last executing test programs: 58.46383989s ago: executing program 0 (id=47): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) openat(r0, &(0x7f0000000240)='./file1\x00', 0x60842, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) write$binfmt_format(r1, &(0x7f0000000000)='-1\x00', 0x3) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="f1f320a9", @ANYRES16=r3, @ANYBLOB="010725bd7000fbdbdf2502000000180001801400020070696d36726567310000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000a00), 0x0, 0x10002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$rtc(0xffffff9c, 0x0, 0xc2440, 0x0) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$RTC_AIE_ON(r7, 0x7001) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}, {&(0x7f0000000180)="3ce6becdf13b9ef54562d155ee6df0b824cb0261d1561d2bf3105072c5cc12f6f5212cdb107252ac89a8a1f2b0", 0x2d}, {&(0x7f0000000300)="bdba2c220f", 0x5}], 0x3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010027bd7001fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a80000000000400018008002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 57.54436727s ago: executing program 0 (id=52): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[], 0xfd, 0x5532, &(0x7f0000000540)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x999400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r4, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0xa1) 56.59570455s ago: executing program 0 (id=56): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000010c0)="97", 0x1}], 0x1) splice(r5, 0x0, r4, 0x0, 0x8000000000007, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000280)=""/174, 0xae}], 0x1, 0x4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 55.450679085s ago: executing program 0 (id=59): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r1 = openat(r0, &(0x7f0000000000)='.\x00', 0x10000, 0xaf) r2 = getpid() r3 = syz_clone(0x6800000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000040)='totmaps\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x0, '\x00', @d}) 55.236728749s ago: executing program 0 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000000)=""/28, &(0x7f00000000c0)=0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0xc, &(0x7f0000000340)=ANY=[], 0x4, 0x24a, &(0x7f0000000680)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x800, @loopback, 0x8}, 0x1c) r6 = fcntl$dupfd(r2, 0x406, r2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 54.871628086s ago: executing program 0 (id=63): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000000000000000002000000000000000000000000050000000000000000000000000006020000000000"], 0x0, 0x56}, 0x20) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'sit0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0xffffffff) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000240), 0x0, 0x62c, &(0x7f0000000840)="$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") 54.840790747s ago: executing program 32 (id=63): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000000000000000002000000000000000000000000050000000000000000000000000006020000000000"], 0x0, 0x56}, 0x20) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000380)={'sit0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0xffffffff) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000240), 0x0, 0x62c, &(0x7f0000000840)="$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") 46.195760611s ago: executing program 3 (id=107): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup\x00', 0xa6c4a4, &(0x7f0000000040), 0x2c, 0x539, &(0x7f0000000b80)="$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") r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x5}}, 0x10) r2 = socket(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x50741000) syz_clone(0x80c000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, 0x0) connect$unix(r2, 0x0, 0x0) mknod(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, 0x7) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) r4 = timerfd_create(0x1, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0x0, 0x18, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x5, 0xa7, {0x7, 0x25, 0x1, 0xc, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 45.204713742s ago: executing program 3 (id=114): setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "c034f97f1e583d82"}, 0x9, 0x3) r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000010) r2 = syz_clone(0x40088400, &(0x7f0000000280)="eeb67c03568322cb38269430e76d33d4fae425c3cb712a6b8a731659460f8304cf5f68a2e6d188b039b43940cc27a53cfa04c285c918", 0x36, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="23a991f2615d9ec8909f84afac4eef5146021235c3832c51f82a597283e99e8c9c3f854b4000cfaf5776ecc94eef05f9dbd2c8e4b0130609d351195c0155fb60dd5f4a27c4e2feb0afb7c40c011c53fd947e29d003f154875a6246b59cf8e974561c1110566766f70929c69e28c3b4706b7dd7562105208c314c1319f4607dd2f0401808830fd8fc8dd3f7867471b5ab816029aa5b2ae3163f6d71758ca23301e76a59a9be3a59104e9f4ca20ad4d2d9b519c8688752b80cad1accaca0ff3e893b8c208d8a2a0079f6e0ff393492c36daa6fb7a410b17f479e7c9990c8143f9db9c2675ad013e7eed62586ab8291dfec0025") sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x1) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x201, &(0x7f00000014c0)={&(0x7f00000004c0)="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", 0x1000}) recvfrom$inet_nvme(r3, &(0x7f0000001500)=""/15, 0xf, 0x4020, &(0x7f0000001540)=@llc={0x1a, 0x110, 0x6, 0x5, 0xbe, 0x10, @remote}, 0x80) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001640)={0x20, 0x11, 0x5, 0x3, 0x65, 0x80, &(0x7f00000015c0)="8d83892c0c0a6759a21f2486cabc8b1502b026f2a55f0cb1d7b57dfc335393f2b335aadada69cadd1097f04ed48da1094602fd6040eefd7e12403d1b82f8acff0a4b2127a8554a94b26ea7d2a0fef5b2e13ad6f2c458234583c273d0e9fed23e0d5ea6cf65"}) vmsplice(r3, &(0x7f0000001ac0)=[{&(0x7f0000001680)="67daf69fc5bfd9f51ee25d630316cf04e18903e3155eb346a0f5a369fc8e6ca00187ded7307b3a39cc29b34364c40f618f12189ac82f8c979a65de7b829e8cee1d0d602d6f23b1e12061", 0x4a}, {&(0x7f0000001700)="f69c0ae294e74046d45520b77a61945cb79b21fd5dba37775c201b13570c162e1db413f9383a7d3cb09d85a4c47e03ad32d4b1af789ea2dd4c15bfd12c7d096401d6c9c7e41c44e2e1cc96f17fb6671fdef808b8b68623af0697f20d7d1f844e77fec38cea055a0ea9835faa8a60b3ce8c55440a4fb8e7773bcaf90c4a1e867594908e73161dd6761f7f2ca3d4ceaeb6a63ceb0e8367510ed92a2cd0a6769c0d7b62031396cf215e", 0xa8}, {&(0x7f00000017c0)="192985169daedd928207621a5e329471b2180042396cc86b4f0e620f8baeead4a9496b125e215390b83ba4279bf4255e849245474839c7040d5a04c0f24b30494694404c2213b497cdccdaffaffede903b1e", 0x52}, {&(0x7f0000001840)="a6153b1547fad41002e49440686547337ea8494c8503b500f9ba27b4949fadfc6902c53cb1df7e37f96007c7b4fc6c4f1f2ac9c22e0fc90e6d14dd72031630da75a064776a1c9f6074811d7fba74e13f4054061182772b7ce393a7e1ac8d9ebbbdff511b0a622e209202dfb85f6bc87c1f1eb9b962f32fd8acc8b2b6cae52b2fe5d99e403916e2a96440b9f7b8039dc0b1b446fc391d8ac242b1c22b6dedc1d0", 0xa0}, {&(0x7f0000001900)="753a9072b9677c495056703327237e132a063c2f2d0f667acf155dd9aa8f62123c5de1cce53c422c6201ed8de443b3ca69af4e500c09c12a12c5cc64be5d2c9fb1e0e4f97230a694055732443dfb1a02daff1f5ce337cef3bc177e3e1e6020133d9c316ae34cbefa9b509f964f7cf07d160be6bf94eaf702769dcc685d02838ad34f681813b3405b1c58fe9b3b680a044c1a880ffa71322d307af761315f81badbdac9d8f89b05af43507f98ce6764bd71d8988bc31256a17f991a1cd7db4b", 0xbf}, {&(0x7f00000019c0)="c2be00d2034b224341e95656defdaed541da8b41ae1537c4769ae5303317f2f4df30e075316c7634ce935e04968817dfdbf42fbe2312e574c1689e977b7c2a197dff6c8fd8a242e1d50ca0c824eb76fb5d4079505a89c66fdbbfaa25e60afd2f604ad8b16f100530c82b6600d46c61f5445908af364f778088622274d226e18686c4708c3665ffe173830afa493b231931f2d39c5c773a7cf340c09fff2e98aa207eeaa98ae71d422e1becfbf3a31aa0b7909c78bd71139b93d80218e7408b781a716d7ebfa14ce2af2a8ab0923cc67877040c3912c5ed629f47d4036c185f50da7a5b2abb79c270c71974e5f64e87b6da78d6d72b41cdef", 0xf8}], 0x6, 0x8) r4 = fspick(r3, &(0x7f0000001b40)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000001b80)={0x2}) process_madvise(0xffffffffffffffff, &(0x7f0000001d00)=[{&(0x7f0000001bc0)="0ef3337f3c69b0dca3cd595600a8f29d8cfea244fae3ff36ba4ecf8090c99f1940f6d92a7ed37b3013e9323857dec8dfa06cf15f39f6a16326daeb5cf8113f9e15a678d7edbe48692d077b1d4914d7bace60fe104906214e61d2eda2439f3ebabe75b38bea5a4fe6", 0x68}, {&(0x7f0000001c40)="af1b633eb22935d5da4e8e50245afd7a1bd8aa4f0e3000fc6d9cccdfa520720029771bb5e250efd9c9277b2fa9d16618466e88b64f441caa72ea34b3ce181d1fa7dc42ef0647187eadbeb2291e779141aee67a94f834ebb820bec495d1c6916d85709b2f61b885eb2b429385aa1d34d64c3e501f0af7e624b6c276f9161610df5c2da65e5d6834369d4dea061978f0c19462253bcad6d10edab689a4a596f4ef2533106dbcd9e78cbf424e", 0xab}], 0x2, 0x64, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001d40)={'syztnl2\x00', 0x0, 0x700, 0x1, 0xfffffff9, 0x9, {{0x42, 0x4, 0x0, 0x4, 0x108, 0x64, 0x0, 0x53, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0x10, 0x5c, 0x0, 0x9, [0x800, 0x8, 0x80]}, @end, @end, @cipso={0x86, 0x50, 0x3, [{0x6, 0x9, "d99b5169d1f172"}, {0x5, 0x7, "0894116067"}, {0x2, 0x5, "97683c"}, {0x3, 0xb, "e56224468788836fec"}, {0x1, 0x8, "f6ffe301d6ef"}, {0x0, 0xb, "fb89bf0379b0263130"}, {0x7, 0x3, 'x'}, {0x5, 0x5, "481c89"}, {0x1, 0x9, "e57385150f6416"}, {0x1, 0x6, "eaf4565d"}]}, @cipso={0x86, 0x59, 0x3, [{0x5, 0x11, "c69f2b19eecd0c3003c34b5669b187"}, {0x1, 0x10, "862d820825d55239c03502cb7e67"}, {0x1, 0x2}, {0x0, 0xa, "51c7806bc8c3df55"}, {0x1, 0xe, "b8cf165463243b15e7beb7c1"}, {0x6, 0x11, "beb5303698bd437822a6bc3cc2e8c0"}, {0x1, 0x7, "1d3a8f238f"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x0, [{@multicast2, 0x10000}, {@remote, 0x6}, {@local, 0x400}, {@local, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@local, 0x4}]}]}}}}}) connect$can_bcm(r3, &(0x7f0000001ec0)={0x1d, r5}, 0x10) r6 = add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r7 = request_key(&(0x7f0000001f00)='cifs.spnego\x00', &(0x7f0000001f40)={'syz', 0x3}, &(0x7f0000001f80)='syztnl2\x00', r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000002200)={&(0x7f0000002040), 0xc, &(0x7f00000021c0)={&(0x7f00000020c0)={0xd4, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x22bc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9c2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffc000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3018}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) lgetxattr(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)=@random={'user.', '\'\x00'}, &(0x7f00000022c0)=""/246, 0xf6) r9 = add_key(&(0x7f00000023c0)='syzkaller\x00', &(0x7f0000002400)={'syz', 0x2}, &(0x7f0000002440)='q', 0x1, r7) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000002480)='.dead\x00', &(0x7f00000024c0)=']-}[#@5\x00') setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000002500)=[{{0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x40) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x10000010) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000002640)={0x40, 0x3, 0x6, 0x800, "8533ec15084af46cbd16e4a19e7a2fa1ec6b6fa4b53180266ae8e38e04c783d7"}) sched_setaffinity(r2, 0x8, &(0x7f0000002680)=0x401) tgkill(r2, 0x0, 0x2c) recvmsg$unix(r3, &(0x7f0000002a00)={&(0x7f00000026c0), 0x6e, &(0x7f0000002940)=[{&(0x7f0000002740)=""/196, 0xc4}, {&(0x7f0000002840)=""/240, 0xf0}], 0x2, &(0x7f0000002980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x10060) 45.048153955s ago: executing program 3 (id=118): openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ac0)=""/182, 0xb6}], 0x1}, 0x2}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000571c96c1f43c00000002000000000000000200000400000000ec"], 0x0, 0x3e, 0x0, 0x1}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="ff", 0x1}], 0x1, 0x3fffc, 0xfffff804, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0xdddd1000, 0x40000, 0xb, 0x4, 0xf, 0x2, 0x2, 0x4, 0x7, 0x4, 0x6, 0x8}, {0xeeef0000, 0xeeee8000, 0x3, 0x1, 0x0, 0xa, 0x7f, 0x7, 0xc3, 0x9, 0x8, 0x9}, {0x30000, 0x30000, 0x8, 0x10, 0x4, 0x7, 0x7, 0x3, 0x1, 0x3c, 0x0, 0x7}, {0x7000, 0x40000, 0xe, 0x0, 0x5, 0x5, 0xff, 0x70, 0x1, 0x6, 0x4, 0x80}, {0x8080000, 0x25000, 0x3, 0x5, 0x10, 0x90, 0x1, 0x4, 0x81, 0x1a, 0x5, 0x3}, {0x80a0000, 0x50000, 0xd, 0xb, 0x8, 0x1, 0x3, 0x6, 0x0, 0x6, 0x1}, {0x100000, 0xeeef0000, 0xb, 0x0, 0x3, 0x7, 0xb9, 0x10, 0xd, 0xfe, 0x5, 0x5}, {0x2, 0x8080000, 0x9, 0x9, 0x3, 0x65, 0xa5, 0x1, 0x2, 0x5, 0x8}, {0xe000, 0x8}, {0x40000, 0x6}, 0x120030010, 0x0, 0xeeee0000, 0x4, 0x7, 0x1000, 0x7000, [0x1000, 0x9, 0x3ff, 0x7]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d0b939d60a53067d50000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) 42.747816144s ago: executing program 3 (id=138): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@barrier}, {@jqfmt_vfsv1}, {@nouser_xattr}, {@abort}, {@init_itable}, {@nodioread_nolock}]}, 0xf9, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [], 0x6b}}) statx(r0, &(0x7f00000001c0)='./file3\x00', 0x2000, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x5000, &(0x7f0000000800)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xb}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@allow_other}], [{@fsname={'fsname', 0x3d, ')*'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_lt={'fowner<', r9}}, {@smackfsdef={'smackfsdef', 0x3d, 'abort'}}]}}) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x7) 41.767937595s ago: executing program 3 (id=143): r0 = fsopen(&(0x7f0000000080)='efs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x1d9442, 0x2c) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb029, 0x3, 0x8, 0x80000001, 0x7, 0xc2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000112680)={0x0, 0x0, "f0b7ad841cece773b96bde53d1093a06a5224b0419a12c1dfbd3e2bbc0f7ecb4019d4e2801a75f6be6209c167046f50cb6027ede6ea16432e28de949529d6eee540eda9ccc2cc3b14cd46f9b12f24174fbd31ed1d5177324da95d036a2e8286f852cbb1574af34486fb0dcd8a20b0fff0b818bbda87ae5ed29a1f9c7b1589653588fa30ff1f26ab4cfd10de63622356d3902269f3fec890a499e0d5e30403addfb17bf31dc00c307bb5d6f6790a7b875933bce74cd6ccff8db19b1a25636f77054323e58d75d663bd569848d2911961551a682ce37e30011ec9b87a8185d4cafa3463461084c3eec3002b09310228646a7855a7c9dd90d90c42ff2ec8fb0f83c", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000113880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000113a80)={0xe, [{}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r13}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {r15, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {r16}, {}, {}, {0x0, r10}, {r12, r17}], 0xf9, "d3a0569ccf2c6e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000700)={r3, r16, "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", "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"}) 41.01845005s ago: executing program 3 (id=148): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x400003, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000e3dbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000080)="73f15365") 40.966307752s ago: executing program 33 (id=148): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x400003, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000e3dbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000080)="73f15365") 6.239992608s ago: executing program 4 (id=488): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000003c0)={0x40, 0xa, 0x5, "1eae4c3de2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.044876092s ago: executing program 6 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x4000) 6.044811752s ago: executing program 6 (id=500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf0d00000000000000000000ffff64010100ff0200000000000000000000000000014e2000004e300003020020103a000008", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d6330000002001000000000000000000000000000101000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000004000000000000000400000000000000020000000000000008c900008a2627210e0000002bbd7000063500000a0000001000000000000000ff000000021000800800", @ANYBLOB="85"], 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 6.044746002s ago: executing program 6 (id=501): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000006c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.835686628s ago: executing program 6 (id=512): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 3.195061442s ago: executing program 4 (id=528): syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.560235975s ago: executing program 1 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) 2.508810936s ago: executing program 1 (id=556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.508637706s ago: executing program 5 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2.508581156s ago: executing program 1 (id=559): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) 2.503271867s ago: executing program 5 (id=560): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.495715407s ago: executing program 1 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 2.455650068s ago: executing program 1 (id=562): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001a80)="a6", 0x1}], 0x1, &(0x7f0000002e80)=[{0xc, 0x1, 0x2}], 0xc}}], 0x1, 0x4000045) 2.455503408s ago: executing program 1 (id=563): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)={0x480, 0x30, 0x10, 0x70bd28, 0x25dfdbfe, "", [@generic="01ba3052c19c7a8ca95ee91e82742e68a012f9a825e7d173011dac89f2bbc3397b8dc35d29a5be345d2b3a41e532256084b71c33570b4255806aeb9ea9d212c77c4294514d0318ea678daf311b9689451137deb91425c9f216eb202e0d3214d58f40a06d546e32af85e901f990a5eed7dbc9c6b9f31a172bcbe734c30fb10c7b21609cec8dde602e8f24ac8660491fb2533fef394764f8618fcec2fe2dbfe040546a4202d769b3739d0536", @typed={0xd1, 0xf7, 0x0, 0x0, @binary="dcc9e0bcdc3fb57d6b4b100ed407de0a5c2574b196ac0c089ed08a3e4bbd6c54a5ae1c59422457029ff3226db5610fc435abd1244aadcea0a553e23c712fb618a1fe9706e5787f5915768d1595f412c6c15debb6d7c835d43d0131695637108af376c55c7b3fd8bbcecd450e238779b60035429711e46ed0a1b69aab112d5cbe12318a7822fb3ee41b94f24e71465a6104c0a87df1f8aa635bc73554f9720842340f719c02c122cf2f36e707ca599c0864e4cfa371e27a5490a328148f8754fe62aa693ce19b87f15281a3aca5"}, @generic="b6f9e40aae761990a05de173eb244dc1ed2c4d7387", @nested={0x1a5, 0xeb, 0x0, 0x1, [@generic="0c4693c2fbf85ada0a26979507adcd47ba7250f87ac1bfe753263c8b94bf87c51304a6061d2b04410f66192e6eca16164551ce0601aadd9bfb011155baef30baa5816424d7d8b619e78cbf99fb9acef91032851504263feed11debfa2516dc6b0d30fe437e0fab0de28e6ec830dd042d7a3b089f0a0fa116250f318228ae710bb67fd1735271a4c6a701bc36a16d36d0778967bb5588433c901b7cac07f602915012e50a8071a937214b6cffd653deb3e3908ab7637712affb6a48b701aae92476e38fc3281e4a30353fa3f94ed8863fc9c83930880bedf4fdcedffd94d6231691390c27540699f98d35", @generic="03f72e0c138f82ae92d2250a0688acc2376055354195c56c8bbcc12c3012b8a4ae6d32eb06d638b1d3d324a1c419b2ad3279b47b7d820204f5e3208440b31bebc24fab719a64ef25cf7f433148ad7e27cf59e5d9447e8ee742ff48ddfdd87a082e8c35f1c00d14c90d69468a2f0913640d9a26a7de0e4ef5c0037ea44f88360b34eae44a178d23b730a5571aea2d3f", @generic="c199cee0b7bb6451c66d27ae24a49663d21a7ab57c4576bc529547a70f19ddde6687902a66525c6e"]}, @nested={0xf9, 0x8a, 0x0, 0x1, [@generic="3749716cf6886e303faa16c36d83017cbff25287b73815fc0fce709e2de3c406bf302e9e05e15a94fae9b49b87db6bba002de833e2ea74efe3486a71f23dcdcfd2f892a3f1911ee6e3fd69364f479ef44a949348d935bf94c902b9f23ea67a9410fd9f3b81c1b6e1b93df486e96981a1eeb46fab92169a555ad81418d0bfc01fbbefc72a32b7cdab8c20311e5dbfb1b113fbccb7b841f2c791e56c6d6c9c35bb67cfc306286fd8635118997c8482090d23e8746c22c510c031555499f8d78810b5a857a5e1da1df692f9fee8f01daa4fbb72b4bd33199b0969856e1268d5e26299ff4cc77f7d6914d55009537f9f8c55fb90a4de54"]}, @nested={0x10, 0x6e, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0xd3}, @nested={0x4, 0x2}]}, @generic="61c36d1a84f070a13636aa86d72f5b3c82c7cacb603d034231f4fe3cbe04af8ef16af275997d57fd"]}, 0x480}], 0x1}, 0x4000040) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 1.375711971s ago: executing program 4 (id=564): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) 1.375592s ago: executing program 4 (id=565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) 1.37552636s ago: executing program 4 (id=566): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffff9, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x5, 0x0, 0x40, 0x0, 0x42}, {0x3, 0xa, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) 1.37472418s ago: executing program 4 (id=567): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708"], 0x0) 311.745433ms ago: executing program 6 (id=569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 249.297105ms ago: executing program 5 (id=570): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f0000000c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) setresgid(0x0, 0x0, 0xee01) creat(&(0x7f0000001380)='./file0\x00', 0x4) 249.079645ms ago: executing program 6 (id=572): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 248.265655ms ago: executing program 5 (id=574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 192.746606ms ago: executing program 5 (id=576): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x4]}, &(0x7f0000000140), 0x8) 192.609476ms ago: executing program 5 (id=578): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) connect$bt_rfcomm(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 124.717127ms ago: executing program 2 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, 0x0, 0x0) 100.079238ms ago: executing program 2 (id=583): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfd, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 86.279328ms ago: executing program 2 (id=584): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002840)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0xf}, @nested={0x4, 0x16b}]}, 0x20}}, 0x0) 28.791979ms ago: executing program 2 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf5, 0x2, 0x1000, 0x5, 0x81, 0x81, 0xfffffffffffffffd, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) accept4(0xffffffffffffffff, &(0x7f0000000100)=@un=@abs, &(0x7f00000001c0)=0x80, 0x80800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.89556ms ago: executing program 2 (id=586): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffe}}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 0s ago: executing program 2 (id=587): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x1, '3'}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="208201"], 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x84, 0x1, 'Q'}, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) kernel console output (not intermixed with test programs): 36.314074][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.321325][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.373156][ T690] device veth0_vlan left promiscuous mode [ 36.389893][ T690] device veth0_vlan entered promiscuous mode [ 36.400149][ T690] device veth1_macvtap left promiscuous mode [ 36.413264][ T690] device veth1_macvtap entered promiscuous mode [ 36.425003][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.442848][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.453001][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.481214][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.501593][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.534552][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.553161][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.583434][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.628756][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.639712][ T693] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 36.658967][ T693] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.674562][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.697316][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.702753][ T24] kauditd_printk_skb: 199 callbacks suppressed [ 36.702788][ T24] audit: type=1326 audit(1783226704.690:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 36.709907][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 36.744866][ T15] snd-usb-audio: probe of 4-1:9.0 failed with error -22 [ 36.755992][ T15] usb 4-1: USB disconnect, device number 3 [ 36.764068][ T24] audit: type=1326 audit(1783226704.760:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 36.812791][ T24] audit: type=1326 audit(1783226704.790:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 36.848639][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.863991][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 36.878907][ T24] audit: type=1326 audit(1783226704.790:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3f273dcc7 code=0x7ffc0000 [ 36.904729][ T704] EXT4-fs (loop3): Ignoring removed orlov option [ 36.923163][ T704] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.937381][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.957222][ T704] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.964966][ T704] EXT4-fs error (device loop3): ext4_quota_enable:6451: comm syz.3.85: inode #3145728: comm syz.3.85: iget: illegal inode # [ 36.984592][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.002696][ T704] EXT4-fs error (device loop3): ext4_quota_enable:6454: comm syz.3.85: Bad quota inode: 3145728, type: 2 [ 37.014534][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.024706][ T24] audit: type=1326 audit(1783226704.790:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3f27400ca code=0x7ffc0000 [ 37.039599][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.064122][ T24] audit: type=1326 audit(1783226704.790:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 37.064188][ T704] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=3145728). Please run e2fsck to fix. [ 37.089025][ T24] audit: type=1326 audit(1783226704.790:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 37.115471][ T479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.144476][ T704] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 37.151263][ T704] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,noload,discard,lazytime,data_err=ignore,auto_da_alloc=0x0000000000000008,nodelalloc,orlov,,errors=continue [ 37.167215][ T24] audit: type=1326 audit(1783226704.790:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 37.228947][ T24] audit: type=1326 audit(1783226704.790:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 37.253947][ T24] audit: type=1326 audit(1783226704.790:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=683 comm="syz.1.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3f273ee59 code=0x7ffc0000 [ 37.391134][ T336] usb 6-1: USB disconnect, device number 2 [ 37.399271][ T336] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 37.419818][ T336] ftdi_sio 6-1:0.0: device disconnected [ 37.468805][ T710] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,resgid=0x0000000000000000,barrier,noload,nojournal_checksum,quota,,errors=continue [ 37.474713][ T299] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.550787][ T719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.88'. [ 37.559998][ T716] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.87: Failed to acquire dquot type 0 [ 37.577952][ T719] device erspan0 entered promiscuous mode [ 37.614129][ T716] EXT4-fs error (device loop2): mb_free_blocks:1540: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 37.664686][ T716] EXT4-fs (loop2): 1 truncate cleaned up [ 37.670423][ T716] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,bsddf,,errors=continue [ 37.717467][ T716] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.87: Failed to acquire dquot type 0 [ 37.741389][ T710] binder: BINDER_SET_CONTEXT_MGR already set [ 37.757501][ T710] binder: 709:710 ioctl 4018620d 200000000040 returned -16 [ 37.765113][ T299] usb 4-1: Using ep0 maxpacket: 16 [ 37.884344][ T299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.935146][ T724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 37.944451][ T299] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 37.952215][ T299] usb 4-1: can't read configurations, error -71 [ 38.004350][ T336] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 38.058569][ T722] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 38.080639][ T722] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.090246][ T722] F2FS-fs (loop2): invalid crc value [ 38.097557][ T722] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 38.136624][ T722] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 38.143981][ T722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.244363][ T301] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.398270][ T727] attempt to access beyond end of device [ 38.398270][ T727] loop2: rw=2049, want=45104, limit=40427 [ 38.705992][ T336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 38.774396][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 38.874385][ T336] usb 6-1: New USB device found, idVendor=0644, idProduct=970e, bcdDevice= 0.40 [ 38.883470][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.894396][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.913033][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.924506][ T746] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.934555][ T336] usb 6-1: Product: syz [ 38.940549][ T746] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.943043][ T336] usb 6-1: Manufacturer: syz [ 38.950153][ T746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.94: Invalid inode table block 0 in block_group 0 [ 38.955014][ T301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.966416][ T746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 38.978301][ T336] usb 6-1: SerialNumber: syz [ 38.988202][ T746] EXT4-fs error (device loop2): ext4_quota_write:6655: inode #3: comm syz.2.94: mark_inode_dirty error [ 39.003579][ T746] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.94: Failed to acquire dquot type 0 [ 39.012396][ T301] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.015442][ T714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 39.025980][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.034555][ T15] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 39.046793][ T746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.94: Invalid inode table block 0 in block_group 0 [ 39.055817][ T301] usb 2-1: config 0 descriptor?? [ 39.061291][ T746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 39.074662][ T746] EXT4-fs error (device loop2): ext4_ext_truncate:4466: inode #15: comm syz.2.94: mark_inode_dirty error [ 39.086512][ T746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.94: Invalid inode table block 0 in block_group 0 [ 39.099775][ T746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 39.110262][ T746] EXT4-fs error (device loop2) in ext4_orphan_del:3292: Corrupt filesystem [ 39.119191][ T746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.94: Invalid inode table block 0 in block_group 0 [ 39.132287][ T746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 39.142146][ T746] EXT4-fs error (device loop2): ext4_truncate:4403: inode #15: comm syz.2.94: mark_inode_dirty error [ 39.153403][ T746] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 39.162718][ T746] EXT4-fs (loop2): 1 truncate cleaned up [ 39.168715][ T746] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 39.234656][ T751] udc-core: couldn't find an available UDC or it's busy [ 39.241840][ T751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.294345][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 39.332015][ T725] udc-core: couldn't find an available UDC or it's busy [ 39.339171][ T725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.347273][ T725] udc-core: couldn't find an available UDC or it's busy [ 39.354393][ T725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.362074][ T725] udc-core: couldn't find an available UDC or it's busy [ 39.369155][ T725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.376847][ T725] udc-core: couldn't find an available UDC or it's busy [ 39.383793][ T725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.391454][ T725] udc-core: couldn't find an available UDC or it's busy [ 39.398472][ T725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.454387][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 39.454705][ T336] usb 6-1: MIDIStreaming interface descriptor not found [ 39.471631][ T336] usb 6-1: USB disconnect, device number 3 [ 39.504523][ T301] usbhid 2-1:0.0: can't add hid device: -71 [ 39.504648][ T299] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.518225][ T301] usbhid: probe of 2-1:0.0 failed with error -71 [ 39.528275][ T301] usb 2-1: USB disconnect, device number 4 [ 39.534400][ T15] usb 5-1: config 3 has an invalid interface number: 142 but max is 1 [ 39.542663][ T15] usb 5-1: config 3 has an invalid interface number: 190 but max is 1 [ 39.551156][ T15] usb 5-1: config 3 has no interface number 0 [ 39.557456][ T15] usb 5-1: config 3 has no interface number 1 [ 39.563545][ T15] usb 5-1: config 3 interface 190 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 39.574237][ T15] usb 5-1: config 3 interface 190 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 39.585172][ T15] usb 5-1: config 3 interface 190 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 39.595948][ T15] usb 5-1: config 3 interface 190 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 39.606877][ T15] usb 5-1: config 3 interface 142 has no altsetting 0 [ 39.613644][ T15] usb 5-1: config 3 interface 190 has no altsetting 0 [ 39.684914][ T536] udevd[536]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.754419][ T299] usb 4-1: Using ep0 maxpacket: 32 [ 39.774460][ T15] usb 5-1: New USB device found, idVendor=12d1, idProduct=8bec, bcdDevice=29.74 [ 39.783649][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.791763][ T15] usb 5-1: Product: syz [ 39.796270][ T15] usb 5-1: Manufacturer: syz [ 39.801281][ T15] usb 5-1: SerialNumber: syz [ 39.874411][ T299] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 39.882666][ T299] usb 4-1: config 2 has no interface number 0 [ 39.888986][ T299] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 39.894665][ T301] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 39.900158][ T299] usb 4-1: config 2 interface 88 has no altsetting 0 [ 39.974379][ T307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.044920][ T739] udc-core: couldn't find an available UDC or it's busy [ 40.051994][ T739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.064443][ T299] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 40.073520][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 40.089139][ T299] usb 4-1: Product: syz [ 40.093381][ T299] usb 4-1: Manufacturer: syz [ 40.098167][ T299] usb 4-1: SerialNumber: syz [ 40.114451][ T750] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 40.194360][ T301] usb 2-1: device descriptor read/64, error -71 [ 40.204410][ T15] uvcvideo: Found UVC 0.00 device syz (12d1:8bec) [ 40.211118][ T15] uvcvideo: No valid video chain found. [ 40.220167][ T15] usb 5-1: USB disconnect, device number 5 [ 40.234426][ T5] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.354526][ T299] asix: probe of 4-1:2.88 failed with error -71 [ 40.364372][ T299] usb 4-1: USB disconnect, device number 6 [ 40.374456][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.454429][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.584359][ T301] usb 2-1: device descriptor read/64, error -71 [ 40.594510][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.605541][ T5] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.614772][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.628520][ T5] usb 6-1: config 0 descriptor?? [ 40.678726][ T770] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 2: comm syz.4.102: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.692882][ T770] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 48: comm syz.4.102: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.707052][ T307] usb 3-1: string descriptor 0 read error: -22 [ 40.707795][ T770] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.102: Failed to acquire dquot type 0 [ 40.713342][ T307] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 40.726541][ T770] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 40.733646][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.743495][ T770] EXT4-fs error (device loop4): ext4_evict_inode:285: inode #11: comm syz.4.102: mark_inode_dirty error [ 40.762619][ T770] EXT4-fs warning (device loop4): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 40.773152][ T770] EXT4-fs (loop4): 1 orphan inode deleted [ 40.778973][ T770] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 40.799835][ T479] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.816293][ T479] EXT4-fs error (device loop4): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 0 [ 40.884509][ T301] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 40.892621][ T479] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.909951][ T479] EXT4-fs error (device loop4): ext4_release_dquot:6266: comm kworker/u4:4: Failed to release dquot type 0 [ 40.922022][ T282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.935208][ T282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 40.944941][ T282] EXT4-fs error (device loop4): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 41.035088][ T307] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 41.047294][ T307] usb 3-1: USB disconnect, device number 6 [ 41.058706][ T776] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.3.103: corrupted xattr block 95 [ 41.080739][ T776] EXT4-fs (loop3): Remounting filesystem read-only [ 41.104387][ T776] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 41.124354][ T776] EXT4-fs error (device loop3): ext4_evict_inode:296: comm syz.3.103: couldn't truncate inode 11 (err -30) [ 41.139475][ T776] EXT4-fs (loop3): 1 orphan inode deleted [ 41.145472][ T776] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,errors=remount-ro, [ 41.157139][ T766] udc-core: couldn't find an available UDC or it's busy [ 41.164192][ T766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.178627][ T301] usb 2-1: device descriptor read/64, error -71 [ 41.181716][ T5] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 41.205849][ T775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.103'. [ 41.215849][ T5] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0001/input/input7 [ 41.244315][ T775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 41.255010][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.278360][ T775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 41.289157][ T775] netlink: 'syz.3.103': attribute type 8 has an invalid length. [ 41.308566][ T787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.103'. [ 41.319603][ T5] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 41.594380][ T301] usb 2-1: device descriptor read/64, error -71 [ 41.602328][ T791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.613492][ T766] incfs: Can't find or create .incomplete dir in . [ 41.620667][ T766] incfs: mount failed -28 [ 41.625242][ T791] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.636212][ T786] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 41.649702][ T786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.651688][ T53] usb 6-1: USB disconnect, device number 4 [ 41.677459][ T786] F2FS-fs (loop2): Invalid gid value -1 [ 41.714404][ T301] usb usb2-port1: attempt power cycle [ 41.765049][ T800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 41.795841][ T800] Zero length message leads to an empty skb [ 41.836186][ T783] F2FS-fs (loop4): invalid crc value [ 41.843431][ T783] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.881163][ T783] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 41.896457][ T783] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753 [ 41.903806][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 41.903818][ T24] audit: type=1400 audit(1783226709.900:507): avc: denied { setattr } for pid=782 comm="syz.4.104" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.932788][ T783] F2FS-fs (loop4): sanity_check_inode: inode (ino=8) is with extra_attr, but extra_attr feature is off [ 42.054357][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.124339][ T301] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 42.136578][ T809] device syzkaller0 entered promiscuous mode [ 42.290324][ T24] audit: type=1400 audit(1783226710.290:508): avc: denied { unlink } for pid=816 comm="syz.5.112" name="#1" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.312330][ T301] usb 2-1: device descriptor read/8, error -71 [ 42.318646][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 42.337438][ T24] audit: type=1400 audit(1783226710.330:509): avc: denied { unmount } for pid=589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.504376][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.534479][ T301] usb 2-1: device descriptor read/8, error -71 [ 42.625008][ T837] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 42.643356][ T840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.119'. [ 42.662327][ T840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.119'. [ 42.688371][ T24] audit: type=1400 audit(1783226710.690:510): avc: denied { mount } for pid=844 comm="syz.3.118" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.717386][ T24] audit: type=1400 audit(1783226710.710:511): avc: denied { search } for pid=844 comm="syz.3.118" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.740232][ T24] audit: type=1400 audit(1783226710.710:512): avc: denied { read } for pid=844 comm="syz.3.118" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.769789][ T809] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 42.779292][ T24] audit: type=1400 audit(1783226710.710:513): avc: denied { open } for pid=844 comm="syz.3.118" path="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.785264][ T809] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.801828][ T24] audit: type=1400 audit(1783226710.710:514): avc: denied { setattr } for pid=844 comm="syz.3.118" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.831950][ T25] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 42.844089][ T809] F2FS-fs (loop4): invalid crc value [ 42.880978][ T851] erofs: (device loop5): mounted with root inode @ nid 36. [ 42.899152][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.915265][ T809] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.942290][ T25] usb 3-1: Product: syz [ 42.958488][ T25] usb 3-1: Manufacturer: syz [ 42.983846][ T24] audit: type=1400 audit(1783226710.720:515): avc: denied { write } for pid=844 comm="syz.3.118" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.006350][ T25] usb 3-1: SerialNumber: syz [ 43.045551][ T24] audit: type=1400 audit(1783226710.940:516): avc: denied { mmap_zero } for pid=850 comm="syz.5.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 43.066128][ T809] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.073192][ T809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 43.074435][ T591] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.101652][ T809] tipc: Started in network mode [ 43.174670][ T809] tipc: Own node identity 7267664c773c, cluster identity 4711 [ 43.184727][ T809] tipc: Enabled bearer , priority 0 [ 43.208812][ T809] tipc: Resetting bearer [ 43.216122][ T809] tipc: Disabling bearer [ 43.265988][ T802] udc-core: couldn't find an available UDC or it's busy [ 43.283499][ T802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.300232][ T868] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 43.301724][ T802] udc-core: couldn't find an available UDC or it's busy [ 43.344167][ T802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.352595][ T870] netlink: 112 bytes leftover after parsing attributes in process `syz.1.125'. [ 43.365962][ T802] udc-core: couldn't find an available UDC or it's busy [ 43.372962][ T802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.380513][ T870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.125'. [ 43.391048][ T802] udc-core: couldn't find an available UDC or it's busy [ 43.398380][ T802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.406307][ T802] udc-core: couldn't find an available UDC or it's busy [ 43.413548][ T868] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=868 comm=syz.1.125 [ 43.444363][ T802] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.494595][ T591] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.514393][ T591] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.574566][ T25] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 43.624489][ T25] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 43.677786][ T25] usb 3-1: USB disconnect, device number 7 [ 43.807111][ T882] FAT-fs (loop5): Unrecognized mount option "./binderfs/binder0" or missing value [ 43.933807][ T881] binder: BINDER_SET_CONTEXT_MGR already set [ 43.939986][ T881] binder: 874:881 ioctl 4018620d 200000004a80 returned -16 [ 43.949517][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.034461][ T591] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.049741][ T591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.064113][ T887] binder: 886:887 ioctl c018620c 200000001fc0 returned -22 [ 44.073672][ T591] usb 4-1: Product: syz [ 44.085110][ T591] usb 4-1: Manufacturer: syz [ 44.095465][ T591] usb 4-1: SerialNumber: syz [ 44.144854][ T591] cdc_ncm 4-1:1.0: skipping garbage [ 44.151210][ T591] cdc_ncm 4-1:1.0: bind() failure [ 44.162541][ T591] cdc_ncm 4-1:1.1: bind() failure [ 44.219806][ T885] F2FS-fs (loop1): invalid crc value [ 44.243984][ T885] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.371722][ T885] F2FS-fs (loop1): Start checkpoint disabled! [ 44.397295][ T885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.663097][ T897] F2FS-fs (loop2): invalid crc value [ 44.671117][ T897] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.682313][ T885] overlayfs: './file0' not a directory [ 44.724360][ T301] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 44.743591][ T897] F2FS-fs (loop2): Start checkpoint disabled! [ 44.764831][ T7] attempt to access beyond end of device [ 44.764831][ T7] loop1: rw=2049, want=40984, limit=40427 [ 44.776138][ T897] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 44.859465][ T686] usb 4-1: USB disconnect, device number 8 [ 45.021317][ T925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 45.037849][ T925] device ip6gre1 entered promiscuous mode [ 45.059051][ T301] usb 6-1: Using ep0 maxpacket: 16 [ 45.085531][ T925] netlink: 'syz.2.133': attribute type 6 has an invalid length. [ 45.093376][ T925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'. [ 45.192231][ T922] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 45.192231][ T922] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.192231][ T922] [ 45.345760][ T922] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,nouser_xattr,abort,init_itable,nodioread_nolock,,errors=continue [ 45.384433][ T301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.419474][ T922] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.430515][ T301] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.483031][ T301] usb 6-1: config 0 interface 0 has no altsetting 0 [ 45.521301][ T301] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.532448][ T940] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.579416][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.616311][ T301] usb 6-1: config 0 descriptor?? [ 45.622983][ T940] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.691565][ T944] mmap: syz.4.141 (944): VmData 29335552 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 45.737567][ T940] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.782660][ T942] tipc: Enabled bearer , priority 0 [ 45.805573][ T942] tipc: Disabling bearer [ 45.823538][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /28/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 45.849218][ T7] attempt to access beyond end of device [ 45.849218][ T7] loop2: rw=2049, want=40976, limit=40427 [ 45.861837][ T940] overlayfs: filesystem on './file0' not supported as upperdir [ 45.881312][ T940] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 45.898161][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /28/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 45.927474][ T279] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 45.948675][ T934] F2FS-fs (loop1): invalid crc value [ 45.950290][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /28/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 45.969607][ T934] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.977278][ T279] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 46.005035][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /28/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 46.039859][ T934] F2FS-fs (loop1): Start checkpoint disabled! [ 46.046774][ T934] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 46.055379][ T279] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 46.074869][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /28/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 46.101247][ T949] erofs: (device loop4): mounted with root inode @ nid 36. [ 46.121111][ T279] EXT4-fs error (device loop3): ext4_empty_dir:3115: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 46.150646][ T913] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 46.174472][ T279] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /28/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 46.196522][ T949] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 46.211126][ T952] attempt to access beyond end of device [ 46.211126][ T952] loop1: rw=2049, want=80776, limit=40427 [ 46.222730][ T949] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=overlay ino=3 [ 46.308306][ T954] input: syz1 as /devices/virtual/input/input8 [ 46.429620][ T7] attempt to access beyond end of device [ 46.429620][ T7] loop1: rw=1, want=81920, limit=40427 [ 46.448601][ T7] attempt to access beyond end of device [ 46.448601][ T7] loop1: rw=1, want=53248, limit=40427 [ 46.457851][ T953] F2FS-fs (loop2): invalid crc value [ 46.467295][ T301] usbhid 6-1:0.0: can't add hid device: -71 [ 46.473332][ T301] usbhid: probe of 6-1:0.0 failed with error -71 [ 46.502272][ T7] attempt to access beyond end of device [ 46.502272][ T7] loop1: rw=1, want=69632, limit=40427 [ 46.527488][ T7] attempt to access beyond end of device [ 46.527488][ T7] loop1: rw=1, want=69640, limit=40427 [ 46.541233][ T301] usb 6-1: USB disconnect, device number 5 [ 46.563204][ T7] attempt to access beyond end of device [ 46.563204][ T7] loop1: rw=1, want=69648, limit=40427 [ 46.564664][ T953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.574919][ T7] attempt to access beyond end of device [ 46.574919][ T7] loop1: rw=1, want=69656, limit=40427 [ 46.592269][ T7] attempt to access beyond end of device [ 46.592269][ T7] loop1: rw=1, want=69664, limit=40427 [ 46.663724][ T953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.809795][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.821888][ T958] F2FS-fs (loop4): invalid crc value [ 46.846307][ T958] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.861468][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.875712][ T971] device bridge_slave_0 entered promiscuous mode [ 46.904464][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.911746][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.930903][ T958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.947786][ T971] device bridge_slave_1 entered promiscuous mode [ 46.956158][ T983] bridge0: port 3(gretap1) entered blocking state [ 46.962607][ T983] bridge0: port 3(gretap1) entered disabled state [ 46.992026][ T983] device gretap1 entered promiscuous mode [ 47.075302][ T985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 47.088467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.096032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.118588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.127037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.135419][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.142498][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.150239][ T983] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #4: comm syz.2.150: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 47.168281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.184574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.194634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.202871][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.209963][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.218674][ T983] EXT4-fs error (device loop2): ext4_quota_enable:6454: comm syz.2.150: Bad quota inode: 4, type: 1 [ 47.230958][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 47.230972][ T24] audit: type=1400 audit(1783226715.220:527): avc: denied { unlink } for pid=280 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.275038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.281595][ T983] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.286478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.300768][ T983] EXT4-fs (loop2): mount failed [ 47.311210][ T24] audit: type=1400 audit(1783226715.220:528): avc: denied { unlink } for pid=280 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 47.343363][ T971] device veth0_vlan entered promiscuous mode [ 47.351537][ T479] device bridge_slave_1 left promiscuous mode [ 47.357989][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.366105][ T479] device bridge_slave_0 left promiscuous mode [ 47.372367][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.380776][ T479] device veth1_macvtap left promiscuous mode [ 47.387813][ T479] device veth0_vlan left promiscuous mode [ 47.459323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.468020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.476902][ T982] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 47.484144][ T982] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 47.490370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.501410][ T982] F2FS-fs (loop5): invalid crc value [ 47.508333][ T24] audit: type=1400 audit(1783226715.510:529): avc: denied { setopt } for pid=1001 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.525880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.532548][ T1002] binder: 1001:1002 ioctl 4018620d 0 returned -22 [ 47.549549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.562382][ T1002] binder: 1001:1002 ioctl c0046209 0 returned -22 [ 47.569415][ T982] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.569849][ T24] audit: type=1400 audit(1783226715.570:530): avc: denied { ioctl } for pid=1001 comm="syz.2.154" path="socket:[17760]" dev="sockfs" ino=17760 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.583280][ T971] device veth1_macvtap entered promiscuous mode [ 47.653072][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.663458][ T982] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 47.670608][ T982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 47.677358][ T24] audit: type=1400 audit(1783226715.670:531): avc: denied { append } for pid=1012 comm="syz.4.156" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.714319][ T301] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.730288][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.744804][ T24] audit: type=1400 audit(1783226715.740:532): avc: denied { mounton } for pid=971 comm="syz-executor" path="/root/syzkaller.mSQcCX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.177693][ T1018] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,resgid=0x0000000000000000,barrier,noload,nojournal_checksum,quota,,errors=continue [ 48.274344][ T301] usb 2-1: Using ep0 maxpacket: 32 [ 48.351460][ T1021] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 48.364587][ T1021] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 48.374324][ T1018] binder: BINDER_SET_CONTEXT_MGR already set [ 48.380459][ T1018] binder: 1014:1018 ioctl 4018620d 200000000040 returned -16 [ 48.389383][ T1021] F2FS-fs (loop4): Found nat_bits in checkpoint [ 48.395924][ T301] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.404029][ T301] usb 2-1: config 0 has no interface number 0 [ 48.425410][ T1024] F2FS-fs (loop6): invalid crc value [ 48.463557][ T1024] F2FS-fs (loop6): Found nat_bits in checkpoint [ 48.541916][ T1021] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 48.553817][ T1021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.561599][ T1024] F2FS-fs (loop6): Start checkpoint disabled! [ 48.582100][ T1024] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 48.644582][ T301] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 48.664568][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.672696][ T301] usb 2-1: Product: syz [ 48.694363][ T301] usb 2-1: Manufacturer: syz [ 48.699143][ T301] usb 2-1: SerialNumber: syz [ 48.737909][ T301] usb 2-1: config 0 descriptor?? [ 48.748468][ T1051] netlink: 9 bytes leftover after parsing attributes in process `syz.6.149'. [ 48.774888][ T301] smsc95xx v2.0.0 [ 48.780880][ T1051] device gretap0 entered promiscuous mode [ 48.793700][ T1024] netlink: 5 bytes leftover after parsing attributes in process `syz.6.149'. [ 48.803726][ T1024] 0ªî{X¹¦: renamed from gretap0 [ 48.809669][ T1024] device 30ªî{X¹¦ left promiscuous mode [ 48.816622][ T1024] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 48.847898][ T1038] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 48.872861][ T1038] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 48.884355][ T53] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.892929][ T1038] F2FS-fs (loop5): invalid crc value [ 48.915687][ T1038] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 48.947612][ T1038] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 48.955009][ T1038] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 49.111414][ T1060] fuse: Bad value for 'fd' [ 49.116519][ T24] audit: type=1400 audit(1783226717.120:533): avc: denied { write } for pid=1059 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.134569][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 49.141042][ T24] audit: type=1400 audit(1783226717.140:534): avc: denied { create } for pid=1059 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.160935][ T24] audit: type=1400 audit(1783226717.140:535): avc: denied { connect } for pid=1059 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.180990][ T1053] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 49.214167][ T1053] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.231562][ T1053] F2FS-fs (loop2): invalid crc value [ 49.240288][ T1053] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 49.254461][ T53] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 49.273327][ T53] usb 5-1: config 0 has no interface number 0 [ 49.279560][ T53] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 49.289706][ T53] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 49.299823][ T53] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 49.310095][ T53] usb 5-1: config 0 interface 196 has no altsetting 0 [ 49.317905][ T1053] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.325373][ T1053] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.334502][ T1053] FAULT_INJECTION: forcing a failure. [ 49.334502][ T1053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.348726][ T1053] CPU: 1 PID: 1053 Comm: syz.2.163 Not tainted syzkaller #0 [ 49.356045][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 49.366297][ T1053] Call Trace: [ 49.369638][ T1053] __dump_stack+0x21/0x24 [ 49.374076][ T1053] dump_stack_lvl+0x1a7/0x208 [ 49.378786][ T1053] ? thaw_kernel_threads+0x220/0x220 [ 49.384094][ T1053] ? vsnprintf+0x189d/0x1990 [ 49.388702][ T1053] ? show_regs_print_info+0x18/0x18 [ 49.393912][ T1053] dump_stack+0x15/0x1c [ 49.398074][ T1053] should_fail+0x3ab/0x500 [ 49.402515][ T1053] should_fail_usercopy+0x1a/0x20 [ 49.407644][ T1053] _copy_to_user+0x20/0x90 [ 49.412073][ T1053] simple_read_from_buffer+0xe9/0x160 [ 49.417543][ T1053] proc_fail_nth_read+0x1a6/0x220 [ 49.422578][ T1053] ? proc_fault_inject_write+0x310/0x310 [ 49.428218][ T1053] ? rw_verify_area+0x1c0/0x360 [ 49.433080][ T1053] ? proc_fault_inject_write+0x310/0x310 [ 49.438726][ T1053] vfs_read+0x209/0xa50 [ 49.442890][ T1053] ? kernel_read+0x70/0x70 [ 49.447318][ T1053] ? __kasan_check_write+0x14/0x20 [ 49.452459][ T1053] ? mutex_lock+0x92/0xf0 [ 49.456804][ T1053] ? mutex_trylock+0xb0/0xb0 [ 49.461441][ T1053] ? __fget_files+0x2e1/0x340 [ 49.466135][ T1053] ? __fdget_pos+0x2d2/0x380 [ 49.470995][ T1053] ? ksys_read+0x70/0x260 [ 49.475338][ T1053] ksys_read+0x14a/0x260 [ 49.479598][ T1053] ? vfs_write+0xd70/0xd70 [ 49.484024][ T1053] ? debug_smp_processor_id+0x17/0x20 [ 49.489499][ T1053] __x64_sys_read+0x7b/0x90 [ 49.494012][ T1053] do_syscall_64+0x31/0x40 [ 49.498436][ T1053] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.504338][ T1053] RIP: 0033:0x7f74550c068e [ 49.508795][ T1053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.528419][ T1053] RSP: 002b:00007f7453b58fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.536848][ T1053] RAX: ffffffffffffffda RBX: 00007f7453b596c0 RCX: 00007f74550c068e [ 49.544916][ T1053] RDX: 000000000000000f RSI: 00007f7453b590a0 RDI: 0000000000000006 [ 49.552931][ T1053] RBP: 00007f7453b59090 R08: 0000000000000000 R09: 0000000000000000 [ 49.560916][ T1053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.569069][ T1053] R13: 00007f7455388038 R14: 00007f7455387fa0 R15: 00007ffc695bfcb8 [ 49.636735][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.167'. [ 49.671155][ T1076] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 49.704436][ T53] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 49.713597][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.722380][ T53] usb 5-1: Product: syz [ 49.726750][ T53] usb 5-1: Manufacturer: syz [ 49.731360][ T53] usb 5-1: SerialNumber: syz [ 49.734450][ T686] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.745362][ T53] usb 5-1: config 0 descriptor?? [ 49.764373][ T1021] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 49.789818][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.170'. [ 49.804441][ T301] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 49.859842][ T1091] tmpfs: Unknown parameter 'quota' [ 49.958245][ T1085] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 49.984103][ T1085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.993943][ T24] audit: type=1400 audit(1783226717.990:536): avc: denied { create } for pid=1020 comm="syz.4.158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.014320][ T686] usb 7-1: Using ep0 maxpacket: 16 [ 50.015117][ T999] udc-core: couldn't find an available UDC or it's busy [ 50.026526][ T1085] F2FS-fs (loop2): invalid crc value [ 50.036752][ T1106] udc-core: couldn't find an available UDC or it's busy [ 50.038295][ T999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 50.051516][ T1106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 50.059675][ T1085] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 50.064731][ T301] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 50.086351][ T301] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 50.097020][ T301] usb 2-1: USB disconnect, device number 9 [ 50.107840][ T1085] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.115013][ T1085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.144366][ T53] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 50.151862][ T53] ipheth: probe of 5-1:0.196 failed with error -71 [ 50.165559][ T53] usb 5-1: USB disconnect, device number 6 [ 50.244379][ T686] usb 7-1: unable to get BOS descriptor or descriptor too short [ 50.344499][ T307] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 50.352508][ T686] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 50.418295][ T1104] handle_bad_sector: 1512 callbacks suppressed [ 50.418309][ T1104] attempt to access beyond end of device [ 50.418309][ T1104] loop2: rw=2049, want=45104, limit=40427 [ 50.470916][ T1118] binder: BINDER_SET_CONTEXT_MGR already set [ 50.477192][ T1118] binder: 1117:1118 ioctl 4018620d 2000000002c0 returned -16 [ 50.553772][ T1118] binder: 1117:1118 ioctl c0306201 0 returned -14 [ 50.614424][ T686] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 50.635076][ T686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.648351][ T686] usb 7-1: Product: syz [ 50.652563][ T686] usb 7-1: Manufacturer: syz [ 50.658440][ T1125] process 'syz.2.181' launched './file2' with NULL argv: empty string added [ 50.667403][ T686] usb 7-1: SerialNumber: syz [ 50.700131][ T1133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.187'. [ 50.844403][ T307] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 50.852763][ T307] usb 6-1: config 0 has no interface number 0 [ 50.925260][ T686] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 50.933783][ T686] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 50.944626][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 51.054435][ T307] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 51.063696][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.072024][ T307] usb 6-1: Product: syz [ 51.076560][ T307] usb 6-1: Manufacturer: syz [ 51.081255][ T307] usb 6-1: SerialNumber: syz [ 51.091215][ T307] usb 6-1: config 0 descriptor?? [ 51.182876][ T1073] EXT4-fs (loop6): Test dummy encryption mode enabled [ 51.184419][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 51.205063][ T1073] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 51.219560][ T1073] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.240524][ T1073] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 51.250734][ T1073] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 51.284445][ T686] usb 7-1: 2:1 : can't get High Capability descriptor [ 51.314395][ T53] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 51.324875][ T53] usb 5-1: config 0 has no interface number 0 [ 51.344336][ T53] usb 5-1: config 0 interface 184 has no altsetting 0 [ 51.487776][ T307] usb 7-1: USB disconnect, device number 2 [ 51.504463][ T53] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 51.513894][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.522815][ T53] usb 5-1: Product: syz [ 51.527345][ T53] usb 5-1: Manufacturer: syz [ 51.532037][ T53] usb 5-1: SerialNumber: syz [ 51.542704][ T53] usb 5-1: config 0 descriptor?? [ 51.584976][ T53] smsc75xx v1.0.0 [ 51.874391][ T686] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 51.914369][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 52.114378][ T686] usb 3-1: Using ep0 maxpacket: 32 [ 52.184359][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 52.244465][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 52.255460][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 52.274371][ T686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.324411][ T301] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.344428][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.354555][ T686] usb 3-1: config 14 has an invalid interface number: 228 but max is 0 [ 52.363223][ T686] usb 3-1: config 14 has no interface number 0 [ 52.369479][ T686] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 52.380613][ T686] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 52.392057][ T686] usb 3-1: config 14 interface 228 has no altsetting 0 [ 52.424376][ T793] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 52.432703][ T793] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 52.441013][ T793] usb 2-1: config 14 has no interface number 0 [ 52.447353][ T793] usb 2-1: config 14 has no interface number 1 [ 52.453528][ T793] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 52.464343][ T793] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 52.475142][ T793] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 52.486577][ T793] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.499888][ T793] usb 2-1: config 14 interface 57 has no altsetting 0 [ 52.506744][ T793] usb 2-1: config 14 interface 228 has no altsetting 0 [ 52.554414][ T686] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 52.563618][ T686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.571739][ T686] usb 3-1: Product: syz [ 52.576029][ T686] usb 3-1: Manufacturer: syz [ 52.580912][ T686] usb 3-1: SerialNumber: syz [ 52.684464][ T793] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 52.693568][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.701637][ T793] usb 2-1: Product: syz [ 52.705978][ T301] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.716270][ T793] usb 2-1: Manufacturer: syz [ 52.720868][ T793] usb 2-1: SerialNumber: syz [ 52.725633][ T301] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 52.735013][ T301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.743992][ T301] usb 7-1: config 0 descriptor?? [ 53.005993][ T305] usb 6-1: USB disconnect, device number 6 [ 53.504526][ T305] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 53.744341][ T305] usb 6-1: Using ep0 maxpacket: 32 [ 53.814425][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 53.825533][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 53.835255][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 53.844731][ T53] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 53.852470][ T53] usb 5-1: USB disconnect, device number 7 [ 53.864456][ T305] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.875564][ T305] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 53.885764][ T305] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 64 [ 53.895665][ T305] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 53.909900][ T305] usb 6-1: config 1 interface 0 has no altsetting 0 [ 53.994416][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.003557][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.011845][ T305] usb 6-1: SerialNumber: syz [ 54.034413][ T1182] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 54.041423][ T1182] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 54.054672][ T305] hub 6-1:1.0: bad descriptor, ignoring hub [ 54.060653][ T305] hub: probe of 6-1:1.0 failed with error -5 [ 54.066901][ T305] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 54.274850][ T305] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 54.304862][ T305] usb 6-1: USB disconnect, device number 7 [ 54.349053][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 54.349066][ T24] audit: type=1400 audit(1783226722.350:545): avc: denied { write } for pid=1194 comm="syz.4.209" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.398076][ T1199] binder: binder_mmap: 1198 0-1000 bad vm_flags failed -1 [ 54.480286][ T1212] device batadv_slave_0 entered promiscuous mode [ 54.487339][ T1211] device batadv_slave_0 left promiscuous mode [ 54.784345][ T301] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.968614][ T305] usb 3-1: USB disconnect, device number 8 [ 54.981042][ T1225] netlink: 72 bytes leftover after parsing attributes in process `syz.2.223'. [ 55.009876][ T24] audit: type=1400 audit(1783226723.010:546): avc: denied { create } for pid=1228 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.029978][ T24] audit: type=1400 audit(1783226723.010:547): avc: denied { write } for pid=1228 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.050292][ T24] audit: type=1400 audit(1783226723.010:548): avc: denied { read } for pid=1228 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.073486][ T53] usb 7-1: USB disconnect, device number 3 [ 55.184424][ T301] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 55.193627][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.202658][ T301] usb 5-1: config 0 descriptor?? [ 55.320206][ T24] audit: type=1400 audit(1783226723.320:549): avc: denied { transfer } for pid=1239 comm="syz.5.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.349969][ T53] usb 2-1: USB disconnect, device number 10 [ 55.375598][ T24] audit: type=1400 audit(1783226723.380:550): avc: denied { name_bind } for pid=1245 comm="syz.1.233" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.624319][ T305] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 55.865685][ T305] usb 6-1: Using ep0 maxpacket: 32 [ 55.874344][ T53] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.024358][ T305] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.104441][ T305] usb 6-1: config 24 has an invalid interface number: 245 but max is 0 [ 56.112838][ T305] usb 6-1: config 24 has no interface number 0 [ 56.112862][ T305] usb 6-1: config 24 interface 245 has no altsetting 0 [ 56.126584][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 56.154326][ T301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 56.244345][ T53] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 56.244358][ T53] usb 2-1: config 0 has no interface number 0 [ 56.244382][ T53] usb 2-1: config 0 interface 184 has no altsetting 0 [ 56.266086][ T305] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=8f.48 [ 56.266097][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.266104][ T305] usb 6-1: Product: syz [ 56.266111][ T305] usb 6-1: Manufacturer: syz [ 56.266118][ T305] usb 6-1: SerialNumber: syz [ 56.404439][ T53] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 56.404456][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.404467][ T53] usb 2-1: Product: syz [ 56.404478][ T53] usb 2-1: Manufacturer: syz [ 56.404488][ T53] usb 2-1: SerialNumber: syz [ 56.406343][ T53] usb 2-1: config 0 descriptor?? [ 56.440537][ T301] usb 3-1: Using ep0 maxpacket: 8 [ 56.484914][ T53] smsc75xx v1.0.0 [ 56.517434][ T686] usb 5-1: USB disconnect, device number 8 [ 56.551628][ T24] audit: type=1400 audit(1783226724.550:551): avc: denied { append } for pid=1267 comm="syz.4.242" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.581736][ T24] audit: type=1400 audit(1783226724.580:552): avc: denied { setopt } for pid=1269 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.584824][ T301] usb 3-1: config 0 has no interfaces? [ 56.607233][ T301] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 56.607249][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.608143][ T301] usb 3-1: config 0 descriptor?? [ 56.624678][ T305] usb 6-1: USB disconnect, device number 8 [ 56.859795][ T301] usb 3-1: USB disconnect, device number 9 [ 56.950892][ T24] audit: type=1400 audit(1783226724.950:553): avc: denied { ioctl } for pid=1283 comm="syz.6.250" path="socket:[18989]" dev="sockfs" ino=18989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.993678][ T24] audit: type=1400 audit(1783226724.990:554): avc: denied { sys_module } for pid=1287 comm="syz.6.252" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.054424][ T686] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.114395][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 57.125509][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.294361][ T305] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.294370][ T336] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 57.309417][ T686] usb 5-1: Using ep0 maxpacket: 32 [ 57.474463][ T686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.544321][ T336] usb 6-1: Using ep0 maxpacket: 16 [ 57.554467][ T686] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 57.562863][ T686] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 57.571507][ T686] usb 5-1: config 14 has no interface number 0 [ 57.577976][ T686] usb 5-1: config 14 has no interface number 1 [ 57.584193][ T686] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 57.596327][ T305] usb 7-1: device descriptor read/64, error -71 [ 57.608960][ T686] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 57.620075][ T686] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 57.631799][ T686] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.645395][ T686] usb 5-1: config 14 interface 57 has no altsetting 0 [ 57.652248][ T686] usb 5-1: config 14 interface 228 has no altsetting 0 [ 57.684385][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.695382][ T336] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 57.704583][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.713342][ T336] usb 6-1: config 0 descriptor?? [ 57.814423][ T686] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 57.823648][ T686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.832057][ T686] usb 5-1: Product: syz [ 57.836654][ T686] usb 5-1: Manufacturer: syz [ 57.841307][ T686] usb 5-1: SerialNumber: syz [ 57.984446][ T305] usb 7-1: device descriptor read/64, error -71 [ 58.196089][ T336] hid-generic 0003:04D8:00DD.0002: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 58.264374][ T305] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.544381][ T305] usb 7-1: device descriptor read/64, error -71 [ 58.584371][ T336] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 58.596038][ T793] usb 6-1: USB disconnect, device number 9 [ 58.684411][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 58.695523][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 58.705757][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 58.715276][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 58.724738][ T53] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 58.732647][ T53] usb 2-1: USB disconnect, device number 11 [ 58.824354][ T336] usb 3-1: Using ep0 maxpacket: 8 [ 58.934340][ T305] usb 7-1: device descriptor read/64, error -71 [ 58.944444][ T336] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.954324][ T336] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.964050][ T336] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 58.975061][ T336] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.988117][ T336] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.997351][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.054402][ T305] usb usb7-port1: attempt power cycle [ 59.106763][ T1305] udc-core: couldn't find an available UDC or it's busy [ 59.113839][ T1305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.464348][ T305] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.604346][ T900] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 59.634368][ T305] usb 7-1: device descriptor read/8, error -71 [ 59.787008][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 59.787023][ T24] audit: type=1400 audit(1783226727.790:556): avc: denied { ioctl } for pid=1337 comm="syz.1.273" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.904481][ T305] usb 7-1: device descriptor read/8, error -71 [ 59.984481][ T900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.995406][ T900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 60.017802][ T1366] binder: 1365:1366 ioctl c0306201 200000000080 returned -14 [ 60.030914][ T1366] binder: 1365:1366 ioctl c0306201 2000000003c0 returned -14 [ 60.164419][ T900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.173679][ T900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.181982][ T900] usb 6-1: Product: syz [ 60.186488][ T900] usb 6-1: Manufacturer: syz [ 60.191159][ T900] usb 6-1: SerialNumber: syz [ 60.234845][ T900] cdc_mbim 6-1:1.0: skipping garbage [ 60.384597][ T307] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 60.394431][ T305] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 60.490333][ T686] usb 5-1: USB disconnect, device number 9 [ 60.664442][ T307] usb 2-1: no configurations [ 60.669257][ T307] usb 2-1: can't read configurations, error -22 [ 60.764386][ T305] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 60.777899][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.794315][ T305] usb 7-1: Product: syz [ 60.802901][ T305] usb 7-1: Manufacturer: syz [ 60.812990][ T305] usb 7-1: SerialNumber: syz [ 60.827111][ T307] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 60.835029][ T305] usb 7-1: config 0 descriptor?? [ 60.977648][ T1386] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.295'. [ 61.124569][ T307] usb 2-1: no configurations [ 61.129449][ T307] usb 2-1: can't read configurations, error -22 [ 61.136073][ T307] usb usb2-port1: attempt power cycle [ 61.274340][ T305] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 61.329243][ T686] usb 3-1: USB disconnect, device number 10 [ 61.335336][ T900] cdc_mbim 6-1:1.0: bind() failure [ 61.346027][ T900] usb 6-1: USB disconnect, device number 10 [ 61.514318][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 61.544336][ T307] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 61.634423][ T305] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 61.643043][ T305] usb 5-1: config 0 has no interface number 0 [ 61.649375][ T305] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 61.659700][ T305] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 61.674413][ T307] usb 2-1: no configurations [ 61.679058][ T307] usb 2-1: can't read configurations, error -22 [ 61.754323][ T686] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.824487][ T305] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 61.834332][ T307] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 61.845373][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.853664][ T305] usb 5-1: Product: syz [ 61.858534][ T305] usb 5-1: Manufacturer: syz [ 61.863280][ T305] usb 5-1: SerialNumber: syz [ 61.873894][ T305] usb 5-1: config 0 descriptor?? [ 61.904450][ T1388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.912261][ T1388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.964472][ T307] usb 2-1: no configurations [ 61.969311][ T307] usb 2-1: can't read configurations, error -22 [ 61.976116][ T307] usb usb2-port1: unable to enumerate USB device [ 61.994307][ T686] usb 3-1: Using ep0 maxpacket: 32 [ 62.114376][ T686] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 62.123539][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.132759][ T1388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.144649][ T1388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.155373][ T686] usb 3-1: config 0 descriptor?? [ 62.164883][ T900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 62.178159][ T5] usb 7-1: USB disconnect, device number 7 [ 62.384424][ T305] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 62.414371][ T900] usb 6-1: Using ep0 maxpacket: 8 [ 62.694352][ T5] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.702077][ T900] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 62.711251][ T900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.719528][ T900] usb 6-1: Product: syz [ 62.723775][ T900] usb 6-1: Manufacturer: syz [ 62.728589][ T900] usb 6-1: SerialNumber: syz [ 62.735399][ T900] usb 6-1: config 0 descriptor?? [ 62.977049][ T53] usb 6-1: USB disconnect, device number 11 [ 63.064370][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.075378][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.085415][ T5] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 63.094717][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.117635][ T5] usb 7-1: config 0 descriptor?? [ 63.158010][ T24] audit: type=1400 audit(1783226731.160:557): avc: denied { bind } for pid=1416 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.177556][ T24] audit: type=1400 audit(1783226731.160:558): avc: denied { setopt } for pid=1416 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.197198][ T24] audit: type=1400 audit(1783226731.160:559): avc: denied { ioctl } for pid=1416 comm="syz.1.308" path="socket:[18420]" dev="sockfs" ino=18420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.471899][ T686] usb 3-1: USB disconnect, device number 11 [ 63.584358][ T900] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.595721][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.603328][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.611087][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.618772][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.626512][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.634198][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.641965][ T5] hid-generic 0003:044F:B65D.0003: unknown main item tag 0x0 [ 63.650528][ T5] hid-generic 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 63.796215][ T53] usb 7-1: USB disconnect, device number 8 [ 63.824418][ T307] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 63.984496][ T686] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 64.104430][ T900] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 64.113689][ T900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.121795][ T900] usb 2-1: Product: syz [ 64.126119][ T900] usb 2-1: Manufacturer: syz [ 64.130731][ T900] usb 2-1: SerialNumber: syz [ 64.136477][ T900] usb 2-1: config 0 descriptor?? [ 64.184403][ T307] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.194682][ T307] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.203719][ T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.212821][ T307] usb 6-1: config 0 descriptor?? [ 64.224351][ T686] usb 3-1: Using ep0 maxpacket: 16 [ 64.344665][ T686] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 64.352923][ T686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.363310][ T686] usb 3-1: config 0 has no interface number 0 [ 64.369474][ T686] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.378260][ T53] usb 2-1: USB disconnect, device number 16 [ 64.382514][ T686] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 64.398071][ T305] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 64.408202][ T305] asix: probe of 5-1:0.34 failed with error -32 [ 64.414497][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.423981][ T686] usb 3-1: config 0 descriptor?? [ 64.464958][ T686] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 64.584374][ T307] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 64.944539][ T307] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 64.953714][ T307] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 65.114406][ T307] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 65.123545][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.131596][ T307] usb 7-1: Product: syz [ 65.135828][ T307] usb 7-1: Manufacturer: syz [ 65.140546][ T307] usb 7-1: SerialNumber: syz [ 65.145873][ T307] usb 7-1: config 0 descriptor?? [ 65.224403][ T53] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 65.409083][ T307] usb 5-1: USB disconnect, device number 10 [ 65.464424][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 65.624378][ T53] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.704377][ T53] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 65.712869][ T53] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 65.721218][ T53] usb 2-1: config 14 has no interface number 0 [ 65.727447][ T53] usb 2-1: config 14 has no interface number 1 [ 65.733654][ T53] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 65.744760][ T53] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 65.755591][ T53] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 65.766963][ T53] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.780132][ T53] usb 2-1: config 14 interface 57 has no altsetting 0 [ 65.787072][ T53] usb 2-1: config 14 interface 228 has no altsetting 0 [ 65.944400][ T53] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 65.953557][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.961606][ T53] usb 2-1: Product: syz [ 65.965845][ T53] usb 2-1: Manufacturer: syz [ 65.970448][ T53] usb 2-1: SerialNumber: syz [ 66.313923][ T1467] kvm: pic: non byte write [ 66.450921][ T336] usb 7-1: USB disconnect, device number 9 [ 66.568815][ T793] usb 6-1: USB disconnect, device number 12 [ 66.584863][ T301] usb 3-1: USB disconnect, device number 12 [ 66.595584][ T24] audit: type=1400 audit(1783226734.600:560): avc: denied { bind } for pid=1483 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.622947][ T24] audit: type=1400 audit(1783226734.600:561): avc: denied { setopt } for pid=1483 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.643810][ T24] audit: type=1400 audit(1783226734.620:562): avc: denied { read } for pid=1485 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.722282][ T24] audit: type=1400 audit(1783226734.720:563): avc: denied { append } for pid=1496 comm="syz.5.340" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.964416][ T336] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.064347][ T301] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 67.114342][ T793] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 67.204360][ T336] usb 7-1: Using ep0 maxpacket: 32 [ 67.324463][ T336] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 67.332676][ T336] usb 7-1: config 0 has no interface number 0 [ 67.338821][ T336] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.350021][ T336] usb 7-1: config 0 interface 85 has no altsetting 0 [ 67.424400][ T301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.434730][ T301] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 67.443763][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.453067][ T301] usb 3-1: config 0 descriptor?? [ 67.474430][ T793] usb 6-1: config 127 has an invalid interface number: 138 but max is 0 [ 67.482836][ T793] usb 6-1: config 127 has no interface number 0 [ 67.489273][ T793] usb 6-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 67.524412][ T336] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 67.533578][ T336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.541826][ T336] usb 7-1: Product: syz [ 67.546246][ T336] usb 7-1: Manufacturer: syz [ 67.550867][ T336] usb 7-1: SerialNumber: syz [ 67.556237][ T336] usb 7-1: config 0 descriptor?? [ 67.654499][ T793] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 67.663725][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.671860][ T793] usb 6-1: Product: syz [ 67.676061][ T793] usb 6-1: Manufacturer: syz [ 67.680652][ T793] usb 6-1: SerialNumber: syz [ 67.704419][ T1510] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 67.795518][ T1480] udc-core: couldn't find an available UDC or it's busy [ 67.802521][ T1480] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.967878][ T793] usb 6-1: USB disconnect, device number 13 [ 68.035428][ T336] usb 7-1: USB disconnect, device number 10 [ 68.577030][ T301] usb 2-1: USB disconnect, device number 17 [ 68.704478][ T307] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 68.770475][ T900] usb 3-1: USB disconnect, device number 13 [ 68.778522][ T24] audit: type=1400 audit(1783226736.780:564): avc: denied { mount } for pid=1539 comm="syz.1.357" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.793369][ T1541] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.803104][ T24] audit: type=1400 audit(1783226736.780:565): avc: denied { mounton } for pid=1539 comm="syz.1.357" path="/76/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.808054][ T336] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 68.847450][ T24] audit: type=1400 audit(1783226736.840:566): avc: denied { write } for pid=1542 comm="syz.2.358" path="socket:[19789]" dev="sockfs" ino=19789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.871298][ T24] audit: type=1400 audit(1783226736.870:567): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.904416][ T1547] binder: BINDER_SET_CONTEXT_MGR already set [ 68.910577][ T1547] binder: 1546:1547 ioctl 4018620d 200000004a80 returned -16 [ 68.918585][ T1547] binder: 1546:1547 ioctl c0306201 0 returned -14 [ 68.944345][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 69.084354][ T336] usb 7-1: Using ep0 maxpacket: 8 [ 69.104378][ T307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 69.184558][ T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.194781][ T307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.204370][ T305] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 69.205404][ T336] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.222340][ T336] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 69.231425][ T336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.240142][ T336] usb 7-1: config 0 descriptor?? [ 69.334538][ T900] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 69.354443][ T307] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 69.363570][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.371640][ T307] usb 6-1: Product: syz [ 69.376019][ T307] usb 6-1: Manufacturer: syz [ 69.380613][ T307] usb 6-1: SerialNumber: syz [ 69.564423][ T305] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.573469][ T305] usb 2-1: config 1 has no interface number 0 [ 69.579658][ T900] usb 3-1: Using ep0 maxpacket: 8 [ 69.584854][ T305] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 69.704491][ T900] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 69.712941][ T900] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.722970][ T900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.732858][ T900] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.742943][ T900] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.756110][ T307] usb 6-1: 0:1 : does not exist [ 69.760998][ T307] usb 6-1: unit 5 not found! [ 69.764423][ T336] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.765935][ T305] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 69.782217][ T900] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.791399][ T900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.799446][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.807506][ T307] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4 [ 69.817347][ T305] usb 2-1: Product: syz [ 69.821525][ T305] usb 2-1: Manufacturer: syz [ 69.826679][ T307] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 69.834335][ T305] usb 2-1: SerialNumber: syz [ 69.843225][ T307] usb 6-1: USB disconnect, device number 14 [ 70.004348][ T336] usb 5-1: Using ep0 maxpacket: 16 [ 70.045042][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.085675][ T24] audit: type=1400 audit(1783226738.090:568): avc: denied { mount } for pid=1553 comm="syz.1.363" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.124472][ T336] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 70.168629][ T1565] device pim6reg1 entered promiscuous mode [ 70.204479][ T305] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 70.213003][ T305] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 70.221708][ T305] usb 2-1: USB disconnect, device number 18 [ 70.294391][ T336] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 70.303518][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.311628][ T336] usb 5-1: Product: syz [ 70.316061][ T336] usb 5-1: Manufacturer: syz [ 70.320719][ T336] usb 5-1: SerialNumber: syz [ 70.325957][ T336] usb 5-1: config 0 descriptor?? [ 70.553327][ T307] usb 7-1: USB disconnect, device number 11 [ 70.560024][ T900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 70.664778][ T24] audit: type=1400 audit(1783226738.670:569): avc: denied { watch } for pid=1581 comm="syz.1.375" path="/80/control" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.695300][ T1585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1585 comm=syz.1.376 [ 70.804335][ T900] usb 6-1: Using ep0 maxpacket: 8 [ 70.964423][ T307] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 70.984443][ T15] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 71.084389][ T900] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 71.093453][ T900] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 71.101704][ T900] usb 6-1: Product: syz [ 71.106080][ T900] usb 6-1: Manufacturer: syz [ 71.110710][ T900] usb 6-1: SerialNumber: syz [ 71.116088][ T900] usb 6-1: config 0 descriptor?? [ 71.214338][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 71.334377][ T307] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.344717][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.351329][ T15] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 71.360601][ T307] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.369691][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.377825][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.386638][ T307] usb 7-1: config 0 descriptor?? [ 71.391849][ T15] usb 2-1: config 0 descriptor?? [ 71.424871][ T307] hub 7-1:0.0: bad descriptor, ignoring hub [ 71.431007][ T307] hub: probe of 7-1:0.0 failed with error -5 [ 71.637418][ T307] usb 5-1: USB disconnect, device number 11 [ 71.865546][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.872644][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.879681][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.886725][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.893695][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.900756][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.907758][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.914749][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.921742][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.929015][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.936069][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.943042][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.950032][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.957018][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.963992][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.970999][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.978280][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.985346][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.987130][ T336] usb 3-1: USB disconnect, device number 14 [ 71.992320][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 71.992337][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.012246][ T307] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 72.019955][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.027141][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.034128][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.041270][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.048642][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.056118][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.063222][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.070488][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.077909][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.085281][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.092598][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.099787][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.106932][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.113962][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.121232][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.128652][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.135902][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.142938][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.150119][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.157604][ T15] lenovo 0003:17EF:6062.0004: unknown main item tag 0x0 [ 72.166206][ T15] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.81 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 72.194733][ T15] lenovo 0003:17EF:6062.0004: Set LED output report error: -71 [ 72.204953][ T15] usb 2-1: USB disconnect, device number 19 [ 72.227146][ T1600] fido_id[1600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 72.424368][ T307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.464425][ T307] usb 5-1: not running at top speed; connect to a high speed hub [ 72.544362][ T307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.584703][ T336] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 72.714369][ T307] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 72.723589][ T307] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 72.732154][ T307] usb 5-1: Product: syz [ 72.736926][ T307] usb 5-1: Manufacturer: syz [ 72.741754][ T307] usb 5-1: SerialNumber: syz [ 72.747285][ T307] usb 5-1: config 0 descriptor?? [ 72.814558][ T793] usb 7-1: USB disconnect, device number 12 [ 72.844330][ T336] usb 3-1: Using ep0 maxpacket: 16 [ 72.894329][ T15] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 72.974403][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.986352][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.015634][ T307] usb 5-1: USB disconnect, device number 12 [ 73.074408][ T336] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 73.083579][ T336] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 73.092827][ T336] usb 3-1: Manufacturer: syz [ 73.098680][ T336] usb 3-1: config 0 descriptor?? [ 73.294202][ T307] usb 6-1: USB disconnect, device number 15 [ 73.414477][ T15] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 73.423933][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.432014][ T15] usb 2-1: Product: syz [ 73.436392][ T15] usb 2-1: Manufacturer: syz [ 73.441073][ T15] usb 2-1: SerialNumber: syz [ 73.446670][ T15] usb 2-1: config 0 descriptor?? [ 73.505598][ T24] audit: type=1400 audit(1783226741.510:570): avc: denied { map } for pid=1633 comm="syz.6.396" path="socket:[19956]" dev="sockfs" ino=19956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.529260][ T24] audit: type=1400 audit(1783226741.520:571): avc: denied { read } for pid=1633 comm="syz.6.396" path="socket:[19956]" dev="sockfs" ino=19956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.566314][ T336] hid-generic 0003:041E:3100.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 73.732264][ T24] audit: type=1400 audit(1783226741.730:572): avc: denied { remount } for pid=1654 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.744628][ T307] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 73.769213][ T793] usb 3-1: USB disconnect, device number 15 [ 73.796338][ T1659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.407'. [ 73.992000][ T24] audit: type=1400 audit(1783226741.990:573): avc: denied { create } for pid=1666 comm="syz.6.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.011358][ T24] audit: type=1400 audit(1783226741.990:574): avc: denied { write } for pid=1666 comm="syz.6.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.072961][ T1675] binder: 1674:1675 ioctl c0306201 200000000080 returned -14 [ 74.081351][ T1675] binder: 1674:1675 ioctl c0306201 2000000003c0 returned -14 [ 74.114749][ T686] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 74.126451][ T307] usb 6-1: config 3 interface 0 has no altsetting 0 [ 74.284405][ T307] usb 6-1: New USB device found, idVendor=0bc2, idProduct=3010, bcdDevice= 0.00 [ 74.293517][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.301621][ T307] usb 6-1: Product: syz [ 74.306070][ T307] usb 6-1: Manufacturer: syz [ 74.310697][ T307] usb 6-1: SerialNumber: syz [ 74.354424][ T686] usb 5-1: Using ep0 maxpacket: 32 [ 74.444394][ T793] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 74.474483][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.485488][ T686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.495296][ T686] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.504414][ T686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.513202][ T686] usb 5-1: config 0 descriptor?? [ 74.565105][ T686] hub 5-1:0.0: USB hub found [ 74.624704][ T307] usb 6-1: bad CDC descriptors [ 74.629718][ T307] usb-storage 6-1:3.0: USB Mass Storage device detected [ 74.637572][ T307] usb-storage 6-1:3.0: Quirks match for vid 0bc2 pid 3010: 8000 [ 74.675847][ T307] usb 6-1: USB disconnect, device number 16 [ 74.684423][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 74.752540][ T900] usb 2-1: USB disconnect, device number 20 [ 74.784457][ T686] hub 5-1:0.0: 1 port detected [ 74.804453][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.815556][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.825648][ T793] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.835484][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.850519][ T793] usb 7-1: config 0 descriptor?? [ 74.895236][ T793] hub 7-1:0.0: USB hub found [ 75.114420][ T793] hub 7-1:0.0: 1 port detected [ 75.146882][ T1709] binder: 1708:1709 ioctl 40046205 0 returned -22 [ 75.153556][ T1709] binder: 1708:1709 ioctl c0306201 2000000002c0 returned -11 [ 75.193341][ T1711] kvm: pic: non byte write [ 75.261158][ T1719] TCP: TCP_TX_DELAY enabled [ 75.280492][ T24] audit: type=1400 audit(1783226743.280:575): avc: denied { sys_admin } for pid=1720 comm="syz.2.433" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 75.384313][ T900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 75.414416][ T686] hub 5-1:0.0: activate --> -90 [ 75.641400][ T24] audit: type=1400 audit(1783226743.640:576): avc: denied { mounton } for pid=1741 comm="syz.2.442" path="/84/bus" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 75.843019][ T305] usb 5-1: USB disconnect, device number 13 [ 75.854667][ T686] usb 5-1-port1: config error [ 75.904853][ T53] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 75.914378][ T900] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 75.923542][ T900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.931594][ T900] usb 6-1: Product: syz [ 75.935938][ T900] usb 6-1: Manufacturer: syz [ 75.940544][ T900] usb 6-1: SerialNumber: syz [ 75.945868][ T900] usb 6-1: config 0 descriptor?? [ 75.954370][ T336] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 76.314421][ T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.324710][ T336] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 76.335617][ T336] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.354724][ T1748] binder: 1747:1748 ioctl c0306201 200000000040 returned -14 [ 76.434419][ T53] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 76.443545][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.451610][ T53] usb 2-1: Product: syz [ 76.455843][ T53] usb 2-1: Manufacturer: syz [ 76.460458][ T53] usb 2-1: SerialNumber: syz [ 76.465864][ T53] usb 2-1: config 0 descriptor?? [ 76.494366][ T793] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 76.500772][ T793] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 76.508655][ T336] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 76.519285][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.527676][ T336] usb 3-1: Product: syz [ 76.531859][ T336] usb 3-1: Manufacturer: syz [ 76.536594][ T336] usb 3-1: SerialNumber: syz [ 76.614355][ T793] usbhid 7-1:0.0: can't add hid device: -32 [ 76.620392][ T793] usbhid: probe of 7-1:0.0 failed with error -32 [ 76.854788][ T336] snd-usb-audio: probe of 3-1:1.0 failed with error -90 [ 76.862746][ T336] usb 3-1: USB disconnect, device number 16 [ 76.904325][ T53] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 77.144337][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 77.205436][ T24] audit: type=1400 audit(1783226745.210:577): avc: denied { remount } for pid=1762 comm="syz.6.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.233054][ T24] audit: type=1400 audit(1783226745.230:578): avc: denied { module_load } for pid=1764 comm="syz.6.452" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 77.264449][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.274953][ T53] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 77.284043][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.296059][ T53] usb 5-1: config 0 descriptor?? [ 77.304401][ T900] usb 7-1: USB disconnect, device number 13 [ 77.321690][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.453'. [ 77.344829][ T53] usb 5-1: bad CDC descriptors [ 77.349750][ T53] cdc_acm 5-1:0.0: Zero length descriptor references [ 77.357087][ T53] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 77.376984][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 77.407138][ T1779] tmpfs: Unknown parameter 'usrquota' [ 77.546158][ T900] usb 5-1: USB disconnect, device number 14 [ 77.684329][ T53] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 77.774697][ T336] usb 2-1: USB disconnect, device number 21 [ 78.218038][ T305] usb 6-1: USB disconnect, device number 17 [ 78.244724][ T24] audit: type=1400 audit(1783226746.250:579): avc: denied { create } for pid=1792 comm="syz.6.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.274938][ T53] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 78.290244][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.298675][ T1799] binder: BINDER_SET_CONTEXT_MGR already set [ 78.300890][ T53] usb 3-1: Product: syz [ 78.310196][ T1799] binder: 1798:1799 ioctl 4018620d 200000004a80 returned -16 [ 78.316692][ T53] usb 3-1: Manufacturer: syz [ 78.328907][ T53] usb 3-1: SerialNumber: syz [ 78.336983][ T1803] netlink: 'syz.5.468': attribute type 37 has an invalid length. [ 78.354238][ T53] usb 3-1: config 0 descriptor?? [ 78.624371][ T900] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 78.654338][ T686] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 78.774344][ T305] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 78.864404][ T900] usb 5-1: Using ep0 maxpacket: 32 [ 78.894320][ T686] usb 7-1: Using ep0 maxpacket: 32 [ 78.984473][ T900] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 78.992659][ T900] usb 5-1: config 0 has no interface number 0 [ 78.998886][ T900] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 79.009817][ T900] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 79.023100][ T686] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 79.034128][ T305] usb 6-1: Using ep0 maxpacket: 8 [ 79.039214][ T900] usb 5-1: config 0 interface 97 has no altsetting 0 [ 79.046039][ T686] usb 7-1: config 0 interface 0 has no altsetting 0 [ 79.052670][ T686] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 79.061818][ T686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.070434][ T686] usb 7-1: config 0 descriptor?? [ 79.154475][ T305] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.164714][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.174688][ T305] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.214388][ T900] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 79.223488][ T900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.231635][ T900] usb 5-1: Product: syz [ 79.235866][ T900] usb 5-1: Manufacturer: syz [ 79.240482][ T900] usb 5-1: SerialNumber: syz [ 79.245763][ T900] usb 5-1: config 0 descriptor?? [ 79.344389][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 79.353609][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.361670][ T305] usb 6-1: Product: syz [ 79.365894][ T305] usb 6-1: Manufacturer: syz [ 79.370659][ T305] usb 6-1: SerialNumber: syz [ 79.394409][ T1809] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.414938][ T305] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 79.556053][ T686] hid-generic 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 79.616453][ T53] usb 6-1: USB disconnect, device number 18 [ 80.130031][ T1831] usb usb1: usbfs: process 1831 (syz.5.479) did not claim interface 0 before use [ 80.427892][ T336] usb 3-1: USB disconnect, device number 17 [ 80.444337][ T686] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 80.684328][ T686] usb 6-1: Using ep0 maxpacket: 8 [ 80.804362][ T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 80.815639][ T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.825380][ T686] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.835187][ T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 80.846454][ T686] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 80.856592][ T686] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 80.865818][ T686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.879075][ T686] usb 6-1: config 0 descriptor?? [ 80.894395][ T1837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.374225][ T53] usb 5-1: USB disconnect, device number 15 [ 81.414494][ T336] usb 7-1: USB disconnect, device number 14 [ 81.472431][ T1867] overlayfs: unrecognized mount option "verity=on" or missing value [ 81.492727][ T1869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.496'. [ 81.804337][ T53] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 81.924349][ T336] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 82.044355][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 82.164484][ T53] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 82.172775][ T53] usb 5-1: config 0 has no interface number 0 [ 82.179083][ T53] usb 5-1: config 0 interface 184 has no altsetting 0 [ 82.274323][ T793] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 82.344420][ T53] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.353547][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.361614][ T53] usb 5-1: Product: syz [ 82.365965][ T53] usb 5-1: Manufacturer: syz [ 82.370562][ T53] usb 5-1: SerialNumber: syz [ 82.375796][ T53] usb 5-1: config 0 descriptor?? [ 82.414897][ T53] smsc75xx v1.0.0 [ 82.444407][ T336] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 82.453552][ T336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.461644][ T336] usb 7-1: Product: syz [ 82.465902][ T336] usb 7-1: Manufacturer: syz [ 82.470517][ T336] usb 7-1: SerialNumber: syz [ 82.475856][ T336] usb 7-1: config 0 descriptor?? [ 82.514420][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 82.634802][ T793] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 82.804343][ T686] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 82.804484][ T793] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 82.821071][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.829092][ T793] usb 2-1: Product: syz [ 82.833407][ T793] usb 2-1: Manufacturer: syz [ 82.838148][ T793] usb 2-1: SerialNumber: syz [ 82.843400][ T793] usb 2-1: config 0 descriptor?? [ 83.189988][ T793] usb 6-1: USB disconnect, device number 19 [ 83.224449][ T686] usb 3-1: not running at top speed; connect to a high speed hub [ 83.304388][ T686] usb 3-1: config 6 has an invalid interface number: 38 but max is 0 [ 83.312524][ T686] usb 3-1: config 6 has no interface number 0 [ 83.318843][ T686] usb 3-1: config 6 interface 38 has no altsetting 0 [ 83.484422][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 83.484482][ T686] usb 3-1: New USB device found, idVendor=12d1, idProduct=733c, bcdDevice=7f.80 [ 83.503366][ T686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.511445][ T686] usb 3-1: Product: syz [ 83.515679][ T686] usb 3-1: Manufacturer: syz [ 83.520311][ T686] usb 3-1: SerialNumber: syz [ 83.614387][ T793] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 83.714410][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 83.725309][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 83.735127][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 83.745625][ T53] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 83.755179][ T53] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 83.779884][ T900] usb 7-1: USB disconnect, device number 15 [ 83.837867][ T686] usb 3-1: USB disconnect, device number 18 [ 83.854347][ T793] usb 6-1: Using ep0 maxpacket: 16 [ 83.916065][ T307] usb 5-1: USB disconnect, device number 16 [ 83.974379][ T793] usb 6-1: config 3 has an invalid interface number: 3 but max is 0 [ 83.982548][ T793] usb 6-1: config 3 has no interface number 0 [ 83.988904][ T793] usb 6-1: config 3 interface 3 has no altsetting 0 [ 84.144341][ T900] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 84.154503][ T793] usb 6-1: New USB device found, idVendor=0499, idProduct=102b, bcdDevice=be.3d [ 84.163633][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.168087][ T307] usb 2-1: USB disconnect, device number 22 [ 84.172587][ T793] usb 6-1: Product: syz [ 84.185326][ T793] usb 6-1: Manufacturer: syz [ 84.190292][ T793] usb 6-1: SerialNumber: syz [ 84.357826][ T24] audit: type=1400 audit(1783226752.360:580): avc: denied { write } for pid=1932 comm="syz.2.523" path="socket:[21744]" dev="sockfs" ino=21744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.399482][ T24] audit: type=1400 audit(1783226752.400:581): avc: denied { getopt } for pid=1938 comm="syz.1.526" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.509392][ T1954] capability: warning: `syz.2.533' uses deprecated v2 capabilities in a way that may be insecure [ 84.516347][ T793] snd-usb-audio: probe of 6-1:3.3 failed with error -2 [ 84.535845][ T793] usb 6-1: USB disconnect, device number 20 [ 84.554431][ T900] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 84.574659][ T900] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 84.583421][ T900] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 84.593203][ T900] usb 7-1: config 250 has no interface number 0 [ 84.602880][ T900] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 84.614646][ T900] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.625219][ T900] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 84.639605][ T900] usb 7-1: config 250 interface 228 has no altsetting 0 [ 84.670198][ T24] audit: type=1400 audit(1783226752.670:582): avc: denied { mount } for pid=1965 comm="syz.1.539" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.671973][ T1966] SELinux: (dev overlay, type overlay) has no security xattr handler [ 84.719092][ T24] audit: type=1400 audit(1783226752.670:583): avc: denied { mounton } for pid=1965 comm="syz.1.539" path="/114/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.741955][ T24] audit: type=1400 audit(1783226752.710:584): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.764453][ T24] audit: type=1400 audit(1783226752.720:585): avc: denied { read } for pid=1971 comm="syz.2.540" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.787492][ T24] audit: type=1400 audit(1783226752.720:586): avc: denied { open } for pid=1971 comm="syz.2.540" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.795571][ T900] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 84.811401][ T24] audit: type=1400 audit(1783226752.720:587): avc: denied { ioctl } for pid=1971 comm="syz.2.540" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.820746][ T307] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 84.852607][ T24] audit: type=1400 audit(1783226752.770:588): avc: denied { relabelfrom } for pid=1969 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.872968][ T24] audit: type=1400 audit(1783226752.770:589): avc: denied { relabelto } for pid=1969 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.881441][ T900] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 84.901104][ T900] usb 7-1: Product: syz [ 84.905550][ T900] usb 7-1: SerialNumber: syz [ 84.945260][ T900] hub 7-1:250.228: bad descriptor, ignoring hub [ 84.951683][ T900] hub: probe of 7-1:250.228 failed with error -5 [ 85.134463][ T307] usb 5-1: Using ep0 maxpacket: 8 [ 85.155099][ T900] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 85.374338][ T686] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 85.394367][ T15] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 85.424443][ T307] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 85.433580][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.441880][ T307] usb 5-1: Product: syz [ 85.444420][ T793] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 85.446350][ T307] usb 5-1: Manufacturer: syz [ 85.458304][ T307] usb 5-1: SerialNumber: syz [ 85.614391][ T686] usb 3-1: Using ep0 maxpacket: 32 [ 85.684337][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 85.696989][ T307] usb 5-1: USB disconnect, device number 17 [ 85.734476][ T686] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.744620][ T686] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.754553][ T15] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.764699][ T686] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.771348][ T15] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.786413][ T336] usb 7-1: USB disconnect, device number 16 [ 85.793280][ T336] usblp0: removed [ 85.824424][ T793] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 85.833132][ T793] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 85.841808][ T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 85.850801][ T793] usb 2-1: config 1 has no interface number 0 [ 85.856924][ T793] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.867808][ T793] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 85.881187][ T793] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 85.890444][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.924435][ T686] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 85.933574][ T686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.941794][ T15] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 85.951380][ T686] usb 3-1: Product: syz [ 85.954442][ T336] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 85.955755][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.971287][ T686] usb 3-1: Manufacturer: syz [ 85.975968][ T686] usb 3-1: SerialNumber: syz [ 85.980866][ T15] usb 6-1: Product: syz [ 85.985379][ T686] usb 3-1: config 0 descriptor?? [ 85.990424][ T15] usb 6-1: Manufacturer: syz [ 85.995076][ T15] usb 6-1: SerialNumber: syz [ 86.000497][ T15] usb 6-1: config 0 descriptor?? [ 86.194353][ T336] usb 7-1: Using ep0 maxpacket: 8 [ 86.314443][ T336] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 86.322918][ T336] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 86.331968][ T336] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 86.341346][ T336] usb 7-1: config 250 has no interface number 0 [ 86.347843][ T336] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 86.359874][ T336] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 86.370480][ T336] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.380762][ T336] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.391086][ T336] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 86.404668][ T336] usb 7-1: config 250 interface 228 has no altsetting 0 [ 86.524413][ T336] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 86.533594][ T336] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 86.541945][ T336] usb 7-1: Product: syz [ 86.546272][ T336] usb 7-1: SerialNumber: syz [ 86.554333][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 86.585138][ T336] hub 7-1:250.228: bad descriptor, ignoring hub [ 86.591552][ T336] hub: probe of 7-1:250.228 failed with error -5 [ 86.794393][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 86.800283][ T336] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 86.834924][ T336] usb 7-1: USB disconnect, device number 17 [ 86.842321][ T336] usblp0: removed [ 86.914368][ T53] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 86.923479][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.932738][ T53] usb 5-1: config 0 descriptor?? [ 87.214440][ T53] usb 5-1: string descriptor 0 read error: -71 [ 87.220745][ T53] uvcvideo: Found UVC 0.00 device (2833:0201) [ 87.227825][ T53] uvcvideo: No valid video chain found. [ 87.234148][ T53] usb 5-1: USB disconnect, device number 18 [ 87.296948][ T686] usb 3-1: USB disconnect, device number 19 [ 87.326297][ T25] usb 6-1: USB disconnect, device number 21 [ 87.614315][ T307] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 87.627315][ C1] ================================================================== [ 87.635533][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 87.642926][ C1] Read of size 8 at addr ffff88810bcb8d90 by task syz.5.578/2058 [ 87.650736][ C1] [ 87.653081][ C1] CPU: 1 PID: 2058 Comm: syz.5.578 Not tainted syzkaller #0 [ 87.660353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.670416][ C1] Call Trace: [ 87.673699][ C1] [ 87.676567][ C1] __dump_stack+0x21/0x24 [ 87.680901][ C1] dump_stack_lvl+0x1a7/0x208 [ 87.685668][ C1] ? show_regs_print_info+0x18/0x18 [ 87.690864][ C1] ? thaw_kernel_threads+0x220/0x220 [ 87.696233][ C1] print_address_description+0x7f/0x2c0 [ 87.701801][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 87.706835][ C1] kasan_report+0x100/0x140 [ 87.712044][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 87.717085][ C1] __asan_report_load8_noabort+0x14/0x20 [ 87.722718][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 87.727576][ C1] rcu_do_batch+0x448/0xaf0 [ 87.732253][ C1] ? local_bh_enable+0x20/0x20 [ 87.737103][ C1] ? rcu_report_qs_rnp+0x37e/0x390 [ 87.742228][ C1] rcu_core+0x50a/0xca0 [ 87.746405][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 87.751602][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 87.756812][ C1] ? sched_clock+0x3a/0x40 [ 87.761262][ C1] ? sched_clock_cpu+0x1b/0x3d0 [ 87.766112][ C1] ? tick_program_event+0xa3/0x120 [ 87.771228][ C1] rcu_core_si+0x9/0x10 [ 87.775392][ C1] __do_softirq+0x255/0x563 [ 87.779934][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 87.785492][ C1] asm_call_irq_on_stack+0xf/0x20 [ 87.790529][ C1] [ 87.793484][ C1] do_softirq_own_stack+0x60/0x80 [ 87.798516][ C1] do_softirq+0xb0/0xf0 [ 87.802672][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 87.808482][ C1] ? __local_bh_enable_ip+0x80/0x80 [ 87.813693][ C1] __local_bh_enable_ip+0x70/0x80 [ 87.818721][ C1] local_bh_enable+0x1f/0x30 [ 87.823333][ C1] copy_fpstate_to_sigframe+0x40b/0xbb0 [ 87.828889][ C1] ? fpregs_set+0x5e0/0x5e0 [ 87.833437][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 87.838665][ C1] ? get_signal+0x125f/0x1300 [ 87.843360][ C1] ? fpu__alloc_mathframe+0x88/0x150 [ 87.848647][ C1] arch_do_signal_or_restart+0x600/0x11b0 [ 87.854381][ C1] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 87.860042][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 87.865689][ C1] exit_to_user_mode_loop+0xa2/0xe0 [ 87.870884][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 87.876348][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 87.881813][ C1] do_syscall_64+0x3d/0x40 [ 87.886242][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.892135][ C1] RIP: 0033:0x7f6826d9c68e [ 87.896557][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.916381][ C1] RSP: 002b:00007ffeb272e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 87.924808][ C1] RAX: fffffffffffffffc RBX: 0000555556a4a500 RCX: 00007f6826d9c68e [ 87.932921][ C1] RDX: 00007ffeb272e270 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.940912][ C1] RBP: 00007f6827065da0 R08: 0000000000000000 R09: 0000000000000000 [ 87.948902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000015893 [ 87.956890][ C1] R13: 00007f682706409c R14: 00000000000155b8 R15: 00007f6827064090 [ 87.964876][ C1] [ 87.967216][ C1] Allocated by task 2079: [ 87.971563][ C1] __kasan_kmalloc+0xd4/0x100 [ 87.976424][ C1] __kmalloc+0x19f/0x330 [ 87.980676][ C1] l2tp_session_create+0x39/0xb60 [ 87.985705][ C1] pppol2tp_connect+0xbf5/0x1640 [ 87.990652][ C1] __sys_connect+0x3ce/0x450 [ 87.995257][ C1] __x64_sys_connect+0x7a/0x90 [ 88.000024][ C1] do_syscall_64+0x31/0x40 [ 88.004446][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.010343][ C1] [ 88.012676][ C1] Freed by task 300: [ 88.016584][ C1] kasan_set_track+0x4a/0x70 [ 88.021179][ C1] kasan_set_free_info+0x23/0x40 [ 88.026140][ C1] ____kasan_slab_free+0x125/0x160 [ 88.031295][ C1] __kasan_slab_free+0x11/0x20 [ 88.036086][ C1] slab_free_freelist_hook+0xc5/0x190 [ 88.041485][ C1] kfree+0xc0/0x270 [ 88.045303][ C1] l2tp_session_put+0xb2/0x1a0 [ 88.050163][ C1] l2tp_session_delete+0x3a9/0x4a0 [ 88.055285][ C1] l2tp_tunnel_del_work+0x180/0x3d0 [ 88.060516][ C1] process_one_work+0x6fd/0xbc0 [ 88.065393][ C1] worker_thread+0xa8e/0x13c0 [ 88.070079][ C1] kthread+0x324/0x3b0 [ 88.074174][ C1] ret_from_fork+0x1f/0x30 [ 88.078607][ C1] [ 88.080941][ C1] Last potentially related work creation: [ 88.086773][ C1] kasan_save_stack+0x3a/0x60 [ 88.091459][ C1] __kasan_record_aux_stack+0xd2/0x100 [ 88.096923][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.102752][ C1] call_rcu+0x11a/0x1090 [ 88.107009][ C1] pppol2tp_release+0x1e3/0x2b0 [ 88.111868][ C1] sock_close+0xb8/0x200 [ 88.116119][ C1] __fput+0x2dc/0x730 [ 88.120250][ C1] ____fput+0x15/0x20 [ 88.124245][ C1] task_work_run+0x127/0x190 [ 88.128980][ C1] exit_to_user_mode_loop+0xcb/0xe0 [ 88.134194][ C1] exit_to_user_mode_prepare+0x76/0xa0 [ 88.139669][ C1] syscall_exit_to_user_mode+0x1d/0x40 [ 88.145143][ C1] do_syscall_64+0x3d/0x40 [ 88.149573][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.155469][ C1] [ 88.157808][ C1] The buggy address belongs to the object at ffff88810bcb8c00 [ 88.157808][ C1] which belongs to the cache kmalloc-512 of size 512 [ 88.171871][ C1] The buggy address is located 400 bytes inside of [ 88.171871][ C1] 512-byte region [ffff88810bcb8c00, ffff88810bcb8e00) [ 88.185321][ C1] The buggy address belongs to the page: [ 88.190978][ C1] page:ffffea00042f2e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bcb8 [ 88.201302][ C1] head:ffffea00042f2e00 order:2 compound_mapcount:0 compound_pincount:0 [ 88.209824][ C1] flags: 0x4000000000010200(slab|head) [ 88.215301][ C1] raw: 4000000000010200 ffffea00042eae00 0000000300000003 ffff888100043080 [ 88.223896][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 88.232480][ C1] page dumped because: kasan: bad access detected [ 88.238902][ C1] page_owner tracks the page as allocated [ 88.244904][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 280, ts 23192950690, free_ts 23191443691 [ 88.263921][ C1] prep_new_page+0x176/0x190 [ 88.268518][ C1] get_page_from_freelist+0x225f/0x23f0 [ 88.274077][ C1] __alloc_pages_nodemask+0x29a/0x640 [ 88.279465][ C1] new_slab+0x84/0x3f0 [ 88.283548][ C1] ___slab_alloc+0x2f8/0x4c0 [ 88.288146][ C1] __slab_alloc+0x63/0xa0 [ 88.292487][ C1] __kmalloc+0x1f9/0x330 [ 88.296743][ C1] fib6_info_alloc+0x34/0xe0 [ 88.301344][ C1] ip6_route_info_create+0x4c7/0x1450 [ 88.306728][ C1] ip6_route_add+0x27/0x130 [ 88.311237][ C1] addrconf_prefix_route+0x233/0x310 [ 88.316527][ C1] inet6_addr_add+0x51d/0x970 [ 88.321211][ C1] inet6_rtm_newaddr+0x6e1/0x9c0 [ 88.326246][ C1] rtnetlink_rcv_msg+0x9e9/0xca0 [ 88.331216][ C1] netlink_rcv_skb+0x1e9/0x430 [ 88.335987][ C1] rtnetlink_rcv+0x1c/0x20 [ 88.340403][ C1] page last free stack trace: [ 88.345100][ C1] __free_pages_ok+0x80b/0x830 [ 88.349871][ C1] __free_pages+0xd8/0x390 [ 88.354298][ C1] __free_slab+0xcf/0x190 [ 88.358643][ C1] unfreeze_partials+0x150/0x180 [ 88.363618][ C1] put_cpu_partial+0xc1/0x180 [ 88.368306][ C1] __slab_free+0x2c9/0x3a0 [ 88.372734][ C1] ___cache_free+0x10e/0x130 [ 88.377355][ C1] qlink_free+0x50/0x90 [ 88.381531][ C1] qlist_free_all+0x5f/0xb0 [ 88.386065][ C1] kasan_quarantine_reduce+0x14a/0x160 [ 88.391553][ C1] __kasan_slab_alloc+0x2f/0xe0 [ 88.396420][ C1] slab_post_alloc_hook+0x5d/0x2f0 [ 88.401543][ C1] kmem_cache_alloc+0x15a/0x2d0 [ 88.406414][ C1] __alloc_skb+0x9e/0x520 [ 88.410775][ C1] netlink_ack+0x35c/0xb30 [ 88.415196][ C1] netlink_rcv_skb+0x267/0x430 [ 88.419973][ C1] [ 88.422312][ C1] Memory state around the buggy address: [ 88.427960][ C1] ffff88810bcb8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.436241][ C1] ffff88810bcb8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.444370][ C1] >ffff88810bcb8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.452453][ C1] ^ [ 88.457057][ C1] ffff88810bcb8e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.465140][ C1] ffff88810bcb8e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.473212][ C1] ================================================================== [ 88.481290][ C1] Disabling lock debugging due to kernel taint [ 88.498107][ T900] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 88.513319][ T793] usb 2-1: USB disconnect, device number 23 [ 88.654376][ T307] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.664577][ T307] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.673608][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.682608][ T307] usb 7-1: config 0 descriptor?? [ 88.754327][ T900] usb 3-1: Using ep0 maxpacket: 16 [ 88.874393][ T900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.884570][ T900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.964393][ T900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 88.973489][ T900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.981552][ T900] usb 3-1: SerialNumber: syz [ 89.025515][ T900] usb 3-1: 0:2 : does not exist [ 89.990654][ T15] usb 7-1: USB disconnect, device number 18 [ 90.734444][ T900] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 90.743742][ T900] usb 3-1: USB disconnect, device number 20 [ 90.945197][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory