last executing test programs: 3m37.477840884s ago: executing program 4 (id=3427): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x25, 0x2542, 0x6, 0x8, 0x7, 0x8000000000000001, 0x7f, 0x4}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) pread64(r2, &(0x7f0000019440)=""/101, 0x65, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 3m31.520659352s ago: executing program 4 (id=3434): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x3, 0x5, 0x4, 0x3, 0xbfffffff, 0x0, 0x1000], [0xfa, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x800000]], '\x00', [{0x0, 0x5}, {0x0, 0x5}, {}, {}, {0x4000008}, {}, {0x0, 0x8001}, {0x0, 0xfffffffc}, {}, {}, {0x2}, {0x0, 0x2aac}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a01700000000b3"], 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0xe, 0x3, {0x3, 0x3, 'E'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m27.891618673s ago: executing program 4 (id=3443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) unshare(0x24020400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r3, 0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0xffffffffffff8002, 0xc35d4f6d52288271}, 0x200048c4) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000700)={{r5}, r10, 0x10, @inherit={0x50, 0x0}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@random="4fdae7f4966a", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "8300", 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x40, 0x400, 0x8}}}}}}, 0x0) 3m26.862205175s ago: executing program 4 (id=3446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) unshare(0x26020600) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x4, 0x6, 0x2, 0x3f, 0xfffffffc}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0x1002}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = semget$private(0x0, 0x8, 0xa) semop(r7, &(0x7f0000000140)=[{0x3, 0x3, 0x1000}, {0x2, 0x2, 0x800}, {0x2, 0x1, 0x800}, {0x1, 0xfff9, 0x1000}], 0x4) semop(r7, &(0x7f0000000380)=[{0x1, 0x7}], 0x1) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000000)=0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x31, 0x4, @tid=r8}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) 3m23.886939829s ago: executing program 4 (id=3449): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m23.422087861s ago: executing program 4 (id=3450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xa7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x0, 0xc, 0x0, {{0x7, 0x4, 0x0, 0x2d, 0x1c, 0x67, 0x0, 0xf7, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x88, 0x5, "c8f5e9"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3f, r7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="020b0000810000000730000000020a"], 0x68) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 3m22.839970097s ago: executing program 32 (id=3450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xa7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x0, 0xc, 0x0, {{0x7, 0x4, 0x0, 0x2d, 0x1c, 0x67, 0x0, 0xf7, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x88, 0x5, "c8f5e9"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3f, r7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="020b0000810000000730000000020a"], 0x68) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 16.928077204s ago: executing program 5 (id=4056): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x50000, &(0x7f00000000c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, 0x0) umount2(0x0, 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80, {0x3000, 0x8000000, 0x2}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006a5480d700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 14.532249821s ago: executing program 5 (id=4063): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x702}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sys_enter\x00'}, 0x18) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 8.565529903s ago: executing program 0 (id=4081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="0100000000000000003f010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 8.472905204s ago: executing program 0 (id=4084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) 8.459985244s ago: executing program 5 (id=4085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x0, 0x81}, 0x0, 0x3502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x60}}]}, 0x148}}, 0x0) 7.738495238s ago: executing program 0 (id=4086): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000440)=0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00003cd000/0x1000)=nil, 0x1000}, 0x1}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000003cc0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000003b40)=[{{&(0x7f0000000380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)=""/117, 0x75}], 0x1, &(0x7f0000000bc0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/123, 0x7b}], 0x4, &(0x7f0000002c80)=""/72, 0x48}, 0x2}, {{&(0x7f0000002d00)=@xdp, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d80)=""/96, 0x60}, {&(0x7f0000002e00)=""/246, 0xf6}, {&(0x7f0000002f00)=""/126, 0x7e}, {&(0x7f0000002f80)=""/119, 0x77}, {&(0x7f0000003000)=""/24, 0x18}], 0x5, &(0x7f00000030c0)=""/182, 0xb6}, 0x7f}, {{&(0x7f0000003180)=@alg, 0x80, &(0x7f0000003440)=[{&(0x7f0000003200)=""/79, 0x4f}, {&(0x7f0000003280)=""/142, 0x8e}, {&(0x7f0000003340)=""/211, 0xd3}], 0x3, &(0x7f0000003480)=""/173, 0xad}, 0x9}, {{&(0x7f0000003540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000035c0)=""/214, 0xd6}], 0x1, &(0x7f0000003700)=""/193, 0xc1}, 0x3}, {{&(0x7f0000003800)=@isdn, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/32, 0x20}, {&(0x7f00000038c0)=""/120, 0x78}, {&(0x7f0000003940)=""/206, 0xce}], 0x3, &(0x7f0000003a80)=""/151, 0x97}, 0x7ff}], 0x6, 0x20100, &(0x7f0000003d00)={r5, r6+60000000}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xf7, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34040000", @ANYRES16=r8, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003398f7708cc170010888d0102030109e51100014062600409046778bc772e83081c9612d522a75278163c982842fbd3cce9e33f78c2d786c59148d7b4b8eca9a76b25ffbbafcf47259a08dd6a876532113cd0b76b2581ef012729fcc6339c3f421fc1ed3202ba3d8fc0667a1ccdf4498afe8ba52a0a9cb5c113c6cbf9d199fb085f3021e0025f0b3d0e9c6a149a5f97ab12eab3f0b949e8bdce2f8ce2b4bdf800f01589b52798664f978aa8c03274ee8ca6"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 7.110123984s ago: executing program 5 (id=4089): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x400, 0x1, 0x34324142, 0x0, 0x0, 0x5, 0x5, 0xfffffffe, 0x0, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x2001, 0x4, 0x5, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x1, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x5, 0x258d, 0x2, 0x8, 0x6, 0x4, 0xe, 0x40, 0x7fb, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x1000002000004f0, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x80000001, 0xe, 0x3132564e, 0x7, 0xa, [{0x7, 0x8001}, {0x8, 0xffffff67}, {0x615, 0x59}, {0x8, 0x53}, {0x1ff}, {0x7fffffff, 0xcc6}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x7, 0x8}}) 5.135483333s ago: executing program 1 (id=4093): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}, 0x1, 0xb00}, 0x0) 5.064666114s ago: executing program 3 (id=4094): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044084) 4.581351183s ago: executing program 3 (id=4095): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000500020002600000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4010) 4.506520443s ago: executing program 0 (id=4096): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') getdents64(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r3, &(0x7f0000002a40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x1000}], 0x1, &(0x7f0000000180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x30}}, {{&(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000240)="75bf07ea5d90f42a10d16ce69d92e3c90d60561e38f22d84ac7f559d5ca344f9f1d1b3a1425ef2ce694276c62f129c37987fefb6b7c27b1baf", 0x39}, {&(0x7f0000000280)="51add8bd862ab66e8f09fdbbb48e308fd1886366897e70581d2ebf8a9b16f3d1e83a43a083407fa875cf21dc0359fb359a048b846d16aaf15f1736695722fe3cbb7fbeafa051a7458d6c0156c0fc7bcc24157cfc11c46baae8d2902864f8fdd9c275e5add532e5ec5a3189696b68267c9249dd5c1ac7bf8474b7821ee4f889c884a6da8b9be97f9365c265e81f4d59d769ada0d1cf8c40ec821267a0a340", 0x9e}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000340)="d0a8174f9384adefacb053d1c67c9466034da19aae818129cabf6090a18c0a", 0x1f}], 0x4, &(0x7f0000002400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002440)="f50b8bed3539e8250a", 0x9}], 0x1, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xa4, 0x1, 0xb, [{@rand_addr=0x401, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@loopback, 0xeac}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe73a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xa}, @local}}}], 0x80}}, {{&(0x7f0000002540)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002580)="ec1e5da37b0050a571670f1bbf798d2d65659d4343fbd5e1510aaae2e5204adda68855bab68c02c790c1f79a70b0626fa71030efee0cbe10c78a2303f3ababc58ebe1d1c2bf6cecad00b147c59c2626164926fc4a1a4d32c82f1c4544a4940ac0cc4b79ab82c19ab3c41f26e958800d0e9bdbc3c95f8fb8f4c20f044478e0af4e121cb1a20404bf7c18774636aa08f7b52723051ffaf6698944e7d5ee6917b3b6b0a9ffd92020efd8ab33c4271696fd3f507db3eb9aa9fac66f1d9ee3d0f47b1d80f409011e8a4", 0xc7}, {&(0x7f0000002680)="6e8a", 0x2}, {&(0x7f00000026c0)="cf276f2cb67808a12524717e9f15181c2662037afc355e02be204ca571d6a90ff96e395c87ff770c4b454e", 0x2b}, {&(0x7f0000002700)="0a289fea9ccb60960c836877f6cf1779ec7181c313da46fb7cacb309dd487f7c45701e94638a7b347722d4eb203ada75a2a7d77900e4946060234654b49c1149b8da3830db958296", 0x48}, {&(0x7f0000002780)="b1d53480a2dcf52975a3d445f8c0c56e8036bd6dc85d75461faa9377fa701dc76d252fefcc9f83ca75af564717fc35744c55975b404f5954838464b11d521f4f270b874d632aca6a00b8be6a2f8fc740cb256b13d19d81dbd06abf744f3c7dec88b60243d3d204d15702596648e7b528f804b58dc6868fc660542372b65b3c37a3617584653b6eaaa70feb8fea247e939f4a391ec69f2028adadd27b9090569e93cc4bb0a9012a00eaa0bf0683934af1b4ff", 0xb2}, {&(0x7f0000002840)="ed17240a4d62e3f198bcf2e9ca5734f3f0bd58cc52aaab9469425e26d18f38", 0x1f}, {&(0x7f0000002880)="d7ab533b9f104acf4b6a5aa7251b9fc9828882f39ceb9aae8c6c2113ec685c4072ae41e9fa137cd9b58bfac20b13a37ffdad91ddae4bd36ced8b2e66071043a4e148d2465046486636d690517ce6558bdaabbcedd772d0526fd118081410177c2a53ca690cd319c4c53643ef080ca3bf0165b37353bddb62e6d94a0e7bf90eef59291ed4ea60fe5a974bdfa2c5d633fee56e", 0x92}, {&(0x7f0000002940)="19236900de4d0a4c8c137f10950e9c11926193f26aea734a15c75679841c90b96ab2ea885894a6bd136f3050cb732a0cd0351c3f1a13aea3bf551a729adeffd12bf629ebec112b3241243c950b899e51099291d4a5f14169658fc00d2ce58c1c", 0x60}], 0x8}}], 0x4, 0x4040001) recvfrom$inet_nvme(r1, &(0x7f00000000c0)=""/45, 0x2d, 0x10102, 0x0, 0x0) 4.330824717s ago: executing program 1 (id=4098): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.211944094s ago: executing program 3 (id=4099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)='^\x00'/14, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.211264668s ago: executing program 2 (id=4100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)="82"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x9, 0x1, 0x6c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) 4.191322885s ago: executing program 1 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newrule={0x60, 0x20, 0x100, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x80, 0x1, 0x0, 0x0, 0x1, 0xa}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x21}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40050}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(r2, &(0x7f00000076c0)={0x2020}, 0x2020) r3 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0xf}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0xffe4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 3.171278286s ago: executing program 2 (id=4102): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000040)) (async, rerun: 64) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000440)) (async, rerun: 64) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000480)=0x100) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x4082, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x9) (rerun: 64) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r3, r7}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000006c0)={0x9, 0x4, 0x4}) syz_open_dev$MSR(&(0x7f0000000700), 0x10000, 0x0) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000740)="3c34006d27d7c24d0805cd", 0xb) (async, rerun: 32) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r11 = fsopen(&(0x7f0000000780)='rpc_pipefs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r8, {r6, r10}}, './file0\x00'}) fstat(r8, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000008c0)={0x9, 0x1, {r5}, {0x0}, 0xe08, 0x783e}) (async, rerun: 32) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r17 = getgid() fsetxattr$system_posix_acl(r11, &(0x7f00000007c0)='system.posix_acl_default\x00', &(0x7f00000009c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r13}, {0x2, 0x0, r9}, {0x2, 0x3, r14}, {0x2, 0x3, r4}, {0x2, 0x0, r15}], {0x4, 0x2}, [{0x8, 0x2, r10}, {0x8, 0x2, r16}, {0x8, 0x6, r7}, {0x8, 0x0, r7}, {0x8, 0x7, r7}, {0x8, 0x2}, {0x8, 0x4, r7}, {0x8, 0x0, r10}, {0x8, 0x5, r10}, {0x8, 0x4, r17}], {0x10, 0x5}, {0x20, 0x5}}, 0x9c, 0x2) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/comedi3\x00', 0x141482, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) statx(r1, &(0x7f0000000b00)='./file0\x00', 0x800, 0x1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r12, r18, r10) (async) r19 = io_uring_setup(0x39e6, &(0x7f0000000c40)={0x0, 0xa51f, 0x8, 0x3, 0x23f, 0x0, r1}) (async, rerun: 32) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000d00)={&(0x7f0000000cc0)=[0x0], 0x1, 0x374}) (rerun: 32) ioctl$BTRFS_IOC_DEV_INFO(r19, 0xd000941e, &(0x7f0000000d40)={0x0, "8db61b1abab8a9dd5947330c79c36643"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001d40)={r20, 0xfffffffffffff31a, 0x0, [0x1, 0x400000000000000, 0x0, 0x8001, 0x88], [0x9, 0xf33, 0x2, 0x101, 0x6, 0x6, 0x7, 0x2, 0x9, 0x6, 0x8, 0x0, 0x7, 0x401, 0x0, 0x80000001, 0x5, 0x4, 0x8, 0x401, 0xffff, 0x9, 0x7, 0x8, 0x400, 0x1, 0x5, 0x80, 0x1ff, 0x1, 0x10000, 0x6e, 0x9, 0x7, 0x60, 0x4, 0x9, 0x15, 0x80000001, 0x5176, 0x9, 0x3, 0x80, 0xfffffffffffffffa, 0x80000001, 0x2, 0x2, 0x6, 0xe1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x9, 0x2, 0x1, 0x2, 0xe, 0x4, 0x8, 0x3, 0x2, 0xa, 0x6, 0x9, 0x8, 0x1, 0x80000000, 0x10, 0x3, 0x7ff, 0x4, 0x0, 0x1, 0xfffffffffffffffc, 0x3, 0x7, 0x5, 0x1, 0x3, 0x7f, 0x4, 0x8, 0x5714a153, 0x3, 0x25f2, 0x1f17, 0x3, 0x3, 0x5, 0xfffffffffffffff6, 0xc23, 0x3, 0x4, 0x80000001, 0x0, 0xa86, 0x1, 0x7fffffff, 0x6, 0x2, 0x5, 0x3, 0x1, 0x4, 0x81, 0x0, 0x5, 0x8, 0x7b, 0x80000001, 0xff, 0x7a5, 0x5, 0x8, 0x3ff, 0xfea5, 0x9, 0xffffffffffffffff, 0x400, 0xf, 0x3, 0x2]}) (async) stat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) listen(r0, 0x4) 3.120539204s ago: executing program 5 (id=4103): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x2a, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) 2.996577041s ago: executing program 5 (id=4104): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, &(0x7f0000000940)}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x120}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000240)={0xa, 0x103, 0x1, {0x3, 0x1, 0x200406, 0x870}}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000000)={0x0, 0x8a}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c990580054000100040c3e00010407000202d40c0b969357a5db390300050101061000010400ffffffff04000000060000000102090004090281020700030005"], 0x5d) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x400, 0x84) 2.993023284s ago: executing program 3 (id=4105): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000400)=""/102400, 0x19000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000050a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.89221171s ago: executing program 1 (id=4106): socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.891796453s ago: executing program 2 (id=4107): socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x20040000) syz_io_uring_setup(0x23c, &(0x7f0000000080), &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0x7, 0xb}, {0xfffa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) 1.778365497s ago: executing program 1 (id=4108): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b000200000000090400ffffff"], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.59266258s ago: executing program 0 (id=4109): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xfce) 1.331201194s ago: executing program 2 (id=4110): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300009e00000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 192.012176ms ago: executing program 2 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0xf}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffe7}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x300000000000000}, 0x0) 191.536534ms ago: executing program 3 (id=4112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x1f}, 0x0) 184.824821ms ago: executing program 0 (id=4113): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000110a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x134, 0x42ba5ef2, 0x6, 0x4780, 0xffffffffffffff6a, r0}) 117.937612ms ago: executing program 2 (id=4114): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x5558a1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_open_dev$video4linux(&(0x7f0000000100), 0x9a87, 0x900) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x1f, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) 0s ago: executing program 3 (id=4115): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): lure. [ 1076.506915][T18840] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.526443][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.2.3502 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.526474][T18840] Tainted: [L]=SOFTLOCKUP [ 1076.526480][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1076.526491][T18840] Call Trace: [ 1076.526497][T18840] [ 1076.526504][T18840] dump_stack_lvl+0x16c/0x1f0 [ 1076.526532][T18840] should_fail_ex+0x512/0x640 [ 1076.526558][T18840] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1076.526579][T18840] should_failslab+0xc2/0x120 [ 1076.526603][T18840] kmem_cache_alloc_noprof+0x83/0x770 [ 1076.526622][T18840] ? security_file_alloc+0x34/0x2b0 [ 1076.526654][T18840] ? security_file_alloc+0x34/0x2b0 [ 1076.526677][T18840] security_file_alloc+0x34/0x2b0 [ 1076.526703][T18840] init_file+0x93/0x4c0 [ 1076.526731][T18840] alloc_empty_file+0x73/0x1e0 [ 1076.526749][T18840] alloc_file_pseudo+0x13a/0x230 [ 1076.526769][T18840] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1076.526788][T18840] ? security_inode_init_security_anon+0x79/0x240 [ 1076.526816][T18840] __anon_inode_getfile+0xe8/0x280 [ 1076.526839][T18840] new_userfaultfd+0x260/0x490 [ 1076.526866][T18840] __x64_sys_userfaultfd+0x4b/0xb0 [ 1076.526893][T18840] do_syscall_64+0xcd/0xf80 [ 1076.526918][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.526938][T18840] RIP: 0033:0x7f87d3b8f749 [ 1076.526954][T18840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.526978][T18840] RSP: 002b:00007f87d4976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1076.526994][T18840] RAX: ffffffffffffffda RBX: 00007f87d3de5fa0 RCX: 00007f87d3b8f749 [ 1076.527006][T18840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001 [ 1076.527016][T18840] RBP: 00007f87d4976090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.527026][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.527036][T18840] R13: 00007f87d3de6038 R14: 00007f87d3de5fa0 R15: 00007ffef19cc4c8 [ 1076.527061][T18840] [ 1076.950152][T18558] veth0_vlan: entered promiscuous mode [ 1077.167539][T18558] veth1_vlan: entered promiscuous mode [ 1077.730490][T17441] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1077.741845][ T30] audit: type=1400 audit(1766656014.599:1947): avc: denied { bind } for pid=18846 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1077.772370][ T30] audit: type=1400 audit(1766656014.599:1948): avc: denied { name_bind } for pid=18846 comm="syz.1.3507" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1077.876422][T18558] veth0_macvtap: entered promiscuous mode [ 1077.884777][ T30] audit: type=1400 audit(1766656014.599:1949): avc: denied { node_bind } for pid=18846 comm="syz.1.3507" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1077.914078][T18558] veth1_macvtap: entered promiscuous mode [ 1077.930126][T18558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.952347][T17441] usb 3-1: Using ep0 maxpacket: 32 [ 1077.956477][T18558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.964798][T17441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.985969][T17441] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1078.025138][T17441] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1078.049281][T17441] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1078.086664][T17441] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1078.106688][T17441] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1078.122307][T17441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.150920][T14452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.168973][T14452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.179416][T17441] usb 3-1: Product: syz [ 1078.183583][T17441] usb 3-1: Manufacturer: syz [ 1078.192284][T17441] usb 3-1: SerialNumber: syz [ 1078.209434][T17441] usb 3-1: config 0 descriptor?? [ 1078.229725][T14452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.240184][T17441] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1078.252290][T17441] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1078.261177][T14452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.280627][T17441] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1078.302289][ T5928] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1078.472957][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 1078.480711][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.494550][T16158] usb 3-1: USB disconnect, device number 76 [ 1078.525211][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.543343][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.567172][ T5928] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1078.587381][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.604161][ T5928] usb 1-1: config 0 descriptor?? [ 1078.676040][T18869] syzkaller0: entered promiscuous mode [ 1078.692718][T18869] syzkaller0: entered allmulticast mode [ 1078.713684][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.721606][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.034351][ T5928] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1081.099306][T16158] usb 1-1: USB disconnect, device number 50 [ 1081.922288][T16158] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1082.142990][ T30] audit: type=1400 audit(1766656019.349:1950): avc: denied { create } for pid=18900 comm="syz.1.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1082.166033][T16158] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1082.280735][T16158] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.290074][T16158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.300145][T16158] usb 1-1: config 0 descriptor?? [ 1082.309594][T16158] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1082.831428][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1082.845839][T18899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18899 comm=syz.2.3516 [ 1082.949104][T18912] CIFS mount error: No usable UNC path provided in device string! [ 1082.949104][T18912] [ 1083.135659][T18912] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1083.595216][T18923] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3520'. [ 1084.582265][T18867] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1084.796058][T18867] usb 3-1: Using ep0 maxpacket: 32 [ 1084.806133][T18867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.816771][T18867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1084.828356][T18867] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1084.840927][T18867] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1084.864601][T18867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1084.876574][T18867] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1084.966669][T18941] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1085.188286][T18867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.249944][ T5928] usb 1-1: USB disconnect, device number 51 [ 1085.263019][T18867] usb 3-1: Product: syz [ 1085.329517][T18945] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 1085.339364][T18943] syzkaller0: entered promiscuous mode [ 1085.355475][T18867] usb 3-1: Manufacturer: syz [ 1085.360125][T18867] usb 3-1: SerialNumber: syz [ 1085.460318][T18867] usb 3-1: config 0 descriptor?? [ 1085.473704][T18867] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1085.480556][T18867] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1085.490290][T18867] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1085.493543][T18943] syzkaller0: entered allmulticast mode [ 1086.245320][T18867] usb 3-1: USB disconnect, device number 77 [ 1087.466179][T18966] xt_TCPMSS: Only works on TCP SYN packets [ 1088.431331][T18974] netlink: 'syz.5.3537': attribute type 1 has an invalid length. [ 1088.433335][ T30] audit: type=1400 audit(1766656025.639:1951): avc: denied { nlmsg_read } for pid=18973 comm="syz.5.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1088.607385][T18977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1088.614328][T18977] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1088.626357][T18977] vhci_hcd vhci_hcd.0: Device attached [ 1088.637324][T18974] vlan2: entered allmulticast mode [ 1088.642610][T18974] bond_slave_1: entered allmulticast mode [ 1088.883149][ T5928] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1088.912519][T15775] usb 40-1: SetAddress Request (2) to port 0 [ 1088.919559][T15775] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1088.922334][T16158] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1088.934736][T18867] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1089.060288][ T5928] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1089.068522][ T5928] usb 4-1: config 0 has no interface number 0 [ 1089.082406][T16158] usb 3-1: device descriptor read/64, error -71 [ 1089.088838][ T5928] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1089.101954][ T5928] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1089.113955][T18867] usb 1-1: config 0 has no interfaces? [ 1089.119473][T18867] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1089.130070][T18867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.140168][ T5928] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1089.150420][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.159254][T18867] usb 1-1: config 0 descriptor?? [ 1089.173978][ T5928] usb 4-1: Product: syz [ 1089.178169][ T5928] usb 4-1: Manufacturer: syz [ 1089.188161][ T5928] usb 4-1: SerialNumber: syz [ 1089.207005][ T5928] usb 4-1: config 0 descriptor?? [ 1089.213053][T18977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1089.233784][ T5928] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1089.263578][ T5928] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1089.393142][T16158] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1089.402998][T18985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.987816][T18985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.042112][T16158] usb 3-1: device descriptor read/64, error -71 [ 1090.049765][ T5928] scsi host1: usb-storage 4-1:0.20 [ 1090.059614][T19016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3541'. [ 1090.086374][T18867] usb 1-1: USB disconnect, device number 52 [ 1090.162758][T16158] usb usb3-port1: attempt power cycle [ 1090.230632][ T5928] usb 4-1: USB disconnect, device number 59 [ 1090.242312][T18978] vhci_hcd: connection reset by peer [ 1090.250514][ T65] vhci_hcd vhci_hcd.3: stop threads [ 1090.257124][ T65] vhci_hcd vhci_hcd.3: release socket [ 1090.266458][ T65] vhci_hcd vhci_hcd.3: disconnect device [ 1090.502303][T16158] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1090.534699][ T5877] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1090.543479][T16158] usb 3-1: device descriptor read/8, error -71 [ 1090.702261][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 1090.715448][ T5877] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1090.738230][ T5877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.754128][ T5877] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1090.765133][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.774397][ T5877] usb 1-1: Product: syz [ 1090.778598][ T5877] usb 1-1: Manufacturer: syz [ 1090.783549][ T5877] usb 1-1: SerialNumber: syz [ 1090.793339][T16158] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1090.823871][T16158] usb 3-1: device descriptor read/8, error -71 [ 1090.942459][T16158] usb usb3-port1: unable to enumerate USB device [ 1091.206267][ T5877] usb 1-1: 0:2 : does not exist [ 1092.033950][T18985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.112915][T18985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.251741][ T5877] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1092.484037][ T5877] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1092.499182][ T5877] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1092.779898][ T5877] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1092.852448][ T5877] usb 1-1: USB disconnect, device number 53 [ 1092.920806][T18557] udevd[18557]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.206527][ T30] audit: type=1400 audit(1766656030.419:1952): avc: denied { append } for pid=19078 comm="syz.3.3549" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1093.243334][T19077] syzkaller0: entered promiscuous mode [ 1093.248938][T19077] syzkaller0: entered allmulticast mode [ 1094.002497][T15775] usb 40-1: device descriptor read/8, error -110 [ 1094.163120][ T30] audit: type=1326 audit(1766656031.379:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.232291][ T30] audit: type=1326 audit(1766656031.379:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.266800][ T30] audit: type=1326 audit(1766656031.379:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.779077][ T30] audit: type=1326 audit(1766656031.569:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.802980][ T30] audit: type=1326 audit(1766656031.569:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.847725][ T30] audit: type=1326 audit(1766656031.599:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.925837][ T30] audit: type=1326 audit(1766656031.599:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1094.981455][ T30] audit: type=1326 audit(1766656031.599:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1095.013476][T15775] usb usb40-port1: attempt power cycle [ 1095.023027][ T30] audit: type=1326 audit(1766656031.599:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1095.091385][ T30] audit: type=1326 audit(1766656031.599:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19091 comm="syz.2.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1095.613247][T15775] usb usb40-port1: unable to enumerate USB device [ 1096.190947][T19113] netlink: 'syz.1.3557': attribute type 3 has an invalid length. [ 1097.527094][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1097.544996][T19122] sit0: entered promiscuous mode [ 1097.550065][T19121] netlink: 'syz.5.3558': attribute type 5 has an invalid length. [ 1097.561197][T19122] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 1097.584309][T19122] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1097.619061][ T7211] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.643885][ T7211] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.688451][ T7211] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.712953][ T7211] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.922766][ T5877] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1097.972226][T19133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1098.260929][T19145] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3565'. [ 1098.302277][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 1098.398115][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.417693][ T5877] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1098.426850][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.436102][ T5877] usb 1-1: Product: syz [ 1098.440860][ T5877] usb 1-1: Manufacturer: syz [ 1098.447321][ T5877] usb 1-1: SerialNumber: syz [ 1098.457282][ T5877] usb 1-1: config 0 descriptor?? [ 1099.170776][ T5877] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1099.472301][T19156] tmpfs: Unknown parameter 'ode_hardlimit' [ 1099.533221][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1099.533255][ T30] audit: type=1400 audit(1766656036.729:1998): avc: denied { link } for pid=19154 comm="syz.1.3569" name="#20" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1099.682376][ T30] audit: type=1400 audit(1766656036.739:1999): avc: denied { rename } for pid=19154 comm="syz.1.3569" name="#21" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1099.738663][T19161] syzkaller0: entered promiscuous mode [ 1099.839775][T19161] syzkaller0: entered allmulticast mode [ 1101.455203][ T30] audit: type=1400 audit(1766656038.669:2000): avc: denied { map } for pid=19171 comm="syz.3.3573" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1102.166977][ T5928] usb 1-1: USB disconnect, device number 54 [ 1102.704352][ T5928] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1102.949979][ T30] audit: type=1400 audit(1766656040.129:2001): avc: denied { bind } for pid=19171 comm="syz.3.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1103.079345][ T5928] usb 1-1: config 0 has no interfaces? [ 1103.105335][ T5928] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1103.118020][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.152565][ T5928] usb 1-1: Product: syz [ 1103.158864][ T5928] usb 1-1: Manufacturer: syz [ 1103.185946][ T5928] usb 1-1: SerialNumber: syz [ 1103.360569][ T5928] usb 1-1: config 0 descriptor?? [ 1103.584453][T19212] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1103.593775][T19212] netlink: 4376 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1106.124911][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1106.492966][T19242] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1107.086239][T19247] CIFS mount error: No usable UNC path provided in device string! [ 1107.086239][T19247] [ 1107.148941][T19247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1108.037169][T19256] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1108.043683][T19256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1108.099468][T19256] vhci_hcd vhci_hcd.0: Device attached [ 1108.120079][T19257] vhci_hcd: connection closed [ 1108.125031][ T5990] vhci_hcd vhci_hcd.3: stop threads [ 1108.163104][ T5990] vhci_hcd vhci_hcd.3: release socket [ 1108.262675][ T5990] vhci_hcd vhci_hcd.3: disconnect device [ 1109.320064][T19266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.343330][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1109.368808][T15127] usb 1-1: USB disconnect, device number 55 [ 1109.372288][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1110.086760][T19273] bridge1: entered promiscuous mode [ 1110.470985][T19286] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 1110.532037][T19286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.654378][T19286] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1110.732738][T19290] vlan2: entered allmulticast mode [ 1110.745408][T19290] bond_slave_1: entered allmulticast mode [ 1110.751839][T19290] bond_slave_1: entered promiscuous mode [ 1110.767823][T19290] bond_slave_1: left promiscuous mode [ 1110.780181][T19290] bond1: (slave vlan2): making interface the new active one [ 1110.808949][T19290] bond_slave_1: entered promiscuous mode [ 1110.834220][T19290] vlan2: entered promiscuous mode [ 1110.839693][T19290] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1110.882314][T19292] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 1110.912508][T19292] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1110.931168][ T30] audit: type=1400 audit(1766656048.139:2002): avc: denied { write } for pid=19294 comm="syz.5.3604" path="socket:[68435]" dev="sockfs" ino=68435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1110.931341][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3606'. [ 1111.016699][T19303] netlink: 'syz.0.3606': attribute type 5 has an invalid length. [ 1111.066663][T19289] syzkaller0: entered promiscuous mode [ 1111.192282][T19289] syzkaller0: entered allmulticast mode [ 1112.402349][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1113.919799][ T5835] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1114.125152][T19337] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1114.212749][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 1114.308097][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1114.319763][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1114.381869][ T5835] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1114.400167][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.416839][ T5835] usb 4-1: Product: syz [ 1114.431773][ T5835] usb 4-1: Manufacturer: syz [ 1114.448144][ T5835] usb 4-1: SerialNumber: syz [ 1114.474415][ T5835] usb 4-1: config 0 descriptor?? [ 1114.489586][ T5835] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1114.513451][ T5835] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1115.212241][T15775] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1115.326335][ T5835] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1115.335569][ T5835] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1115.380544][T15775] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.390854][T15775] usb 6-1: config 0 has no interfaces? [ 1115.417405][T15775] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1115.426511][T15775] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1115.434806][T15775] usb 6-1: Product: syz [ 1115.438992][T15775] usb 6-1: Manufacturer: syz [ 1115.444502][T15775] usb 6-1: SerialNumber: syz [ 1115.449945][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.456388][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.456401][T15775] usb 6-1: config 0 descriptor?? [ 1115.562146][ T5835] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1115.569191][ T5835] em28xx 4-1:0.0: No AC97 audio processor [ 1115.585768][ T5835] usb 4-1: USB disconnect, device number 60 [ 1115.593689][ T5835] em28xx 4-1:0.0: Disconnecting em28xx [ 1115.605444][T15127] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1115.623994][ T5835] em28xx 4-1:0.0: Freeing device [ 1115.773559][T15127] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1115.786907][T15127] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1115.788462][T19349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.797290][T15127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1115.806013][T19349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.813987][T15127] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1115.851486][T15127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1115.865627][T15127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1115.875654][T15127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1115.893080][T15127] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1115.902416][T15127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.910414][T15127] usb 3-1: Product: ⊠[ 1115.914977][T15127] usb 3-1: Manufacturer: ⭉㿻묅囻﨓꡶륣缿ﰬ쉆৚榒玘ì‹áš½æ·¸ì¹ã››êšœï·žë•¶èšƒå’¤î­‘ì£î®»ë¢œæ±«ã­ªã¼è¬»ìµ¯à¡´î¿µâ¯®ì§ á»á°æ­·æ‹—ã¬äž¼å®²ç™¬ì›¹é¤¹è¾ì§‚梑䠜ꃅ쎰䃀 [ 1115.944080][T15127] usb 3-1: config 0 descriptor?? [ 1115.955159][T15127] hub 3-1:0.0: bad descriptor, ignoring hub [ 1115.961081][T15127] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1115.982354][T15127] input: ⭉㿻묅囻﨓꡶륣缿ﰬ쉆৚榒玘ì‹áš½æ·¸ì¹ã››êšœï·žë•¶èšƒå’¤î­‘ì£î®»ë¢œæ±«ã­ªã¼è¬»ìµ¯à¡´î¿µâ¯®ì§ á»á°æ­·æ‹—ã as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 1116.130441][T19351] netlink: 'syz.3.3620': attribute type 16 has an invalid length. [ 1116.139055][T19351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1116.183017][T15127] usb 3-1: USB disconnect, device number 82 [ 1116.602943][T19348] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3618'. [ 1116.613237][T19348] bond_slave_0: entered promiscuous mode [ 1116.619520][T19348] bond_slave_1: entered promiscuous mode [ 1116.629601][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.649932][ T5877] usb 6-1: USB disconnect, device number 2 [ 1117.392082][ T30] audit: type=1400 audit(1766656054.599:2003): avc: denied { write } for pid=19362 comm="syz.2.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1117.416265][T19372] input: syz0 as /devices/virtual/input/input47 [ 1117.499460][ T30] audit: type=1400 audit(1766656054.709:2004): avc: denied { unmount } for pid=18558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1118.146459][ T30] audit: type=1400 audit(1766656055.359:2005): avc: denied { mount } for pid=19379 comm="syz.5.3628" name="/" dev="ramfs" ino=70015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1118.312668][T19392] loop2: detected capacity change from 0 to 2 [ 1118.593409][T17441] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1118.647430][T19187] Dev loop2: unable to read RDB block 2 [ 1118.653072][T19187] loop2: unable to read partition table [ 1118.658912][T19187] loop2: partition table beyond EOD, truncated [ 1118.669150][T19392] Dev loop2: unable to read RDB block 2 [ 1118.687591][T19392] loop2: unable to read partition table [ 1118.968344][T19392] loop2: partition table beyond EOD, truncated [ 1118.988956][T19392] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1119.013181][T17441] usb 6-1: config 0 has an invalid interface number: 249 but max is 0 [ 1119.037782][T17441] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.106018][T17441] usb 6-1: config 0 has no interface number 0 [ 1119.127641][T17441] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1119.165494][T19404] xt_hashlimit: size too large, truncated to 1048576 [ 1119.177033][T17441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.214607][T17441] usb 6-1: config 0 descriptor?? [ 1119.243549][T17441] port100 6-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1119.761439][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.074052][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.828980][ T30] audit: type=1400 audit(1766656058.039:2006): avc: denied { read } for pid=19433 comm="syz.0.3646" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1120.912035][ T30] audit: type=1400 audit(1766656058.069:2007): avc: denied { open } for pid=19433 comm="syz.0.3646" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1121.061146][T19437] xt_ecn: cannot match TCP bits for non-tcp packets [ 1121.223408][ T30] audit: type=1326 audit(1766656058.259:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1121.256875][T19439] CIFS mount error: No usable UNC path provided in device string! [ 1121.256875][T19439] [ 1121.272048][ T30] audit: type=1326 audit(1766656058.269:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1121.295596][T19439] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1122.274359][ T30] audit: type=1326 audit(1766656058.269:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1122.417044][ T30] audit: type=1326 audit(1766656058.269:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1122.430715][T15775] usb 6-1: USB disconnect, device number 3 [ 1123.362227][ T30] audit: type=1326 audit(1766656058.279:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1123.466749][ T30] audit: type=1326 audit(1766656058.289:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1123.491218][ T30] audit: type=1326 audit(1766656058.289:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1123.517194][ T30] audit: type=1326 audit(1766656058.289:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1123.541022][ T30] audit: type=1326 audit(1766656058.289:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1123.774394][ T30] audit: type=1326 audit(1766656058.289:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1124.047211][ T30] audit: type=1326 audit(1766656058.289:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1124.193784][ T30] audit: type=1326 audit(1766656058.299:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1126.108837][ T30] audit: type=1326 audit(1766656058.299:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19435 comm="syz.2.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1126.614804][T19479] xt_socket: unknown flags 0x50 [ 1126.664504][ T4078] vlan2: left promiscuous mode [ 1127.890948][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1127.922280][ T30] audit: type=1400 audit(1766656065.099:2041): avc: denied { read } for pid=19486 comm="syz.0.3662" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1127.987114][ T30] audit: type=1400 audit(1766656065.099:2042): avc: denied { open } for pid=19486 comm="syz.0.3662" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1128.069845][ T30] audit: type=1400 audit(1766656065.129:2043): avc: denied { ioctl } for pid=19486 comm="syz.0.3662" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1128.830240][ T30] audit: type=1400 audit(1766656066.039:2044): avc: denied { name_bind } for pid=19497 comm="syz.1.3666" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1130.074608][ T30] audit: type=1400 audit(1766656067.129:2045): avc: denied { map } for pid=19515 comm="syz.2.3672" path="socket:[70324]" dev="sockfs" ino=70324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1130.584662][ T30] audit: type=1400 audit(1766656067.129:2046): avc: denied { accept } for pid=19515 comm="syz.2.3672" path="socket:[70324]" dev="sockfs" ino=70324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1130.662604][ T30] audit: type=1400 audit(1766656067.159:2047): avc: denied { create } for pid=19515 comm="syz.2.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1132.339743][T19542] netlink: 'syz.5.3678': attribute type 5 has an invalid length. [ 1133.056563][T19570] befs: (nullb0): invalid magic header [ 1133.082947][T19575] all (unregistering): Released all slaves [ 1133.201891][ T5877] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1133.415916][ T5877] usb 3-1: config 0 has no interfaces? [ 1133.430648][ T5877] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1133.469036][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.500915][ T5877] usb 3-1: Product: syz [ 1133.517821][ T5877] usb 3-1: Manufacturer: syz [ 1133.534955][ T5877] usb 3-1: SerialNumber: syz [ 1133.573546][ T5877] usb 3-1: config 0 descriptor?? [ 1133.655266][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3696'. [ 1133.773651][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1133.794712][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1133.974147][T19560] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.095958][ T5835] usb 3-1: USB disconnect, device number 83 [ 1134.411129][T19614] netlink: 'syz.0.3705': attribute type 9 has an invalid length. [ 1134.726368][T19621] binder: 19615:19621 ioctl c0306201 0 returned -14 [ 1135.141212][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1135.916781][T19629] comedi comedi3: comedi_config --init_data is deprecated [ 1135.974939][ T30] audit: type=1400 audit(1766656073.189:2048): avc: denied { bind } for pid=19628 comm="syz.0.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1136.229901][T19643] CIFS mount error: No usable UNC path provided in device string! [ 1136.229901][T19643] [ 1136.268959][T19643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1136.626643][T19648] xt_ecn: cannot match TCP bits for non-tcp packets [ 1136.764466][ T30] audit: type=1326 audit(1766656073.839:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1136.881907][ T30] audit: type=1326 audit(1766656073.839:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1136.930958][ T30] audit: type=1326 audit(1766656073.839:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.066554][ T30] audit: type=1326 audit(1766656073.839:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.092333][ T30] audit: type=1326 audit(1766656073.839:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.211758][T19658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3717'. [ 1137.571047][ T30] audit: type=1326 audit(1766656073.849:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.674289][ T30] audit: type=1326 audit(1766656073.849:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.711742][ T30] audit: type=1326 audit(1766656073.849:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1137.781561][ T30] audit: type=1326 audit(1766656073.849:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.2.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87d3b8f749 code=0x7ffc0000 [ 1138.387150][T19675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1138.413748][T19675] team0: Port device batadv1 added [ 1138.511901][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3721'. [ 1138.649170][T19686] CIFS mount error: No usable UNC path provided in device string! [ 1138.649170][T19686] [ 1138.687486][T19686] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1139.277607][T19685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1139.306792][T19685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.352037][T19685] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1139.605783][T19685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1139.697841][T19685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1139.781881][T19685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1139.789751][T19685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1139.866057][T19685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1139.927017][T19685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1140.020859][T19685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1140.050923][T19685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1140.322267][T15775] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1140.483217][T15775] usb 6-1: Using ep0 maxpacket: 32 [ 1140.495518][T15775] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.522345][T15775] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1140.551738][T15775] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1140.578998][T15775] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1140.610488][T15775] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1140.690829][T15775] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1140.720352][T15775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.738743][T15775] usb 6-1: Product: syz [ 1140.743330][T15775] usb 6-1: Manufacturer: syz [ 1140.747907][T15775] usb 6-1: SerialNumber: syz [ 1140.768574][T15775] usb 6-1: config 0 descriptor?? [ 1140.794782][T15775] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 1140.802267][T15271] Bluetooth: hci0: command 0x040f tx timeout [ 1140.820829][T15775] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1140.839287][T15775] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1141.131271][ T5877] usb 6-1: USB disconnect, device number 4 [ 1141.663956][T15271] Bluetooth: hci1: command 0x0406 tx timeout [ 1141.682503][T15271] Bluetooth: hci2: command 0x0406 tx timeout [ 1141.912469][T15271] Bluetooth: hci3: command 0x0c1a tx timeout [ 1142.093105][T15271] Bluetooth: hci4: command 0x0c1a tx timeout [ 1142.432212][ T5928] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1142.842211][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 1142.848728][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.860353][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1142.869263][ T5928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1142.880299][ T5928] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1142.989313][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1142.997990][ T5928] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1143.012331][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.022305][ T5928] usb 2-1: Product: syz [ 1143.034263][ T5928] usb 2-1: Manufacturer: syz [ 1143.038958][ T5928] usb 2-1: SerialNumber: syz [ 1143.186003][T19750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1143.195049][T19750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1143.399968][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1143.400001][ T30] audit: type=1804 audit(1766656080.599:2081): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3739" name="/newroot/109/file0" dev="tmpfs" ino=591 res=1 errno=0 [ 1143.724672][ T5928] usb 2-1: config 0 descriptor?? [ 1143.732418][T15271] Bluetooth: hci1: command 0x0406 tx timeout [ 1143.755231][ T5928] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1143.762479][T15271] Bluetooth: hci2: command 0x0406 tx timeout [ 1143.777772][ T5928] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1143.788797][ T5928] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1143.865763][ T5928] usb 2-1: USB disconnect, device number 68 [ 1144.002245][T15271] Bluetooth: hci3: command 0x0c1a tx timeout [ 1144.474920][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1144.891998][T15271] Bluetooth: hci4: command 0x0c1a tx timeout [ 1145.048202][T19762] futex_wake_op: syz.3.3744 tries to shift op by -1; fix this program [ 1145.163008][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 1145.178555][T19762] team1: entered promiscuous mode [ 1145.183623][T19762] team1: entered allmulticast mode [ 1145.464766][T19771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1145.474841][T19771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1146.666176][T15271] Bluetooth: hci3: command 0x0c1a tx timeout [ 1146.963626][T15271] Bluetooth: hci4: command 0x0c1a tx timeout [ 1146.984009][T19783] geneve2: entered promiscuous mode [ 1146.991437][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 36992 - 0 [ 1147.019634][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 36992 - 0 [ 1147.089991][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 36992 - 0 [ 1147.100273][T19788] CIFS mount error: No usable UNC path provided in device string! [ 1147.100273][T19788] [ 1147.110371][T19788] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1147.130871][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 36992 - 0 [ 1147.376162][ T5877] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1147.605758][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 1147.616054][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.646161][ T5877] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1147.693403][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.703730][ T5877] usb 2-1: Product: syz [ 1147.707925][ T5877] usb 2-1: Manufacturer: syz [ 1147.742249][ T5928] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1147.757007][ T5877] usb 2-1: SerialNumber: syz [ 1147.835692][ T30] audit: type=1400 audit(1766656085.049:2082): avc: denied { getopt } for pid=19786 comm="syz.5.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1147.973356][ T5877] usb 2-1: config 0 descriptor?? [ 1147.985233][ T5877] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1148.022675][ T30] audit: type=1326 audit(1766656085.239:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1148.042247][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 1148.342235][ T30] audit: type=1326 audit(1766656085.239:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1148.911054][ T30] audit: type=1326 audit(1766656085.239:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1148.992474][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.055994][T19814] netlink: 'syz.0.3754': attribute type 16 has an invalid length. [ 1149.057968][ T5928] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1149.074237][ T30] audit: type=1326 audit(1766656085.409:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1149.111703][T19814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3754'. [ 1149.149364][ T5928] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1149.162571][ T5928] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1149.183255][ T30] audit: type=1326 audit(1766656085.409:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1149.219331][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1149.242463][ T5928] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1149.257049][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.306756][ T5928] usb 3-1: Product: syz [ 1149.315122][ T30] audit: type=1326 audit(1766656085.439:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1149.340821][ T5928] usb 3-1: Manufacturer: syz [ 1149.355470][ T5928] usb 3-1: SerialNumber: syz [ 1149.357228][T19814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.361280][ T30] audit: type=1326 audit(1766656085.439:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1149.407803][ T5928] usb 3-1: config 0 descriptor?? [ 1149.422829][ T5928] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1149.432084][ T5928] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1149.455436][ T5928] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1149.985015][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1150.476081][ T5877] usb 3-1: USB disconnect, device number 84 [ 1150.530471][ T30] audit: type=1326 audit(1766656085.449:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1150.583030][ T30] audit: type=1326 audit(1766656085.449:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1150.632826][ T30] audit: type=1326 audit(1766656085.449:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1150.681979][T19827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1150.724911][ T5928] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1150.727502][ T30] audit: type=1326 audit(1766656085.449:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1150.811151][ T30] audit: type=1326 audit(1766656085.449:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19803 comm="syz.0.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f458c18f749 code=0x7ffc0000 [ 1151.003949][T19831] netlink: 'syz.3.3760': attribute type 11 has an invalid length. [ 1151.012224][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 1151.018771][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1151.051083][ T5928] usb 1-1: config 0 has no interface number 0 [ 1151.083669][ T5928] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1151.120232][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.128747][ T5928] usb 1-1: Product: syz [ 1151.129965][T19835] loop2: detected capacity change from 0 to 7 [ 1151.167878][T19835] Dev loop2: unable to read RDB block 7 [ 1151.181263][ T5928] usb 1-1: Manufacturer: syz [ 1151.182667][T19835] loop2: unable to read partition table [ 1151.205472][ T5928] usb 1-1: SerialNumber: syz [ 1151.208455][T19835] loop2: partition table beyond EOD, truncated [ 1151.243208][T19835] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1151.244025][ T5928] usb 1-1: config 0 descriptor?? [ 1151.300993][ T5928] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1151.310576][ T5877] usb 2-1: USB disconnect, device number 69 [ 1152.790050][ T5949] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1152.945621][ T5949] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1152.958279][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.974762][ T5949] usb 2-1: Product: syz [ 1152.978929][ T5949] usb 2-1: Manufacturer: syz [ 1152.995665][ T5949] usb 2-1: SerialNumber: syz [ 1153.003597][ T5949] usb 2-1: config 0 descriptor?? [ 1153.023227][T19822] netlink: 'syz.0.3757': attribute type 1 has an invalid length. [ 1153.082180][T19863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3757'. [ 1153.175018][T19822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1153.220743][ T5949] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1153.725758][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1154.424601][ T5928] gspca_spca1528: reg_w err -110 [ 1154.428272][ T5949] gspca_sunplus: reg_w_riv err -110 [ 1154.431151][ T5928] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1154.466382][ T5949] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1154.515512][T15127] usb 1-1: USB disconnect, device number 56 [ 1155.182240][ T5928] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1155.458267][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1155.533877][ T5928] usb 4-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 1155.696919][ T5928] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1155.833167][ T5928] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.8f [ 1155.875436][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.948157][ T5928] usb 4-1: Product: syz [ 1156.034077][ T5928] usb 4-1: Manufacturer: syz [ 1156.078685][T18867] usb 2-1: USB disconnect, device number 70 [ 1156.139470][ T5928] usb 4-1: SerialNumber: syz [ 1156.528696][ T5928] usb 4-1: config 0 descriptor?? [ 1156.953449][T19888] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1156.983543][T19888] team0: Port device batadv1 added [ 1157.258149][ T5928] usb 4-1: can't set config #0, error -71 [ 1157.293273][ T5928] usb 4-1: USB disconnect, device number 61 [ 1158.443459][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1158.443489][ T30] audit: type=1804 audit(1766656094.919:2125): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3770" name="/newroot/95/bus/file0" dev="overlay" ino=531 res=1 errno=0 [ 1158.562387][ T30] audit: type=1804 audit(1766656094.919:2126): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.3770" name="/newroot/95/bus/file0" dev="overlay" ino=531 res=1 errno=0 [ 1159.054600][T19908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3780'. [ 1159.992780][T17441] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1160.513602][T17441] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1160.525810][T17441] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1160.537777][T17441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1160.544761][T17441] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1160.566271][T17441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.585287][T15127] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1160.600691][T17441] usb 4-1: config 0 descriptor?? [ 1160.683631][T19912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1160.755806][T15127] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1160.776671][T15127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.891897][T15127] usb 3-1: Product: syz [ 1160.896549][T15127] usb 3-1: Manufacturer: syz [ 1160.901142][T15127] usb 3-1: SerialNumber: syz [ 1160.923933][T19912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.950120][T19912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.089449][T19926] netlink: 'syz.0.3787': attribute type 9 has an invalid length. [ 1161.097371][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'. [ 1162.006181][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1162.440281][T19929] misc userio: Invalid payload size [ 1162.453784][T15127] rtl8150 3-1:1.0: couldn't reset the device [ 1162.463993][T17441] usbhid 4-1:0.0: can't add hid device: -71 [ 1162.490689][T15127] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1162.529325][T17441] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1162.844455][T17441] usb 4-1: USB disconnect, device number 62 [ 1163.307481][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1164.737319][T18867] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1165.079595][T18867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1165.184552][ T5928] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1165.244293][T18867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1165.485904][T18867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1165.505406][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 1165.568764][T18867] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1165.597714][ T5928] usb 1-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 1165.645799][T18867] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1165.656678][ T5928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1165.694060][T18867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.807139][T19964] loop2: detected capacity change from 0 to 7 [ 1165.818878][ T5928] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.8f [ 1165.836891][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.845759][T19964] Dev loop2: unable to read RDB block 7 [ 1165.855413][T18867] usb 4-1: Product: syz [ 1165.870687][T18867] usb 4-1: Manufacturer: syz [ 1165.887036][ T5928] usb 1-1: Product: syz [ 1165.891439][T18867] usb 4-1: SerialNumber: syz [ 1165.906267][ T5928] usb 1-1: Manufacturer: syz [ 1165.910893][ T5928] usb 1-1: SerialNumber: syz [ 1165.915686][T19964] loop2: unable to read partition table [ 1165.931794][T18867] usb 4-1: config 0 descriptor?? [ 1165.956166][T19964] loop2: partition table beyond EOD, truncated [ 1165.968369][ T5928] usb 1-1: config 0 descriptor?? [ 1165.973935][T19950] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1165.996009][T19964] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1166.147498][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 1166.168004][T18867] usb 4-1: ucan: probing device on interface #0 [ 1166.174375][ T5928] usb 1-1: can't set config #0, error -32 [ 1166.192971][ T5928] usb 1-1: USB disconnect, device number 57 [ 1166.202215][T18867] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 1166.214448][T19945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.223007][T19945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.279521][T18867] usb 4-1: ucan: probe failed; try to update the device firmware [ 1166.290563][ T5877] usb 3-1: USB disconnect, device number 85 [ 1166.576148][T18867] usb 4-1: USB disconnect, device number 63 [ 1166.878055][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.885388][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.897594][T19975] bond_slave_0: left promiscuous mode [ 1166.904660][T19975] bond_slave_1: left promiscuous mode [ 1166.961982][T19975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.975310][T19975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.002994][ T5877] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1167.216226][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 1167.224388][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.236849][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1167.668963][T19977] geneve2: entered promiscuous mode [ 1167.684686][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.723769][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.734712][ T5877] usb 3-1: config 0 descriptor?? [ 1167.763415][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.805001][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.808520][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1167.830336][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.280888][ T5877] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1168.316466][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.352222][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.379741][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.411842][T14452] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1168.420804][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.479585][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.857270][T15775] usb 3-1: USB disconnect, device number 86 [ 1169.332453][ T5877] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1169.346299][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3813'. [ 1169.358650][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3813'. [ 1169.632289][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 1169.739263][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.802036][ T5877] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.844504][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1169.882208][ T5877] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1169.890540][ T5877] usb 2-1: Product: syz [ 1169.922487][ T5877] usb 2-1: Manufacturer: syz [ 1171.138446][ T5877] hub 2-1:4.0: USB hub found [ 1171.152311][T15127] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1171.160019][T15775] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1172.100807][ T5877] hub 2-1:4.0: 1 port detected [ 1172.183270][T15127] usb 3-1: Using ep0 maxpacket: 32 [ 1172.197612][T15127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.239230][T15127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1172.262508][T15775] usb 6-1: Using ep0 maxpacket: 32 [ 1172.280160][T15127] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1172.322054][T15127] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1172.353507][T20050] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1172.369117][T20052] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1172.379069][T20052] team0: Port device batadv1 added [ 1172.385885][ T30] audit: type=1400 audit(1766656109.599:2127): avc: denied { ioctl } for pid=20011 comm="syz.1.3809" path="socket:[72549]" dev="sockfs" ino=72549 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1172.422779][T20014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.428148][T15127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1172.487235][T15127] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1172.498048][T15127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.506560][T15127] usb 3-1: Product: syz [ 1172.510817][T15127] usb 3-1: Manufacturer: syz [ 1172.515587][T15127] usb 3-1: SerialNumber: syz [ 1172.527047][T15127] usb 3-1: config 0 descriptor?? [ 1172.543417][T15127] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1172.551086][T15127] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1172.561019][T15127] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1172.578007][T20014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.633177][ T5877] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1172.662237][ T5877] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1172.832971][ T5877] usb 2-1: USB disconnect, device number 71 [ 1173.207430][T15127] usb 3-1: USB disconnect, device number 87 [ 1173.239321][T15775] usb 6-1: device descriptor read/all, error -71 [ 1173.494044][T17441] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1173.752214][T17441] usb 4-1: Using ep0 maxpacket: 32 [ 1173.789150][T17441] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1173.810338][T17441] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1173.839827][T17441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.889127][T17441] usb 4-1: Product: syz [ 1173.896456][T17441] usb 4-1: Manufacturer: syz [ 1173.906051][T17441] usb 4-1: SerialNumber: syz [ 1173.936085][T17441] usb 4-1: config 0 descriptor?? [ 1173.938179][T20077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1173.988088][ T30] audit: type=1400 audit(1766656111.189:2128): avc: denied { map } for pid=20073 comm="syz.2.3826" path="socket:[72887]" dev="sockfs" ino=72887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1174.295021][T15127] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1174.434682][T17441] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 1174.441655][T17441] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1174.498398][T17441] usb 4-1: USB disconnect, device number 64 [ 1174.542487][T15127] usb 3-1: Using ep0 maxpacket: 16 [ 1174.549129][T15127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.570229][T15127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.590410][T15127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1174.612449][T15127] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1174.631684][T15127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.652780][T15127] usb 3-1: config 0 descriptor?? [ 1174.702365][T18867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1174.883554][T18867] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1174.906193][T18867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.941227][ T30] audit: type=1400 audit(1766656112.149:2129): avc: denied { name_bind } for pid=20085 comm="syz.1.3831" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1174.967437][T18867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.977655][T18867] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1174.991241][ T30] audit: type=1400 audit(1766656112.179:2130): avc: denied { node_bind } for pid=20085 comm="syz.1.3831" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1175.026109][T20090] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1175.100901][T18867] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1175.232741][T18867] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1175.244304][T18867] usb 6-1: Manufacturer: syz [ 1175.356582][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.370711][T18867] usb 6-1: config 0 descriptor?? [ 1175.380236][T15127] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max [ 1175.395734][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.416718][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.427991][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.439661][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.455469][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.472189][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.482218][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.492176][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.499383][T15127] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 1175.561712][T15127] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1175.593289][T15127] microsoft 0003:045E:07DA.002F: no inputs found [ 1175.599628][T15127] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 1175.642252][T15775] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1175.766114][T15127] usb 3-1: USB disconnect, device number 88 [ 1175.882241][T15775] usb 4-1: Using ep0 maxpacket: 16 [ 1175.897386][T15775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.923944][T15775] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1175.966730][T15775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.002967][T15775] usb 4-1: config 0 descriptor?? [ 1176.193637][T20099] FAULT_INJECTION: forcing a failure. [ 1176.193637][T20099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.220223][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.1.3834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.220253][T20099] Tainted: [L]=SOFTLOCKUP [ 1176.220260][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1176.220271][T20099] Call Trace: [ 1176.220281][T20099] [ 1176.220289][T20099] dump_stack_lvl+0x16c/0x1f0 [ 1176.220318][T20099] should_fail_ex+0x512/0x640 [ 1176.220349][T20099] strncpy_from_user+0x3b/0x2e0 [ 1176.220378][T20099] getname_flags.part.0+0x8f/0x550 [ 1176.220402][T20099] getname_flags+0x93/0xf0 [ 1176.220426][T20099] __x64_sys_renameat+0xa2/0x100 [ 1176.220444][T20099] do_syscall_64+0xcd/0xf80 [ 1176.220467][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.220484][T20099] RIP: 0033:0x7f571fb8f749 [ 1176.220499][T20099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.220516][T20099] RSP: 002b:00007f572094d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1176.220533][T20099] RAX: ffffffffffffffda RBX: 00007f571fde5fa0 RCX: 00007f571fb8f749 [ 1176.220545][T20099] RDX: ffffffffffffffff RSI: 0000200000000580 RDI: ffffffffffffffff [ 1176.220556][T20099] RBP: 00007f572094d090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.220571][T20099] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 1176.220582][T20099] R13: 00007f571fde6038 R14: 00007f571fde5fa0 R15: 00007ffc962ad2f8 [ 1176.220607][T20099] [ 1176.903583][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.922184][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.930122][T15775] hid-picolcd 0003:04D8:C002.0030: No report with id 0x11 found [ 1176.967761][T15775] usb 4-1: USB disconnect, device number 65 [ 1177.405122][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1177.414548][T20108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1177.833310][T18867] usbhid 6-1:0.0: can't add hid device: -71 [ 1178.359308][T18867] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1178.371529][T18867] usb 6-1: USB disconnect, device number 7 [ 1178.792080][T15271] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1180.402686][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1180.474697][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1180.506098][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1180.682251][T15127] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1181.063852][T15127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.075583][T15127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.114666][T15127] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1181.158911][T15127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.179680][T15127] usb 4-1: config 0 descriptor?? [ 1181.763986][T15127] hid_parser_main: 1 callbacks suppressed [ 1181.764008][T15127] playstation 0003:054C:0BA0.0031: unknown main item tag 0x0 [ 1182.362701][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.728518][T15127] playstation 0003:054C:0BA0.0031: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 1182.739046][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.810884][T15127] playstation 0003:054C:0BA0.0031: Failed to retrieve feature with reportID 18: -71 [ 1182.828399][T20165] netlink: 'syz.1.3854': attribute type 11 has an invalid length. [ 1182.832171][T15127] playstation 0003:054C:0BA0.0031: Failed to retrieve DualShock4 pairing info: -71 [ 1182.856152][T15127] playstation 0003:054C:0BA0.0031: Failed to get MAC address from DualShock4 [ 1182.865128][T15127] playstation 0003:054C:0BA0.0031: Failed to create dualshock4. [ 1182.880378][T15127] playstation 0003:054C:0BA0.0031: probe with driver playstation failed with error -71 [ 1182.893522][T15127] usb 4-1: USB disconnect, device number 66 [ 1183.000847][ T30] audit: type=1400 audit(1766656120.209:2131): avc: denied { read write } for pid=20168 comm="syz.5.3856" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1183.072229][ T30] audit: type=1400 audit(1766656120.249:2132): avc: denied { open } for pid=20168 comm="syz.5.3856" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1183.142720][ T30] audit: type=1400 audit(1766656120.249:2133): avc: denied { ioctl } for pid=20168 comm="syz.5.3856" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1183.284911][T20182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3860'. [ 1184.112215][T20195] binder: 20191:20195 ioctl c0306201 0 returned -14 [ 1186.155772][T20220] FAULT_INJECTION: forcing a failure. [ 1186.155772][T20220] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.170702][T20220] CPU: 1 UID: 0 PID: 20220 Comm: syz.1.3871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.170729][T20220] Tainted: [L]=SOFTLOCKUP [ 1186.170734][T20220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1186.170740][T20220] Call Trace: [ 1186.170744][T20220] [ 1186.170749][T20220] dump_stack_lvl+0x16c/0x1f0 [ 1186.170767][T20220] should_fail_ex+0x512/0x640 [ 1186.170785][T20220] ? fs_reclaim_acquire+0xae/0x150 [ 1186.170802][T20220] should_failslab+0xc2/0x120 [ 1186.170817][T20220] __kmalloc_noprof+0xeb/0x910 [ 1186.170835][T20220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1186.170854][T20220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1186.170869][T20220] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1186.170885][T20220] ? tomoyo_profile+0x47/0x60 [ 1186.170903][T20220] tomoyo_path_number_perm+0x245/0x580 [ 1186.170916][T20220] ? tomoyo_path_number_perm+0x237/0x580 [ 1186.170930][T20220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1186.170944][T20220] ? find_held_lock+0x2b/0x80 [ 1186.170973][T20220] ? find_held_lock+0x2b/0x80 [ 1186.170991][T20220] ? hook_file_ioctl_common+0x144/0x410 [ 1186.171023][T20220] ? __fget_files+0x20e/0x3c0 [ 1186.171052][T20220] security_file_ioctl+0x9b/0x240 [ 1186.171069][T20220] __x64_sys_ioctl+0xb7/0x210 [ 1186.171083][T20220] do_syscall_64+0xcd/0xf80 [ 1186.171099][T20220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.171111][T20220] RIP: 0033:0x7f571fb8f749 [ 1186.171121][T20220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.171132][T20220] RSP: 002b:00007f572094d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.171143][T20220] RAX: ffffffffffffffda RBX: 00007f571fde5fa0 RCX: 00007f571fb8f749 [ 1186.171150][T20220] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1186.171162][T20220] RBP: 00007f572094d090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.171168][T20220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.171175][T20220] R13: 00007f571fde6038 R14: 00007f571fde5fa0 R15: 00007ffc962ad2f8 [ 1186.171190][T20220] [ 1186.569471][T20220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1186.626360][T20224] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 1186.738958][ T30] audit: type=1400 audit(1766656123.869:2134): avc: denied { getopt } for pid=20225 comm="syz.5.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1186.994814][T20229] ceph: No mds server is up or the cluster is laggy [ 1186.997744][T18867] libceph: connect (1)[c::]:6789 error -101 [ 1186.999552][T18867] libceph: mon0 (1)[c::]:6789 connect error [ 1187.267161][T17339] libceph: connect (1)[c::]:6789 error -101 [ 1187.275214][ T30] audit: type=1400 audit(1766656124.079:2135): avc: denied { shutdown } for pid=20225 comm="syz.5.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1187.295251][T17339] libceph: mon0 (1)[c::]:6789 connect error [ 1188.427022][T20245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.496156][T20245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.624778][T20245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.641804][T20249] CIFS mount error: No usable UNC path provided in device string! [ 1188.641804][T20249] [ 1188.832540][T20245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.133381][T20249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1190.223611][ T6361] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.252735][ T1867] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.264511][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3876'. [ 1190.269883][ T1867] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.281761][ T1867] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.583154][ T30] audit: type=1400 audit(1766656127.789:2136): avc: denied { create } for pid=20270 comm="syz.3.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1191.102253][T15127] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1191.186262][ T30] audit: type=1400 audit(1766656127.819:2137): avc: denied { setopt } for pid=20270 comm="syz.3.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1191.292204][T15127] usb 4-1: Using ep0 maxpacket: 16 [ 1191.437367][T15127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.763297][T15127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.774387][T15127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1191.787549][T15127] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1191.799577][T15127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.825249][T15127] usb 4-1: config 0 descriptor?? [ 1192.160607][T20286] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1192.181693][ T30] audit: type=1400 audit(1766656129.359:2138): avc: denied { shutdown } for pid=20270 comm="syz.3.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1192.237800][ T30] audit: type=1400 audit(1766656129.359:2139): avc: denied { ioctl } for pid=20270 comm="syz.3.3884" path="socket:[74022]" dev="sockfs" ino=74022 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1192.767452][T20292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20292 comm=syz.1.3889 [ 1192.780575][T20292] netlink: 'syz.1.3889': attribute type 1 has an invalid length. [ 1193.661726][T15127] usbhid 4-1:0.0: can't add hid device: -71 [ 1193.672229][T15127] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1193.691439][T15127] usb 4-1: USB disconnect, device number 67 [ 1193.758239][T20300] fuse: Bad value for 'fd' [ 1194.269320][T20292] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1194.269664][T20297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1194.286848][T20297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1194.905319][ T30] audit: type=1400 audit(1766656132.069:2140): avc: denied { mounton } for pid=20311 comm="syz.0.3896" path="/208/bus" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1196.211874][T20330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1196.219108][T20330] IPv6: NLM_F_CREATE should be set when creating new route [ 1196.532201][T17441] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1197.622195][T17441] usb 1-1: Using ep0 maxpacket: 32 [ 1197.636012][T17441] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.718410][T17441] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1197.759114][T17441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.788906][T17441] usb 1-1: Product: syz [ 1197.807626][T17441] usb 1-1: Manufacturer: syz [ 1197.825668][T17441] usb 1-1: SerialNumber: syz [ 1197.849451][T17441] usb 1-1: config 0 descriptor?? [ 1197.870610][T17441] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1198.962207][T17441] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1199.078716][ T5835] usb 1-1: USB disconnect, device number 58 [ 1199.122536][T17441] usb 2-1: Using ep0 maxpacket: 32 [ 1199.134410][T17441] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.163450][T17441] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1199.183329][T17441] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1199.194720][T17441] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1199.215786][T17441] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1199.255478][T17441] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1199.264925][T17441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.272993][T17441] usb 2-1: Product: syz [ 1199.277615][T17441] usb 2-1: Manufacturer: syz [ 1199.283942][T17441] usb 2-1: SerialNumber: syz [ 1199.304118][T17441] usb 2-1: config 0 descriptor?? [ 1199.312643][T17441] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1199.319675][T17441] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1199.328227][T17441] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1199.526714][T15775] usb 2-1: USB disconnect, device number 72 [ 1200.273500][ T30] audit: type=1400 audit(1766656137.139:2141): avc: denied { audit_write } for pid=20378 comm="syz.0.3914" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1201.089857][ T30] audit: type=1400 audit(1766656138.299:2142): avc: denied { bind } for pid=20391 comm="syz.1.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1201.209307][T20394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1201.572929][ T30] audit: type=1400 audit(1766656138.779:2143): avc: denied { map } for pid=20400 comm="syz.1.3921" path="socket:[73620]" dev="sockfs" ino=73620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1201.597569][ T30] audit: type=1400 audit(1766656138.779:2144): avc: denied { read } for pid=20400 comm="syz.1.3921" path="socket:[73620]" dev="sockfs" ino=73620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1201.751178][ T30] audit: type=1400 audit(1766656138.959:2145): avc: denied { ioctl } for pid=20407 comm="syz.3.3924" path="socket:[73640]" dev="sockfs" ino=73640 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1201.829648][ T30] audit: type=1400 audit(1766656138.999:2146): avc: denied { listen } for pid=20405 comm="syz.5.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1201.881280][ T30] audit: type=1400 audit(1766656139.009:2147): avc: denied { accept } for pid=20405 comm="syz.5.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1202.080876][T20419] overlayfs: failed to resolve './file1/file0': -2 [ 1202.158684][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1202.523951][ T30] audit: type=1400 audit(1766656139.119:2148): avc: denied { shutdown } for pid=20405 comm="syz.5.3923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1202.575493][T15775] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1202.802236][T15775] usb 4-1: Using ep0 maxpacket: 32 [ 1202.818764][T15775] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.839564][T15775] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1202.855927][T15775] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1202.889521][T15775] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1202.945872][T15775] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1202.973698][T15775] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1203.001742][T15775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.032645][T15775] usb 4-1: Product: syz [ 1203.046142][T15775] usb 4-1: Manufacturer: syz [ 1203.055213][T20425] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1203.070408][T15775] usb 4-1: SerialNumber: syz [ 1203.083844][T15775] usb 4-1: config 0 descriptor?? [ 1203.084085][T20425] team0: Port device batadv1 added [ 1203.101233][T15775] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1203.115533][T15775] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1203.136294][T15775] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1203.223975][T20435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1203.243531][T20436] [U] [ 1203.246542][T20436] [U] [ 1203.249236][T20436] [U] [ 1203.251928][T20436] [U] [ 1203.254617][T20436] [U] [ 1203.257310][T20436] [U] [ 1203.259998][T20436] [U] [ 1203.262687][T20436] [U] [ 1203.269174][T20436] [U] [ 1203.271880][T20436] [U] [ 1203.274561][T20436] [U] [ 1203.306636][ T6238] usb 4-1: USB disconnect, device number 68 [ 1203.402203][T15775] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1203.552479][T15775] usb 6-1: device descriptor read/64, error -71 [ 1203.812214][T15775] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1203.972207][T15775] usb 6-1: device descriptor read/64, error -71 [ 1204.008483][T20433] [U] [ 1204.094521][T15775] usb usb6-port1: attempt power cycle [ 1204.192237][ T6238] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1204.315484][T20404] syz.0.3922 (20404): drop_caches: 1 [ 1204.364198][ T6238] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1204.378843][ T6238] usb 4-1: config 0 has no interface number 0 [ 1204.486301][T15775] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1204.518843][ T6238] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1204.610637][T15775] usb 6-1: device descriptor read/8, error -71 [ 1204.630108][ T6238] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1204.666820][ T6238] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1204.725095][ T6238] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1204.729770][T20404] syz.0.3922 (20404): drop_caches: 1 [ 1204.734756][ T6238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.771744][ T6238] usb 4-1: Product: syz [ 1204.781012][ T6238] usb 4-1: Manufacturer: syz [ 1204.853067][ T6238] usb 4-1: SerialNumber: syz [ 1204.914792][T15775] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1205.059292][ T6238] usb 4-1: config 0 descriptor?? [ 1205.077589][T15775] usb 6-1: device descriptor read/8, error -71 [ 1205.080781][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1205.094249][ T6238] usb 4-1: NFC: Unable to get FW version [ 1205.123657][ T6238] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1205.214932][T15775] usb usb6-port1: unable to enumerate USB device [ 1205.366104][ T6238] usb 4-1: USB disconnect, device number 69 [ 1205.447567][T20469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1206.582820][ T30] audit: type=1400 audit(1766656143.609:2149): avc: denied { read } for pid=20485 comm="syz.3.3948" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1206.643314][ T5835] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1206.713458][ T30] audit: type=1400 audit(1766656143.609:2150): avc: denied { open } for pid=20485 comm="syz.3.3948" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1206.802407][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 1206.815529][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.822244][ T6238] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1206.853805][ T5835] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1206.878862][ T5835] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1206.910145][ T5835] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1206.934825][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1206.967748][ T5835] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1206.979419][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.005363][ T5835] usb 6-1: Product: syz [ 1207.012206][ T6238] usb 3-1: Using ep0 maxpacket: 32 [ 1207.017266][ T5835] usb 6-1: Manufacturer: syz [ 1207.033613][ T5835] usb 6-1: SerialNumber: syz [ 1207.034904][T20493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1207.050239][ T6238] usb 3-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 1207.060596][ T6238] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.384718][ T5835] usb 6-1: config 0 descriptor?? [ 1207.406640][ T5835] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 1207.407536][ T6238] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.8f [ 1207.422788][ T6238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.430793][ T6238] usb 3-1: Product: syz [ 1207.462240][ T5835] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1207.462255][ T6238] usb 3-1: Manufacturer: syz [ 1207.462273][ T6238] usb 3-1: SerialNumber: syz [ 1207.499401][ T5835] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1207.534644][ T6238] usb 3-1: config 0 descriptor?? [ 1207.609041][ T5835] usb 6-1: USB disconnect, device number 12 [ 1207.672935][ T30] audit: type=1400 audit(1766656144.889:2151): avc: denied { listen } for pid=20499 comm="syz.1.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1208.013610][T20506] No control pipe specified [ 1208.019092][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1208.358091][T20505] No such timeout policy "syz1" [ 1208.859291][T20516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3958'. [ 1208.888524][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1208.897782][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1210.003681][T20520] bridge1: entered promiscuous mode [ 1211.352324][T17441] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1211.972269][T17441] usb 6-1: Using ep0 maxpacket: 16 [ 1211.991360][ T6238] usb 3-1: USB disconnect, device number 89 [ 1212.001390][T17441] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.015790][T17441] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1212.024986][T17441] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1212.036880][T17441] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.054426][T17441] usb 6-1: config 0 descriptor?? [ 1212.267321][T20539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3966'. [ 1212.638844][ T5835] usb 6-1: USB disconnect, device number 13 [ 1212.698405][T20545] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 1212.772860][T20549] loop2: detected capacity change from 0 to 7 [ 1212.825193][T19187] Dev loop2: unable to read RDB block 7 [ 1212.849331][T19187] loop2: unable to read partition table [ 1213.353692][T19187] loop2: partition table beyond EOD, truncated [ 1213.375999][T20549] Dev loop2: unable to read RDB block 7 [ 1213.387811][T20549] loop2: unable to read partition table [ 1213.432431][T20549] loop2: partition table beyond EOD, truncated [ 1213.438690][T20549] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1213.679582][ T30] audit: type=1400 audit(1766656150.889:2152): avc: denied { getopt } for pid=20555 comm="syz.5.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1213.810899][T20564] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3972'. [ 1215.339284][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3976'. [ 1215.428765][ T30] audit: type=1400 audit(1766656152.489:2153): avc: denied { map } for pid=20579 comm="syz.0.3977" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1215.782409][ T5949] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1215.945006][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 1216.012999][ T5949] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1216.042209][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1216.071315][ T5949] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1216.091639][ T5949] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.111866][ T5949] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1216.194981][T20589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3979'. [ 1216.481551][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.632981][ T5949] usb 6-1: GET_CAPABILITIES returned 0 [ 1217.638525][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 1217.702213][ T5835] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1217.842982][ T5835] usb 2-1: device descriptor read/64, error -71 [ 1218.041602][T20611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1218.051919][T20611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1218.339517][ T5835] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1218.392566][ T6238] usb 6-1: USB disconnect, device number 14 [ 1218.522202][ T5835] usb 2-1: device descriptor read/64, error -71 [ 1218.632375][ T5835] usb usb2-port1: attempt power cycle [ 1218.675154][T20610] netlink: 'syz.2.3987': attribute type 4 has an invalid length. [ 1219.035959][T20622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1219.049545][ T5835] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1219.406234][T20624] tmpfs: Unknown parameter 'quoa_block_‹0rdlimit' [ 1219.502836][ T5835] usb 2-1: device descriptor read/8, error -71 [ 1219.577523][T20624] vivid-000: ================= START STATUS ================= [ 1219.585312][T20624] vivid-000: Generate PTS: true [ 1219.591153][ T30] audit: type=1400 audit(1766656156.789:2154): avc: denied { accept } for pid=20619 comm="syz.2.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1219.610825][T20624] vivid-000: Generate SCR: true [ 1219.687940][T20624] tpg source WxH: 720x576 (Y'CbCr) [ 1219.693932][T20624] tpg field: 2 [ 1219.698033][T20624] tpg crop: (0,0)/720x112 [ 1220.224204][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3992'. [ 1220.962534][T20624] tpg compose: (0,0)/2880x14 [ 1220.992983][T20624] tpg colorspace: 1 [ 1221.005030][T20624] tpg transfer function: 0/0 [ 1221.064566][ T6238] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1221.072270][T20624] tpg Y'CbCr encoding: 0/0 [ 1221.076735][T20624] tpg quantization: 0/0 [ 1221.080956][T20624] tpg RGB range: 0/2 [ 1221.115271][T20624] vivid-000: ================== END STATUS ================== [ 1221.283580][ T6238] usb 4-1: Using ep0 maxpacket: 16 [ 1221.290211][ T6238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.315178][ T6238] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1221.335758][ T6238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.369776][ T6238] usb 4-1: config 0 descriptor?? [ 1222.307960][ T6238] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1222.551747][T20638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.573404][T20638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.766759][ T30] audit: type=1400 audit(1766656159.859:2155): avc: denied { write } for pid=20647 comm="syz.0.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1222.791840][T20652] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3996'. [ 1222.835384][ T5835] usb 4-1: USB disconnect, device number 70 [ 1223.917968][T20670] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1224.136691][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1224.927137][ T30] audit: type=1326 audit(1766656161.549:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1225.229711][ T30] audit: type=1326 audit(1766656161.549:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1225.898626][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1225.939656][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1225.960367][ T30] audit: type=1326 audit(1766656161.549:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1226.158381][T20690] netlink: 'syz.3.4006': attribute type 12 has an invalid length. [ 1226.228348][ T30] audit: type=1326 audit(1766656161.639:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1226.274602][T20690] netlink: 'syz.3.4006': attribute type 11 has an invalid length. [ 1226.410990][ T30] audit: type=1326 audit(1766656161.639:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1226.591467][T15271] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1226.610560][T20700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1226.619733][ T30] audit: type=1326 audit(1766656161.649:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1226.732607][ T30] audit: type=1326 audit(1766656162.099:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1226.877843][ T30] audit: type=1326 audit(1766656162.099:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20675 comm="syz.3.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8030f8f749 code=0x7ffc0000 [ 1228.222983][T20708] CIFS mount error: No usable UNC path provided in device string! [ 1228.222983][T20708] [ 1228.685164][T20708] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1229.034635][T20715] binder: 20712:20715 ioctl c0306201 0 returned -14 [ 1229.052311][ T5835] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1229.575343][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 1229.583932][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1229.604439][ T5835] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1229.628455][ T5835] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.669267][ T5835] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1229.678695][ T5835] usb 4-1: config 128 has no interface number 0 [ 1229.689218][ T5835] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1229.711700][ T5835] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1229.735799][ T5835] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1229.788458][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.812225][ T5835] usb 4-1: Product: syz [ 1229.812249][ T5835] usb 4-1: Manufacturer: syz [ 1229.831551][ T5835] usb 4-1: SerialNumber: syz [ 1229.941628][T20710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1230.775518][ T5835] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.809852][ T5835] usb 4-1: USB disconnect, device number 71 [ 1230.867444][T19126] udevd[19126]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.282752][T17339] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1232.543583][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.554706][T17339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.584024][T17339] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1232.608020][T17339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.677519][T17339] usb 1-1: config 0 descriptor?? [ 1232.950426][ T5877] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1233.015944][T20747] geneve3: entered promiscuous mode [ 1233.023159][ T9003] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 42940 - 0 [ 1233.032818][ T9003] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 42940 - 0 [ 1233.041861][ T9003] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 42940 - 0 [ 1233.060915][ T9003] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 42940 - 0 [ 1233.142396][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 1233.161076][ T5877] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.220689][T17339] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 1233.251944][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1233.293000][ T5877] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1233.312451][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.336839][T17339] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1233.336947][ T5835] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1233.375601][ T5877] usb 4-1: config 0 descriptor?? [ 1233.535014][T17339] cp2112 0003:10C4:EA90.0033: Part Number: 0x82 Device Version: 0xFE [ 1233.575983][T20755] xt_hashlimit: size too large, truncated to 1048576 [ 1233.663476][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 1233.670001][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.704009][ T5835] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1233.719999][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.732170][ T5835] usb 6-1: Product: syz [ 1233.736333][ T5835] usb 6-1: Manufacturer: syz [ 1233.740919][ T5835] usb 6-1: SerialNumber: syz [ 1233.747663][ T5835] usb 6-1: config 0 descriptor?? [ 1233.756035][ T5835] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1233.780271][T20758] Device name cannot be null; rc = [-22] [ 1233.982462][ T5877] nzxt-smart2 0003:1E71:2009.0034: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1234.082249][T20763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1234.091273][T20763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1234.257859][T20730] cp2112 0003:10C4:EA90.0033: Error starting transaction: -38 [ 1235.413765][T17339] cp2112 0003:10C4:EA90.0033: error reading lock byte: -71 [ 1235.449565][T17339] usb 1-1: USB disconnect, device number 59 [ 1235.591139][ T30] audit: type=1400 audit(1766656172.799:2164): avc: denied { relabelfrom } for pid=20768 comm="syz.2.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1236.170012][ T30] audit: type=1400 audit(1766656172.819:2165): avc: denied { relabelto } for pid=20768 comm="syz.2.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1236.402198][ T5835] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1236.490738][T17339] usb 4-1: USB disconnect, device number 72 [ 1236.585466][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1236.596574][ T5835] usb 3-1: config 32 has an invalid interface number: 85 but max is 0 [ 1236.613133][ T5835] usb 3-1: config 32 has no interface number 0 [ 1236.626992][ T5835] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.650231][ T5835] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1236.679173][ T5835] usb 3-1: config 32 interface 85 has no altsetting 0 [ 1236.696537][ T5835] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1236.709863][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.730197][ T5835] usb 3-1: Product: syz [ 1236.742375][ T5835] usb 3-1: Manufacturer: syz [ 1236.760144][ T5835] usb 3-1: SerialNumber: syz [ 1237.057874][T20769] trusted_key: encrypted_key: keylen parameter is missing [ 1238.325692][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.331993][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.866700][ T5835] appletouch 3-1:32.85: Failed to read mode from device. [ 1238.884273][ T5835] appletouch 3-1:32.85: probe with driver appletouch failed with error -5 [ 1238.912027][ T5835] usb 3-1: USB disconnect, device number 90 [ 1239.271150][T18867] usb 6-1: USB disconnect, device number 15 [ 1239.332200][ T5835] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1239.595501][T20815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1239.607596][T20815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1239.642473][T15775] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1239.663412][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1239.676403][ T5835] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1239.693682][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.716018][ T5835] usb 2-1: config 0 descriptor?? [ 1239.725434][ T5835] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1239.795127][T15775] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1239.804241][T15775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.812395][T15775] usb 3-1: Product: syz [ 1239.816572][T15775] usb 3-1: Manufacturer: syz [ 1239.821154][T15775] usb 3-1: SerialNumber: syz [ 1239.827274][T15775] usb 3-1: config 0 descriptor?? [ 1239.840468][T15775] usb 3-1: interface 1 not found [ 1239.933610][T18867] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1240.048061][T15775] usb 3-1: USB disconnect, device number 91 [ 1240.093632][T18867] usb 6-1: not running at top speed; connect to a high speed hub [ 1240.103198][T18867] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1240.111925][T18867] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1240.122280][T18867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.132850][T18867] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.142441][T18867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.150477][T18867] usb 6-1: Product: syz [ 1240.154808][T18867] usb 6-1: Manufacturer: syz [ 1240.159408][T18867] usb 6-1: SerialNumber: syz [ 1240.651130][T18867] usb 6-1: 0:2 : does not exist [ 1240.970909][T18867] usb 6-1: USB disconnect, device number 16 [ 1241.064319][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1241.073758][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1241.392764][T20843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1242.207354][ T5877] usb 2-1: USB disconnect, device number 77 [ 1242.507956][T20860] overlayfs: missing 'lowerdir' [ 1242.520074][ T30] audit: type=1400 audit(1766656179.729:2166): avc: denied { checkpoint_restore } for pid=20857 comm="syz.0.4057" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1245.341600][T15271] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1246.009788][T20895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1247.723155][T20904] binder: 20903:20904 unknown command 0 [ 1247.732372][T20904] binder: 20903:20904 ioctl c0306201 200000000680 returned -22 [ 1248.390764][T20917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1248.557222][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4077'. [ 1248.882425][T17339] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1248.940568][ T30] audit: type=1400 audit(1766656186.149:2167): avc: denied { create } for pid=20908 comm="syz.3.4073" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1249.145480][T17339] usb 3-1: device descriptor read/64, error -71 [ 1249.552375][T17339] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1249.852468][T17339] usb 3-1: device descriptor read/64, error -71 [ 1249.990702][T17339] usb usb3-port1: attempt power cycle [ 1250.515495][T17339] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1250.533244][ T30] audit: type=1400 audit(1766656187.749:2168): avc: denied { unlink } for pid=17093 comm="syz-executor" name="file0" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1250.646493][T17339] usb 3-1: device descriptor read/8, error -71 [ 1250.677122][T20944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1251.319110][T17339] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1251.343347][T17339] usb 3-1: device descriptor read/8, error -71 [ 1251.457003][T17339] usb usb3-port1: unable to enumerate USB device [ 1251.904276][T20956] 9p: Bad value for 'rfdno' [ 1251.961923][ T30] audit: type=1400 audit(1766656189.159:2169): avc: denied { read } for pid=20952 comm="syz.0.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1252.057000][T20963] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1252.108209][T20944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1252.129199][T20944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1252.149886][T20944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1252.162292][T20944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1252.182810][T20944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1252.442385][T15775] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1252.462337][ T5835] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1252.469978][ T5949] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1252.477935][ T791] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1252.644349][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.682230][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 1252.692177][T15775] usb 3-1: Using ep0 maxpacket: 32 [ 1252.706378][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.726741][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.743172][T15775] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.774900][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1252.802285][ T5835] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1252.812946][ T791] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1252.832218][T15775] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1252.841760][T15775] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1252.863393][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.890281][ T5949] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1252.902157][ T791] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1252.930679][ T5949] usb 1-1: can't read configurations, error -61 [ 1252.951441][ T791] usb 6-1: Manufacturer: syz [ 1252.958174][ T5835] usb 4-1: config 0 descriptor?? [ 1252.984264][ T791] usb 6-1: config 0 descriptor?? [ 1252.989239][T15775] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1253.025570][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 1253.072503][T15775] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1253.102260][ T5949] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1253.122761][T15775] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1253.167680][T15775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.222179][T15775] usb 3-1: Product: syz [ 1253.226395][T15775] usb 3-1: Manufacturer: syz [ 1253.231003][T15775] usb 3-1: SerialNumber: syz [ 1253.282233][T15271] Bluetooth: hci0: command 0x040f tx timeout [ 1253.322639][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 1253.584873][ T5949] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1253.676640][T15775] usb 3-1: config 0 descriptor?? [ 1253.704806][T15775] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1253.711714][T15775] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1253.719943][ T5949] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1253.730270][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.752175][ T5949] usb 1-1: can't read configurations, error -61 [ 1253.763335][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.771128][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 1253.803415][ T5949] usb usb1-port1: attempt power cycle [ 1253.812176][T15775] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1253.910866][ T5835] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1253.941821][T15775] usb 3-1: USB disconnect, device number 96 [ 1253.978434][ T5835] pwc: recv_control_msg error -71 req 04 val 1000 [ 1254.012576][ T5835] pwc: recv_control_msg error -71 req 04 val 1300 [ 1254.049845][ T5835] pwc: recv_control_msg error -71 req 04 val 1400 [ 1254.090201][ T5835] pwc: recv_control_msg error -71 req 02 val 2000 [ 1254.121612][ T5835] pwc: recv_control_msg error -71 req 02 val 2100 [ 1254.162245][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 1254.168930][T15271] Bluetooth: hci2: command 0x0406 tx timeout [ 1254.242206][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 1254.248314][T15271] Bluetooth: hci4: command 0x0c1a tx timeout [ 1254.302309][ T5949] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1254.323635][ T791] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0035/input/input52 [ 1254.360485][ T5835] pwc: recv_control_msg error -71 req 04 val 1500 [ 1254.581781][T20981] netlink: 'syz.3.4095': attribute type 16 has an invalid length. [ 1254.599077][T20981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4095'. [ 1254.625581][ T5949] usb 1-1: device descriptor read/8, error -71 [ 1254.641730][ T5835] pwc: recv_control_msg error -71 req 02 val 2500 [ 1254.722539][ T5835] pwc: recv_control_msg error -71 req 02 val 2400 [ 1254.729448][ T5835] pwc: recv_control_msg error -71 req 02 val 2600 [ 1254.740083][ T791] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0035/input/input53 [ 1254.751530][ T5835] pwc: recv_control_msg error -71 req 02 val 2900 [ 1254.758358][ T5835] pwc: recv_control_msg error -71 req 02 val 2800 [ 1254.775670][ T791] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1254.793091][ T5835] pwc: recv_control_msg error -71 req 04 val 1100 [ 1254.814007][ T5835] pwc: recv_control_msg error -71 req 04 val 1200 [ 1254.824558][ T791] usb 6-1: USB disconnect, device number 17 [ 1254.838293][ T5835] pwc: Registered as video103. [ 1254.848440][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 1255.657176][ T5835] usb 4-1: USB disconnect, device number 73 [ 1255.988884][T20996] fido_id[20996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1257.201485][T15271] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1257.208424][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 1257.511404][T15271] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1258.272472][ T5949] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1258.542361][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 1258.613622][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.644973][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4110'. [ 1258.664176][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1258.683205][T21031] netlink: 'syz.2.4110': attribute type 5 has an invalid length. [ 1258.694795][ T5949] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 1258.714482][ T5949] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1258.742721][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1258.752902][ T5949] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1258.772154][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.781027][ T5949] usb 2-1: Product: syz [ 1258.811747][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.811752][ T5949] usb 2-1: Manufacturer: syz [ 1258.811901][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.838594][ T5949] usb 2-1: SerialNumber: syz [ 1258.865112][ T5949] usb 2-1: config 0 descriptor?? [ 1258.885337][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.896420][ T5949] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1258.922457][ T5949] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1258.945861][ T5949] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1259.505289][ T5877] usb 2-1: USB disconnect, device number 78 [ 1259.529100][T21040] [ 1259.531422][T21040] ====================================================== [ 1259.538404][T21040] WARNING: possible circular locking dependency detected [ 1259.545402][T21040] syzkaller #0 Tainted: G L [ 1259.551344][T21040] ------------------------------------------------------ [ 1259.558327][T21040] syz.2.4114/21040 is trying to acquire lock: [ 1259.564368][T21040] ffff888046599848 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 1259.574081][T21040] [ 1259.574081][T21040] but task is already holding lock: [ 1259.581413][T21040] ffff888056fa9c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1259.590689][T21040] [ 1259.590689][T21040] which lock already depends on the new lock. [ 1259.590689][T21040] [ 1259.601060][T21040] [ 1259.601060][T21040] the existing dependency chain (in reverse order) is: [ 1259.610041][T21040] [ 1259.610041][T21040] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1259.617216][T21040] __mutex_lock+0x1aa/0x1ca0 [ 1259.622305][T21040] kernfs_fop_write_iter+0x28f/0x570 [ 1259.628106][T21040] iter_file_splice_write+0xa24/0x12b0 [ 1259.634073][T21040] do_splice+0x1478/0x1fc0 [ 1259.638992][T21040] __do_splice+0x32a/0x360 [ 1259.643915][T21040] __x64_sys_splice+0x187/0x250 [ 1259.649272][T21040] do_syscall_64+0xcd/0xf80 [ 1259.654276][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.660671][T21040] [ 1259.660671][T21040] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1259.668034][T21040] __mutex_lock+0x1aa/0x1ca0 [ 1259.673128][T21040] pipe_lock+0x64/0x80 [ 1259.677699][T21040] iter_file_splice_write+0x1ea/0x12b0 [ 1259.683701][T21040] do_splice+0x1478/0x1fc0 [ 1259.688623][T21040] __do_splice+0x32a/0x360 [ 1259.693545][T21040] __x64_sys_splice+0x187/0x250 [ 1259.698902][T21040] do_syscall_64+0xcd/0xf80 [ 1259.703908][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.710300][T21040] [ 1259.710300][T21040] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 1259.717665][T21040] mnt_want_write+0x6f/0x450 [ 1259.722760][T21040] ovl_set_acl+0x3a0/0xa80 [ 1259.727679][T21040] set_posix_acl+0x25f/0x320 [ 1259.732777][T21040] vfs_set_acl+0x44a/0x920 [ 1259.737696][T21040] do_set_acl+0xd9/0x1a0 [ 1259.742439][T21040] do_setxattr+0xeb/0x180 [ 1259.747275][T21040] filename_setxattr+0x16b/0x1d0 [ 1259.752719][T21040] path_setxattrat+0x1de/0x2a0 [ 1259.757987][T21040] __x64_sys_lsetxattr+0xc9/0x140 [ 1259.763516][T21040] do_syscall_64+0xcd/0xf80 [ 1259.768521][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.774915][T21040] [ 1259.774915][T21040] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1259.783580][T21040] __lock_acquire+0x1669/0x2890 [ 1259.788931][T21040] lock_acquire+0x179/0x330 [ 1259.793937][T21040] down_read+0x9b/0x460 [ 1259.798606][T21040] lookup_slow+0x42/0x70 [ 1259.803346][T21040] path_lookupat+0x5e9/0xc40 [ 1259.808441][T21040] filename_lookup+0x224/0x5f0 [ 1259.813706][T21040] kern_path+0x35/0x50 [ 1259.818276][T21040] lookup_bdev+0xd8/0x280 [ 1259.823109][T21040] resume_store+0x1d6/0x490 [ 1259.828118][T21040] kobj_attr_store+0x58/0x80 [ 1259.833209][T21040] sysfs_kf_write+0xf2/0x150 [ 1259.838300][T21040] kernfs_fop_write_iter+0x3af/0x570 [ 1259.844097][T21040] vfs_write+0x7d3/0x11d0 [ 1259.848927][T21040] ksys_write+0x12a/0x250 [ 1259.853759][T21040] do_syscall_64+0xcd/0xf80 [ 1259.858764][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.865157][T21040] [ 1259.865157][T21040] other info that might help us debug this: [ 1259.865157][T21040] [ 1259.875358][T21040] Chain exists of: [ 1259.875358][T21040] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 1259.875358][T21040] [ 1259.888715][T21040] Possible unsafe locking scenario: [ 1259.888715][T21040] [ 1259.896140][T21040] CPU0 CPU1 [ 1259.901480][T21040] ---- ---- [ 1259.906819][T21040] lock(&of->mutex); [ 1259.910777][T21040] lock(&pipe->mutex); [ 1259.917429][T21040] lock(&of->mutex); [ 1259.923922][T21040] rlock(&ovl_i_mutex_dir_key[depth]); [ 1259.929445][T21040] [ 1259.929445][T21040] *** DEADLOCK *** [ 1259.929445][T21040] [ 1259.937560][T21040] 4 locks held by syz.2.4114/21040: [ 1259.942728][T21040] #0: ffff88801d33a9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1259.951761][T21040] #1: ffff8880336c6420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1259.960708][T21040] #2: ffff888056fa9c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1259.970440][T21040] #3: ffff88801eeb9008 (kn->active#62){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1259.980433][T21040] [ 1259.980433][T21040] stack backtrace: [ 1259.986299][T21040] CPU: 1 UID: 0 PID: 21040 Comm: syz.2.4114 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.986321][T21040] Tainted: [L]=SOFTLOCKUP [ 1259.986327][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1259.986336][T21040] Call Trace: [ 1259.986342][T21040] [ 1259.986348][T21040] dump_stack_lvl+0x116/0x1f0 [ 1259.986368][T21040] print_circular_bug+0x275/0x340 [ 1259.986386][T21040] check_noncircular+0x146/0x160 [ 1259.986404][T21040] __lock_acquire+0x1669/0x2890 [ 1259.986425][T21040] lock_acquire+0x179/0x330 [ 1259.986442][T21040] ? lookup_slow+0x42/0x70 [ 1259.986457][T21040] ? __pfx___might_resched+0x10/0x10 [ 1259.986471][T21040] ? find_held_lock+0x2b/0x80 [ 1259.986494][T21040] down_read+0x9b/0x460 [ 1259.986515][T21040] ? lookup_slow+0x42/0x70 [ 1259.986529][T21040] ? __pfx_down_read+0x10/0x10 [ 1259.986549][T21040] ? try_to_unlazy+0x2d1/0x680 [ 1259.986568][T21040] lookup_slow+0x42/0x70 [ 1259.986582][T21040] path_lookupat+0x5e9/0xc40 [ 1259.986601][T21040] filename_lookup+0x224/0x5f0 [ 1259.986621][T21040] ? __pfx_filename_lookup+0x10/0x10 [ 1259.986646][T21040] ? getname_kernel+0x52/0x370 [ 1259.986669][T21040] ? __asan_memcpy+0x3c/0x60 [ 1259.986685][T21040] kern_path+0x35/0x50 [ 1259.986703][T21040] lookup_bdev+0xd8/0x280 [ 1259.986724][T21040] ? __pfx_lookup_bdev+0x10/0x10 [ 1259.986744][T21040] ? __asan_memcpy+0x3c/0x60 [ 1259.986760][T21040] resume_store+0x1d6/0x490 [ 1259.986780][T21040] ? __pfx_resume_store+0x10/0x10 [ 1259.986804][T21040] ? find_held_lock+0x2b/0x80 [ 1259.986826][T21040] ? __pfx_resume_store+0x10/0x10 [ 1259.986847][T21040] kobj_attr_store+0x58/0x80 [ 1259.986866][T21040] ? __pfx_kobj_attr_store+0x10/0x10 [ 1259.986885][T21040] sysfs_kf_write+0xf2/0x150 [ 1259.986901][T21040] kernfs_fop_write_iter+0x3af/0x570 [ 1259.986923][T21040] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1259.986939][T21040] vfs_write+0x7d3/0x11d0 [ 1259.986961][T21040] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1259.986985][T21040] ? __pfx_vfs_write+0x10/0x10 [ 1259.987008][T21040] ksys_write+0x12a/0x250 [ 1259.987026][T21040] ? __pfx_ksys_write+0x10/0x10 [ 1259.987047][T21040] do_syscall_64+0xcd/0xf80 [ 1259.987066][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.987082][T21040] RIP: 0033:0x7f87d3b8f749 [ 1259.987094][T21040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.987109][T21040] RSP: 002b:00007f87d4976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1259.987124][T21040] RAX: ffffffffffffffda RBX: 00007f87d3de5fa0 RCX: 00007f87d3b8f749 [ 1259.987134][T21040] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1259.987143][T21040] RBP: 00007f87d3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1259.987153][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.987162][T21040] R13: 00007f87d3de6038 R14: 00007f87d3de5fa0 R15: 00007ffef19cc4c8 [ 1259.987176][T21040] [ 1260.609843][T21040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1260.622485][T21040] block device autoloading is deprecated and will be removed. [ 1260.634264][T21040] PM: Image not found (code -5)