last executing test programs: 8.456167375s ago: executing program 0 (id=1831): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000380)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="67727071752252ddf7149115056f74615f626c6f636b5f686172646c"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000030000000100000000003f0e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 7.090799924s ago: executing program 0 (id=1832): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="be", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="49220ab5f458f91bffc0f6766a4f", 0xe}], 0x1, &(0x7f00000002c0)}}], 0x3, 0x20048045) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x2a900, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x801, 0x960, 0x190, 0x800, 0x100, 0xaf, 0x2, 0x1, {0x7, 0x1, 0x2}, {0x7f, 0xff, 0x1000000}, {0xc13, 0xffff5cee, 0x1}, {0x8, 0x7fffffff}, 0x1, 0x100, 0xee4, 0x3, 0x3a2c7cd1feb8f820, 0x8, 0x200000, 0x864, 0x143, 0x8, 0x3, 0x2, 0x20, 0x303, 0x1, 0xb}) 6.860994582s ago: executing program 2 (id=1834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x7, 0x3ff, 0x10, 0x5, 0x4, 0x4, 0x40, 0xc, 0x9, 0x0, 0xfffffffb, 0x1, 0x4, 0x0, 0x0, 0x1, [0x143, 0x3]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x81, 0x12, 0x5, '\x00', 0x6}) getpgrp(0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x9}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x1110c0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r7 = syz_io_uring_setup(0x8004229, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10100, 0x6, 0x2002e3}, &(0x7f00000003c0), &(0x7f0000000280)) io_uring_enter(r7, 0x184d, 0x0, 0x42, 0x0, 0x0) r8 = syz_io_uring_setup(0xfb, &(0x7f00000001c0)={0x0, 0x1, 0x10100, 0x3, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r9, &(0x7f00000004c0)="62f1", 0x2, 0x8000, 0x0, 0x0) r10 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r10, 0xc1004110, &(0x7f00000000c0)={0xfffffffb, [0x3b, 0xffff0000, 0x40], [{0x1, 0x9, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe91e}, {0x8}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x1}], 0x40000035}) io_uring_enter(r8, 0x46f6, 0x0, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80800) 6.115067431s ago: executing program 0 (id=1836): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000080)=""/82) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x43, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\x00'}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 6.077773422s ago: executing program 2 (id=1837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000480000000700000708000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000190090001006c617374000000000400028010000180090001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 5.966880068s ago: executing program 2 (id=1838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000120000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1"], 0xbc}}, 0x0) 5.078162569s ago: executing program 0 (id=1839): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) (async) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5.019364705s ago: executing program 2 (id=1840): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36, 0xffffffbf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.879679709s ago: executing program 0 (id=1841): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10c0818, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize}], [{@euid_lt}, {@uid_eq={'uid', 0x3d, r5}}, {@audit}, {@seclabel}, {@dont_measure}]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_newneigh={0x5c, 0x1c, 0x100, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x0, r1, 0x0, 0xc0, 0xa}, [@NDA_PROBES={0x8, 0x4, 0x6}, @NDA_CACHEINFO={0x14, 0x3, {0x10000, 0x1000, 0xffff, 0xc}}, @NDA_PROBES={0x8, 0x4, 0xffffff25}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0xffffffff, 0x9, 0x81}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x88804) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'dvmrp1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1c0, r9, 0x100, 0x6, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r11 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000a00)=0x0) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) getsockopt$inet6_opts(r13, 0x29, 0x39, &(0x7f0000000a80)=""/107, &(0x7f0000000b00)=0x6b) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r13, 0x84, 0x1c, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) r14 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c00)) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r15) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r15) sendmsg$IEEE802154_ASSOCIATE_RESP(r15, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, r16, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x5) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xdb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd9, 0xe, 0x9}}]}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0xb6, 0x5, 0xff, 0x10d, 0xa3}, 0xfa, &(0x7f0000000e80)={0x5, 0xf, 0xfa, 0x4, [@ptm_cap={0x3}, @generic={0xd4, 0x10, 0x3, "7c4fdf9453bca526d376085975d0107d25fafcb128b4973107484fc65b77d818c8b784881f98803e07e25effd32cd5020814c451c6f1c985d2d208c68f7e19a3df2fd79126f90c283264a74a6e1a3ee4be94e2ef2b6220f4caf0e11b55f3e2978ef7561c3e009c8912438f10ea52cfb49bee9e2a6a3107b282ac6ff1af6d6dbaee9f7948ab622eed859cd7432ae14844f33a874827cc722f3a6944a989538eeaf78e6f7f108e338a277a62249268100660bfc78f032d0850b91414e7c13268cafbf0cda6328bfb28a0094d6e993f1044eb"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f2cfd7a2a3b47787932ca49688a0c858"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x3, 0x3, 0x9}]}, 0x2, [{0x12, &(0x7f0000000f80)=@string={0x12, 0x3, "bad49dd524f90cdb394906119d16f6a6"}}, {0x79, &(0x7f0000000fc0)=@string={0x79, 0x3, "50090cf66caaf8ee15c1f1e2a3e7c86b55ab08f69ed43f7afda87870bae156522dafd0135c5a71353a6d3cde934bf866395318c01987031883251daf7bb410a01d7a7fe496b53da301868acb69a02e76404fa53330461b7cd67051012b6be9c7f872014df98be5bf68a04d3191dc2978c80ef3a806a634"}}]}) ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, &(0x7f0000001080)=r12) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0xf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf9, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x30d}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xa7, 0x2, 0x43}}]}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x300, 0x1, 0x5, 0x0, 0x20, 0x5}, 0x94, &(0x7f0000001140)={0x5, 0xf, 0x94, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6, 0x4, 0x8, 0xbad, 0x81}, @ptm_cap={0x3}, @generic={0x6d, 0x10, 0x3, "16efbdb0b9c2f7d4200152753d82442c61686d4f71d537250caef1a2026be8bc39077234846d11f0f303690b076d2284ad5ba650b5c37c6b6f05eb0f44cb438fee1fc6ee78ca8f4f89732b91bbdca355c27cd40a6cba5e19c89f4960a4cdaf6ed013de7badbb439abb66"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4b91ee5e5a6baf22f28afb21272b26ec"}]}, 0x1, [{0x14, &(0x7f0000001200)=@string={0x14, 0x3, "9edde25c32e51d0e91f5161da48524447082"}}]}) ioctl$TIOCMBIC(r13, 0x5417, &(0x7f0000001280)=0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f00000012c0)={0x0, 0x5, 0x4, [0x10, 0x8, 0x7, 0xf8f6]}, &(0x7f0000001300)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000001340)={r17, 0xecf, 0x10}, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xdc}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x481}, 0x4008080) 4.805969975s ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r4, 0x5452, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000100)=[0xf1c1, 0x9], &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x2, 0x2, 0x5, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$chown(0x4, r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0d70010000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB="ad01407b107d094e063806b20fc0ce43e594359e5c51e3f89fbe3847333fc5ac740061d9315088b25f733e78396d8be0b6519146ce958c3253b1c3996f61015c2814bf3528b14def839c05c1cc4d9e9d07c2e70c011ec8bab8159913ee30a71cbeb9d991d8bd074d8f0be917717225f983a8a57b2f"], 0x40}}, 0x0) 3.886820437s ago: executing program 4 (id=1846): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002f0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}, 0x1, 0x0, 0x500}, 0x0) 3.886116202s ago: executing program 4 (id=1847): io_uring_setup(0x2e34, &(0x7f0000000180)) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0xfffffffffffffc97, 0xffffffffffffffda}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8, 0xfffffffe}}, 0x30) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x80000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x9) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) (async) umount2(&(0x7f0000000200)='./file0\x00', 0x3) 3.865050209s ago: executing program 3 (id=1848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='contention_end\x00', r0, 0x0, 0x40000000}, 0x18) r1 = socket$inet(0x2, 0x801, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000440)={0x40000002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r7, 0x80044df9, &(0x7f00000000c0)) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000fd950f00010000001900000000000000f8ca44dfaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000003020000b68c52d2be3c0d90"], 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r10, 0x10, 0x8, 0x6, 0xff, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @local, {[@lsrr={0x83, 0x27, 0x84, [@private=0xa010100, @remote, @rand_addr=0x64010101, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x26, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @broadcast, @rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x3, ':'}, {0x0, 0xa, "2809d24f977665cf"}, {0x2, 0x3, 'R'}, {0x5, 0xd, "a3309af0b7cb65236e2341"}, {0x5, 0xc, "0c66288db2006cf3d4be"}]}]}}}}}) close(r4) r11 = syz_io_uring_setup(0x90e, &(0x7f0000000380)={0x0, 0x3316, 0x400, 0x801, 0x34e}, &(0x7f0000000240)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd_index=0x1, 0x7, 0x0, 0xfffffff3, 0x2}) io_uring_enter(r11, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b870430000000ff000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.794621711s ago: executing program 1 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40088c0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000408b000000000000000000000000000000000000000000000000000000000000000000000000000000000000c51900"/144], 0x90) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 3.690549001s ago: executing program 4 (id=1850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0xfffffd74) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x809000}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.184340515s ago: executing program 1 (id=1851): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x8010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffff9}}) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}], {0x95, 0x0, 0xb00}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.176735392s ago: executing program 3 (id=1852): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40088c0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b01fffffe0000000000000000000000000000000000000000000000000000000000000000000000000000c51900"/144], 0x90) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 2.325132596s ago: executing program 3 (id=1853): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x40000000}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.322225438s ago: executing program 4 (id=1854): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x23, &(0x7f0000006180)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040080) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x10}, 0x2) 2.194590756s ago: executing program 1 (id=1855): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0xffffffffffffffa0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYBLOB="08001b"], 0x34}}, 0x4004010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000007000000000000070000040900010073797a300000000088000000090a010400000000000000000700000208000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}}, 0x20050800) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$sock(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.407487478s ago: executing program 4 (id=1856): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fallocate(r0, 0x41, 0x0, 0x3fe) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xffffffffffffffff}}]}}) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$alg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000f00)=""/98, 0x62}], 0x1}}], 0x1, 0x12040, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'pim6reg\x00', 0x600}) 1.249572943s ago: executing program 1 (id=1857): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000020000000000000000000000000000000000000000000000000000000000000000000000feff179755973e09eddd165a923affff0000000000000000000007fffffe000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffff008a0000"]}, 0x108) 1.127843532s ago: executing program 3 (id=1858): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2200}, 0x39) 1.127221303s ago: executing program 1 (id=1859): syz_open_dev$video4linux(0x0, 0x200000000000, 0x48040) socket(0x14, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) 1.053258663s ago: executing program 3 (id=1860): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x840) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000180), 0x0, 0x39, 0x0, 0x0, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) 739.669709ms ago: executing program 4 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004, @thr={&(0x7f0000001940)="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", &(0x7f0000000100)="6e66791864f9bf3a88fe849cfb8ce33e6c1146e9b024825046e28ca016b7909270d7900c4fac15c86355759ed2f778a48270ba911fb5067c91ff3aeeae84d9c8ae52909243347c143ad1b7401479e2cb22bd85bfc9adddcbbdd62197fd1a035a9917db440eba6294ccdd180f2f95d1794838c727338a697afa4827b3bb769e43f9ddabfd57ad79cb0408837ae567149dcfeab68479d1ce8061ed8f7bf67d41a088844b970e0de0489fc3022c8ef1c35e5c4dc3d79814eb73a8e106fca55edb42bc8db23cc429692dd6431033e9328de7ddc1d956f08ea16dd5763c8d2e77578563"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioperm(0x6, 0x3, 0xb017) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0004800c00010003000000018000000c81189187721aec2055d074a66d000100230b00000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 140.329499ms ago: executing program 1 (id=1862): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000005c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) 134.842609ms ago: executing program 2 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r3, 0x1ad72f7) r5 = accept4(r3, 0x0, 0x0, 0x80000) r6 = accept4$netrom(r3, 0x0, 0x0, 0x80000) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000bc0)="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", 0x2c7}], 0x1) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200040, 0x102) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x48012408}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r9, r10, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) quotactl_fd$Q_GETNEXTQUOTA(r11, 0xffffffff80000901, r9, &(0x7f0000000400)) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0xffffffff, 0x3, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7f}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, r1, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @random="8dd1060fe5db"}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 22.576551ms ago: executing program 0 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40088c0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b000000000000000100000000000000000000000000000000000000000000000000000000000000000000c51900"/144], 0x90) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 0s ago: executing program 3 (id=1865): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x8010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffff9}}) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf18}}], {0x95, 0x0, 0xf00}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 377.575266][ T5871] usb 4-1: config 8 interface 149 has no altsetting 0 [ 377.582048][ T5871] usb 4-1: config 8 interface 130 has no altsetting 0 [ 377.595032][ T5871] usb 4-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=f3.15 [ 377.614821][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.622885][ T5871] usb 4-1: Product: 퓢ﻗ间ꀯã˜ë¹“ç“å¹ë¦‡æ¡€é°Œê®„柚푙駉☜὆굜祒í‚涆ܡãœà»µë”ꦦ [ 377.660287][ T5871] usb 4-1: Manufacturer: ã¡ [ 377.679146][ T5871] usb 4-1: SerialNumber: 〉 [ 377.907068][ T5871] usb 4-1: bad CDC descriptors [ 377.983399][ T5871] cdc_acm 4-1:8.131: Zero length descriptor references [ 377.990334][ T5871] cdc_acm 4-1:8.131: probe with driver cdc_acm failed with error -22 [ 378.021429][ T5871] usb 4-1: USB disconnect, device number 37 [ 378.185866][T10627] syz.0.1369 (10627) used greatest stack depth: 20080 bytes left [ 378.239948][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.246860][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.284714][T10679] IPv6: Can't replace route, no match found [ 378.295562][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 378.325518][T10679] 9pnet: p9_errstr2errno: server reported unknown error  [ 378.362481][T10682] veth0_vlan: entered allmulticast mode [ 378.479983][T10682] veth0_vlan: left promiscuous mode [ 378.503814][T10682] veth0_vlan: entered promiscuous mode [ 379.531080][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 379.531092][ T30] audit: type=1400 audit(1742771283.522:1237): avc: denied { create } for pid=10697 comm="syz.4.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 379.583977][T10707] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 379.602638][T10711] CIFS: Unable to determine destination address [ 379.657065][ T30] audit: type=1400 audit(1742771283.522:1238): avc: denied { write } for pid=10697 comm="syz.4.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.065550][ T30] audit: type=1400 audit(1742771284.442:1239): avc: denied { write } for pid=10714 comm="syz.1.1401" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.088327][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.953811][T10723] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 381.199493][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 381.482921][ T5874] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 381.543194][ T5901] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 381.551327][T10749] x_tables: ip_tables: osf match: only valid for protocol 6 [ 381.554025][ T30] audit: type=1400 audit(1742771285.922:1240): avc: denied { read } for pid=10747 comm="syz.0.1410" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 381.585036][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.598845][T10750] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.860902][ T30] audit: type=1400 audit(1742771285.922:1241): avc: denied { open } for pid=10747 comm="syz.0.1410" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 381.885415][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.979500][ T30] audit: type=1400 audit(1742771285.922:1242): avc: denied { ioctl } for pid=10747 comm="syz.0.1410" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 382.043324][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 382.049535][ T5901] usb 5-1: config 1 has an invalid interface number: 66 but max is 3 [ 382.067567][ T5874] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 382.079271][ T5901] usb 5-1: config 1 has an invalid interface number: 248 but max is 3 [ 382.090159][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 382.090561][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.112588][ T5901] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 382.123785][ T5901] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 382.150510][ T5874] usb 4-1: config 0 descriptor?? [ 382.171628][ T5901] usb 5-1: config 1 has no interface number 0 [ 382.226077][ T5901] usb 5-1: config 1 has no interface number 1 [ 382.232510][ T5901] usb 5-1: config 1 has no interface number 2 [ 382.239422][ T5901] usb 5-1: too many endpoints for config 1 interface 3 altsetting 252: 238, using maximum allowed: 30 [ 382.250743][ T5901] usb 5-1: config 1 interface 3 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 382.280445][ T5901] usb 5-1: config 1 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 382.313241][ T30] audit: type=1400 audit(1742771286.682:1243): avc: denied { create } for pid=10757 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 382.332998][ T5901] usb 5-1: config 1 interface 66 has no altsetting 0 [ 382.363299][ T5901] usb 5-1: config 1 interface 3 has no altsetting 0 [ 382.370166][ T5901] usb 5-1: config 1 interface 248 has no altsetting 0 [ 382.390528][ T5901] usb 5-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice= f.e2 [ 382.406216][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.415228][ T5901] usb 5-1: Product: à ” [ 382.419579][ T5901] usb 5-1: Manufacturer: 蚀æí€Ÿâš‡æŸî‹”ã²¬å—½ç¶–í‚“Ú켩í„輦ꦩ꿩äŒç€ã¿à¦½îœ“ꂘ轤්蘠ã–팛î³ìŠ“å’ªé¶è¥¢ê¯é¬´å˜ï’³à»ì˜ªæ¤¡ï‡Œç¶„軸姴ë°åŒ´Ïªë®‘㇥٣箤꟩䔼戦ê®ç‡ä‘¬äœ¶ç”ŒÂ› [ 382.459259][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.660351][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.669622][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.678096][ T5901] usb 5-1: SerialNumber: ш [ 382.686666][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.696487][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.708856][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 382.789367][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.800952][ T30] audit: type=1400 audit(1742771287.132:1244): avc: denied { setopt } for pid=10768 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 382.867653][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.998988][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.007470][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.034076][ T30] audit: type=1400 audit(1742771287.142:1245): avc: denied { write } for pid=10768 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 383.091169][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.110819][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.195732][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.289145][T10777] overlayfs: lower data-only dirs require metacopy support. [ 383.301905][ T30] audit: type=1400 audit(1742771287.142:1246): avc: denied { read } for pid=10768 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 383.503209][ T5901] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 383.566850][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 383.603857][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 383.623200][ T5901] dib0700: firmware download failed at 7 with -22 [ 383.636510][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 383.820800][ T5901] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 383.830942][ T5874] usb 4-1: USB disconnect, device number 38 [ 383.868304][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 384.064837][T10789] syz.3.1421 uses old SIOCAX25GETINFO [ 384.840967][ T5901] dib0700: firmware download failed at 7 with -22 [ 384.874959][ T5901] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 384.892097][ T5901] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 384.922577][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 384.922597][ T30] audit: type=1400 audit(1742771288.442:1249): avc: denied { ioctl } for pid=10782 comm="syz.3.1421" path="socket:[29982]" dev="sockfs" ino=29982 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 385.024426][ T5901] dib0700: firmware download failed at 7 with -22 [ 385.090531][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'. [ 385.208171][ T5901] usb 5-1: USB disconnect, device number 32 [ 385.352845][ T30] audit: type=1400 audit(1742771288.462:1250): avc: denied { write } for pid=10782 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.374613][ T30] audit: type=1400 audit(1742771288.542:1251): avc: denied { getopt } for pid=10782 comm="syz.3.1421" lport=33016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.507753][T10794] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 385.652698][ T30] audit: type=1400 audit(1742771290.022:1252): avc: denied { write } for pid=10797 comm="syz.0.1423" name="mcfilter" dev="proc" ino=4026533159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 385.740939][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 385.861528][ T30] audit: type=1400 audit(1742771290.032:1253): avc: denied { create } for pid=10797 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 385.933066][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 385.970598][ T30] audit: type=1400 audit(1742771290.032:1254): avc: denied { bind } for pid=10797 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 386.007223][ T30] audit: type=1400 audit(1742771290.032:1255): avc: denied { name_bind } for pid=10797 comm="syz.0.1423" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 386.063062][T10804] FAULT_INJECTION: forcing a failure. [ 386.063062][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 386.084454][T10807] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 386.091743][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.3.1427 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 386.091766][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.091777][T10804] Call Trace: [ 386.091782][T10804] [ 386.091789][T10804] dump_stack_lvl+0x16c/0x1f0 [ 386.091819][T10804] should_fail_ex+0x50a/0x650 [ 386.091845][T10804] ? fs_reclaim_acquire+0xae/0x150 [ 386.091871][T10804] ? tomoyo_realpath_from_path+0xb9/0x720 [ 386.091903][T10804] should_failslab+0xc2/0x120 [ 386.091923][T10804] __kmalloc_noprof+0xcb/0x510 [ 386.091940][T10804] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 386.091969][T10804] tomoyo_realpath_from_path+0xb9/0x720 [ 386.091993][T10804] ? tomoyo_path_number_perm+0x235/0x590 [ 386.092015][T10804] ? tomoyo_path_number_perm+0x235/0x590 [ 386.092040][T10804] tomoyo_path_number_perm+0x248/0x590 [ 386.092060][T10804] ? tomoyo_path_number_perm+0x235/0x590 [ 386.092084][T10804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.092130][T10804] ? __pfx_lock_release+0x10/0x10 [ 386.092153][T10804] ? trace_lock_acquire+0x14e/0x1f0 [ 386.092176][T10804] ? lock_acquire+0x2f/0xb0 [ 386.092197][T10804] ? __fget_files+0x40/0x3a0 [ 386.092217][T10804] ? __fget_files+0x206/0x3a0 [ 386.092237][T10804] security_file_ioctl+0x9b/0x240 [ 386.092264][T10804] __x64_sys_ioctl+0xb7/0x200 [ 386.092290][T10804] do_syscall_64+0xcd/0x250 [ 386.092316][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.092340][T10804] RIP: 0033:0x7f790098d169 [ 386.092353][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.092368][T10804] RSP: 002b:00007f790175b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.092384][T10804] RAX: ffffffffffffffda RBX: 00007f7900ba5fa0 RCX: 00007f790098d169 [ 386.092395][T10804] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 386.092405][T10804] RBP: 00007f790175b090 R08: 0000000000000000 R09: 0000000000000000 [ 386.092414][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.092424][T10804] R13: 0000000000000000 R14: 00007f7900ba5fa0 R15: 00007ffcfd821888 [ 386.092448][T10804] [ 386.092454][T10804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.173278][ T30] audit: type=1400 audit(1742771290.032:1256): avc: denied { node_bind } for pid=10797 comm="syz.0.1423" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 386.188476][T10807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.209522][ T30] audit: type=1400 audit(1742771290.052:1257): avc: denied { mount } for pid=10797 comm="syz.0.1423" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 386.228135][T10807] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.1429'. [ 386.319557][ T30] audit: type=1400 audit(1742771290.112:1258): avc: denied { read } for pid=10801 comm="syz.4.1426" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.334636][T10820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1432'. [ 387.453304][ T5901] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 387.606058][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 387.623266][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 387.635436][ T5901] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 387.644453][ T5901] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 387.672579][ T5901] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 387.685241][ T5901] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 387.699302][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.709157][ T5901] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 387.718644][ T5901] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 387.727424][ T5901] usb 2-1: Product: syz [ 387.731662][ T5901] usb 2-1: Manufacturer: syz [ 387.736779][ T5901] usb 2-1: SerialNumber: syz [ 387.749092][ T5901] usb 2-1: config 0 descriptor?? [ 387.759299][ T5901] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 387.775730][ T5901] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 387.798701][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 388.035201][ T5901] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 388.075848][ T5901] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 388.254837][ T10] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 388.263285][ T10] usb 4-1: config 3 has no interface number 0 [ 388.270169][ T10] usb 4-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 388.282727][ T10] usb 4-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 388.295059][ T10] usb 4-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 388.305873][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 388.320416][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.346403][T10832] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 388.391162][T10852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1444'. [ 388.400262][T10850] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.982947][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 389.238775][ T10] usb 4-1: string descriptor 0 read error: -71 [ 389.266865][ T10] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 389.313660][ T10] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 389.376967][ T10] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 389.411224][ T10] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 389.473400][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 389.505199][ T10] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 389.521568][ T5874] usb 2-1: USB disconnect, device number 40 [ 389.523525][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 389.533763][T10816] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 389.555742][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1452'. [ 389.565153][T10847] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 389.565975][ T10] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 389.575626][ T5874] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 389.608199][ T10] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 389.650440][ T10] usb 4-1: USB disconnect, device number 39 [ 389.695591][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 389.737472][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 389.902759][ T10] keyspan 4-1:3.168: device disconnected [ 391.449960][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 391.449999][ T30] audit: type=1400 audit(1742771295.482:1274): avc: denied { ioctl } for pid=10878 comm="syz.2.1454" path="socket:[29633]" dev="sockfs" ino=29633 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.872279][ T30] audit: type=1400 audit(1742771296.242:1275): avc: denied { read } for pid=10897 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 391.967227][ T30] audit: type=1400 audit(1742771296.272:1276): avc: denied { append } for pid=10892 comm="syz.2.1457" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.042786][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1461'. [ 392.094836][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 392.364461][ T30] audit: type=1400 audit(1742771296.742:1277): avc: denied { bind } for pid=10909 comm="syz.0.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 392.674218][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10922 comm=syz.1.1466 [ 392.687191][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10922 comm=syz.1.1466 [ 392.809465][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 393.921812][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 394.037048][T10933] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 394.502466][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 394.526000][ T10] usb 3-1: config 8 has too many interfaces: 65, using maximum allowed: 32 [ 394.567238][ T10] usb 3-1: config 8 has an invalid interface number: 164 but max is 64 [ 394.588783][ T10] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 65 [ 394.613247][ T10] usb 3-1: config 8 has no interface number 0 [ 394.629557][ T10] usb 3-1: config 8 interface 164 has no altsetting 0 [ 394.651637][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=0b39, bcdDevice=1f.ec [ 394.676374][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.694497][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 394.703843][ T10] usb 3-1: Product: syz [ 394.708010][ T10] usb 3-1: Manufacturer: syz [ 394.712591][ T10] usb 3-1: SerialNumber: syz [ 394.772236][ T10] pl2303 3-1:8.164: required endpoints missing [ 395.641245][ T30] audit: type=1400 audit(1742771300.012:1278): avc: denied { connect } for pid=10960 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.780997][ T30] audit: type=1400 audit(1742771300.152:1279): avc: denied { create } for pid=10965 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.912081][ T30] audit: type=1400 audit(1742771300.192:1280): avc: denied { getopt } for pid=10965 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 395.971234][ T30] audit: type=1400 audit(1742771300.342:1281): avc: denied { setopt } for pid=10969 comm="syz.4.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.029273][ T9] usb 3-1: USB disconnect, device number 30 [ 396.060950][T10972] netlink: 'syz.0.1483': attribute type 58 has an invalid length. [ 396.087382][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 396.286459][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 396.462199][T10978] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 397.069576][ T30] audit: type=1400 audit(1742771301.432:1282): avc: denied { open } for pid=10985 comm="syz.3.1487" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 397.115522][ T30] audit: type=1400 audit(1742771301.432:1283): avc: denied { ioctl } for pid=10985 comm="syz.3.1487" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 397.253440][ T5901] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 397.421889][ T30] audit: type=1326 audit(1742771301.792:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.0.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f040018d169 code=0x0 [ 397.448139][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 397.454869][ T5901] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 397.465293][ T5901] usb 2-1: can't read configurations, error -22 [ 397.593376][ T5901] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 397.623841][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 397.641440][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 397.651240][ T9] usb 4-1: config 0 has no interface number 0 [ 397.656729][T11002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1494'. [ 397.657800][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.677774][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 397.687478][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 397.697744][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.706084][ T9] usb 4-1: Product: syz [ 397.712546][ T9] usb 4-1: Manufacturer: syz [ 397.718015][ T9] usb 4-1: SerialNumber: syz [ 397.739389][ T9] usb 4-1: config 0 descriptor?? [ 397.777421][ T5901] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 397.790888][ T5901] usb 2-1: can't read configurations, error -22 [ 397.803022][ T5901] usb usb2-port1: attempt power cycle [ 398.193550][ T5901] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 398.277206][ T5901] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 398.349130][ T5901] usb 2-1: can't read configurations, error -22 [ 398.382035][ T30] audit: type=1400 audit(1742771302.712:1285): avc: denied { create } for pid=11003 comm="syz.4.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 398.487979][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 398.515229][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input51 [ 398.534332][ T30] audit: type=1400 audit(1742771302.742:1286): avc: denied { write } for pid=11007 comm="syz.2.1496" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 398.565858][ T5901] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 398.602611][ T5901] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 398.610821][ T30] audit: type=1800 audit(1742771302.752:1287): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1496" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 398.618710][ T5901] usb 2-1: can't read configurations, error -22 [ 399.025481][ T5901] usb usb2-port1: unable to enumerate USB device [ 399.125921][T11016] tmpfs: Invalid uid '0x00000000ffffffff' [ 399.144398][T11016] overlay: Unknown parameter 'uid>00000000004294967295' [ 399.303884][ T30] audit: type=1400 audit(1742771303.682:1288): avc: denied { append } for pid=11017 comm="syz.2.1499" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 399.613216][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 399.640839][ T5873] usb 4-1: USB disconnect, device number 40 [ 399.669583][ T5873] appletouch 4-1:0.85: input: appletouch disconnected [ 399.789389][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 399.800645][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 399.823150][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.843848][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.857035][T11022] kernel read not supported for file /!ÌqÒ­„»selinupselinux (pid: 11022 comm: syz.0.1500) [ 399.868718][ T30] audit: type=1800 audit(1742771304.242:1289): pid=11022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1500" name=21CC71D2AD84BB73656C696E757073656C696E7578 dev="mqueue" ino=19355 res=0 errno=0 [ 399.895747][ T5901] usb 3-1: config 0 descriptor?? [ 399.902472][ T5901] hub 3-1:0.0: bad descriptor, ignoring hub [ 399.909001][ T5901] hub 3-1:0.0: probe with driver hub failed with error -5 [ 399.918256][ T5901] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 400.022167][ T30] audit: type=1400 audit(1742771304.392:1290): avc: denied { ioctl } for pid=11028 comm="syz.1.1502" path="socket:[31059]" dev="sockfs" ino=31059 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.080165][ T30] audit: type=1400 audit(1742771304.432:1291): avc: denied { name_connect } for pid=11028 comm="syz.1.1502" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 400.443763][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 400.475218][T11030] ceph: No mds server is up or the cluster is laggy [ 400.688137][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 400.863876][T11040] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 400.897056][ T5871] usb 3-1: USB disconnect, device number 31 [ 400.924332][T11039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.223434][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 401.865492][T11054] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.044472][T11059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1510'. [ 402.106439][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 402.106452][ T30] audit: type=1400 audit(1742771306.482:1294): avc: denied { sqpoll } for pid=11061 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 402.490883][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1511'. [ 402.592094][ T30] audit: type=1400 audit(1742771306.962:1295): avc: denied { getopt } for pid=11079 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.616670][T11082] netlink: 'syz.2.1518': attribute type 16 has an invalid length. [ 402.632820][T11082] netlink: 'syz.2.1518': attribute type 3 has an invalid length. [ 402.641414][T11082] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1518'. [ 402.751646][T11092] netlink: 'syz.2.1520': attribute type 58 has an invalid length. [ 402.767447][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1520'. [ 402.780998][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 402.900747][T11096] x_tables: ip_tables: osf match: only valid for protocol 6 [ 403.182316][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.215840][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 403.258631][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.298248][T11099] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.457383][ T30] audit: type=1400 audit(1742771307.832:1296): avc: denied { mount } for pid=11100 comm="syz.2.1523" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.503469][ T9] usb 2-1: config 0 descriptor?? [ 403.525064][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 403.571329][ T30] audit: type=1400 audit(1742771307.872:1297): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 403.734321][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 403.734405][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 403.783591][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 404.103627][ T5871] usb 2-1: USB disconnect, device number 45 [ 404.311146][ T30] audit: type=1400 audit(1742771308.682:1298): avc: denied { read } for pid=11115 comm="syz.2.1527" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 404.364640][ T30] audit: type=1400 audit(1742771308.712:1299): avc: denied { open } for pid=11115 comm="syz.2.1527" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 404.417870][T11120] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 404.419182][ T30] audit: type=1400 audit(1742771308.712:1300): avc: denied { create } for pid=11115 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 404.478738][ T30] audit: type=1400 audit(1742771308.722:1301): avc: denied { ioctl } for pid=11115 comm="syz.2.1527" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 404.576823][ T30] audit: type=1400 audit(1742771308.942:1302): avc: denied { read } for pid=5491 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 404.670677][ T30] audit: type=1400 audit(1742771308.952:1303): avc: denied { search } for pid=5491 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.691989][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.819373][T11139] x_tables: ip_tables: osf match: only valid for protocol 6 [ 405.244553][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'. [ 405.369165][ T5871] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 405.512538][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1538'. [ 405.542221][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1538'. [ 405.575253][ T5871] usb 4-1: config 8 has an invalid interface number: 131 but max is 3 [ 405.589795][ T5871] usb 4-1: config 8 has an invalid interface number: 66 but max is 3 [ 405.620054][ T5871] usb 4-1: config 8 has an invalid interface number: 149 but max is 3 [ 405.654412][ T5871] usb 4-1: config 8 has an invalid interface number: 130 but max is 3 [ 405.699462][ T5871] usb 4-1: config 8 has no interface number 0 [ 405.726082][ T5871] usb 4-1: config 8 has no interface number 1 [ 405.733574][ T5871] usb 4-1: config 8 has no interface number 2 [ 405.750537][ T5871] usb 4-1: config 8 has no interface number 3 [ 405.777913][ T5871] usb 4-1: config 8 interface 131 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 405.808979][ T5871] usb 4-1: config 8 interface 131 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 405.884796][ T5871] usb 4-1: config 8 interface 149 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 405.924094][ T5871] usb 4-1: config 8 interface 131 has no altsetting 0 [ 405.933208][T11177] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.994561][ T5871] usb 4-1: config 8 interface 66 has no altsetting 0 [ 406.007342][T11180] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1544'. [ 406.030489][ T5871] usb 4-1: config 8 interface 149 has no altsetting 0 [ 406.082882][ T5871] usb 4-1: config 8 interface 130 has no altsetting 0 [ 406.103988][ T5871] usb 4-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=f3.15 [ 406.121351][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.210109][ T5871] usb 4-1: Product: 퓢ﻗ间ꀯã˜ë¹“ç“å¹ë¦‡æ¡€é°Œê®„柚푙駉☜὆굜祒í‚涆ܡãœà»µë”ꦦ [ 406.274512][ T5871] usb 4-1: Manufacturer: ã¡ [ 406.301937][ T5871] usb 4-1: SerialNumber: 〉 [ 406.537007][ T5871] usb 4-1: bad CDC descriptors [ 406.542352][ T5871] cdc_acm 4-1:8.131: Zero length descriptor references [ 406.554826][ T5871] cdc_acm 4-1:8.131: probe with driver cdc_acm failed with error -22 [ 406.859573][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'. [ 407.360678][ T5871] usb 4-1: USB disconnect, device number 41 [ 407.996787][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 407.996821][ T30] audit: type=1400 audit(1742771312.302:1325): avc: denied { name_bind } for pid=11211 comm="syz.1.1548" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 408.555140][ T30] audit: type=1400 audit(1742771312.932:1326): avc: denied { sys_chroot } for pid=11217 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 408.773215][ T30] audit: type=1400 audit(1742771312.932:1327): avc: denied { setgid } for pid=11217 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 408.794788][ T30] audit: type=1400 audit(1742771312.932:1328): avc: denied { setrlimit } for pid=11217 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 408.815183][ T30] audit: type=1400 audit(1742771313.082:1329): avc: denied { create } for pid=11221 comm="syz.1.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.835683][ T30] audit: type=1400 audit(1742771313.132:1330): avc: denied { bind } for pid=11220 comm="syz.3.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 408.887808][ T30] audit: type=1400 audit(1742771313.132:1331): avc: denied { node_bind } for pid=11220 comm="syz.3.1551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 408.957867][ T30] audit: type=1400 audit(1742771313.302:1332): avc: denied { getopt } for pid=11218 comm="syz.4.1549" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 409.466180][ T30] audit: type=1400 audit(1742771313.832:1333): avc: denied { write } for pid=11243 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.733203][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 410.143936][ T10] usb 4-1: device descriptor read/64, error -71 [ 410.155514][ T30] audit: type=1400 audit(1742771314.522:1334): avc: denied { mount } for pid=11221 comm="syz.1.1550" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 410.413255][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 410.653257][ T10] usb 4-1: device descriptor read/64, error -71 [ 410.755511][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1558'. [ 410.833264][ T10] usb usb4-port1: attempt power cycle [ 411.303281][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 411.324603][ T10] usb 4-1: device descriptor read/8, error -71 [ 411.432913][T11298] FAULT_INJECTION: forcing a failure. [ 411.432913][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 411.445673][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.0.1561 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 411.445695][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.445705][T11298] Call Trace: [ 411.445710][T11298] [ 411.445717][T11298] dump_stack_lvl+0x16c/0x1f0 [ 411.445745][T11298] should_fail_ex+0x50a/0x650 [ 411.445771][T11298] ? fs_reclaim_acquire+0xae/0x150 [ 411.445796][T11298] ? tomoyo_realpath_from_path+0xb9/0x720 [ 411.445822][T11298] should_failslab+0xc2/0x120 [ 411.445842][T11298] __kmalloc_noprof+0xcb/0x510 [ 411.445861][T11298] ? tomoyo_encode2+0x19d/0x3e0 [ 411.445887][T11298] tomoyo_realpath_from_path+0xb9/0x720 [ 411.445914][T11298] ? tomoyo_fill_path_info+0x233/0x420 [ 411.445936][T11298] tomoyo_mount_acl+0x1af/0x880 [ 411.445958][T11298] ? hlock_class+0x4e/0x130 [ 411.445976][T11298] ? __lock_acquire+0x15a9/0x3c40 [ 411.446003][T11298] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 411.446031][T11298] ? __pfx___lock_acquire+0x10/0x10 [ 411.446055][T11298] ? __schedule+0xf4b/0x5890 [ 411.446090][T11298] ? trace_lock_acquire+0x14e/0x1f0 [ 411.446110][T11298] ? tomoyo_mount_permission+0x149/0x420 [ 411.446133][T11298] ? lock_acquire+0x2f/0xb0 [ 411.446154][T11298] ? tomoyo_mount_permission+0x149/0x420 [ 411.446181][T11298] tomoyo_mount_permission+0x16e/0x420 [ 411.446203][T11298] ? tomoyo_mount_permission+0x149/0x420 [ 411.446227][T11298] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 411.446251][T11298] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.446282][T11298] ? get_current_fs_domain+0x184/0x1f0 [ 411.446304][T11298] security_sb_mount+0x9b/0x260 [ 411.446327][T11298] path_mount+0x129/0x1f10 [ 411.446347][T11298] ? kmem_cache_free+0x2e2/0x4d0 [ 411.446363][T11298] ? __pfx_path_mount+0x10/0x10 [ 411.446385][T11298] ? putname+0x13c/0x180 [ 411.446414][T11298] __x64_sys_mount+0x28f/0x310 [ 411.446433][T11298] ? __pfx___x64_sys_mount+0x10/0x10 [ 411.446460][T11298] do_syscall_64+0xcd/0x250 [ 411.446485][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.446507][T11298] RIP: 0033:0x7f040018d169 [ 411.446521][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.446537][T11298] RSP: 002b:00007f040102a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.446553][T11298] RAX: ffffffffffffffda RBX: 00007f04003a6160 RCX: 00007f040018d169 [ 411.446564][T11298] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000540 [ 411.446574][T11298] RBP: 00007f040102a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.446584][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.446594][T11298] R13: 0000000000000000 R14: 00007f04003a6160 R15: 00007ffdc4710e58 [ 411.446618][T11298] [ 411.446640][T11298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.804802][T11303] ip6t_srh: unknown srh match flags 4000 [ 411.831387][T11301] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1564'. [ 411.853189][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 411.973549][ T10] usb 4-1: device descriptor read/8, error -71 [ 412.174765][ T10] usb usb4-port1: unable to enumerate USB device [ 413.031305][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 413.031315][ T30] audit: type=1326 audit(1742771317.402:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.1.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f770d78d169 code=0x0 [ 413.341962][ T30] audit: type=1400 audit(1742771317.682:1340): avc: denied { name_bind } for pid=11319 comm="syz.0.1569" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 413.531944][ T30] audit: type=1400 audit(1742771317.892:1341): avc: denied { create } for pid=11324 comm="syz.3.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 413.597377][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 413.609703][ T30] audit: type=1400 audit(1742771317.892:1342): avc: denied { write } for pid=11324 comm="syz.3.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 413.689431][ T30] audit: type=1400 audit(1742771318.062:1343): avc: denied { connect } for pid=11333 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.749611][ T30] audit: type=1400 audit(1742771318.062:1344): avc: denied { write } for pid=11333 comm="syz.0.1573" path="socket:[31633]" dev="sockfs" ino=31633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.024978][T11346] FAULT_INJECTION: forcing a failure. [ 415.024978][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 415.025062][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.1.1576 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 415.025082][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.025093][T11346] Call Trace: [ 415.025098][T11346] [ 415.025105][T11346] dump_stack_lvl+0x16c/0x1f0 [ 415.025134][T11346] should_fail_ex+0x50a/0x650 [ 415.025159][T11346] ? fs_reclaim_acquire+0xae/0x150 [ 415.025186][T11346] ? tomoyo_encode2+0x100/0x3e0 [ 415.025209][T11346] should_failslab+0xc2/0x120 [ 415.025229][T11346] __kmalloc_noprof+0xcb/0x510 [ 415.025245][T11346] ? d_absolute_path+0x137/0x1b0 [ 415.025270][T11346] tomoyo_encode2+0x100/0x3e0 [ 415.025298][T11346] tomoyo_encode+0x29/0x50 [ 415.025321][T11346] tomoyo_realpath_from_path+0x19d/0x720 [ 415.025354][T11346] tomoyo_mount_acl+0x1af/0x880 [ 415.025376][T11346] ? hlock_class+0x4e/0x130 [ 415.025394][T11346] ? __lock_acquire+0x15a9/0x3c40 [ 415.025421][T11346] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 415.025449][T11346] ? __pfx___lock_acquire+0x10/0x10 [ 415.025472][T11346] ? __schedule+0xf4b/0x5890 [ 415.025492][T11346] ? __pfx___schedule+0x10/0x10 [ 415.025525][T11346] ? trace_lock_acquire+0x14e/0x1f0 [ 415.025544][T11346] ? tomoyo_mount_permission+0x149/0x420 [ 415.025569][T11346] ? lock_acquire+0x2f/0xb0 [ 415.025595][T11346] ? tomoyo_mount_permission+0x149/0x420 [ 415.025622][T11346] tomoyo_mount_permission+0x16e/0x420 [ 415.025643][T11346] ? tomoyo_mount_permission+0x149/0x420 [ 415.025667][T11346] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 415.025690][T11346] ? lockdep_hardirqs_on+0x7c/0x110 [ 415.025722][T11346] ? get_current_fs_domain+0x184/0x1f0 [ 415.025744][T11346] security_sb_mount+0x9b/0x260 [ 415.025769][T11346] path_mount+0x129/0x1f10 [ 415.025789][T11346] ? kmem_cache_free+0x2e2/0x4d0 [ 415.025805][T11346] ? __pfx_path_mount+0x10/0x10 [ 415.025827][T11346] ? putname+0x13c/0x180 [ 415.025850][T11346] __x64_sys_mount+0x28f/0x310 [ 415.025869][T11346] ? __pfx___x64_sys_mount+0x10/0x10 [ 415.025896][T11346] do_syscall_64+0xcd/0x250 [ 415.025921][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.025945][T11346] RIP: 0033:0x7f770d78d169 [ 415.025958][T11346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.025974][T11346] RSP: 002b:00007f770e590038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 415.025990][T11346] RAX: ffffffffffffffda RBX: 00007f770d9a6160 RCX: 00007f770d78d169 [ 415.026001][T11346] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000540 [ 415.026011][T11346] RBP: 00007f770e590090 R08: 0000000000000000 R09: 0000000000000000 [ 415.026021][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.026031][T11346] R13: 0000000000000000 R14: 00007f770d9a6160 R15: 00007ffcfd308258 [ 415.026056][T11346] [ 415.026112][T11346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.504850][ T30] audit: type=1400 audit(1742771319.882:1345): avc: denied { write } for pid=11335 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 415.843590][ T5827] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 415.854655][ T30] audit: type=1400 audit(1742771320.212:1346): avc: denied { read } for pid=11355 comm="syz.2.1578" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 416.339635][T11356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1578'. [ 416.491328][ T30] audit: type=1400 audit(1742771320.212:1347): avc: denied { ioctl } for pid=11355 comm="syz.2.1578" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 416.523414][T11365] netlink: 'syz.4.1579': attribute type 58 has an invalid length. [ 416.591734][ T5827] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 416.604593][ T5827] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 416.633693][ T5827] usb 4-1: config 5 has no interface number 0 [ 416.641015][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'. [ 416.651528][ T5827] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 416.666018][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.695814][ T5827] usb 4-1: Product: syz [ 416.700003][ T5827] usb 4-1: Manufacturer: syz [ 416.713370][ T5827] usb 4-1: SerialNumber: syz [ 416.919160][ T5827] comedi comedi0: Wrong number of endpoints [ 416.957012][ T5827] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 416.965128][ T30] audit: type=1400 audit(1742771321.332:1348): avc: denied { write } for pid=11370 comm="syz.2.1581" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 417.494143][ T5827] usb 4-1: USB disconnect, device number 46 [ 417.985912][ T5827] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 418.072431][T11407] Cannot find set identified by id 0 to match [ 418.079809][T11406] Cannot find set identified by id 0 to match [ 418.143826][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 418.143842][ T30] audit: type=1400 audit(1742771322.522:1350): avc: denied { load_policy } for pid=11408 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 418.188088][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 418.195072][ T5871] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.205130][ T5827] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 418.221749][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.231762][T11411] netlink: 'syz.1.1594': attribute type 58 has an invalid length. [ 418.232302][ T5827] usb 4-1: config 0 descriptor?? [ 418.240777][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1594'. [ 418.473236][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 418.479577][ T5871] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 418.488302][ T5871] usb 5-1: config 0 has no interface number 0 [ 418.494661][ T5871] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.507825][ T5871] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 418.518726][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.527730][ T5871] usb 5-1: Product: syz [ 418.532180][ T5871] usb 5-1: Manufacturer: syz [ 418.538186][ T5871] usb 5-1: SerialNumber: syz [ 418.726406][ T5871] usb 5-1: config 0 descriptor?? [ 418.835232][ T5827] elo 0003:04E7:0030.000E: item fetching failed at offset 0/2 [ 418.875271][ T5871] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 418.912359][ T5827] elo 0003:04E7:0030.000E: parse failed [ 418.938891][ T5871] em28xx 5-1:0.132: Video interface 132 found: [ 418.957653][ T5827] elo 0003:04E7:0030.000E: probe with driver elo failed with error -22 [ 418.987122][ T5827] usb 4-1: USB disconnect, device number 47 [ 419.028776][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.041347][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.315357][ T5871] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 420.086648][ T5871] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 420.098692][ T5871] em28xx 5-1:0.132: board has no eeprom [ 420.163204][ T5871] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 420.291102][ T5871] em28xx 5-1:0.132: analog set to bulk mode. [ 420.317557][ T5874] em28xx 5-1:0.132: Registering V4L2 extension [ 420.350846][ T5871] usb 5-1: USB disconnect, device number 33 [ 420.486413][ T5871] em28xx 5-1:0.132: Disconnecting em28xx [ 421.224534][ T5874] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 421.233370][ T5874] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 421.258264][ T5874] em28xx 5-1:0.132: No AC97 audio processor [ 421.279368][ T5874] usb 5-1: Decoder not found [ 421.303508][ T5874] em28xx 5-1:0.132: failed to create media graph [ 421.310581][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1606'. [ 421.320457][ T5874] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 421.350035][ T5874] em28xx 5-1:0.132: Remote control support is not available for this card. [ 421.353428][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 421.378705][ T5871] em28xx 5-1:0.132: Closing input extension [ 421.478872][ T5871] em28xx 5-1:0.132: Freeing device [ 421.543469][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 422.230742][ T10] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 422.254804][ T10] usb 2-1: config 3 has no interface number 0 [ 422.278101][ T10] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 422.826424][ T10] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 422.837818][ T10] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 422.848121][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 422.853395][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 422.862633][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.871676][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 422.879935][ T9] usb 3-1: config 0 has no interface number 0 [ 422.886416][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.904310][T11443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 422.922068][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 422.931310][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 422.943247][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.971770][ T9] usb 3-1: Product: syz [ 422.981870][ T9] usb 3-1: Manufacturer: syz [ 423.034704][ T9] usb 3-1: SerialNumber: syz [ 423.052794][ T9] usb 3-1: config 0 descriptor?? [ 423.375749][T11481] kAFS: unable to lookup cell 'syz/' [ 423.766221][ T54] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 424.172186][ T30] audit: type=1400 audit(1742771328.542:1351): avc: denied { setattr } for pid=11474 comm="iou-wrk-11484" name="" dev="pipefs" ino=4692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 424.247267][ T10] usb 2-1: string descriptor 0 read error: -71 [ 424.261802][ T10] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 424.289286][ T10] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 424.313662][ T9] appletouch 3-1:0.85: Geyser mode initialized. [ 424.330894][ T10] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 424.339237][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input52 [ 424.358244][ T10] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 424.446872][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 424.455802][ T10] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 425.058874][ T10] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 425.082271][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 425.200624][ T10] usb 2-1: USB disconnect, device number 47 [ 425.237501][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 425.256344][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 425.302070][ T10] keyspan 2-1:3.168: device disconnected [ 425.334496][ T5873] usb 3-1: USB disconnect, device number 32 [ 425.669121][ T5873] appletouch 3-1:0.85: input: appletouch disconnected [ 425.685870][T11505] CIFS: Unable to determine destination address [ 426.402629][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 426.446314][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1616'. [ 427.008560][ T30] audit: type=1400 audit(1742771331.382:1352): avc: denied { read } for pid=11527 comm="syz.4.1621" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 427.031798][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.099412][T11534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.610842][ T30] audit: type=1400 audit(1742771331.382:1353): avc: denied { open } for pid=11527 comm="syz.4.1621" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 427.634506][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.854173][ T30] audit: type=1400 audit(1742771331.982:1354): avc: denied { ioctl } for pid=11527 comm="syz.4.1621" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 427.880325][ T30] audit: type=1400 audit(1742771332.012:1355): avc: denied { getopt } for pid=11527 comm="syz.4.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 428.687431][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.889838][T11549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1625'. [ 429.333271][ T5874] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 429.463306][ T5827] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 429.522618][ T5874] usb 3-1: config 8 has an invalid interface number: 131 but max is 3 [ 429.582209][ T5874] usb 3-1: config 8 has an invalid interface number: 66 but max is 3 [ 429.622267][ T5874] usb 3-1: config 8 has an invalid interface number: 149 but max is 3 [ 429.680898][ T5874] usb 3-1: config 8 has an invalid interface number: 130 but max is 3 [ 429.690605][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 429.720563][ T5827] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 429.736996][ T30] audit: type=1400 audit(1742771334.092:1356): avc: denied { setopt } for pid=11560 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 429.740880][ T5874] usb 3-1: config 8 has no interface number 0 [ 429.770209][ T5827] usb 4-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.840053][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0 [ 429.853983][ T5874] usb 3-1: config 8 has no interface number 1 [ 429.870043][ T5874] usb 3-1: config 8 has no interface number 2 [ 429.883859][ T5874] usb 3-1: config 8 has no interface number 3 [ 429.899643][ T30] audit: type=1400 audit(1742771334.132:1357): avc: denied { write } for pid=11560 comm="syz.0.1630" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.903165][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.950333][ T5874] usb 3-1: config 8 interface 131 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 429.968280][ T5874] usb 3-1: config 8 interface 131 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 429.989550][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.998599][ T5874] usb 3-1: config 8 interface 149 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 430.013176][ T5827] usb 4-1: Product: ï³éƒ„ï“¾á§¸î¶¶ï¶—è¤æ˜‘â†î¥æ³•é–ꑢ蕆çƒç‰á‡™æ³¾ä¿¢êŒŒé¾™ì³í˜§ïº¥ä©šíƒ•ᯢ讽㠖㜊媽â¸èš§î®­â«¦éˆ¤ï—§æ —៵ᵰⷠ[ 430.048602][ T5874] usb 3-1: config 8 interface 131 has no altsetting 0 [ 430.063541][ T5874] usb 3-1: config 8 interface 66 has no altsetting 0 [ 430.070325][ T5827] usb 4-1: Manufacturer: ᇠ[ 430.075499][ T5827] usb 4-1: SerialNumber: 鴱췊Ҡ팧値棽ì™ç¦‘æª¤ê‡µç„„à·ƒî—–íŒæ›¯à¾ï½ã¸†ë­›é“€å£ªã®ºì€©îµí“´ëˆ©ï«»æ´©ë¸ƒè…ˆæ²€â‘·ê„…怯뿪ꆳ蘙ì¥ä…ã€è塵 [ 430.102471][ T5874] usb 3-1: config 8 interface 149 has no altsetting 0 [ 430.122661][ T5874] usb 3-1: config 8 interface 130 has no altsetting 0 [ 430.145487][ T5874] usb 3-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=f3.15 [ 430.160370][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.124938][T11553] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 431.143026][T11553] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 431.164110][ T5874] usb 3-1: Product: 퓢ﻗ间ꀯã˜ë¹“ç“å¹ë¦‡æ¡€é°Œê®„柚푙駉☜὆굜祒í‚涆ܡãœà»µë”ꦦ [ 431.490548][ T5827] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 431.516911][ T5874] usb 3-1: Manufacturer: ã¡ [ 431.645290][ T5874] usb 3-1: SerialNumber: 〉 [ 431.972393][ T5874] usb 3-1: bad CDC descriptors [ 431.977539][ T5874] cdc_acm 3-1:8.131: Zero length descriptor references [ 431.990128][ T5874] cdc_acm 3-1:8.131: probe with driver cdc_acm failed with error -22 [ 432.987936][ T5874] usb 3-1: USB disconnect, device number 33 [ 433.162062][ T5827] usb 4-1: USB disconnect, device number 48 [ 433.302886][T11599] netlink: 'syz.4.1641': attribute type 58 has an invalid length. [ 433.326112][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1641'. [ 433.703418][ T5827] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 433.924512][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 433.938935][T11611] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 11611 comm: syz.4.1647) [ 433.939610][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 433.975418][ T30] audit: type=1800 audit(1742771338.352:1358): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1647" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=32581 res=0 errno=0 [ 433.997824][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 433.999659][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.042664][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 434.172889][T11613] CIFS: Unable to determine destination address [ 434.248799][ T5827] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 434.362931][ T5873] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 434.434473][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.447223][ T5827] usb 4-1: Product: syz [ 434.451426][ T5827] usb 4-1: Manufacturer: syz [ 434.458933][ T5827] usb 4-1: SerialNumber: syz [ 434.469098][ T5827] usb 4-1: config 0 descriptor?? [ 434.479910][ T5827] appledisplay 4-1:0.0: Submitting URB failed [ 434.489668][ T5827] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 434.513287][ T5873] usb 5-1: device descriptor read/64, error -71 [ 435.131681][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.141260][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.159083][ T5827] usb 4-1: USB disconnect, device number 49 [ 435.173288][ T5873] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 435.173575][ T5871] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 435.241151][ T30] audit: type=1400 audit(1742771339.612:1359): avc: denied { map } for pid=11622 comm="syz.2.1650" path="socket:[32596]" dev="sockfs" ino=32596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.471108][ T30] audit: type=1400 audit(1742771339.612:1360): avc: denied { accept } for pid=11622 comm="syz.2.1650" path="socket:[32596]" dev="sockfs" ino=32596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.530841][ T5873] usb 5-1: device descriptor read/64, error -71 [ 435.537288][ T30] audit: type=1400 audit(1742771339.872:1361): avc: denied { connect } for pid=11622 comm="syz.2.1650" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.566915][ T5871] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 435.582676][ T5871] usb 2-1: config 3 has no interface number 0 [ 435.592339][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 435.605128][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.611612][ T5871] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 435.612734][T11629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.628703][ T5871] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 435.643457][ T5873] usb usb5-port1: attempt power cycle [ 435.646566][ T5871] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 435.776942][ T5871] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 435.786549][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.797298][T11615] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 436.357873][ T5873] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 436.386005][ T54] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 436.418946][ T5873] usb 5-1: device descriptor read/8, error -71 [ 436.624569][ T5871] usb 2-1: string descriptor 0 read error: -71 [ 436.634062][ T5871] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 436.641787][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 436.650862][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 436.658799][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 436.673417][ T5871] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 436.689494][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 436.864096][T11647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=11647 comm=syz.3.1656 [ 436.876883][T11647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=11647 comm=syz.3.1656 [ 437.609449][T11648] veth0_to_team: entered promiscuous mode [ 437.615354][T11648] veth0_to_team: entered allmulticast mode [ 437.632429][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 437.655664][ T5871] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 437.663700][ T5873] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 437.678614][ T5871] usb 2-1: USB disconnect, device number 48 [ 437.687650][ T5871] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 437.693144][ T5873] usb 5-1: device descriptor read/8, error -71 [ 437.725315][ T5871] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 437.797209][ T5871] keyspan 2-1:3.168: device disconnected [ 437.815646][ T10] libceph: connect (1)[c::]:6789 error -101 [ 437.821669][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 437.835386][ T5873] usb usb5-port1: unable to enumerate USB device [ 438.188061][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 438.194362][ T5911] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 438.206390][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 438.490675][T11674] No such timeout policy "syz1" [ 439.137544][ T9] libceph: connect (1)[c::]:6789 error -101 [ 439.153236][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 439.168918][T11652] ceph: No mds server is up or the cluster is laggy [ 439.183987][ T5911] usb 3-1: config 1 has an invalid interface number: 66 but max is 2 [ 439.192091][ T5911] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 439.218575][ T5911] usb 3-1: config 1 has an invalid interface number: 248 but max is 2 [ 439.233180][ T5911] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 439.268351][ T5911] usb 3-1: config 1 has no interface number 0 [ 439.380307][ T5911] usb 3-1: config 1 has no interface number 1 [ 439.394704][ T5911] usb 3-1: config 1 has no interface number 2 [ 439.400785][ T5911] usb 3-1: too many endpoints for config 1 interface 3 altsetting 252: 238, using maximum allowed: 30 [ 439.420921][ T5911] usb 3-1: config 1 interface 3 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 439.434540][ T5911] usb 3-1: config 1 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 439.656669][T11682] No such timeout policy "syz1" [ 439.830479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.837060][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.413151][ T5911] usb 3-1: config 1 interface 66 has no altsetting 0 [ 440.432985][ T5911] usb 3-1: config 1 interface 3 has no altsetting 0 [ 440.523906][ T5911] usb 3-1: config 1 interface 248 has no altsetting 0 [ 440.546787][ T5911] usb 3-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice= f.e2 [ 440.571453][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.579941][ T5911] usb 3-1: Product: à ” [ 440.584341][ T5911] usb 3-1: Manufacturer: 蚀æí€Ÿâš‡æŸî‹”ã²¬å—½ç¶–í‚“Ú켩í„輦ꦩ꿩äŒç€ã¿à¦½îœ“ꂘ轤්蘠ã–팛î³ìŠ“å’ªé¶è¥¢ê¯é¬´å˜ï’³à»ì˜ªæ¤¡ï‡Œç¶„軸姴ë°åŒ´Ïªë®‘㇥٣箤꟩䔼戦ê®ç‡ä‘¬äœ¶ç”ŒÂ› [ 440.951431][ T5911] usb 3-1: SerialNumber: ш [ 440.966515][T11698] cgroup: none used incorrectly [ 441.003297][ T5911] usb 3-1: can't set config #1, error -71 [ 441.058290][ T5911] usb 3-1: USB disconnect, device number 34 [ 441.202938][T11709] usb usb8: usbfs: process 11709 (syz.3.1675) did not claim interface 0 before use [ 441.305347][ T30] audit: type=1400 audit(1742771345.672:1362): avc: denied { map } for pid=11700 comm="syz.3.1675" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.372339][ T5873] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 441.413415][ T5901] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 441.643795][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 441.644062][ T5901] usb 2-1: config 8 has an invalid interface number: 131 but max is 3 [ 441.697667][ T5873] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 441.717256][ T5901] usb 2-1: config 8 has an invalid interface number: 66 but max is 3 [ 441.737865][ T30] audit: type=1400 audit(1742771345.672:1363): avc: denied { execute } for pid=11700 comm="syz.3.1675" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.745759][T11718] FAULT_INJECTION: forcing a failure. [ 441.745759][T11718] name failslab, interval 1, probability 0, space 0, times 0 [ 441.775489][ T5873] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 441.783128][ T5901] usb 2-1: config 8 has an invalid interface number: 149 but max is 3 [ 441.792247][ T5901] usb 2-1: config 8 has an invalid interface number: 130 but max is 3 [ 441.801494][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 441.814009][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.826261][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.837686][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.858318][ T5901] usb 2-1: config 8 has no interface number 0 [ 441.867627][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 441.877720][ T5901] usb 2-1: config 8 has no interface number 1 [ 441.888706][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 441.893446][ T5901] usb 2-1: config 8 has no interface number 2 [ 441.911009][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.3.1679 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 441.911031][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.911041][T11718] Call Trace: [ 441.911045][T11718] [ 441.911052][T11718] dump_stack_lvl+0x16c/0x1f0 [ 441.911081][T11718] should_fail_ex+0x50a/0x650 [ 441.911107][T11718] ? fs_reclaim_acquire+0xae/0x150 [ 441.911134][T11718] should_failslab+0xc2/0x120 [ 441.911155][T11718] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 441.911174][T11718] ? __alloc_skb+0x2b1/0x380 [ 441.911202][T11718] __alloc_skb+0x2b1/0x380 [ 441.911225][T11718] ? __pfx___alloc_skb+0x10/0x10 [ 441.911247][T11718] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 441.911275][T11718] ? import_ubuf+0x1b6/0x220 [ 441.911300][T11718] pfkey_sendmsg+0x16e/0x840 [ 441.911332][T11718] ____sys_sendmsg+0xaaf/0xc90 [ 441.911353][T11718] ? copy_msghdr_from_user+0x10b/0x160 [ 441.911378][T11718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.911410][T11718] ___sys_sendmsg+0x135/0x1e0 [ 441.911437][T11718] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.911473][T11718] ? __pfx_lock_release+0x10/0x10 [ 441.911497][T11718] ? trace_lock_acquire+0x14e/0x1f0 [ 441.911526][T11718] ? __fget_files+0x206/0x3a0 [ 441.911550][T11718] __sys_sendmsg+0x16e/0x220 [ 441.911575][T11718] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.911617][T11718] do_syscall_64+0xcd/0x250 [ 441.911643][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.911667][T11718] RIP: 0033:0x7f790098d169 [ 441.911680][T11718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.911698][T11718] RSP: 002b:00007f790175b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.911715][T11718] RAX: ffffffffffffffda RBX: 00007f7900ba5fa0 RCX: 00007f790098d169 [ 441.911726][T11718] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 441.911737][T11718] RBP: 00007f790175b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.911747][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.911756][T11718] R13: 0000000000000000 R14: 00007f7900ba5fa0 R15: 00007ffcfd821888 [ 441.911779][T11718] [ 441.932514][ T5873] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 441.933893][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.944949][ T5901] usb 2-1: config 8 has no interface number 3 [ 441.944996][ T5901] usb 2-1: config 8 interface 131 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 441.963186][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.965550][ T5901] usb 2-1: config 8 interface 131 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 441.978668][ T5873] usb 5-1: config 0 descriptor?? [ 441.993139][ T5901] usb 2-1: config 8 interface 149 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 442.270642][ T5901] usb 2-1: config 8 interface 131 has no altsetting 0 [ 442.293511][ T5901] usb 2-1: config 8 interface 66 has no altsetting 0 [ 442.300274][ T5901] usb 2-1: config 8 interface 149 has no altsetting 0 [ 442.311639][T11724] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 442.320695][ T5901] usb 2-1: config 8 interface 130 has no altsetting 0 [ 442.352036][ T5901] usb 2-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=f3.15 [ 442.657072][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 442.693501][ T5874] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 442.719590][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.734970][ T5873] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 442.778594][ T5901] usb 2-1: Product: 퓢ﻗ间ꀯã˜ë¹“ç“å¹ë¦‡æ¡€é°Œê®„柚푙駉☜὆굜祒í‚涆ܡãœà»µë”ꦦ [ 442.819928][ T5873] usb 5-1: USB disconnect, device number 38 [ 442.835855][ T5873] usblp0: removed [ 442.837692][ T5901] usb 2-1: Manufacturer: ã¡ [ 442.865600][ T5901] usb 2-1: SerialNumber: 〉 [ 442.945544][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.977915][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 443.012402][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.039000][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.054127][ T5874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.063901][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.078639][ T5874] usb 4-1: config 0 descriptor?? [ 443.085523][T11726] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 443.153126][T11735] No such timeout policy "syz1" [ 443.324790][ T5901] usb 2-1: bad CDC descriptors [ 443.489389][ T5901] cdc_acm 2-1:8.131: Zero length descriptor references [ 443.654927][ T5901] cdc_acm 2-1:8.131: probe with driver cdc_acm failed with error -22 [ 443.811750][ T5901] usb 2-1: USB disconnect, device number 49 [ 444.033199][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 444.829435][ T9] usb 5-1: config 1 has an invalid interface number: 66 but max is 2 [ 444.872722][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 444.928666][ T30] audit: type=1400 audit(1742771349.302:1364): avc: denied { bind } for pid=11749 comm="syz.2.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 444.967252][T11750] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1687'. [ 444.980951][ T9] usb 5-1: config 1 has an invalid interface number: 248 but max is 2 [ 445.005674][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 445.018778][ T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 445.029328][ T30] audit: type=1400 audit(1742771349.302:1365): avc: denied { name_bind } for pid=11749 comm="syz.2.1687" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 445.050564][ T9] usb 5-1: config 1 has no interface number 0 [ 445.062954][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.078178][ T9] usb 5-1: config 1 has no interface number 1 [ 445.093450][ T5874] usb 4-1: USB disconnect, device number 50 [ 445.100998][ T9] usb 5-1: config 1 has no interface number 2 [ 445.115255][ T30] audit: type=1400 audit(1742771349.302:1366): avc: denied { node_bind } for pid=11749 comm="syz.2.1687" saddr=fc02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 445.233229][ T9] usb 5-1: too many endpoints for config 1 interface 3 altsetting 252: 238, using maximum allowed: 30 [ 445.246891][ T9] usb 5-1: config 1 interface 3 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 445.261150][ T9] usb 5-1: config 1 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 445.274588][ T9] usb 5-1: config 1 interface 66 has no altsetting 0 [ 445.281345][ T9] usb 5-1: config 1 interface 3 has no altsetting 0 [ 445.288271][ T9] usb 5-1: config 1 interface 248 has no altsetting 0 [ 445.300627][ T9] usb 5-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice= f.e2 [ 445.336373][T11756] No such timeout policy "syz1" [ 445.839518][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.861320][ T9] usb 5-1: Product: à ” [ 445.871906][ T9] usb 5-1: Manufacturer: 蚀æí€Ÿâš‡æŸî‹”ã²¬å—½ç¶–í‚“Ú켩í„輦ꦩ꿩äŒç€ã¿à¦½îœ“ꂘ轤්蘠ã–팛î³ìŠ“å’ªé¶è¥¢ê¯é¬´å˜ï’³à»ì˜ªæ¤¡ï‡Œç¶„軸姴ë°åŒ´Ïªë®‘㇥٣箤꟩䔼戦ê®ç‡ä‘¬äœ¶ç”ŒÂ› [ 445.892221][ T9] usb 5-1: SerialNumber: ш [ 446.129724][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.255227][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.264691][ T5874] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 446.460148][ T9] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 446.698683][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 446.734152][ T9] dib0700: firmware download failed at 7 with -22 [ 446.755775][ T9] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 446.770869][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 446.785012][ T30] audit: type=1400 audit(1742771351.152:1367): avc: denied { mount } for pid=11769 comm="syz.2.1693" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 446.820296][ T5874] usb 2-1: config 1 has an invalid interface number: 66 but max is 1 [ 446.831474][ T5874] usb 2-1: config 1 has an invalid interface number: 3 but max is 1 [ 446.843498][ T5874] usb 2-1: config 1 has an invalid interface number: 248 but max is 1 [ 446.852101][ T5874] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 446.862894][ T5874] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 446.872215][ T5874] usb 2-1: config 1 has no interface number 0 [ 446.878993][ T5874] usb 2-1: config 1 has no interface number 1 [ 446.897344][ T30] audit: type=1400 audit(1742771351.272:1368): avc: denied { read } for pid=11769 comm="syz.2.1693" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 446.911756][ T9] dib0700: firmware download failed at 7 with -22 [ 446.920751][ T5874] usb 2-1: config 1 has no interface number 2 [ 446.927676][ T30] audit: type=1400 audit(1742771351.272:1369): avc: denied { open } for pid=11769 comm="syz.2.1693" path="/358/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 446.937003][T11770] sd 0:0:1:0: PR command failed: 1026 [ 446.957464][ T9] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 446.971815][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 446.980128][ T9] dib0700: firmware download failed at 7 with -22 [ 446.988292][ T5874] usb 2-1: too many endpoints for config 1 interface 3 altsetting 252: 238, using maximum allowed: 30 [ 446.999529][ T30] audit: type=1400 audit(1742771351.292:1370): avc: denied { ioctl } for pid=11769 comm="syz.2.1693" path="/358/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 447.001504][T11770] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 447.032265][ T5874] usb 2-1: config 1 interface 3 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 447.086167][T11773] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 447.120862][ T5874] usb 2-1: config 1 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 447.268974][ T5874] usb 2-1: config 1 interface 66 has no altsetting 0 [ 447.341109][ T5874] usb 2-1: config 1 interface 3 has no altsetting 0 [ 447.400301][T11770] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 447.434549][ T5874] usb 2-1: config 1 interface 248 has no altsetting 0 [ 447.500955][ T9] usb 5-1: USB disconnect, device number 39 [ 447.510677][ T5874] usb 2-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice= f.e2 [ 447.535154][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.550737][ T5874] usb 2-1: Product: à ” [ 447.563296][ T5874] usb 2-1: Manufacturer: 蚀æí€Ÿâš‡æŸî‹”ã²¬å—½ç¶–í‚“Ú켩í„輦ꦩ꿩äŒç€ã¿à¦½îœ“ꂘ轤්蘠ã–팛î³ìŠ“å’ªé¶è¥¢ê¯é¬´å˜ï’³à»ì˜ªæ¤¡ï‡Œç¶„軸姴ë°åŒ´Ïªë®‘㇥٣箤꟩䔼戦ê®ç‡ä‘¬äœ¶ç”ŒÂ› [ 447.594976][ T5874] usb 2-1: SerialNumber: ш [ 448.199676][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.214779][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.269752][ T5874] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 448.293985][ T5874] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 448.303178][ T5874] dib0700: firmware download failed at 7 with -22 [ 448.315711][ T5874] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 448.332661][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 448.342518][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 448.381654][ T5874] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 448.397963][ T5874] dib0700: firmware download failed at 7 with -22 [ 448.411119][ T5874] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 448.494678][ T5874] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 448.502787][ T5874] dib0700: firmware download failed at 7 with -22 [ 448.510620][T11792] capability: warning: `syz.0.1701' uses 32-bit capabilities (legacy support in use) [ 448.537543][ T5874] usb 2-1: USB disconnect, device number 50 [ 448.572522][T11794] FAULT_INJECTION: forcing a failure. [ 448.572522][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.601793][T11794] CPU: 1 UID: 0 PID: 11794 Comm: syz.3.1702 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 448.601817][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 448.601826][T11794] Call Trace: [ 448.601831][T11794] [ 448.601837][T11794] dump_stack_lvl+0x16c/0x1f0 [ 448.601866][T11794] should_fail_ex+0x50a/0x650 [ 448.601896][T11794] _copy_from_user+0x2e/0xd0 [ 448.601915][T11794] do_ipv6_getsockopt+0x358/0x2e40 [ 448.601942][T11794] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 448.601972][T11794] ? trace_lock_acquire+0x14e/0x1f0 [ 448.601996][T11794] ? hlock_class+0x4e/0x130 [ 448.602013][T11794] ? __lock_acquire+0x15a9/0x3c40 [ 448.602047][T11794] ? __pfx___lock_acquire+0x10/0x10 [ 448.602076][T11794] ? ipv6_getsockopt+0x126/0x280 [ 448.602097][T11794] ipv6_getsockopt+0x126/0x280 [ 448.602121][T11794] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 448.602144][T11794] ? __might_fault+0x13b/0x190 [ 448.602165][T11794] ? __pfx_lock_release+0x10/0x10 [ 448.602191][T11794] rawv6_getsockopt+0xb3/0x490 [ 448.602212][T11794] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 448.602230][T11794] ? __might_fault+0xe3/0x190 [ 448.602252][T11794] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 448.602273][T11794] do_sock_getsockopt+0x3fe/0x800 [ 448.602294][T11794] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 448.602312][T11794] ? lock_acquire+0x2f/0xb0 [ 448.602333][T11794] ? __fget_files+0x40/0x3a0 [ 448.602359][T11794] ? __fget_files+0x206/0x3a0 [ 448.602380][T11794] __sys_getsockopt+0x12f/0x260 [ 448.602410][T11794] __x64_sys_getsockopt+0xbd/0x160 [ 448.602433][T11794] ? do_syscall_64+0x91/0x250 [ 448.602458][T11794] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.602480][T11794] do_syscall_64+0xcd/0x250 [ 448.602505][T11794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.602529][T11794] RIP: 0033:0x7f790098d169 [ 448.602543][T11794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.602558][T11794] RSP: 002b:00007f790175b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 448.602575][T11794] RAX: ffffffffffffffda RBX: 00007f7900ba5fa0 RCX: 00007f790098d169 [ 448.602586][T11794] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 448.602596][T11794] RBP: 00007f790175b090 R08: 0000200000000240 R09: 0000000000000000 [ 448.602605][T11794] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 448.602615][T11794] R13: 0000000000000000 R14: 00007f7900ba5fa0 R15: 00007ffcfd821888 [ 448.602637][T11794] [ 448.858867][ T5827] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 448.991951][T11800] x_tables: ip_tables: osf match: only valid for protocol 6 [ 449.091525][ T5827] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 449.129880][ T5827] usb 3-1: config 0 has no interface number 0 [ 449.139532][ T5827] usb 3-1: config 0 interface 92 altsetting 255 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 449.152094][ T5827] usb 3-1: config 0 interface 92 has no altsetting 0 [ 449.313881][ T5827] usb 3-1: New USB device found, idVendor=17e9, idProduct=14ba, bcdDevice=c7.2a [ 449.333519][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.341546][ T5827] usb 3-1: Product: syz [ 449.352482][ T5827] usb 3-1: Manufacturer: syz [ 449.357337][ T5827] usb 3-1: SerialNumber: syz [ 449.370316][ T5827] usb 3-1: config 0 descriptor?? [ 449.459947][T11807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11807 comm=syz.0.1707 [ 449.483710][ T30] audit: type=1400 audit(1742771353.852:1371): avc: denied { map } for pid=11806 comm="syz.0.1707" path="socket:[33460]" dev="sockfs" ino=33460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 449.591327][ T5827] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 449.620947][ T5827] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 449.630501][ T5827] [drm:udl_init] *ERROR* Selecting channel failed [ 449.669533][ T5827] [drm] Initialized udl 0.0.1 for 3-1:0.92 on minor 2 [ 449.726630][ T5827] [drm] Initialized udl on minor 2 [ 449.933704][ T30] audit: type=1400 audit(1742771354.262:1372): avc: denied { accept } for pid=11810 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 449.949084][ T5827] udl 3-1:0.92: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 450.098245][ T5827] udl 3-1:0.92: [drm] Cannot find any crtc or sizes [ 450.471791][ T5874] udl 3-1:0.92: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 450.493290][ T5827] usb 3-1: USB disconnect, device number 35 [ 450.508020][ T5874] udl 3-1:0.92: [drm] Cannot find any crtc or sizes [ 450.782604][T11843] No such timeout policy "syz1" [ 451.924706][T11845] x_tables: ip_tables: osf match: only valid for protocol 6 [ 451.963135][ T5871] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 452.347945][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 452.497865][ T5871] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 452.507896][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.530544][ T5871] usb 5-1: config 0 descriptor?? [ 453.077602][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.087225][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.117493][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.127115][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.293223][ T5911] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 453.859106][ T30] audit: type=1400 audit(1742771358.212:1373): avc: denied { setopt } for pid=11873 comm="syz.3.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.994335][ T5911] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 454.015201][ T5911] usb 3-1: config 3 has no interface number 0 [ 454.037914][ T5911] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 454.094927][ T5911] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 454.107999][ T5911] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 454.353132][ T5871] usb 5-1: string descriptor 0 read error: -71 [ 454.438688][ T5871] ldusb 5-1:0.0: Interrupt in endpoint not found [ 454.460828][ T5871] usb 5-1: USB disconnect, device number 40 [ 454.460897][ T5911] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 454.538781][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.550374][T11854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 455.022898][ T54] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 455.866221][T11896] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1731'. [ 455.929664][ T5911] usb 3-1: string descriptor 0 read error: -71 [ 455.954078][ T5911] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 455.962030][ T5911] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 455.976901][ T5911] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 455.985831][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 455.995158][ T5911] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 456.006735][ T5911] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 456.015538][T11896] netlink: 'syz.3.1731': attribute type 4 has an invalid length. [ 456.033904][ T5911] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 456.042538][ T5911] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 456.066292][ T5911] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 456.066359][ T30] audit: type=1400 audit(1742771360.432:1374): avc: denied { ioctl } for pid=11902 comm="syz.4.1732" path="socket:[33688]" dev="sockfs" ino=33688 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 456.107879][ T5911] usb 3-1: USB disconnect, device number 36 [ 456.119125][ T5911] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 456.133650][ T5911] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 456.145805][ T5911] keyspan 3-1:3.168: device disconnected [ 456.153421][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 456.164751][ T9] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 456.178521][ T9] usb 2-1: config 8 has no interface number 0 [ 456.270402][ T9] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 456.517720][ T9] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 456.877311][ T9] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 456.969245][ T9] usb 2-1: config 8 interface 39 has no altsetting 0 [ 456.982710][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 457.015796][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.176328][ T9] usb 2-1: Product: syz [ 457.212357][ T9] usb 2-1: Manufacturer: syz [ 457.243630][ T9] usb 2-1: SerialNumber: syz [ 457.428823][T11923] netlink: 'syz.3.1738': attribute type 58 has an invalid length. [ 457.440562][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 458.160383][ T9] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 458.181959][ T9] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 458.320190][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 458.329256][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 458.414095][T11941] No such timeout policy "syz1" [ 458.949929][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.239554][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.447937][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.475267][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.541508][ T30] audit: type=1400 audit(1742771363.892:1375): avc: denied { append } for pid=11946 comm="syz.4.1744" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 459.573248][ T5874] usb 2-1: USB disconnect, device number 51 [ 459.610124][ T30] audit: type=1400 audit(1742771363.892:1376): avc: denied { create } for pid=11946 comm="syz.4.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 459.805062][ T5874] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 459.853298][ T30] audit: type=1400 audit(1742771364.142:1377): avc: denied { write } for pid=11946 comm="syz.4.1744" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 461.093206][ T5871] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 461.235185][ T54] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 461.284637][ T5871] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 461.353697][ T5871] usb 2-1: config 3 has no interface number 0 [ 461.370298][ T5871] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 461.441739][ T5871] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 461.475448][ T5871] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 461.508209][ T5871] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 461.553165][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.608861][T11965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.715735][T11996] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 462.193005][ T54] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 462.392046][ T5871] usb 2-1: string descriptor 0 read error: -71 [ 462.412750][ T5871] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 462.435627][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 462.668486][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 462.685202][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 462.966493][ T5871] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 463.077736][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 463.095340][ T5871] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 463.128810][ T5871] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 463.178831][ T5871] usb 2-1: USB disconnect, device number 52 [ 463.198099][T12013] ax25_connect(): syz.4.1754 uses autobind, please contact jreuter@yaina.de [ 463.198373][ T30] audit: type=1400 audit(1742771367.572:1378): avc: denied { connect } for pid=12012 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 463.238958][ T5871] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 463.241585][T12014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2328 sclass=netlink_route_socket pid=12014 comm=syz.4.1754 [ 463.260818][ T5871] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 463.271180][ T5871] keyspan 2-1:3.168: device disconnected [ 463.305808][T12015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2328 sclass=netlink_route_socket pid=12015 comm=syz.4.1754 [ 464.448427][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 464.902399][T12038] CIFS: Unable to determine destination address [ 465.333344][T12042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12042 comm=syz.0.1762 [ 465.346139][T12042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12042 comm=syz.0.1762 [ 466.213210][ T5827] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 466.231482][ T30] audit: type=1400 audit(1742771370.602:1379): avc: denied { bind } for pid=12044 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.425290][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 466.444976][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 466.456820][ T5827] usb 2-1: can't read configurations, error -61 [ 466.593234][ T30] audit: type=1400 audit(1742771370.952:1380): avc: denied { setopt } for pid=12060 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.612943][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.625701][ T5827] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 466.653298][ T30] audit: type=1400 audit(1742771370.962:1381): avc: denied { connect } for pid=12060 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.744711][ T30] audit: type=1400 audit(1742771370.972:1382): avc: denied { write } for pid=12060 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.753108][T12066] sd 0:0:1:0: PR command failed: 1026 [ 466.846264][T12066] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 466.863525][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 466.869344][T12066] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 466.917352][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 467.080228][ T5827] usb 2-1: can't read configurations, error -61 [ 467.112932][ T5827] usb usb2-port1: attempt power cycle [ 467.172641][T12071] netlink: 'syz.2.1772': attribute type 58 has an invalid length. [ 467.213120][T12071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'. [ 467.493161][ T5827] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 467.514645][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 467.524642][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 467.532783][ T5827] usb 2-1: can't read configurations, error -61 [ 467.544974][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 467.733361][ T5827] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 468.140034][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 468.163169][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 468.179523][ T5827] usb 2-1: can't read configurations, error -61 [ 468.187512][ T5827] usb usb2-port1: unable to enumerate USB device [ 468.200094][ T30] audit: type=1400 audit(1742771372.572:1383): avc: denied { bind } for pid=12085 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 468.237264][ T30] audit: type=1400 audit(1742771372.572:1384): avc: denied { name_bind } for pid=12085 comm="syz.0.1776" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 468.334329][ T30] audit: type=1400 audit(1742771372.572:1385): avc: denied { node_bind } for pid=12085 comm="syz.0.1776" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 468.610469][T12092] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 469.033463][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 469.275251][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 469.386799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.481757][T12101] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 469.979054][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.989014][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 470.028340][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.117861][ T9] usb 5-1: config 0 descriptor?? [ 470.148535][ T30] audit: type=1400 audit(1742771374.512:1386): avc: denied { mounton } for pid=12102 comm="syz.1.1781" path="/351/file0" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 470.355453][T12107] sd 0:0:1:0: PR command failed: 1026 [ 470.360919][T12107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 470.377804][T12107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 470.602141][ T9] playstation 0003:054C:05C4.000F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 470.624582][ T30] audit: type=1400 audit(1742771374.992:1387): avc: denied { map } for pid=12120 comm="syz.3.1786" path="socket:[34966]" dev="sockfs" ino=34966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.668397][T12122] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 470.676028][ T30] audit: type=1400 audit(1742771375.042:1388): avc: denied { block_suspend } for pid=12117 comm="syz.0.1784" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 470.697472][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.703920][T12122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.725734][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 471.015362][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.065671][T12131] x_tables: ip_tables: osf match: only valid for protocol 6 [ 471.113187][ T9] playstation 0003:054C:05C4.000F: Failed to retrieve feature with reportID 163: -32 [ 471.245011][ T9] playstation 0003:054C:05C4.000F: Failed to retrieve DualShock4 firmware info: -32 [ 471.270407][ T9] playstation 0003:054C:05C4.000F: Failed to get firmware info from DualShock4 [ 471.279809][ T10] usb 2-1: config 8 has an invalid interface number: 131 but max is 3 [ 471.288277][ T10] usb 2-1: config 8 has an invalid interface number: 66 but max is 3 [ 471.297920][ T10] usb 2-1: config 8 has an invalid interface number: 149 but max is 3 [ 471.306265][ T9] playstation 0003:054C:05C4.000F: HW/FW version data in sysfs will be invalid. [ 471.318205][ T10] usb 2-1: config 8 has an invalid interface number: 130 but max is 3 [ 471.326980][ T10] usb 2-1: config 8 has no interface number 0 [ 471.334164][ T9] input: HID 054c:05c4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.000F/input/input53 [ 471.360673][ T10] usb 2-1: config 8 has no interface number 1 [ 471.390897][ T9] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.000F/input/input54 [ 471.406118][T12129] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 471.416609][ T10] usb 2-1: config 8 has no interface number 2 [ 471.434484][ T10] usb 2-1: config 8 has no interface number 3 [ 471.444982][ T10] usb 2-1: config 8 interface 131 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 471.457103][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.000F/input/input55 [ 471.485324][ T10] usb 2-1: config 8 interface 131 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 471.534605][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.543456][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.578617][ T9] playstation 0003:054C:05C4.000F: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 471.591176][ T10] usb 2-1: config 8 interface 149 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 471.674367][ T10] usb 2-1: config 8 interface 131 has no altsetting 0 [ 471.683699][ T10] usb 2-1: config 8 interface 66 has no altsetting 0 [ 471.690415][ T10] usb 2-1: config 8 interface 149 has no altsetting 0 [ 471.703740][ T10] usb 2-1: config 8 interface 130 has no altsetting 0 [ 471.712597][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=f3.15 [ 471.742526][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.770910][ T10] usb 2-1: Product: syz [ 471.784343][ T10] usb 2-1: Manufacturer: syz [ 471.803924][ T10] usb 2-1: SerialNumber: syz [ 471.993576][ T9] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 472.264853][ T10] rndis_host 2-1:8.131: invalid descriptor buffer length [ 472.558851][ T10] usb 2-1: bad CDC descriptors [ 472.587558][ T10] cdc_acm 2-1:8.131: invalid descriptor buffer length [ 472.637681][ T10] usb 2-1: USB disconnect, device number 57 [ 472.669268][T12159] sch_tbf: peakrate 4294901761 is lower than or equals to rate 5830806149046838872 ! [ 472.821574][T12159] block device autoloading is deprecated and will be removed. [ 473.167742][T12178] 9pnet_fd: Insufficient options for proto=fd [ 473.177091][ T30] audit: type=1400 audit(1742771377.542:1389): avc: denied { read } for pid=12177 comm="syz.2.1802" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 473.232062][ T30] audit: type=1400 audit(1742771377.542:1390): avc: denied { open } for pid=12177 comm="syz.2.1802" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 473.401038][ T5873] usb 5-1: USB disconnect, device number 41 [ 473.535840][T12184] Cannot find del_set index 0 as target [ 473.722830][T12187] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 474.376001][T12201] ISOFS: Unable to identify CD-ROM format. [ 474.633228][ T974] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 475.372862][ T30] audit: type=1400 audit(1742771379.352:1391): avc: denied { read } for pid=12208 comm="syz.1.1814" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 475.402094][ T30] audit: type=1400 audit(1742771379.352:1392): avc: denied { open } for pid=12208 comm="syz.1.1814" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 475.433625][ T974] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 475.445483][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.472212][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.491109][ T974] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 475.501892][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.532566][ T974] usb 4-1: config 0 descriptor?? [ 476.129709][ T30] audit: type=1400 audit(1742771380.502:1393): avc: denied { setopt } for pid=12224 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.162147][ T974] razer 0003:1532:011B.0010: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.3-1/input0 [ 476.179094][ T30] audit: type=1400 audit(1742771380.552:1394): avc: denied { bind } for pid=12224 comm="syz.1.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.394437][ T5871] usb 4-1: USB disconnect, device number 51 [ 476.994298][ T30] audit: type=1326 audit(1742771380.842:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12224 comm="syz.1.1819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f770d78d169 code=0x0 [ 477.148227][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 477.263021][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 477.305570][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 477.324094][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.325844][ T30] audit: type=1400 audit(1742771381.702:1396): avc: denied { create } for pid=12235 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 477.367466][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 477.384189][ T9] usb 3-1: config 1 has no interface number 1 [ 477.393172][ T30] audit: type=1326 audit(1742771381.702:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.4.1822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b0a58d169 code=0x0 [ 477.393237][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 477.416141][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.593383][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 477.606461][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.615882][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.630350][T12242] sd 0:0:1:0: PR command failed: 1026 [ 477.636283][T12242] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 477.643623][T12242] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 477.651013][ T9] usb 3-1: Product: syz [ 477.655835][ T9] usb 3-1: Manufacturer: syz [ 477.660719][ T9] usb 3-1: SerialNumber: syz [ 478.233883][ T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 478.334286][ T9] usb 3-1: USB disconnect, device number 37 [ 478.487621][ T30] audit: type=1400 audit(1742771382.862:1398): avc: denied { bind } for pid=12254 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.545444][ T5827] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 478.589817][T11606] udevd[11606]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.677693][ T974] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 478.825266][T12258] x_tables: ip_tables: osf match: only valid for protocol 6 [ 479.067765][ T5827] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 479.074688][ T974] usb 5-1: config 1 has an invalid interface number: 66 but max is 2 [ 479.084401][ T974] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 479.094478][ T974] usb 5-1: config 1 has an invalid interface number: 248 but max is 2 [ 479.104386][ T974] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 479.171981][T12263] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 479.652928][ T974] usb 5-1: config 1 has no interface number 0 [ 479.659115][ T974] usb 5-1: config 1 has no interface number 1 [ 479.665278][ T974] usb 5-1: config 1 has no interface number 2 [ 479.671356][ T974] usb 5-1: too many endpoints for config 1 interface 3 altsetting 252: 238, using maximum allowed: 30 [ 479.682721][ T974] usb 5-1: config 1 interface 3 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 479.696079][ T974] usb 5-1: config 1 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 479.697290][ T5827] usb 4-1: config 3 has no interface number 0 [ 479.724816][ T5827] usb 4-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 479.728838][ T974] usb 5-1: config 1 interface 66 has no altsetting 0 [ 479.736724][ T5827] usb 4-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 479.736758][ T5827] usb 4-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 479.878405][ T974] usb 5-1: config 1 interface 3 has no altsetting 0 [ 479.885436][ T974] usb 5-1: config 1 interface 248 has no altsetting 0 [ 479.895136][ T974] usb 5-1: New USB device found, idVendor=1554, idProduct=5010, bcdDevice= f.e2 [ 479.915073][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.926472][ T974] usb 5-1: Product: à ” [ 479.934113][ T974] usb 5-1: Manufacturer: 蚀æí€Ÿâš‡æŸî‹”ã²¬å—½ç¶–í‚“Ú켩í„輦ꦩ꿩äŒç€ã¿à¦½îœ“ꂘ轤්蘠ã–팛î³ìŠ“å’ªé¶è¥¢ê¯é¬´å˜ï’³à»ì˜ªæ¤¡ï‡Œç¶„軸姴ë°åŒ´Ïªë®‘㇥٣箤꟩䔼戦ê®ç‡ä‘¬äœ¶ç”ŒÂ› [ 479.954077][ T5827] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 479.964892][T12265] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 479.967898][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.971906][T12265] VFS: Can't find a romfs filesystem on dev nullb0. [ 479.971906][T12265] [ 479.994193][ T974] usb 5-1: SerialNumber: ш [ 479.999207][ T30] audit: type=1400 audit(1742771384.362:1399): avc: denied { listen } for pid=12266 comm="syz.0.1832" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 480.021237][T12248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 480.044182][ T30] audit: type=1400 audit(1742771384.422:1400): avc: denied { write } for pid=12266 comm="syz.0.1832" laddr=127.0.0.1 lport=55312 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 480.722445][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.778645][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 480.818512][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.995277][ T974] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 481.039046][ T974] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 481.170101][ T974] dib0700: firmware download failed at 7 with -22 [ 481.191171][ T5827] usb 4-1: string descriptor 0 read error: -71 [ 481.191798][ T974] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 481.212547][ T974] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 481.214017][ T5827] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 481.224215][ T974] dib0700: firmware download failed at 7 with -22 [ 481.815678][ T5827] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 481.831413][ T5827] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 481.851892][ T5827] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 481.913490][T12289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1838'. [ 481.922551][ T974] dvb-usb: found a 'Prolink Pixelview SBTVD' in cold state, will try to load a firmware [ 481.937450][ T5827] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 481.939039][ T974] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 481.953881][ T5827] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 481.953919][ T5827] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 481.981820][ T5827] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 482.010681][ T5827] usb 4-1: USB disconnect, device number 52 [ 482.051297][ T5827] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 482.081533][ T974] dib0700: firmware download failed at 7 with -22 [ 482.093824][ T5827] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 482.115941][ T5827] keyspan 4-1:3.168: device disconnected [ 482.165403][ T974] usb 5-1: USB disconnect, device number 42 [ 482.193228][ T30] audit: type=1400 audit(1742771386.562:1401): avc: denied { ioctl } for pid=12294 comm="syz.0.1841" path="socket:[35262]" dev="sockfs" ino=35262 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.218074][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.509487][T12307] tmpfs: Unknown parameter 'grpqu"Rİ÷‘ota_block_hardl' [ 483.181114][ T5827] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 483.352255][T12326] CIFS: Unable to determine destination address [ 483.373137][ T5827] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 483.437546][ T5827] usb 3-1: config 3 has no interface number 0 [ 483.467170][ T5827] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 483.545002][ T5827] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 483.624241][ T5827] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 483.691162][ T5827] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 483.735230][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.756907][T12301] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 484.332885][T12337] CIFS: Unable to determine destination address [ 484.687028][ T54] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 484.985999][ T5827] usb 3-1: string descriptor 0 read error: -71 [ 484.998678][ T5827] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 485.006514][ T5827] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 485.070274][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 485.202354][ T5827] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 485.210561][ T5827] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 485.559168][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.578431][ T5827] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 485.588237][ T5827] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 485.593405][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.612436][ T5827] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 485.622271][ T5827] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 485.653087][ T5827] usb 3-1: USB disconnect, device number 38 [ 485.758049][ T5827] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 485.813741][ T5827] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 485.849871][ T5827] keyspan 3-1:3.168: device disconnected [ 485.930966][ T30] audit: type=1400 audit(1742771390.302:1402): avc: denied { create } for pid=12362 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 486.314705][T12374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12374 comm=syz.3.1860 [ 486.327564][T12374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12374 comm=syz.3.1860 [ 486.857176][ T30] audit: type=1400 audit(1742771391.232:1403): avc: denied { connect } for pid=12376 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.897283][ T30] audit: type=1400 audit(1742771391.252:1404): avc: denied { setopt } for pid=12376 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.925286][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 486.940187][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1861'. [ 486.949966][ T30] audit: type=1400 audit(1742771391.252:1405): avc: denied { execute_no_trans } for pid=12376 comm="syz.1.1862" path="/373/file2" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 487.019118][T12382] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 487.383329][ T30] audit: type=1400 audit(1742771391.252:1406): avc: denied { create } for pid=12376 comm="syz.1.1862" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 487.407279][T12382] ------------[ cut here ]------------ [ 487.412996][T12382] WARNING: CPU: 0 PID: 12382 at kernel/kcov.c:872 kcov_remote_start+0xfd/0x6e0 [ 487.421924][T12382] Modules linked in: [ 487.425796][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.2.1863 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 487.436530][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.446560][T12382] RIP: 0010:kcov_remote_start+0xfd/0x6e0 [ 487.452177][T12382] Code: 65 4c 8b 3d 35 da 49 7e 4d 89 7c 24 28 8b 95 08 16 00 00 65 8b 05 2b da 49 7e a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 ab 9d 9d 09 44 8b 1d 64 19 d2 18 89 c0 48 03 1c c5 e0 [ 487.471772][T12382] RSP: 0018:ffffc9000df06a90 EFLAGS: 00010002 [ 487.477818][T12382] RAX: 0000000080000200 RBX: 000000000002d368 RCX: 0000000000000001 [ 487.485769][T12382] RDX: 0000000000000002 RSI: ffffffff8b6cff80 RDI: ffffffff8bd36a20 [ 487.493716][T12382] RBP: ffff888060758000 R08: 0000000000000000 R09: fffffbfff2dd8da7 [ 487.501677][T12382] R10: ffffffff96ec6d3f R11: 0000000000000046 R12: ffff8880b862d368 [ 487.509628][T12382] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888060758000 [ 487.517580][T12382] FS: 00007efc057d46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 487.526500][T12382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.533078][T12382] CR2: 000000110c30958f CR3: 0000000034c22000 CR4: 00000000003526f0 [ 487.541043][T12382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.549003][T12382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 487.556968][T12382] Call Trace: [ 487.560236][T12382] [ 487.563163][T12382] ? __warn+0xea/0x3c0 [ 487.567221][T12382] ? kcov_remote_start+0xfd/0x6e0 [ 487.572234][T12382] ? report_bug+0x3c0/0x580 [ 487.576735][T12382] ? handle_bug+0x54/0xa0 [ 487.581049][T12382] ? exc_invalid_op+0x17/0x50 [ 487.585709][T12382] ? asm_exc_invalid_op+0x1a/0x20 [ 487.590720][T12382] ? kcov_remote_start+0xfd/0x6e0 [ 487.595732][T12382] ieee80211_rx_list+0x460/0x2970 [ 487.600743][T12382] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 487.606183][T12382] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 487.611801][T12382] ? rcu_is_watching+0x12/0xc0 [ 487.616541][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 487.621719][T12382] ? ieee80211_rx_napi+0xa6/0x400 [ 487.626722][T12382] ? lock_acquire+0x2f/0xb0 [ 487.631203][T12382] ? ieee80211_rx_napi+0xa6/0x400 [ 487.636204][T12382] ieee80211_rx_napi+0xdd/0x400 [ 487.641038][T12382] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 487.646472][T12382] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.651649][T12382] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 487.657439][T12382] ieee80211_handle_queued_frames+0xd5/0x130 [ 487.663406][T12382] ? ieee80211_stop_device+0x22/0x110 [ 487.668758][T12382] ieee80211_stop_device+0x32/0x110 [ 487.673942][T12382] ieee80211_do_stop+0x1a2f/0x2520 [ 487.679036][T12382] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 487.684475][T12382] ? find_held_lock+0x2d/0x110 [ 487.689223][T12382] ? mark_held_locks+0x9f/0xe0 [ 487.693968][T12382] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 487.699754][T12382] ieee80211_stop+0x11d/0x660 [ 487.704411][T12382] ? __pfx_ieee80211_stop+0x10/0x10 [ 487.709586][T12382] __dev_close_many+0x1c5/0x360 [ 487.714415][T12382] ? __pfx___dev_close_many+0x10/0x10 [ 487.719762][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 487.725115][T12382] __dev_change_flags+0x4dc/0x720 [ 487.730133][T12382] ? __pfx___dev_change_flags+0x10/0x10 [ 487.735668][T12382] dev_change_flags+0x8f/0x160 [ 487.740414][T12382] do_setlink.constprop.0+0x699/0x3f80 [ 487.745855][T12382] ? __pfx___schedule+0x10/0x10 [ 487.750684][T12382] ? hlock_class+0x4e/0x130 [ 487.755173][T12382] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 487.761066][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 487.766425][T12382] ? preempt_schedule_common+0x44/0xc0 [ 487.771861][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 487.777227][T12382] ? __mutex_lock+0x347/0xb10 [ 487.781895][T12382] ? rcu_is_watching+0x12/0xc0 [ 487.786642][T12382] ? rtnl_newlink+0x5d9/0x1d60 [ 487.791397][T12382] ? __pfx___mutex_lock+0x10/0x10 [ 487.796403][T12382] ? cap_capable+0xb3/0x250 [ 487.800894][T12382] rtnl_newlink+0x1306/0x1d60 [ 487.805584][T12382] ? __pfx_rtnl_newlink+0x10/0x10 [ 487.810604][T12382] ? __pfx___lock_acquire+0x10/0x10 [ 487.815793][T12382] ? cred_has_capability.isra.0+0x192/0x2f0 [ 487.821672][T12382] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 487.827901][T12382] ? find_held_lock+0x2d/0x110 [ 487.832642][T12382] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 487.837750][T12382] ? __pfx_lock_release+0x10/0x10 [ 487.842765][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 487.847956][T12382] ? __pfx_rtnl_newlink+0x10/0x10 [ 487.852970][T12382] rtnetlink_rcv_msg+0x95b/0xea0 [ 487.857906][T12382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.863361][T12382] netlink_rcv_skb+0x16b/0x440 [ 487.868107][T12382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.873548][T12382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.878821][T12382] ? netlink_deliver_tap+0x1ae/0xd30 [ 487.884089][T12382] netlink_unicast+0x53c/0x7f0 [ 487.888834][T12382] ? __pfx_netlink_unicast+0x10/0x10 [ 487.894116][T12382] netlink_sendmsg+0x8b8/0xd70 [ 487.898868][T12382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.904139][T12382] ____sys_sendmsg+0xaaf/0xc90 [ 487.908881][T12382] ? copy_msghdr_from_user+0x10b/0x160 [ 487.914319][T12382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.919604][T12382] ___sys_sendmsg+0x135/0x1e0 [ 487.924262][T12382] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.929449][T12382] ? __pfx_lock_release+0x10/0x10 [ 487.934452][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 487.939630][T12382] ? __fget_files+0x206/0x3a0 [ 487.944286][T12382] __sys_sendmsg+0x16e/0x220 [ 487.948868][T12382] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.953959][T12382] ? __x64_sys_futex+0x1e1/0x4c0 [ 487.958883][T12382] do_syscall_64+0xcd/0x250 [ 487.963367][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.969267][T12382] RIP: 0033:0x7efc0498d169 [ 487.973669][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.993263][T12382] RSP: 002b:00007efc057d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.001653][T12382] RAX: ffffffffffffffda RBX: 00007efc04ba5fa0 RCX: 00007efc0498d169 [ 488.009613][T12382] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 488.017569][T12382] RBP: 00007efc04a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 488.025514][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.033469][T12382] R13: 0000000000000000 R14: 00007efc04ba5fa0 R15: 00007ffe83d71208 [ 488.041435][T12382] [ 488.044434][T12382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 488.051695][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.2.1863 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 488.062430][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.072470][T12382] Call Trace: [ 488.075725][T12382] [ 488.078632][T12382] dump_stack_lvl+0x3d/0x1f0 [ 488.083219][T12382] panic+0x71d/0x800 [ 488.087110][T12382] ? __pfx_panic+0x10/0x10 [ 488.091514][T12382] ? show_trace_log_lvl+0x29d/0x3d0 [ 488.096712][T12382] ? kcov_remote_start+0xfd/0x6e0 [ 488.101728][T12382] check_panic_on_warn+0xab/0xb0 [ 488.106648][T12382] __warn+0xf6/0x3c0 [ 488.110520][T12382] ? kcov_remote_start+0xfd/0x6e0 [ 488.115527][T12382] report_bug+0x3c0/0x580 [ 488.119834][T12382] handle_bug+0x54/0xa0 [ 488.123969][T12382] exc_invalid_op+0x17/0x50 [ 488.128451][T12382] asm_exc_invalid_op+0x1a/0x20 [ 488.133280][T12382] RIP: 0010:kcov_remote_start+0xfd/0x6e0 [ 488.138894][T12382] Code: 65 4c 8b 3d 35 da 49 7e 4d 89 7c 24 28 8b 95 08 16 00 00 65 8b 05 2b da 49 7e a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 ab 9d 9d 09 44 8b 1d 64 19 d2 18 89 c0 48 03 1c c5 e0 [ 488.158475][T12382] RSP: 0018:ffffc9000df06a90 EFLAGS: 00010002 [ 488.164528][T12382] RAX: 0000000080000200 RBX: 000000000002d368 RCX: 0000000000000001 [ 488.172469][T12382] RDX: 0000000000000002 RSI: ffffffff8b6cff80 RDI: ffffffff8bd36a20 [ 488.180413][T12382] RBP: ffff888060758000 R08: 0000000000000000 R09: fffffbfff2dd8da7 [ 488.188355][T12382] R10: ffffffff96ec6d3f R11: 0000000000000046 R12: ffff8880b862d368 [ 488.196299][T12382] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888060758000 [ 488.204255][T12382] ieee80211_rx_list+0x460/0x2970 [ 488.209260][T12382] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 488.214695][T12382] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 488.220309][T12382] ? rcu_is_watching+0x12/0xc0 [ 488.225049][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 488.230220][T12382] ? ieee80211_rx_napi+0xa6/0x400 [ 488.235226][T12382] ? lock_acquire+0x2f/0xb0 [ 488.239707][T12382] ? ieee80211_rx_napi+0xa6/0x400 [ 488.244709][T12382] ieee80211_rx_napi+0xdd/0x400 [ 488.249533][T12382] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 488.254967][T12382] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.260141][T12382] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 488.265923][T12382] ieee80211_handle_queued_frames+0xd5/0x130 [ 488.271881][T12382] ? ieee80211_stop_device+0x22/0x110 [ 488.277232][T12382] ieee80211_stop_device+0x32/0x110 [ 488.282407][T12382] ieee80211_do_stop+0x1a2f/0x2520 [ 488.287500][T12382] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 488.292940][T12382] ? find_held_lock+0x2d/0x110 [ 488.297685][T12382] ? mark_held_locks+0x9f/0xe0 [ 488.302434][T12382] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 488.308218][T12382] ieee80211_stop+0x11d/0x660 [ 488.312872][T12382] ? __pfx_ieee80211_stop+0x10/0x10 [ 488.318043][T12382] __dev_close_many+0x1c5/0x360 [ 488.322871][T12382] ? __pfx___dev_close_many+0x10/0x10 [ 488.328217][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 488.333577][T12382] __dev_change_flags+0x4dc/0x720 [ 488.338580][T12382] ? __pfx___dev_change_flags+0x10/0x10 [ 488.344107][T12382] dev_change_flags+0x8f/0x160 [ 488.348850][T12382] do_setlink.constprop.0+0x699/0x3f80 [ 488.354292][T12382] ? __pfx___schedule+0x10/0x10 [ 488.359120][T12382] ? hlock_class+0x4e/0x130 [ 488.363597][T12382] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 488.369476][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 488.374836][T12382] ? preempt_schedule_common+0x44/0xc0 [ 488.380271][T12382] ? preempt_schedule_thunk+0x1a/0x30 [ 488.385621][T12382] ? __mutex_lock+0x347/0xb10 [ 488.390275][T12382] ? rcu_is_watching+0x12/0xc0 [ 488.395013][T12382] ? rtnl_newlink+0x5d9/0x1d60 [ 488.399754][T12382] ? __pfx___mutex_lock+0x10/0x10 [ 488.404756][T12382] ? cap_capable+0xb3/0x250 [ 488.409244][T12382] rtnl_newlink+0x1306/0x1d60 [ 488.413905][T12382] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.418913][T12382] ? __pfx___lock_acquire+0x10/0x10 [ 488.424109][T12382] ? cred_has_capability.isra.0+0x192/0x2f0 [ 488.429982][T12382] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 488.436205][T12382] ? find_held_lock+0x2d/0x110 [ 488.440958][T12382] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 488.446048][T12382] ? __pfx_lock_release+0x10/0x10 [ 488.451049][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 488.456224][T12382] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.461227][T12382] rtnetlink_rcv_msg+0x95b/0xea0 [ 488.466145][T12382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.471587][T12382] netlink_rcv_skb+0x16b/0x440 [ 488.476329][T12382] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.481786][T12382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.487056][T12382] ? netlink_deliver_tap+0x1ae/0xd30 [ 488.492322][T12382] netlink_unicast+0x53c/0x7f0 [ 488.497065][T12382] ? __pfx_netlink_unicast+0x10/0x10 [ 488.502353][T12382] netlink_sendmsg+0x8b8/0xd70 [ 488.507124][T12382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.512405][T12382] ____sys_sendmsg+0xaaf/0xc90 [ 488.517153][T12382] ? copy_msghdr_from_user+0x10b/0x160 [ 488.522611][T12382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.527888][T12382] ___sys_sendmsg+0x135/0x1e0 [ 488.532552][T12382] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.537743][T12382] ? __pfx_lock_release+0x10/0x10 [ 488.542763][T12382] ? trace_lock_acquire+0x14e/0x1f0 [ 488.547946][T12382] ? __fget_files+0x206/0x3a0 [ 488.552615][T12382] __sys_sendmsg+0x16e/0x220 [ 488.557186][T12382] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.562275][T12382] ? __x64_sys_futex+0x1e1/0x4c0 [ 488.567201][T12382] do_syscall_64+0xcd/0x250 [ 488.571684][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.577559][T12382] RIP: 0033:0x7efc0498d169 [ 488.581954][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.601536][T12382] RSP: 002b:00007efc057d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.609928][T12382] RAX: ffffffffffffffda RBX: 00007efc04ba5fa0 RCX: 00007efc0498d169 [ 488.617886][T12382] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 488.625835][T12382] RBP: 00007efc04a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 488.633781][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.641725][T12382] R13: 0000000000000000 R14: 00007efc04ba5fa0 R15: 00007ffe83d71208 [ 488.649690][T12382] [ 488.652901][T12382] Kernel Offset: disabled [ 488.657266][T12382] Rebooting in 86400 seconds..