? __kasan_kmalloc+0xaa/0xb0 [ 819.875491][T14898] ? __kmalloc_noprof+0x223/0x510 [ 819.880500][T14898] ? do_handle_open+0x564/0xc90 [ 819.885520][T14898] ? do_syscall_64+0xcd/0x4e0 [ 819.890177][T14898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.896250][T14898] exportfs_decode_fh_raw+0x167/0x7d0 [ 819.901605][T14898] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 819.907602][T14898] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 819.913241][T14898] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 819.919137][T14898] do_handle_open+0x702/0xc90 [ 819.924144][T14898] ? __pfx_do_handle_open+0x10/0x10 [ 819.929333][T14898] ? __x64_sys_futex+0x1e0/0x4c0 [ 819.934291][T14898] ? xfd_validate_state+0x61/0x180 [ 819.939381][T14898] ? do_syscall_64+0xcd/0x4e0 [ 819.944236][T14898] do_syscall_64+0xcd/0x4e0 [ 819.948720][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.954606][T14898] RIP: 0033:0x7f054458eec9 [ 819.959253][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.979194][T14898] RSP: 002b:00007f0545498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 819.987608][T14898] RAX: ffffffffffffffda RBX: 00007f05447e5fa0 RCX: 00007f054458eec9 [ 819.995740][T14898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 820.003710][T14898] RBP: 00007f0544611f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.011653][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.019915][T14898] R13: 00007f05447e6038 R14: 00007f05447e5fa0 R15: 00007fff5d5ab328 [ 820.027946][T14898] [ 820.030944][T14898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 820.038196][T14898] CPU: 1 UID: 0 PID: 14898 Comm: syz.4.2350 Not tainted syzkaller #0 PREEMPT(full) [ 820.047533][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.057558][T14898] Call Trace: [ 820.060823][T14898] [ 820.063738][T14898] dump_stack_lvl+0x3d/0x1f0 [ 820.068306][T14898] vpanic+0x6e8/0x7a0 [ 820.072261][T14898] ? __pfx_vpanic+0x10/0x10 [ 820.076738][T14898] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 820.081821][T14898] panic+0xca/0xd0 [ 820.085513][T14898] ? __pfx_panic+0x10/0x10 [ 820.089909][T14898] check_panic_on_warn+0xab/0xb0 [ 820.094818][T14898] __warn+0xf6/0x3c0 [ 820.098692][T14898] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 820.103774][T14898] report_bug+0x3c3/0x580 [ 820.108079][T14898] ? nsfs_fh_to_dentry+0x9de/0xe10 [ 820.113161][T14898] handle_bug+0x184/0x210 [ 820.117466][T14898] exc_invalid_op+0x17/0x50 [ 820.121949][T14898] asm_exc_invalid_op+0x1a/0x20 [ 820.126772][T14898] RIP: 0010:nsfs_fh_to_dentry+0x9de/0xe10 [ 820.132461][T14898] Code: 0c 50 ff e9 63 fe ff ff e8 bf 30 74 ff 90 0f 0b 90 e9 7b f8 ff ff e8 b1 30 74 ff 90 0f 0b 90 e9 ce f8 ff ff e8 a3 30 74 ff 90 <0f> 0b 90 e9 32 f9 ff ff e8 95 30 74 ff 49 8d 7d 10 48 b8 00 00 00 [ 820.152043][T14898] RSP: 0018:ffffc90005407b38 EFLAGS: 00010283 [ 820.158088][T14898] RAX: 0000000000000083 RBX: 0000000000000000 RCX: ffffc9000c759000 [ 820.166033][T14898] RDX: 0000000000080000 RSI: ffffffff8246e85d RDI: 0000000000000004 [ 820.173974][T14898] RBP: ffff888078be9808 R08: 0000000000000004 R09: 00000000effffffe [ 820.181917][T14898] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000a80f68 [ 820.189861][T14898] R13: ffffffff90445d58 R14: 00000000effffffe R15: 0000000000000001 [ 820.197813][T14898] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 820.202902][T14898] ? nsfs_fh_to_dentry+0x9dd/0xe10 [ 820.207982][T14898] ? do_handle_open+0x564/0xc90 [ 820.212807][T14898] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 820.218246][T14898] ? __kasan_kmalloc+0xaa/0xb0 [ 820.222985][T14898] ? __kmalloc_noprof+0x223/0x510 [ 820.227986][T14898] ? do_handle_open+0x564/0xc90 [ 820.232809][T14898] ? do_syscall_64+0xcd/0x4e0 [ 820.237476][T14898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.243520][T14898] exportfs_decode_fh_raw+0x167/0x7d0 [ 820.248877][T14898] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 820.254658][T14898] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 820.260101][T14898] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 820.266000][T14898] do_handle_open+0x702/0xc90 [ 820.270671][T14898] ? __pfx_do_handle_open+0x10/0x10 [ 820.275841][T14898] ? __x64_sys_futex+0x1e0/0x4c0 [ 820.280764][T14898] ? xfd_validate_state+0x61/0x180 [ 820.285855][T14898] ? do_syscall_64+0xcd/0x4e0 [ 820.290514][T14898] do_syscall_64+0xcd/0x4e0 [ 820.294998][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.300867][T14898] RIP: 0033:0x7f054458eec9 [ 820.305266][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.324851][T14898] RSP: 002b:00007f0545498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 820.333239][T14898] RAX: ffffffffffffffda RBX: 00007f05447e5fa0 RCX: 00007f054458eec9 [ 820.341185][T14898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 820.349129][T14898] RBP: 00007f0544611f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.357073][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.365015][T14898] R13: 00007f05447e6038 R14: 00007f05447e5fa0 R15: 00007fff5d5ab328 [ 820.372966][T14898] [ 820.376158][T14898] Kernel Offset: disabled [ 820.380456][T14898] Rebooting in 86400 seconds..