last executing test programs: 12.854786025s ago: executing program 1 (id=1378): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x20, 0x5, 0xdf, {0xdf, 0x22, "7936036e4fe0b333056ce21d0715344ec3dd06d74362a04e1d002b9a20b97ef6274d35c45a56a2a533d11dc266fa7bf4a9811e384bb9991e319056e42e3096452f49ded3cb66967e44a9e2d9b680834789636da838579d824db3f13ef1a72b1bab727ea450e1d4bccc1bf506d1090db76c5e4c5592c94245a4234ecf302d0598c0a1067472d1e77b8801f63b8005e30080eba87e6f858041dd5258116ef1600dc75919e56b0d8c20afeb48c6c7394fcd3b39dcfe0063f8c3f8654d8594926901b5c42c72dc8a2a99fdaad14905c44dd0ad6f17cc1aa3508f8651f57004"}}, &(0x7f0000000200)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "3e9916f61eef11e0dec4986df5eace1ea6307c2a437af890da1a6f2496bbbb0634c8aee826be7ac22d30973305282d344ef15d6e59bfce9fe8549e78699b764cd5ac3891cd2d054d9c9623"}}}, &(0x7f0000000480)={0x1c, &(0x7f00000003c0)={0x0, 0x17, 0x8b, "040adfbe1fafc2cd5bb5cbace9c36d52e542d693b479d8964147b6f8ff959669ff4bdf00213cf02d76c039fcefa00d84a4d97f594a71f206a8acab440edb2a77758e2f7d4f25545d2304a2a1172881346f7b0ad31aa6e93e124476f4a31203c729192a3e32c58b374f9f0d13100c75f2e49c22b714aebc601e563bd2381daa8db4df617bcec4bcebbd9857"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000100)={0x21, 0x0, 0x4, "42fbf1c8"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x40, 0xa, 0xdc, {0xdc, 0x22, "9cb3a9d5cee9e8a8b47d9c4a54d0245fc8aaf93c238dcf721fe05f1bd658f97da764f73f6d3153cde6c66fa36f9d5629bdccc5f11aa1dce86c33b3ae0a9c6a2da6f6e946698b22ea3bb308a0268679e46a2fbe31f31bd145440ea04f24f8b34a84f18b3511e2851551f30c1815b7de268b77898b91991131222f2af692bee117dd6bf10a916d3193801c00ae02f1ec3af901441f55d9692003ee8c957905d8ed866c23ee246deb0720d2763b6452b3611e735b28787f8a815d6ec255a96e6c97a52b70522f994a9b76273f28f7a02bf5e2b7eb31f9b4c9bc462c"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x1c, &(0x7f0000000bc0)={0x20, 0x8, 0xda, "8d119bb0c018dba13ae4466be1fc2c878d960e0d82310d7a8233407726cb38212a7221c069acbe8f6ca9a999279d39a8676be6cb86d1101cad47fd7679bede052aaecad238df5ef90c7130dc02a463567d8a494866023285c8c139b44bf694abdb5810b4d6dd4ae92d25e37b125489c071d5b5bf2bddf5ef17a42aebe6be3b8408c0ca0917418627619150f4b2342642323931298e838a3502dcd812e493bba0036cf9163131a5133b5aedcc7a36bc2b1f7214c324aec89460e5e77cff215a937128a298eff56c33221d07cf2a04938597a21309496bb6c442d9"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x3}}) 11.530146146s ago: executing program 2 (id=1382): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="05000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68a"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) socket(0x2, 0x80805, 0x0) 11.064439054s ago: executing program 3 (id=1384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f3000000eaa0e940be0000000004", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 10.053261667s ago: executing program 0 (id=1385): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$inet6(0xa, 0x3, 0x20000027) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x104d}], 0x1) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x12, 0x0, 0x0, 0x60, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fanotify_init(0x1a, 0x800) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r7, 0x641, 0x4800001a, r8, 0x0) fanotify_mark(r7, 0x22d, 0x8000032, r8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001b, 0x0, 0x4}]}) write$cgroup_int(r4, &(0x7f00000000c0)=0x10001, 0x12) 9.998341793s ago: executing program 4 (id=1386): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000003340)={0x1, 0x0, 0x1f, 0x1f, 0x19e, &(0x7f0000002f40)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010000000000000000"], 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 9.824690136s ago: executing program 3 (id=1387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c0002800500010000000000140002a0080001000000000008000200ac141400080005400000000009000100"], 0x58}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x7d, 0x0, &(0x7f0000000000)) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKGETZONESZ(r11, 0x80041284, &(0x7f00000001c0)=0x3483) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4, 0x100}) dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.084503334s ago: executing program 2 (id=1388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x4e20, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x300, 0x0, 0x0, 0x9d, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb4}}, 0x0) 9.046755819s ago: executing program 0 (id=1389): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x5760, 0x0) read$FUSE(r0, &(0x7f0000006200)={0x2020}, 0x2020) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x20080) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) tkill(r8, 0x12) ptrace(0x4208, r8) tkill(r8, 0x12) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x50009405, &(0x7f0000000400)) 9.012790675s ago: executing program 1 (id=1390): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) 8.718021474s ago: executing program 2 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x18f, 0xa583, 0x6e, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000100fd7f0000b627000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000200"/28], 0x50) socket(0x2a, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x20002}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) unshare(0x6a020400) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$nl_generic(0x10, 0x3, 0x10) 7.870825578s ago: executing program 4 (id=1392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002140)="b9fe030768045c8c989a14f088a8", 0x0, 0x8000009e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 7.344537448s ago: executing program 0 (id=1393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000680)=ANY=[], 0x68) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getegid() r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000000)="a38d", 0x2) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f00000001c0)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 6.469185154s ago: executing program 4 (id=1394): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0, 0xfffffffffffffeee, 0xfffffffffffffffc}]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5.453082866s ago: executing program 3 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) syslog(0x2, &(0x7f00000002c0)=""/215, 0xd7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffbd) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x24, r5, 0x1, 0xf0bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004804) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) io_setup(0x222, &(0x7f0000000180)=0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r11, &(0x7f00000002c0)="ab", 0x1, 0x6ed}]) r12 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x6, 0x3, 0xfffffffb, 0x7, 0x4c, 0x5a83, 0x40}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000200)={r13, 0x101}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000140009050000000000000000020100fd", @ANYRES32=r14, @ANYBLOB="140006000600000002000000000000000010000008000200ac1e0001080044007f000001"], 0x3c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 5.363899385s ago: executing program 1 (id=1396): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0xd76f) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 5.234844017s ago: executing program 4 (id=1397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000f3000000eaa0e940be0000000004", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3.7919264s ago: executing program 3 (id=1398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000020c0)="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", 0xb55}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x9c, 0x23b) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3.636382483s ago: executing program 4 (id=1399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x1f, 0x5}, {0xeeee0000, 0x4000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x64c38916b49bda64, 0xffff1000, 0x8, 0x8, 0x7, 0x2d, 0x3, 0x7f, 0x7, 0x6, 0x9, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x6, 0xe7}, {0x80a0000, 0x6000, 0x10, 0xbb, 0x7f, 0xad, 0x2, 0xfc, 0x10, 0x3, 0x1, 0x6}, {0x1, 0x8000000, 0xa, 0x9, 0x7f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x9}, {0x8000000, 0xdddd0000, 0xb, 0x0, 0x6, 0x4, 0x2, 0xfc, 0xc6, 0x20, 0x0, 0x81}, {0xeeee0000, 0x2, 0xb, 0x51, 0x7f, 0x0, 0x2, 0x0, 0x5, 0x8, 0x5, 0x3}, {0xeeee0000, 0xebed}, {0xd000, 0x43}, 0x80000000, 0x0, 0x1, 0x0, 0x9, 0xb100, 0xdddd1000, 0x0, [0x40, 0xd4df, 0x8, 0x6bbb]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, 0x0) r6 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) syz_pidfd_open(r6, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) open$dir(0x0, 0x400000, 0x100) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000000)="e6", 0x1, 0x24048000, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="01002dbd7000fddbdf2508000000b9bef018f66f40614c4bfaec05c5b1442949b75f0617073720bae6c9499c048158d3c604c9c4c2061f8f05f6bb0532233912fc47ac8d0f7324c4cbf633ddd2a2378a20e71af865490858488c3c76ca6e319b4197f98130ba964f7bb2b3a63663be3302b9cadb63614b354012cac422c4089379dc31dae3fbf9537bcf9ecdc8bb8310154be2ed3378c569f6d70e3d746fc9b43fe332ed5bbe48e5d40b402d6bdad328c2b2917990", @ANYRES16=r9, @ANYBLOB="14000000", @ANYRES8=r0, @ANYRES8=r5, @ANYRESOCT, @ANYRES16=r9, @ANYRES64=r9, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) shutdown(r8, 0x1) recvfrom(r8, 0x0, 0x0, 0x61, 0x0, 0x0) 3.473232368s ago: executing program 2 (id=1400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4000, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0xf}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000380)=""/183, 0x28, 0xb7, 0x0, 0xfffffff7, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000100000000000000010000b708000000000000080900000000007b8af0bfa100000000000007010000ad39ffffbfa400000000000007040000f0ffffffbef617cd", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f200000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = accept(r0, &(0x7f0000000100)=@in, &(0x7f0000000000)=0x80) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=&(0x7f00000000c0)=0xa1}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES16=r4, @ANYRESOCT=r5, @ANYBLOB='d'], 0x20) sendmmsg(r4, &(0x7f0000000200), 0x0, 0x4004804) inotify_init() 3.334541527s ago: executing program 0 (id=1401): sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x240040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102392, 0x18ff8) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) fsmount(r5, 0x1, 0x3) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.288347823s ago: executing program 2 (id=1402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = gettid() r3 = syz_open_dev$media(0x0, 0x1004007, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001540)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x24000000}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)}, {&(0x7f0000000c00)}], 0x3, &(0x7f0000000e80)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r4, r5, r3, r5]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xb8}}, {{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000400)}, {0x0}], 0x2, &(0x7f0000001200)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="7568410f905990439f8d2f1e1c1cb826859e11d5f36f8d64fe7b1eb398c3d5a8cb26ec3ca0b12af870ffe620f8b17f6d3dcd85fb0626f9b8c05e141be88cf8706c0753142a0e06bbe08f888e6be69e919637e954fda6190320b3dd898b988c5e503e295cfc2370732b81bd02cef135c6dd", 0x71}], 0x1, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48, 0x44}}], 0x4, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x10000) write$binfmt_elf32(r6, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "1d8f2a00020000b3", "0b3ea90ac47b25d7624cd362581725c7", "0100", "00000000000200"}, 0x28) read(r7, &(0x7f0000000640)=""/30, 0x1e) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000300)=""/244, 0xf4}], 0x1) 2.173142579s ago: executing program 1 (id=1403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100"/144], 0xfc}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x200180, 0x0) r4 = signalfd4(r1, &(0x7f0000000b80), 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000c00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000bc0), 0x111, 0x5}}, 0x20) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 1.700034452s ago: executing program 1 (id=1404): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timerfd_create(0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, 0x0) 1.565645485s ago: executing program 0 (id=1405): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x18, 0x48000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7a}}]}, 0x40}}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 1.123242408s ago: executing program 3 (id=1406): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, &(0x7f0000001540)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) 1.001446758s ago: executing program 0 (id=1407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x46) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = gettid() rt_tgsigqueueinfo(r4, r4, 0x20001c, &(0x7f0000000580)={0x2f, 0x7fffffff, 0x1}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000340)=0x4, 0x12) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) write(r8, &(0x7f0000000380)="2c52fffb64c4", 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x1}}, 0xfffffffffffffe33) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 999.370638ms ago: executing program 4 (id=1408): syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110014fd5a61094060100fcb1010203010902120001ff074041250c2f85009b015509951c880eace48c5cc04915305a06e15ee37786114c800000000000000000"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0xff1f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r4 = io_uring_setup(0x61fd, &(0x7f0000000000)={0x0, 0xc24a, 0x1, 0x1, 0x15e}) syz_io_uring_setup(0x44a4, &(0x7f0000000080)={0x0, 0xda1f, 0x0, 0x2, 0x3d4, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000140)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x882c0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000240081064e81f782db44b9040a02080006", 0x15}], 0x1}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x91, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x64, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x7, 0x24, 0x6, 0x0, 0x0, "a1c5"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x3, 0x4}, [@country_functional={0xe, 0x24, 0x7, 0x87, 0x7fff, [0x3b, 0x0, 0x7ff, 0x0]}, @ncm={0x6, 0x24, 0x1a, 0x7ff, 0x12}, @country_functional={0x10, 0x24, 0x7, 0x5, 0xffff, [0xfff, 0x9, 0xc81, 0x922, 0xc]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x9, [0x5, 0xf, 0x9, 0xeef, 0x4]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0xcb, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0xe, 0x82}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x300, 0x1, 0x9, 0x2, 0x10, 0xdc}, 0xd6, &(0x7f0000000880)={0x5, 0xf, 0xd6, 0x4, [@generic={0x9f, 0x10, 0x2, "9b495cebef3b09211f1f2bc66333e71e4133151b04870c3b93e4751c10a4e12c9eb9b3f55c7f1610f01934e7d6f4156826e8f2841f2524e880980eae33fa4011101be95e1503b2ab26cf3e257372e90956f120828222483b327f5a1c10ff819d985f313328268b49663d27e67edf0f5398ed7fbefc5cc87e74535a8917805481a5c414314c83c9f2fef1928cad487f7b70fc6d210a44aaceea5d7a2e"}, @ss_container_id={0x14, 0x10, 0x4, 0xa0, "d9a727c7b111233793b21365ef2c20c8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x81, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1887db38254558a0bbedc8d3135d4bfb"}]}, 0x3, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3801}}, {0xb0, &(0x7f00000009c0)=@string={0xb0, 0x3, "a83151a122dc7a73a719981816bb4e8777ef54d42dd41275daab75b037435442d6f53b9f50ddf5bb34951299b41edb3a3ae3f127677cdcaf1db69fee839d622094bbf934e63e99076a0fb0101cd275f792d69e609b10282610b3fc4e37fcc99e77a23cb3768372a469df152be587422f97b47e3ca8eef3136d3f56bfa1f78febfc055b00dc159d3a3b975c583692597e813737b3d2cc80bf5cf5809b3ee7e8e1379875eb8a20697a11090b4e5123"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x300a}}]}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0xc, 0x8, 0x1, 0x1, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xf74d}, @call={0x85, 0x0, 0x0, 0xc4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6e}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x93, &(0x7f0000000500)=""/147, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x8, 0x3, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000640)=[{0x0, 0x2, 0xd, 0x3}, {0x0, 0x4, 0x6, 0x4}, {0x2, 0x3, 0x1, 0x2}, {0x2, 0x1, 0x6, 0xa}, {0x5, 0x5, 0xf, 0x5}, {0x3, 0x1, 0xd, 0x3}, {0x4, 0x1, 0xf, 0x8}], 0x10, 0x12}, 0x94) 83.786155ms ago: executing program 3 (id=1409): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 4.312861ms ago: executing program 1 (id=1410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x200}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0xfffffffffffffeee, 0xfffffffffffffffc}]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 0s ago: executing program 2 (id=1411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x3105, 0x10100, 0x0, 0x20010002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}, 0x1}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x12040, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="24000000180001000000f89af13e3e092d"], 0x24}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x3, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000580)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[{}], r8, 0x0, '\x00', 0x4, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): ation=256 [ 317.390251][ T5910] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 317.411789][ T8817] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.422480][ T8817] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 317.433236][ T8817] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 317.442049][ T8817] UDF-fs: Scanning with blocksize 1024 failed [ 317.491292][ T8817] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.536225][ T8817] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.578408][ T8781] Process accounting resumed [ 317.583867][ T8817] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 317.599263][ T8817] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.609390][ T8817] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 317.618998][ T8817] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 317.626766][ T8817] UDF-fs: Scanning with blocksize 2048 failed [ 317.642464][ T8817] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.654736][ T8817] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 317.666660][ T8817] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 317.676417][ T8817] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 317.684178][ T8817] UDF-fs: Scanning with blocksize 4096 failed [ 317.690411][ T8817] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 317.720251][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 317.828934][ T5910] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 317.839595][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 317.854387][ T5910] usb 4-1: can't read configurations, error -61 [ 317.953521][ T5910] usb usb4-port1: attempt power cycle [ 318.680292][ T5910] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 318.854286][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 318.871648][ T5910] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 319.497841][ T5910] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 319.534324][ T5910] usb 4-1: can't read configurations, error -71 [ 323.317193][ T8889] fuse: Bad value for 'fd' [ 323.351935][ T9] Process accounting resumed [ 323.944596][ T8905] PKCS7: Unknown OID: [5] (bad) [ 323.949482][ T8905] PKCS7: Only support pkcs7_signedData type [ 323.971770][ T8898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.705'. [ 324.036179][ T8898] netlink: 9 bytes leftover after parsing attributes in process `syz.3.705'. [ 324.097753][ T8898] netlink: 9 bytes leftover after parsing attributes in process `syz.3.705'. [ 324.157349][ T8898] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 324.928438][ T8884] Process accounting resumed [ 325.606283][ T8924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8924 comm=syz.0.709 [ 327.000220][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 327.192984][ T975] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.205496][ T975] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 327.224925][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.738428][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.814405][ T975] usb 5-1: Product: syz [ 327.833284][ T975] usb 5-1: Manufacturer: syz [ 327.938451][ T975] usb 5-1: SerialNumber: syz [ 327.962908][ T975] cdc_mbim 5-1:1.0: skipping garbage [ 328.164114][ T8947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.978694][ T8947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.992812][ T975] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 329.010241][ T975] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 329.208695][ T975] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 329.244734][ T975] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 329.499292][ T8973] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 329.568689][ T975] wwan wwan0: port wwan0mbim0 attached [ 329.632811][ T975] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, be:8c:0e:34:a8:e6 [ 329.735076][ T975] usb 5-1: USB disconnect, device number 15 [ 329.788826][ T975] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 329.922648][ T975] wwan wwan0: port wwan0mbim0 disconnected [ 331.814547][ T30] audit: type=1400 audit(1756268776.840:521): avc: denied { ioctl } for pid=9018 comm="syz.3.732" path="socket:[21257]" dev="sockfs" ino=21257 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.689046][ T30] audit: type=1400 audit(1756268777.740:522): avc: denied { write } for pid=9028 comm="syz.0.734" path="socket:[21269]" dev="sockfs" ino=21269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.720545][ T975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 332.894728][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 332.902374][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 332.919711][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.043963][ T9032] fuse: Unknown parameter '' [ 333.062862][ T30] audit: type=1326 audit(1756268778.120:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a278ebe9 code=0x7ffc0000 [ 333.135355][ T30] audit: type=1326 audit(1756268778.120:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.0.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a278ebe9 code=0x7ffc0000 [ 333.255417][ T975] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.287531][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.357320][ T975] usb 2-1: Product: syz [ 333.390998][ T975] usb 2-1: Manufacturer: syz [ 333.491255][ T975] usb 2-1: SerialNumber: syz [ 333.516595][ T975] usb 2-1: config 0 descriptor?? [ 333.538097][ T975] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.644044][ T975] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 334.362195][ T975] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 334.386817][ T975] em28xx 2-1:0.0: Config register raw data: 0xe8 [ 334.396913][ T9064] netlink: 830 bytes leftover after parsing attributes in process `syz.4.740'. [ 334.412395][ T975] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 334.418960][ T975] em28xx 2-1:0.0: No AC97 audio processor [ 335.060745][ T1205] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 335.282056][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.375852][ T1205] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.396307][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.447817][ T1205] usb 4-1: config 0 descriptor?? [ 335.507315][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 335.893842][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 335.902375][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 335.911830][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 335.945052][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 335.955200][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 335.964450][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 335.973748][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 336.600746][ T975] usb 2-1: USB disconnect, device number 20 [ 336.688309][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 336.695922][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 336.702961][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 336.924229][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 336.948868][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 336.963101][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 336.972721][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.049445][ T1205] pwc: Registered as video103. [ 337.067855][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 337.196734][ T1205] usb 4-1: USB disconnect, device number 24 [ 339.999254][ T30] audit: type=1400 audit(1756268785.050:525): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.045679][ T9133] fuse: Bad value for 'fd' [ 340.081891][ T5963] Process accounting resumed [ 340.459831][ T9140] siw: device registration error -23 [ 341.307021][ T1205] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 341.394757][ T9138] lo speed is unknown, defaulting to 1000 [ 341.428850][ T5963] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 341.451385][ T9138] lo speed is unknown, defaulting to 1000 [ 341.523479][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.535851][ T1205] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 341.612971][ T5963] usb 1-1: config 0 has no interfaces? [ 341.859831][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.869861][ T5963] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 341.899102][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.933171][ T1205] usb 3-1: config 0 descriptor?? [ 341.952989][ T5963] usb 1-1: Product: syz [ 342.003934][ T5963] usb 1-1: Manufacturer: syz [ 342.025549][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 342.053882][ T5963] usb 1-1: SerialNumber: syz [ 342.104384][ T5963] usb 1-1: config 0 descriptor?? [ 342.117028][ T9129] Process accounting resumed [ 342.366302][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 342.376531][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 342.410855][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 342.420553][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 342.427524][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 342.525977][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 342.556168][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 342.565770][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 342.574709][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 342.606030][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 342.615657][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.642130][ T9] usb 4-1: Product: syz [ 342.646316][ T9] usb 4-1: Manufacturer: syz [ 342.673052][ T9] usb 4-1: SerialNumber: syz [ 342.707753][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 343.080316][ T5910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 343.097994][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 343.125968][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 343.138359][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 343.185151][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 343.461151][ T9] usb 1-1: USB disconnect, device number 15 [ 343.490387][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 343.497181][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 343.638306][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.652334][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.850278][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 343.865140][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 343.880920][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.899976][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 343.912386][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 343.920658][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.983679][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 343.995308][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.007381][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 344.040377][ T1205] pwc: Registered as video103. [ 344.045244][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.064193][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 344.115733][ T1205] usb 3-1: USB disconnect, device number 18 [ 344.302641][ T5910] usb 2-1: GET_CAPABILITIES returned 0 [ 344.321347][ T5910] usbtmc 2-1:16.0: can't read capabilities [ 344.466768][ T9174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.706810][ T9178] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 344.715525][ T9178] blk_print_req_error: 2 callbacks suppressed [ 344.715551][ T9178] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 344.833403][ T5910] usb 2-1: USB disconnect, device number 21 [ 344.901854][ T9160] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 345.112020][ T975] usb 4-1: USB disconnect, device number 25 [ 345.339698][ T9187] ntfs3(nullb0): Primary boot signature is not NTFS. [ 345.346585][ T9187] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 345.887013][ T9198] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.772'. [ 346.187088][ T30] audit: type=1400 audit(1756268791.200:526): avc: denied { recv } for pid=5831 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.2 dest=33506 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 346.357559][ T9212] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.776'. [ 346.550265][ T5910] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 346.640901][ T9215] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 346.714551][ T5910] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.734999][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.776311][ T5910] usb 3-1: Product: syz [ 346.794623][ T5910] usb 3-1: Manufacturer: syz [ 346.812280][ T5910] usb 3-1: SerialNumber: syz [ 347.038192][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 347.078954][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 347.106395][ T5910] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 347.121772][ T5910] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 347.341953][ T30] audit: type=1400 audit(1756268792.400:527): avc: denied { execmem } for pid=9228 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 348.194358][ T30] audit: type=1400 audit(1756268793.240:528): avc: denied { map } for pid=9224 comm="syz.3.781" path="socket:[22173]" dev="sockfs" ino=22173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.555523][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 348.560215][ T5910] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 348.640235][ T30] audit: type=1400 audit(1756268793.280:529): avc: denied { accept } for pid=9224 comm="syz.3.781" path="socket:[22173]" dev="sockfs" ino=22173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.750445][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 348.760226][ T5910] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 348.769400][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.791814][ T5910] usb 5-1: Product: syz [ 348.797174][ T5910] usb 5-1: Manufacturer: syz [ 348.802641][ T5910] usb 5-1: SerialNumber: syz [ 348.831968][ T5910] usb 5-1: config 0 descriptor?? [ 348.842329][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 349.244451][ T5963] usb 3-1: USB disconnect, device number 19 [ 349.340248][ T6031] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 349.496326][ T9256] ntfs3(nullb0): Primary boot signature is not NTFS. [ 349.497989][ T6031] usb 2-1: Using ep0 maxpacket: 16 [ 349.503198][ T9256] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 349.513684][ T6031] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 349.549446][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.562284][ T6031] usb 2-1: Product: syz [ 349.566938][ T6031] usb 2-1: Manufacturer: syz [ 349.572853][ T6031] usb 2-1: SerialNumber: syz [ 350.175000][ T6031] usb 2-1: config 0 descriptor?? [ 350.185983][ T6031] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 351.000434][ T5910] gspca_sonixj: reg_r err -110 [ 351.215061][ T6031] gspca_sn9c2028: read1 error -110 [ 351.222408][ T6031] gspca_sn9c2028: read1 error -32 [ 351.231091][ T6031] gspca_sn9c2028: read1 error -71 [ 351.238543][ T6031] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 351.260360][ T5910] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 351.362064][ T6031] usb 2-1: USB disconnect, device number 22 [ 352.224898][ T6031] usb 5-1: USB disconnect, device number 16 [ 352.637437][ T30] audit: type=1400 audit(1756268797.550:530): avc: denied { egress } for pid=9281 comm="syz.1.795" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 352.662770][ T5862] Bluetooth: hci3: unknown advertising packet type: 0x6b [ 352.662821][ T5862] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 352.669986][ T5862] Bluetooth: hci3: Malformed LE Event: 0x02 [ 352.683814][ T30] audit: type=1400 audit(1756268797.550:531): avc: denied { sendto } for pid=9281 comm="syz.1.795" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 352.855981][ T30] audit: type=1400 audit(1756268797.900:532): avc: denied { transfer } for pid=9289 comm="syz.0.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 352.913761][ T9299] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 352.946733][ T30] audit: type=1400 audit(1756268798.000:533): avc: denied { read } for pid=9298 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.098513][ T9316] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 354.105040][ T9316] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.117055][ T9316] vhci_hcd vhci_hcd.0: Device attached [ 354.132196][ T9313] kvm: pic: non byte read [ 354.316324][ T9320] vhci_hcd: connection closed [ 354.317509][ T6114] vhci_hcd: stop threads [ 354.337949][ T6114] vhci_hcd: release socket [ 354.352766][ T6114] vhci_hcd: disconnect device [ 354.370211][ T5910] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 354.385572][ T5910] usb 39-1: enqueue for inactive port 0 [ 354.460415][ T5910] vhci_hcd: vhci_device speed not set [ 354.829196][ T9339] siw: device registration error -23 [ 356.089277][ T9] IPVS: starting estimator thread 0... [ 356.221621][ T9350] IPVS: using max 73 ests per chain, 175200 per kthread [ 356.370391][ T6031] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 356.449151][ T9365] kvm: pic: non byte read [ 356.552816][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 356.611191][ T6031] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 356.639836][ T6031] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 356.669501][ T6031] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 356.707580][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 356.805255][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 356.817112][ T6031] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 356.873111][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.885889][ T9370] kvm: pic: non byte read [ 356.969698][ T6031] usb 5-1: Product: syz [ 356.982040][ T6031] usb 5-1: Manufacturer: syz [ 356.999685][ T6031] usb 5-1: SerialNumber: syz [ 357.062429][ T6031] usb 5-1: config 0 descriptor?? [ 357.106842][ T6031] hub 5-1:0.0: bad descriptor, ignoring hub [ 357.117015][ T6031] hub 5-1:0.0: probe with driver hub failed with error -5 [ 357.142314][ T6031] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 357.326411][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.385142][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.600356][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.660824][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.722270][ T5910] usb 5-1: USB disconnect, device number 17 [ 358.435994][ T30] audit: type=1400 audit(1756268803.380:534): avc: denied { mount } for pid=9394 comm="syz.2.824" name="/" dev="ramfs" ino=22525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 358.962659][ T30] audit: type=1400 audit(1756268804.010:535): avc: denied { recv } for pid=9394 comm="syz.2.824" saddr=10.128.0.169 src=37344 daddr=10.128.0.2 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 359.280651][ T9406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.465332][ T9406] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 359.472526][ T9406] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 361.534500][ T9432] bond0: entered promiscuous mode [ 361.542443][ T9432] bond_slave_0: entered promiscuous mode [ 361.548288][ T9432] bond_slave_1: entered promiscuous mode [ 361.551007][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.835'. [ 361.563508][ T9432] batadv0: entered promiscuous mode [ 361.570977][ T9432] bond0: left promiscuous mode [ 361.575851][ T9432] bond_slave_0: left promiscuous mode [ 361.581301][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 361.589952][ T9432] bond_slave_1: left promiscuous mode [ 361.596650][ T9432] batadv0: left promiscuous mode [ 361.615835][ T9435] siw: device registration error -23 [ 361.690283][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 361.746267][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.771270][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 361.934687][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.052255][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.065315][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.085737][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.105572][ T24] usb 3-1: Product: syz [ 362.114932][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.130241][ T24] usb 3-1: Manufacturer: syz [ 362.133418][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.134834][ T24] usb 3-1: SerialNumber: syz [ 362.160245][ T9] usb 2-1: Product: syz [ 362.170428][ T9] usb 2-1: Manufacturer: syz [ 362.171277][ T24] cdc_mbim 3-1:1.0: skipping garbage [ 362.177979][ T9] usb 2-1: SerialNumber: syz [ 362.233380][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 362.372302][ T9427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 362.429038][ T9429] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.450233][ T5959] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 362.607036][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 362.629185][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.650237][ T5959] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 362.669676][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.710474][ T5959] usb 4-1: config 0 descriptor?? [ 362.842764][ T30] audit: type=1400 audit(1756268807.900:536): avc: denied { mount } for pid=9447 comm="syz.0.839" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 362.866740][ T9451] overlayfs: workdir and upperdir must reside under the same mount [ 363.514815][ T5910] IPVS: starting estimator thread 0... [ 363.569518][ T9429] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 363.644381][ T9] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 363.690754][ T9427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.699398][ T9] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 363.699780][ T24] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 363.705350][ T9454] IPVS: using max 39 ests per chain, 93600 per kthread [ 363.962989][ T9] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 363.974141][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 363.980893][ T24] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 364.007261][ T9] wwan wwan0: port wwan0mbim0 attached [ 364.037238][ T5959] aquacomputer_d5next 0003:0C70:F011.0004: unknown main item tag 0x3 [ 364.050554][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ca:1c:42:9f:f1:f0 [ 364.083139][ T9] usb 2-1: USB disconnect, device number 23 [ 364.092264][ T5959] aquacomputer_d5next 0003:0C70:F011.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 364.183196][ T24] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 364.213522][ T24] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device [ 364.276962][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 364.685963][ T24] wwan wwan1: port wwan1mbim0 attached [ 364.732571][ T24] cdc_mbim 3-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, a6:18:e1:4e:b2:5f [ 364.824410][ T5959] usb 4-1: USB disconnect, device number 26 [ 364.830847][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 364.832759][ T24] usb 3-1: USB disconnect, device number 20 [ 364.903369][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 364.912414][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 364.923603][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 364.932900][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 364.957866][ T9462] fido_id[9462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 365.021538][ T24] cdc_mbim 3-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 365.081268][ T9469] block nbd4: Attempted send on invalid socket [ 365.101937][ T9469] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 365.121276][ T24] wwan wwan1: port wwan1mbim0 disconnected [ 365.164598][ T9469] gfs2: error -5 reading superblock [ 365.300292][ T30] audit: type=1400 audit(1756268810.350:537): avc: denied { checkpoint_restore } for pid=9468 comm="syz.4.843" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.244831][ T9500] fuse: Bad value for 'fd' [ 367.753061][ T9506] ntfs3(nullb0): Primary boot signature is not NTFS. [ 367.759893][ T9506] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 369.547282][ T9521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.627061][ T5910] lo speed is unknown, defaulting to 1000 [ 369.642364][ T30] audit: type=1400 audit(1756268814.630:538): avc: denied { write } for pid=9519 comm="syz.2.857" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 371.584131][ T30] audit: type=1400 audit(1756268816.630:539): avc: denied { create } for pid=9542 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.776550][ T30] audit: type=1400 audit(1756268816.830:540): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 371.807313][ T30] audit: type=1326 audit(1756268816.860:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9549 comm="syz.1.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868718ebe9 code=0x0 [ 372.335328][ T9557] fuse: Bad value for 'fd' [ 373.312868][ T6031] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 373.338336][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'. [ 374.063672][ T6031] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.115252][ T6031] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00 [ 374.159218][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.179887][ T6031] usb 2-1: config 0 descriptor?? [ 374.223413][ T30] audit: type=1400 audit(1756268819.270:542): avc: denied { name_connect } for pid=9584 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 374.685881][ T30] audit: type=1400 audit(1756268819.740:543): avc: denied { accept } for pid=9584 comm="syz.0.874" lport=32952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 374.748843][ T9593] netlink: 348 bytes leftover after parsing attributes in process `syz.0.874'. [ 374.797581][ T9598] ntfs3(nullb0): Primary boot signature is not NTFS. [ 374.805851][ T9598] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 374.887802][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: unknown main item tag 0x0 [ 374.990605][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: unknown main item tag 0x0 [ 374.998458][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: unknown main item tag 0x0 [ 375.006757][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: unknown main item tag 0x0 [ 375.016119][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: unknown main item tag 0x0 [ 375.028630][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1e] on usb-dummy_hcd.1-1/input0 [ 375.919860][ T30] audit: type=1400 audit(1756268820.970:544): avc: denied { read write } for pid=9619 comm="syz.0.879" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 375.965801][ T9620] input: syz0 as /devices/virtual/input/input18 [ 375.983414][ T9620] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 376.088151][ T30] audit: type=1400 audit(1756268821.000:545): avc: denied { open } for pid=9619 comm="syz.0.879" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.154725][ T5963] hid (null): global environment stack underflow [ 376.214595][ T5963] hid-generic 0000:007F:FFFFFFFE.0006: reserved main item tag 0xe [ 376.325730][ T9632] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.336149][ T9632] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.347613][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 376.358946][ T6031] hid-corsair-void 0003:1B1C:0A1E.0005: failed to request battery (reason: -71) [ 376.368333][ T24] usb 2-1: USB disconnect, device number 24 [ 376.374358][ T5910] hid-corsair-void 0003:1B1C:0A1E.0005: failed to request firmware (reason: -71) [ 376.384392][ T5963] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x3 [ 376.422562][ T9632] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.455488][ T5963] hid-generic 0000:007F:FFFFFFFE.0006: global environment stack underflow [ 376.469749][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 376.482381][ T5963] hid-generic 0000:007F:FFFFFFFE.0006: item 0 4 1 11 parsing failed [ 376.500681][ T5963] hid-generic 0000:007F:FFFFFFFE.0006: probe with driver hid-generic failed with error -22 [ 376.511038][ T9632] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 376.519618][ T9632] UDF-fs: Scanning with blocksize 512 failed [ 376.557273][ T9636] ip6gretap0: entered promiscuous mode [ 376.608829][ T9632] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.628446][ T9632] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.782279][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 376.802500][ T9632] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.271523][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 377.281460][ T9632] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 377.289801][ T9632] UDF-fs: Scanning with blocksize 1024 failed [ 377.305810][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 377.337809][ T9632] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.553892][ T9632] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.094242][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.098928][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 378.432905][ T9632] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.449553][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 378.467257][ T9632] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 378.484513][ T9632] UDF-fs: Scanning with blocksize 2048 failed [ 378.502652][ T9632] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 378.528094][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 378.560138][ T9632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 378.569919][ T9632] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 378.585710][ T9632] UDF-fs: Scanning with blocksize 4096 failed [ 378.594171][ T9632] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 378.640511][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 378.656993][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 378.780190][ T6031] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 378.940172][ T6031] usb 3-1: Using ep0 maxpacket: 16 [ 378.969065][ T6031] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.983462][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.047880][ T6031] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 379.060269][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.145039][ T6031] usb 3-1: config 0 descriptor?? [ 379.184070][ T6031] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 380.025114][ T9674] pim6reg1: entered promiscuous mode [ 380.042119][ T9674] pim6reg1: entered allmulticast mode [ 380.188716][ T9678] fuse: Unknown parameter '0x0000000000000005' [ 380.880943][ T9690] netlink: 68 bytes leftover after parsing attributes in process `syz.1.896'. [ 380.896469][ T30] audit: type=1400 audit(1756268825.940:546): avc: denied { write } for pid=9686 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 380.940509][ T30] audit: type=1400 audit(1756268825.940:547): avc: denied { nlmsg_write } for pid=9686 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 382.118500][ T30] audit: type=1400 audit(1756268827.170:548): avc: denied { create } for pid=9702 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 382.609076][ T30] audit: type=1400 audit(1756268827.220:549): avc: denied { connect } for pid=9702 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 382.741701][ T24] usb 3-1: USB disconnect, device number 21 [ 382.760997][ T30] audit: type=1400 audit(1756268827.820:550): avc: denied { read } for pid=9706 comm="syz.0.904" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 382.792230][ T30] audit: type=1400 audit(1756268827.820:551): avc: denied { open } for pid=9706 comm="syz.0.904" path="/174/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 382.844840][ T9711] 9pnet_fd: Insufficient options for proto=fd [ 384.201179][ T1205] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 384.368102][ T5963] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 384.471818][ T1205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.490166][ T1205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.509247][ T1205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 384.529271][ T1205] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.545605][ T5963] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.564624][ T5963] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.582518][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.591231][ T5963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.610614][ T1205] hub 2-1:1.0: bad descriptor, ignoring hub [ 384.632399][ T9726] fuse: Unknown parameter '' [ 384.644674][ T9726] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:4096x2160 (0x33424752, 8, 0, 0, 0) [ 384.714948][ T30] audit: type=1400 audit(1756268829.680:552): avc: denied { setopt } for pid=9719 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.738768][ T5963] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 384.759930][ T1205] hub 2-1:1.0: probe with driver hub failed with error -5 [ 384.810549][ T1205] cdc_wdm 2-1:1.0: skipping garbage [ 384.819979][ T5963] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 384.900026][ T1205] cdc_wdm 2-1:1.0: skipping garbage [ 384.907198][ T1205] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 384.916834][ T5963] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.929922][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.939697][ T5963] usb 3-1: Product: syz [ 384.945828][ T5963] usb 3-1: Manufacturer: syz [ 384.956161][ T5963] cdc_wdm 3-1:1.0: skipping garbage [ 384.968188][ T5963] cdc_wdm 3-1:1.0: skipping garbage [ 384.986521][ T9739] zonefs (nullb0) ERROR: Not a zoned block device [ 384.999403][ T5963] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 385.005921][ T5963] cdc_wdm 3-1:1.0: Unknown control protocol [ 385.198784][ T30] audit: type=1400 audit(1756268830.250:553): avc: denied { read write } for pid=9716 comm="syz.2.908" name="cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 385.223962][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.230703][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.237002][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.243585][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.250624][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.257222][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.263965][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.270550][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.276818][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.283399][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.289662][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.296243][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.302611][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.309196][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.315572][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.322163][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.328424][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.335010][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.341299][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 385.347882][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 385.566054][ T9] usb 3-1: USB disconnect, device number 22 [ 385.572046][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.602398][ T30] audit: type=1400 audit(1756268830.250:554): avc: denied { open } for pid=9716 comm="syz.2.908" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 385.715602][ T9744] [U] ù [ 386.443491][ T9] usb 2-1: USB disconnect, device number 25 [ 387.917676][ T9779] binder: 9778:9779 unknown command 0 [ 387.927215][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'. [ 387.952631][ T9779] binder: 9778:9779 ioctl c0306201 200000000080 returned -22 [ 388.039786][ T9779] binder: 9778:9779 ioctl c0306201 200000000180 returned -14 [ 391.914413][ T9822] kvm: pic: non byte read [ 392.024630][ T9829] bridge_slave_0: default FDB implementation only supports local addresses [ 392.036978][ T30] audit: type=1400 audit(1756268837.080:555): avc: denied { setopt } for pid=9821 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 392.056450][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.920214][ T5910] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 394.011663][ T9854] FAULT_INJECTION: forcing a failure. [ 394.011663][ T9854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 394.080369][ T9854] CPU: 1 UID: 0 PID: 9854 Comm: syz.2.943 Not tainted syzkaller #0 PREEMPT(full) [ 394.080396][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.080407][ T9854] Call Trace: [ 394.080413][ T9854] [ 394.080419][ T9854] dump_stack_lvl+0x16c/0x1f0 [ 394.080445][ T9854] should_fail_ex+0x512/0x640 [ 394.080469][ T9854] _copy_from_iter+0x29f/0x1720 [ 394.080494][ T9854] ? __build_skb_around+0x278/0x3b0 [ 394.080521][ T9854] ? __pfx__copy_from_iter+0x10/0x10 [ 394.080544][ T9854] ? __pfx___alloc_skb+0x10/0x10 [ 394.080560][ T9854] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 394.080597][ T9854] pfkey_sendmsg+0x1da/0x850 [ 394.080623][ T9854] ____sys_sendmsg+0xa98/0xc70 [ 394.080647][ T9854] ? copy_msghdr_from_user+0x10a/0x160 [ 394.080665][ T9854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.080699][ T9854] ___sys_sendmsg+0x134/0x1d0 [ 394.080718][ T9854] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.080758][ T9854] __sys_sendmsg+0x16d/0x220 [ 394.080771][ T9854] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.080791][ T9854] do_syscall_64+0xcd/0x4c0 [ 394.080805][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.080817][ T9854] RIP: 0033:0x7f58a018ebe9 [ 394.080826][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.080838][ T9854] RSP: 002b:00007f58a0f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.080849][ T9854] RAX: ffffffffffffffda RBX: 00007f58a03b5fa0 RCX: 00007f58a018ebe9 [ 394.080856][ T9854] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 394.080863][ T9854] RBP: 00007f58a0f48090 R08: 0000000000000000 R09: 0000000000000000 [ 394.080869][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.080875][ T9854] R13: 00007f58a03b6038 R14: 00007f58a03b5fa0 R15: 00007ffe278c1e48 [ 394.080889][ T9854] [ 394.276251][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.283736][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 394.293039][ T5910] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 394.303015][ T5910] usb 4-1: config 1 interface 0 has no altsetting 0 [ 394.313271][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 394.322374][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.330485][ T5910] usb 4-1: Product: Ъ [ 394.334545][ T5910] usb 4-1: Manufacturer: წ䩿䶟ꢑ玴溗耚á”ᵊ똭å«á¤¬êŽªæ «ë¹‰éî»ç½¹æš²å¡¸ì‚Šè±¡î¹–á¦æ˜œï›Œæ¸šèžæ…¬è¾¬ãŸ·î¼å‚£îœ™é¥»é›½é—Šéš™î¼Ö Ð¥ïˆ¿é¥Œïšá¢“ê…žê…᥂ꜱꆭ︆⩖⥭부爌랲ä†ä›îž íœ¶ë¨á´‹á¤ ïµ¥è·Œî¹¡ä•è§¡ëˆ‹â¹¶î£¯ê¡ì¦‚ꨣᆡç´Æ·â…¸ê¾¯ëªà¼€èŸ»îº»ë¾¹á‹¤é¼ïŸ•ä²Žè¬±ã‰‰ê‘ꑨ泱ᕦ᳠ᨆ﮷ஹúæ™á–¶ä ±ã‹©ê…퀿ä»ä¡²îŸ¦ä¦æ“¤î§‹æ†½ [ 394.367955][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.374625][ T5910] usb 4-1: SerialNumber: syz [ 394.383768][ T9847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.699188][ T5910] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 394.721914][ T9858] kvm: pic: non byte read [ 394.942957][ T9865] netlink: 'syz.4.946': attribute type 11 has an invalid length. [ 394.951197][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.946'. [ 395.434450][ T5910] usb 4-1: USB disconnect, device number 27 [ 395.515539][ T5910] usblp0: removed [ 395.756036][ T9873] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 395.915365][ T9873] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 395.925028][ T30] audit: type=1400 audit(1756268840.970:556): avc: denied { firmware_load } for pid=9872 comm="syz.0.949" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 396.030197][ T975] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 396.084761][ T9879] kvm: pic: non byte read [ 396.220305][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 396.239266][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.250875][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.279120][ T975] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 396.304864][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.331277][ T975] usb 2-1: config 0 descriptor?? [ 396.774316][ T975] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 396.784383][ T975] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 396.800315][ T975] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 396.881374][ T975] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 396.888535][ T975] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 396.982972][ T975] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 397.205730][ T9905] tipc: Started in network mode [ 397.220231][ T9905] tipc: Node identity daa8f3d6ebfe, cluster identity 4711 [ 397.377885][ T30] audit: type=1326 audit(1756268842.390:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868718ebe9 code=0x7ffc0000 [ 397.404471][ T9905] tipc: Enabled bearer , priority 0 [ 397.453690][ T30] audit: type=1326 audit(1756268842.390:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868718ebe9 code=0x7ffc0000 [ 397.501542][ T9905] syzkaller0: mtu greater than device maximum [ 397.515900][ T9907] syzkaller0: entered promiscuous mode [ 397.568455][ T30] audit: type=1326 audit(1756268842.620:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f868718ebe9 code=0x7ffc0000 [ 397.591979][ T9907] syzkaller0: entered allmulticast mode [ 397.617545][ T9874] pim6reg: entered allmulticast mode [ 397.643292][ T9903] tipc: Resetting bearer [ 397.692727][ T9903] tipc: Disabling bearer [ 397.706245][ T30] audit: type=1326 audit(1756268842.690:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868718ebe9 code=0x7ffc0000 [ 397.775787][ T30] audit: type=1326 audit(1756268842.690:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868718ebe9 code=0x7ffc0000 [ 400.415785][ T30] audit: type=1400 audit(1756268845.470:562): avc: denied { read } for pid=9930 comm="syz.4.963" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.439359][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.926993][ T30] audit: type=1400 audit(1756268845.470:563): avc: denied { open } for pid=9930 comm="syz.4.963" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.958364][ T30] audit: type=1400 audit(1756268845.470:564): avc: denied { ioctl } for pid=9930 comm="syz.4.963" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.999642][ T9874] pim6reg: left allmulticast mode [ 401.028894][ T975] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device [ 401.073798][ T975] koneplus 0003:1E7D:2D51.0007: couldn't install mouse [ 401.096434][ T975] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -71 [ 401.203117][ T975] usb 2-1: USB disconnect, device number 26 [ 401.239822][ T30] audit: type=1400 audit(1756268846.280:565): avc: denied { getopt } for pid=9936 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 401.558947][ T9946] 9pnet_fd: Insufficient options for proto=fd [ 401.629610][ T9948] netlink: 180 bytes leftover after parsing attributes in process `syz.1.967'. [ 401.666361][ T9951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.700039][ T9952] netlink: 180 bytes leftover after parsing attributes in process `syz.1.967'. [ 401.816055][ T9948] SELinux: security_context_str_to_sid (eue) failed with errno=-22 [ 401.819591][ T9949] fuse: Bad value for 'fd' [ 402.449539][ T9958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.415333][ T9942] Process accounting resumed [ 405.990296][ T30] audit: type=1400 audit(1756268850.820:566): avc: denied { kexec_image_load } for pid=9985 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 408.670965][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.543408][T10061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.690323][ T30] audit: type=1400 audit(1756268859.740:567): avc: denied { write } for pid=10063 comm="syz.3.995" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 414.752106][T10067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.995'. [ 414.991678][ T30] audit: type=1400 audit(1756268860.020:568): avc: denied { create } for pid=10076 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 416.940214][ T5963] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 417.023592][T10106] 8021q: VLANs not supported on ip_vti0 [ 417.701756][ T975] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 417.731695][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.792480][ T30] audit: type=1400 audit(1756268862.830:569): avc: denied { setopt } for pid=10097 comm="syz.1.1005" lport=35489 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 417.821571][ T5963] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 417.832417][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.849306][ T5963] usb 5-1: config 0 descriptor?? [ 417.868036][ T30] audit: type=1400 audit(1756268862.830:570): avc: denied { connect } for pid=10097 comm="syz.1.1005" lport=35489 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 417.891414][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.896193][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 417.902268][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 417.930884][ T975] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 417.946026][ T975] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 417.971662][ T30] audit: type=1400 audit(1756268862.830:571): avc: denied { name_connect } for pid=10097 comm="syz.1.1005" dest=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 417.995236][ T975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 418.006182][ T975] usb 1-1: config 1 has no interface number 0 [ 418.013312][ T975] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.030208][ T30] audit: type=1400 audit(1756268862.880:572): avc: denied { read } for pid=10097 comm="syz.1.1005" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 418.067253][ T975] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 418.238358][ T975] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 418.280657][ T5963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.284629][ T30] audit: type=1400 audit(1756268862.880:573): avc: denied { open } for pid=10097 comm="syz.1.1005" path="/197/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 418.334024][ T5963] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.410693][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.416631][ T5963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 418.466429][ T975] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 418.496986][ T5963] pwc: recv_control_msg error -32 req 04 val 1000 [ 418.612880][ T5963] pwc: recv_control_msg error -32 req 04 val 1300 [ 418.621729][ T5963] pwc: recv_control_msg error -32 req 04 val 1400 [ 418.632184][ T975] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 419.064813][ T975] usb 1-1: USB disconnect, device number 16 [ 419.084206][ T975] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 419.261529][ T5963] pwc: recv_control_msg error -71 req 02 val 2500 [ 419.282435][ T5963] pwc: recv_control_msg error -71 req 02 val 2400 [ 419.308093][ T5963] pwc: recv_control_msg error -71 req 02 val 2600 [ 419.323422][ T5963] pwc: recv_control_msg error -71 req 02 val 2900 [ 419.342271][ T5963] pwc: recv_control_msg error -71 req 02 val 2800 [ 419.359053][ T5963] pwc: recv_control_msg error -71 req 04 val 1100 [ 419.385597][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 419.406430][ T5963] pwc: Registered as video103. [ 419.426876][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 419.514102][ T5963] usb 5-1: USB disconnect, device number 18 [ 419.656987][T10144] ntfs3(nullb0): Primary boot signature is not NTFS. [ 419.889911][T10144] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 420.359198][ T30] audit: type=1400 audit(1756268865.410:574): avc: denied { getopt } for pid=10155 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.507828][ T30] audit: type=1400 audit(1756268865.470:575): avc: denied { bind } for pid=10155 comm="syz.4.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.630135][ T975] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 420.637729][ T5959] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 420.792094][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.803259][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 420.822987][ T975] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 420.832828][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.850171][ T5959] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 420.868522][ T5959] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 420.885882][ T975] usb 3-1: config 0 descriptor?? [ 420.900215][ T5959] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 420.919010][ T5959] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 420.934303][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 421.028583][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.044785][ T5959] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 421.061314][ T5959] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 421.109985][ T5959] usb 4-1: Product: syz [ 421.119841][ T5959] usb 4-1: Manufacturer: syz [ 421.131456][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.141729][ T9] usb 1-1: config 0 has no interfaces? [ 421.147219][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.183710][ T5959] usb 4-1: SerialNumber: syz [ 421.188625][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.200277][ T5959] usb 4-1: config 0 descriptor?? [ 421.214920][ T9] usb 1-1: config 0 descriptor?? [ 421.222063][ T5959] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.337174][ T975] uclogic 0003:5543:0522.0008: unbalanced delimiter at end of report description [ 421.858734][ T975] uclogic 0003:5543:0522.0008: parse failed [ 421.876019][ T975] uclogic 0003:5543:0522.0008: probe with driver uclogic failed with error -22 [ 421.887722][ T5959] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 422.120915][ T30] audit: type=1400 audit(1756268867.170:576): avc: denied { watch } for pid=10177 comm="syz.4.1027" path="/218/bus" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 422.192614][ T30] audit: type=1400 audit(1756268867.170:577): avc: denied { watch_sb watch_reads } for pid=10177 comm="syz.4.1027" path="/218/bus" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 422.230270][ T30] audit: type=1400 audit(1756268867.240:578): avc: denied { write } for pid=10146 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 422.287877][ T1205] usb 4-1: USB disconnect, device number 28 [ 422.298457][ T1205] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 422.305577][ T5910] usb 3-1: USB disconnect, device number 23 [ 424.040605][ T1205] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 424.124486][ T9] usb 1-1: string descriptor 0 read error: -71 [ 424.142244][ T9] usb 1-1: USB disconnect, device number 17 [ 424.192183][ T1205] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.207146][ T1205] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 424.216928][T10204] ntfs3(nullb0): Primary boot signature is not NTFS. [ 424.222022][ T1205] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.234627][T10204] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 424.235720][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.247043][T10149] delete_channel: no stack [ 424.257609][ T1205] usb 3-1: Product: syz [ 424.448839][ T1205] usb 3-1: Manufacturer: syz [ 424.453728][ T1205] usb 3-1: SerialNumber: syz [ 424.472383][ T1205] cdc_mbim 3-1:1.0: skipping garbage [ 424.678117][T10196] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.715593][T10196] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.751940][ T5959] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 426.000289][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 426.021578][ T1205] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 426.024744][ T5959] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 426.046313][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.057305][ T5959] usb 2-1: config 0 has no interface number 0 [ 426.090039][ T1205] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 426.113739][ T1205] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 426.169467][ T1205] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 426.315533][ T5959] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 426.329547][ T1205] wwan wwan0: port wwan0mbim0 attached [ 426.344393][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 426.491503][ T5959] usb 2-1: Product: syz [ 426.495751][ T1205] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ba:30:63:76:71:94 [ 426.506323][ T5959] usb 2-1: SerialNumber: syz [ 426.518125][ T5959] usb 2-1: config 0 descriptor?? [ 426.763286][ T1205] usb 3-1: USB disconnect, device number 24 [ 427.271842][T10237] netlink: 'syz.1.1036': attribute type 12 has an invalid length. [ 427.279692][T10237] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1036'. [ 427.587234][ T1205] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 427.614841][ T5959] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 427.775649][ T5959] usb 2-1: No valid video chain found. [ 427.992264][ T1205] wwan wwan0: port wwan0mbim0 disconnected [ 428.475235][ T5963] usb 2-1: USB disconnect, device number 27 [ 429.177272][T10260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=10260 comm=syz.3.1049 [ 429.640278][ T1205] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 429.876215][T10277] fuse: Bad value for 'fd' [ 429.897843][ T5900] Process accounting resumed [ 429.951161][ T1205] usb 2-1: Using ep0 maxpacket: 16 [ 429.959882][ T1205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.976685][ T1205] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.992997][ T1205] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 430.006049][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.093666][ T1205] usb 2-1: config 0 descriptor?? [ 430.149132][ T1205] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 430.698805][T10273] Process accounting resumed [ 433.099867][T10309] ntfs3(nullb0): Primary boot signature is not NTFS. [ 433.107596][T10309] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 433.820182][ T1205] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 433.999728][ T30] audit: type=1400 audit(1756268879.050:579): avc: denied { append } for pid=10302 comm="syz.3.1065" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 434.028492][ T1205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.059145][ T1205] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 434.069579][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.110006][ T1205] usb 3-1: config 0 descriptor?? [ 434.119734][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 434.310287][ T5900] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 434.324107][T10325] kvm: pic: non byte read [ 434.477267][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.518353][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 434.519846][ T5900] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 434.539491][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 434.541865][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.546810][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 434.565514][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.575146][ T5900] usb 5-1: Product: syz [ 434.579358][ T5900] usb 5-1: Manufacturer: syz [ 434.580727][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 434.586469][ T5900] usb 5-1: SerialNumber: syz [ 434.621326][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 434.628402][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 434.647820][ T5900] cdc_mbim 5-1:1.0: skipping garbage [ 434.700328][ T6031] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 434.904105][ T5963] usb 2-1: USB disconnect, device number 28 [ 434.942774][T10323] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 435.070231][ T6031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.090721][ T6031] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 435.129818][ T6031] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.278695][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.287970][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 435.295936][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 435.305870][ T6031] usb 1-1: Product: syz [ 435.310118][ T6031] usb 1-1: Manufacturer: syz [ 435.315034][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 435.321729][ T6031] usb 1-1: SerialNumber: syz [ 435.328474][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 435.340878][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 435.735430][ T6031] cdc_mbim 1-1:1.0: skipping garbage [ 435.743499][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 435.755933][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 435.755993][T10328] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 435.824188][ T1205] pwc: Registered as video103. [ 435.908921][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 436.028561][T10323] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 436.056957][ T1205] usb 3-1: USB disconnect, device number 25 [ 436.058146][ T5900] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 436.106548][ T5900] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 436.273773][ T5900] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 436.310492][ T5900] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 436.391908][ T5900] wwan wwan0: port wwan0mbim0 attached [ 436.436790][T10328] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 436.449655][ T6031] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 436.459574][ T5900] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 0e:bb:39:ca:3e:6c [ 436.476385][ T6031] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 436.488365][ T5900] usb 5-1: USB disconnect, device number 19 [ 436.516033][ T5900] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 436.582532][ T5900] wwan wwan0: port wwan0mbim0 disconnected [ 436.670900][ T6031] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 436.705160][ T6031] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 436.763876][ T6031] wwan wwan0: port wwan0mbim0 attached [ 436.817044][ T6031] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4a:51:6b:6c:0d:b2 [ 436.913039][ T6031] usb 1-1: USB disconnect, device number 18 [ 436.947321][ T6031] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 437.032116][ T6031] wwan wwan0: port wwan0mbim0 disconnected [ 439.222972][T10408] fuse: Bad value for 'fd' [ 439.336237][ T5900] Process accounting resumed [ 439.533943][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.817928][T10416] fuse: Bad value for 'fd' [ 439.861360][ T30] audit: type=1400 audit(1756268884.910:580): avc: denied { read write } for pid=10419 comm="syz.3.1092" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 439.884458][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.980482][ T5900] Process accounting resumed [ 440.006170][ T30] audit: type=1400 audit(1756268884.910:581): avc: denied { open } for pid=10419 comm="syz.3.1092" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 440.029226][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.155951][ T30] audit: type=1400 audit(1756268884.910:582): avc: denied { map } for pid=10419 comm="syz.3.1092" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 440.178904][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.352737][T10403] Process accounting resumed [ 442.101250][T10451] ntfs3(nullb0): Primary boot signature is not NTFS. [ 442.108401][T10451] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 442.536156][T10411] Process accounting resumed [ 442.595014][T10457] pim6reg1: entered promiscuous mode [ 442.606302][T10457] pim6reg1: entered allmulticast mode [ 445.023550][T10481] ntfs3(nullb0): Primary boot signature is not NTFS. [ 445.383875][T10481] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 448.186428][T10517] ntfs3(nullb0): Primary boot signature is not NTFS. [ 448.193704][T10517] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 451.523665][T10538] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940630386 (15762521544 ns) > initial count (6051692324 ns). Using initial count to start timer. [ 451.629935][T10543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.126895][T10547] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 452.133965][T10547] blk_print_req_error: 2 callbacks suppressed [ 452.133981][T10547] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.180494][T10564] ntfs3(nullb0): Primary boot signature is not NTFS. [ 453.187601][T10564] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 454.342343][T10571] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1130'. [ 455.099943][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.152574][T10574] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.601379][ T6031] lo speed is unknown, defaulting to 1000 [ 455.749901][T10571] mkiss: ax0: crc mode is auto. [ 457.062567][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 457.123230][T10601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.130683][T10601] IPv6: NLM_F_CREATE should be set when creating new route [ 457.814974][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 458.475623][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.502193][ T9] usb 5-1: config 0 has no interfaces? [ 458.507914][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 458.689019][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1143'. [ 458.829354][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.872663][T10623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 458.884231][T10623] block device autoloading is deprecated and will be removed. [ 458.980591][ T9] usb 5-1: config 0 descriptor?? [ 459.255638][ T5862] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 459.620379][ T30] audit: type=1400 audit(1756268904.670:583): avc: denied { setopt } for pid=10633 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.951247][ T9] usb 5-1: USB disconnect, device number 20 [ 460.124115][T10636] gfs2: gfs2 mount does not exist [ 460.542122][T10652] 9pnet_fd: Insufficient options for proto=fd [ 461.013440][ T30] audit: type=1400 audit(1756268906.060:584): avc: denied { read } for pid=10650 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 461.038211][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 461.056972][ T30] audit: type=1400 audit(1756268906.090:585): avc: denied { listen } for pid=10654 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 461.914337][T10663] serio: Serial port ptm0 [ 463.020225][ T6031] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 463.385285][ T6031] usb 3-1: Using ep0 maxpacket: 8 [ 463.395347][ T6031] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 463.414681][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.429250][ T6031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.469574][ T6031] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 463.562443][ T6031] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 463.604497][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.641451][ T6031] usb 3-1: config 0 descriptor?? [ 463.702891][T10683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 463.726468][ T5862] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 464.050754][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.080701][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.156030][T10689] block nbd1: Attempted send on invalid socket [ 464.162428][T10689] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 464.649325][ T6031] hid (null): report_id 40994 is invalid [ 464.661762][ T6031] hid (null): unknown global tag 0x9f [ 464.684809][ T6031] hid (null): unknown global tag 0xc [ 464.890703][ T6031] redragon 0003:0C45:760B.0009: report_id 40994 is invalid [ 464.913930][ T6031] redragon 0003:0C45:760B.0009: item 0 2 1 8 parsing failed [ 465.430797][ T6031] redragon 0003:0C45:760B.0009: probe with driver redragon failed with error -22 [ 465.483364][ T6031] usb 3-1: USB disconnect, device number 26 [ 465.799170][ T30] audit: type=1400 audit(1756268910.850:586): avc: denied { map } for pid=10701 comm="syz.0.1164" path="socket:[29953]" dev="sockfs" ino=29953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 465.853412][ T30] audit: type=1400 audit(1756268910.850:587): avc: denied { read accept } for pid=10701 comm="syz.0.1164" path="socket:[29953]" dev="sockfs" ino=29953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 465.981157][T10704] misc userio: Invalid payload size [ 467.989740][T10717] lo speed is unknown, defaulting to 1000 [ 467.996236][T10717] lo speed is unknown, defaulting to 1000 [ 468.320477][T10721] FAULT_INJECTION: forcing a failure. [ 468.320477][T10721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.334181][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.4.1167 Not tainted syzkaller #0 PREEMPT(full) [ 468.334207][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.334217][T10721] Call Trace: [ 468.334224][T10721] [ 468.334230][T10721] dump_stack_lvl+0x16c/0x1f0 [ 468.334255][T10721] should_fail_ex+0x512/0x640 [ 468.334279][T10721] _copy_to_user+0x32/0xd0 [ 468.334305][T10721] simple_read_from_buffer+0xcb/0x170 [ 468.334326][T10721] proc_fail_nth_read+0x197/0x240 [ 468.334349][T10721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.334375][T10721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.334395][T10721] vfs_read+0x1e4/0xcf0 [ 468.334417][T10721] ? __pfx___mutex_lock+0x10/0x10 [ 468.334438][T10721] ? __pfx_vfs_read+0x10/0x10 [ 468.334463][T10721] ? __fget_files+0x20e/0x3c0 [ 468.334491][T10721] ksys_read+0x12a/0x250 [ 468.334509][T10721] ? __pfx_ksys_read+0x10/0x10 [ 468.334535][T10721] do_syscall_64+0xcd/0x4c0 [ 468.334557][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.334575][T10721] RIP: 0033:0x7f63fbb8d5fc [ 468.334591][T10721] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.334608][T10721] RSP: 002b:00007f63f9dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.334626][T10721] RAX: ffffffffffffffda RBX: 00007f63fbdb6180 RCX: 00007f63fbb8d5fc [ 468.334638][T10721] RDX: 000000000000000f RSI: 00007f63f9dd50a0 RDI: 0000000000000006 [ 468.334649][T10721] RBP: 00007f63f9dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 468.334660][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.334671][T10721] R13: 00007f63fbdb6218 R14: 00007f63fbdb6180 R15: 00007fff331a1108 [ 468.334697][T10721] [ 468.513400][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.810957][T10734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.073923][T10739] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 469.074168][T10739] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 469.790516][ T6031] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 469.955773][ T6031] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 469.989311][ T6031] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 470.022535][ T6031] usb 5-1: config 1 has no interface number 1 [ 470.032071][ T6031] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.047307][ T6031] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 124, changing to 4 [ 470.061367][T10747] binder: 10746:10747 ioctl c0306201 200000000080 returned -14 [ 470.073143][T10747] binder: BINDER_SET_CONTEXT_MGR already set [ 470.086613][ T6031] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 470.100366][T10747] binder: 10746:10747 ioctl 4018620d 200000000040 returned -16 [ 470.126416][ T6031] usb 5-1: config 1 interface 2 has no altsetting 0 [ 470.133767][T10747] binder: 10746:10747 ioctl 8b28 200000000000 returned -22 [ 470.148079][ T6031] usb 5-1: string descriptor 0 read error: -22 [ 470.163762][ T6031] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.179767][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.449840][ T6031] usb 5-1: low speed audio streaming not supported [ 470.483219][T10757] use of bytesused == 0 is deprecated and will be removed in the future, [ 470.548407][T10759] ntfs3(nullb0): Primary boot signature is not NTFS. [ 470.555724][T10759] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 470.930324][T10757] use the actual size instead. [ 471.294788][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 472.101988][ T30] audit: type=1400 audit(1756268917.140:588): avc: denied { associate } for pid=10722 comm="syz.4.1171" name="mountinfo" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 473.824664][ T5900] usb 5-1: USB disconnect, device number 21 [ 474.094688][T10797] ntfs3(nullb0): Primary boot signature is not NTFS. [ 474.101836][T10797] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 474.932673][T10806] evm: overlay not supported [ 475.090223][ T6031] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 475.226818][T10812] siw: device registration error -23 [ 475.312345][ T6031] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.332554][ T6031] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.354428][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.569805][ T6031] usb 5-1: config 0 descriptor?? [ 475.730321][ T6031] pwc: Askey VC010 type 2 USB webcam detected. [ 476.266857][T10824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.289379][ T6031] pwc: recv_control_msg error -32 req 02 val 2b00 [ 476.297943][ T6031] pwc: recv_control_msg error -32 req 02 val 2700 [ 476.360674][ T6031] pwc: recv_control_msg error -32 req 02 val 2c00 [ 476.376246][ T6031] pwc: recv_control_msg error -32 req 04 val 1000 [ 476.383820][ T6031] pwc: recv_control_msg error -32 req 04 val 1300 [ 476.392557][ T6031] pwc: recv_control_msg error -32 req 04 val 1400 [ 477.750262][ T6031] pwc: recv_control_msg error -71 req 02 val 2500 [ 477.757447][ T6031] pwc: recv_control_msg error -71 req 02 val 2400 [ 477.771532][ T6031] pwc: recv_control_msg error -71 req 02 val 2600 [ 477.787776][ T6031] pwc: recv_control_msg error -71 req 02 val 2900 [ 477.794725][ T6031] pwc: recv_control_msg error -71 req 02 val 2800 [ 477.803096][ T6031] pwc: recv_control_msg error -71 req 04 val 1100 [ 477.810810][ T6031] pwc: recv_control_msg error -71 req 04 val 1200 [ 477.853266][ T6031] pwc: Registered as video103. [ 477.896231][ T6031] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 478.266765][ T6031] usb 5-1: USB disconnect, device number 22 [ 478.871028][T10857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 478.943509][T10857] syzkaller0: entered allmulticast mode [ 479.006151][ T30] audit: type=1400 audit(1756268923.990:589): avc: denied { read } for pid=10853 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 479.730731][T10869] ntfs3(nullb0): Primary boot signature is not NTFS. [ 479.737982][T10869] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 480.008675][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 480.170148][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 480.183599][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 480.194948][ T9] usb 1-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 480.208098][ T9] usb 1-1: config 0 has no interface number 0 [ 480.214457][ T9] usb 1-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.232824][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice=1c.2f [ 480.244952][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.253822][ T9] usb 1-1: Product: syz [ 480.257987][ T9] usb 1-1: Manufacturer: syz [ 480.266344][ T9] usb 1-1: SerialNumber: syz [ 480.420367][ T9] usb 1-1: config 0 descriptor?? [ 482.198870][T10902] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 482.312667][T10902] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 483.161767][T10908] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 483.756009][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 484.115878][ T9] snd-usb-audio 1-1:0.16: probe with driver snd-usb-audio failed with error -2 [ 484.143278][T10924] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 484.190398][ T9] usb 1-1: USB disconnect, device number 19 [ 484.466773][ T7345] udevd[7345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.132383][T10939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=10939 comm=syz.1.1231 [ 485.461904][T10921] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 485.585852][T10946] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1233'. [ 485.744424][ T30] audit: type=1400 audit(1756268930.800:590): avc: denied { bind } for pid=10943 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 486.268843][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.285274][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.450417][ T5862] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 487.908134][ T30] audit: type=1400 audit(1756268932.960:591): avc: denied { firmware_load } for pid=10964 comm="syz.3.1237" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 488.852371][T10984] lo speed is unknown, defaulting to 1000 [ 488.864767][T10984] lo speed is unknown, defaulting to 1000 [ 490.359839][T11001] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1244'. [ 492.373083][ T30] audit: type=1400 audit(1756268937.430:592): avc: denied { mount } for pid=10992 comm="syz.3.1244" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 492.400138][ T5963] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 492.620214][ T5963] usb 2-1: Using ep0 maxpacket: 16 [ 493.208543][ T5963] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 493.222847][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.376020][ T5963] usb 2-1: Product: syz [ 493.403976][ T5963] usb 2-1: Manufacturer: syz [ 493.480763][ T5963] usb 2-1: SerialNumber: syz [ 493.610953][ T5963] usb 2-1: config 0 descriptor?? [ 493.623103][ T5963] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 494.077796][ T5963] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 494.104077][ T5963] visor 2-1:0.0: probe with driver visor failed with error -5 [ 494.243934][ T5963] usb 2-1: USB disconnect, device number 29 [ 495.954268][ T30] audit: type=1400 audit(1756268941.010:593): avc: denied { create } for pid=11059 comm="syz.2.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 496.861519][T11071] ntfs3(nullb0): Primary boot signature is not NTFS. [ 496.869099][T11071] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 497.383027][T11074] bond_slave_1: entered promiscuous mode [ 497.392791][ T30] audit: type=1326 audit(1756268942.430:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 497.404317][T11073] bond_slave_1: left promiscuous mode [ 497.418703][ T30] audit: type=1326 audit(1756268942.430:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 497.449092][ T30] audit: type=1326 audit(1756268942.430:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 497.472493][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.676290][T11079] raw_sendmsg: syz.0.1267 forgot to set AF_INET. Fix it! [ 497.691294][T11079] futex_wake_op: syz.0.1267 tries to shift op by 36; fix this program [ 498.039527][ T30] audit: type=1326 audit(1756268942.430:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.063027][ T30] audit: type=1326 audit(1756268942.430:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.086454][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.096039][ T30] audit: type=1326 audit(1756268942.430:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.129607][ T30] audit: type=1326 audit(1756268942.430:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.152987][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.161241][ T30] audit: type=1326 audit(1756268942.430:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.359090][ T30] audit: type=1326 audit(1756268942.430:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 498.755923][ T30] audit: type=1326 audit(1756268942.440:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a018ebe9 code=0x7ffc0000 [ 499.918701][T11102] ntfs3(nullb0): Primary boot signature is not NTFS. [ 499.925891][T11102] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 500.107631][T11103] ntfs3(nullb0): Primary boot signature is not NTFS. [ 500.114937][T11103] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 500.328671][T11104] fuse: Bad value for 'fd' [ 500.361083][ T975] Process accounting resumed [ 500.607236][T11110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.991011][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.230607][T11095] Process accounting resumed [ 502.764800][T11133] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 502.772170][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 502.772180][ T30] audit: type=1400 audit(1756268947.820:623): avc: denied { create } for pid=11132 comm="syz.3.1280" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 503.523127][ T30] audit: type=1400 audit(1756268947.820:624): avc: denied { associate } for pid=11132 comm="syz.3.1280" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 503.617538][ T30] audit: type=1400 audit(1756268947.820:625): avc: denied { setattr } for pid=11132 comm="syz.3.1280" name="work" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 503.709343][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.801203][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.939327][ T30] audit: type=1400 audit(1756268947.830:626): avc: denied { write } for pid=11132 comm="syz.3.1280" name="work" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 503.940196][ T30] audit: type=1400 audit(1756268948.030:627): avc: denied { write open } for pid=11132 comm="syz.3.1280" path=2F202864656C6574656429 dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 504.031585][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.123138][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.609519][T11148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1285'. [ 504.631163][ T30] audit: type=1400 audit(1756268948.040:628): avc: denied { write } for pid=11132 comm="syz.3.1280" name="work" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 504.631588][ T30] audit: type=1400 audit(1756268948.040:629): avc: denied { add_name } for pid=11132 comm="syz.3.1280" name="#12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 504.722948][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.814664][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.990548][ T30] audit: type=1400 audit(1756268948.040:630): avc: denied { create } for pid=11132 comm="syz.3.1280" name="#12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 504.990937][ T30] audit: type=1400 audit(1756268948.040:631): avc: denied { write } for pid=11132 comm="syz.3.1280" name="work" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 505.082314][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.173946][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.240167][ T30] audit: type=1400 audit(1756268948.040:632): avc: denied { write } for pid=11132 comm="syz.3.1280" name="work" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 505.642915][T11167] ntfs3(nullb0): Primary boot signature is not NTFS. [ 505.748858][T11167] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 506.444628][T11174] ntfs3(nullb0): Primary boot signature is not NTFS. [ 506.451925][T11174] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 507.110389][T10334] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 507.214771][T11179] siw: device registration error -23 [ 507.279803][T10334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.280158][T10334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.393287][T10334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.553232][T10334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.071637][T10334] usb 2-1: Product: syz [ 508.093083][T10334] usb 2-1: Manufacturer: syz [ 508.108297][T10334] usb 2-1: SerialNumber: syz [ 508.228938][T10334] cdc_mbim 2-1:1.0: skipping garbage [ 508.247903][T10334] usb 2-1: selecting invalid altsetting 1 [ 509.072170][T10334] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 509.073985][T10334] cdc_mbim 2-1:1.0: bind() failure [ 509.944727][T11216] fuse: Unknown parameter '0x000000000000000a' [ 510.751643][ T6031] usb 2-1: USB disconnect, device number 30 [ 511.600126][ T6031] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 512.026318][ T6031] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 512.047339][ T6031] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 512.556487][ T6031] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 512.593652][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.851147][T11227] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 512.859920][ T6031] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.870063][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 513.475665][ T5914] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.503480][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.574967][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.607924][ T5914] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.628615][ T5914] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.680786][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.722555][T11238] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 513.742008][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.814422][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 513.814433][ T30] audit: type=1400 audit(1756268958.870:641): avc: denied { mount } for pid=11221 comm="syz.4.1306" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 513.936302][ T5914] usb 5-1: USB disconnect, device number 23 [ 514.009653][ T30] audit: type=1326 audit(1756268958.960:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 514.067874][ T30] audit: type=1326 audit(1756268958.960:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 514.306333][ T30] audit: type=1326 audit(1756268958.960:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 514.333091][ T30] audit: type=1326 audit(1756268958.960:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 514.399816][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.529748][ T30] audit: type=1326 audit(1756268958.960:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 514.562500][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.670764][ T30] audit: type=1326 audit(1756268958.960:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 515.121418][ T30] audit: type=1326 audit(1756268958.960:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 515.122342][ T30] audit: type=1326 audit(1756268958.990:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 515.122380][ T30] audit: type=1326 audit(1756268958.990:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11221 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f63fbb8ebe9 code=0x7ffc0000 [ 515.241058][T11262] siw: device registration error -23 [ 515.584422][ T9] usb 4-1: USB disconnect, device number 29 [ 515.680219][ T5914] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 515.831956][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.849049][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.964667][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.982154][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.996361][ T5914] usb 5-1: Product: syz [ 516.000608][ T5914] usb 5-1: Manufacturer: syz [ 516.005273][ T5914] usb 5-1: SerialNumber: syz [ 516.124164][ T5914] cdc_mbim 5-1:1.0: skipping garbage [ 516.130174][ T5914] usb 5-1: selecting invalid altsetting 1 [ 516.222790][T11276] ntfs3(nullb0): Primary boot signature is not NTFS. [ 516.230051][T11276] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 516.598776][ T5914] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 516.612216][ T5914] cdc_mbim 5-1:1.0: bind() failure [ 517.020109][ T5914] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 517.751592][ T5914] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 517.774189][ T5914] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 517.811739][ T5914] usb 1-1: config 54 has no interface number 0 [ 517.834716][ T5914] usb 1-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30 [ 518.018232][ T5914] usb 1-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 518.063198][ T5914] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 518.068241][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 518.076966][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.089939][ T5914] usb 1-1: Product: syz [ 518.095016][ T5914] usb 1-1: Manufacturer: syz [ 518.099792][ T5914] usb 1-1: SerialNumber: syz [ 518.211065][ T5914] hub 1-1:54.154: bad descriptor, ignoring hub [ 518.309141][ T5914] hub 1-1:54.154: probe with driver hub failed with error -5 [ 518.527055][ T5914] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 518.529032][ T9] usb 5-1: USB disconnect, device number 24 [ 518.601476][ T1301] usb 1-1: Failed to submit usb control message: -71 [ 518.629255][ T5914] usb 1-1: USB disconnect, device number 20 [ 518.633769][ T1301] usb 1-1: unable to send the bmi data to the device: -71 [ 518.643027][ T1301] usb 1-1: unable to get target info from device [ 518.650935][ T1301] usb 1-1: could not get target info (-71) [ 518.867520][ T1301] usb 1-1: could not probe fw (-71) [ 521.136357][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 521.136373][ T30] audit: type=1400 audit(1756268966.193:668): avc: denied { ioctl } for pid=11328 comm="syz.2.1332" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 521.310713][ T30] audit: type=1400 audit(1756268966.233:669): avc: denied { create } for pid=11328 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 521.390630][T10334] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 522.208801][ T30] audit: type=1400 audit(1756268967.263:670): avc: denied { connect } for pid=11349 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.229892][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 522.255635][T10334] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.667654][ T30] audit: type=1400 audit(1756268967.303:671): avc: denied { getopt } for pid=11349 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.676262][T10334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.793188][T11351] fuse: Bad value for 'fd' [ 522.842101][ T975] Process accounting resumed [ 523.117403][T10334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.542570][T10334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.556710][T10334] usb 5-1: Product: syz [ 523.575014][T10334] usb 5-1: Manufacturer: syz [ 523.767607][T10334] usb 5-1: SerialNumber: syz [ 523.789431][T10334] cdc_mbim 5-1:1.0: skipping garbage [ 524.352191][T10334] usb 5-1: selecting invalid altsetting 1 [ 524.760524][T10334] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 524.766864][T10334] cdc_mbim 5-1:1.0: bind() failure [ 524.992895][T11347] Process accounting resumed [ 525.040416][ T9] usb 5-1: USB disconnect, device number 25 [ 525.053012][ T975] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 525.328053][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.689611][ T975] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 525.706301][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.728812][ T975] usb 4-1: config 0 descriptor?? [ 526.029373][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 526.538785][ T975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 526.572627][ T975] pwc: recv_control_msg error -32 req 02 val 2700 [ 526.592998][ T975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 526.607081][ T975] pwc: recv_control_msg error -32 req 04 val 1000 [ 526.627530][ T975] pwc: recv_control_msg error -32 req 04 val 1300 [ 526.785561][ T975] pwc: recv_control_msg error -32 req 04 val 1400 [ 526.796629][ T975] pwc: recv_control_msg error -32 req 02 val 2000 [ 527.082946][T11398] ntfs3(nullb0): Primary boot signature is not NTFS. [ 527.090427][T11398] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 527.857145][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 527.867995][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 527.884534][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 527.903061][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 527.920337][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 527.932562][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 527.970389][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 527.984933][T11408] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.003044][ T30] audit: type=1400 audit(1756268973.043:672): avc: denied { write } for pid=11401 comm="syz.1.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 528.052904][ T975] pwc: Registered as video103. [ 528.058653][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 528.136004][ T975] usb 4-1: USB disconnect, device number 30 [ 529.190217][ T5963] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 529.505343][T11427] FAULT_INJECTION: forcing a failure. [ 529.505343][T11427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.556458][ T5963] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.580182][T11427] CPU: 1 UID: 0 PID: 11427 Comm: syz.4.1358 Not tainted syzkaller #0 PREEMPT(full) [ 529.580209][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.580219][T11427] Call Trace: [ 529.580226][T11427] [ 529.580233][T11427] dump_stack_lvl+0x16c/0x1f0 [ 529.580257][T11427] should_fail_ex+0x512/0x640 [ 529.580281][T11427] _copy_from_user+0x2e/0xd0 [ 529.580304][T11427] kstrtouint_from_user+0xd6/0x1d0 [ 529.580321][T11427] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 529.580337][T11427] ? __lock_acquire+0xb97/0x1ce0 [ 529.580375][T11427] proc_fail_nth_write+0x83/0x220 [ 529.580396][T11427] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.580424][T11427] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.580443][T11427] vfs_write+0x29d/0x11d0 [ 529.580466][T11427] ? __pfx___mutex_lock+0x10/0x10 [ 529.580486][T11427] ? __pfx_vfs_write+0x10/0x10 [ 529.580512][T11427] ? __fget_files+0x20e/0x3c0 [ 529.580540][T11427] ksys_write+0x12a/0x250 [ 529.580558][T11427] ? __pfx_ksys_write+0x10/0x10 [ 529.580577][T11427] ? fput+0x9b/0xd0 [ 529.580603][T11427] do_syscall_64+0xcd/0x4c0 [ 529.580626][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.580643][T11427] RIP: 0033:0x7f63fbb8d69f [ 529.580658][T11427] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 529.580675][T11427] RSP: 002b:00007f63fc922030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 529.580691][T11427] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63fbb8d69f [ 529.580703][T11427] RDX: 0000000000000001 RSI: 00007f63fc9220a0 RDI: 0000000000000008 [ 529.580713][T11427] RBP: 00007f63fc922090 R08: 0000000000000000 R09: 0000000000000000 [ 529.580722][T11427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 529.580731][T11427] R13: 00007f63fbdb6038 R14: 00007f63fbdb5fa0 R15: 00007fff331a1108 [ 529.580756][T11427] [ 529.778266][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.977030][ T5963] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 529.986074][ T5963] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.997692][ T5963] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.008708][ T5963] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.020628][ T5963] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 530.030425][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.499572][T11421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 530.517489][ T5963] hub 1-1:1.0: bad descriptor, ignoring hub [ 530.525726][ T5963] hub 1-1:1.0: probe with driver hub failed with error -5 [ 530.533647][ T5963] cdc_wdm 1-1:1.0: skipping garbage [ 530.538999][ T5963] cdc_wdm 1-1:1.0: skipping garbage [ 530.547353][ T5963] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 530.553589][ T5963] cdc_wdm 1-1:1.0: Unknown control protocol [ 532.874417][T11470] overlayfs: unescaped trailing colons in lowerdir mount option. [ 532.890091][ T30] audit: type=1400 audit(1756268977.943:673): avc: denied { create } for pid=11469 comm="syz.0.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 532.990339][ T975] usb 1-1: USB disconnect, device number 21 [ 535.213555][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 535.350307][ T6031] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 535.559182][ T6031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.793411][ T6031] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 535.831393][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.892870][ T6031] usb 2-1: config 0 descriptor?? [ 535.905405][ T6031] pwc: Askey VC010 type 2 USB webcam detected. [ 536.030212][ T30] audit: type=1400 audit(1756268981.073:674): avc: denied { write } for pid=11503 comm="syz.4.1380" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 536.173655][T11509] ntfs3(nullb0): Primary boot signature is not NTFS. [ 536.180888][T11509] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 536.604184][ T6031] pwc: recv_control_msg error -32 req 02 val 2b00 [ 536.619563][ T6031] pwc: recv_control_msg error -32 req 02 val 2700 [ 536.642854][ T6031] pwc: recv_control_msg error -32 req 02 val 2c00 [ 536.667583][ T6031] pwc: recv_control_msg error -32 req 04 val 1000 [ 536.687278][ T6031] pwc: recv_control_msg error -32 req 04 val 1300 [ 536.706480][ T6031] pwc: recv_control_msg error -32 req 04 val 1400 [ 536.929618][ T6031] pwc: recv_control_msg error -32 req 02 val 2000 [ 537.752798][ T6031] pwc: recv_control_msg error -71 req 02 val 2400 [ 537.759617][ T6031] pwc: recv_control_msg error -71 req 02 val 2600 [ 537.784473][T11515] siw: device registration error -23 [ 537.793943][ T6031] pwc: recv_control_msg error -71 req 02 val 2900 [ 537.814908][ T6031] pwc: recv_control_msg error -71 req 02 val 2800 [ 537.834357][ T6031] pwc: recv_control_msg error -71 req 04 val 1100 [ 537.848228][ T6031] pwc: recv_control_msg error -71 req 04 val 1200 [ 537.871104][ T6031] pwc: Registered as video103. [ 537.887968][ T6031] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 537.923578][ T6031] usb 2-1: USB disconnect, device number 31 [ 538.579655][T11538] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 538.676220][ T30] audit: type=1400 audit(1756268983.713:675): avc: denied { ioctl } for pid=11532 comm="syz.3.1387" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.888138][ T30] audit: type=1400 audit(1756268983.943:676): avc: denied { nlmsg_read } for pid=11542 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 538.888183][T11544] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1388'. [ 540.083839][T11559] lo speed is unknown, defaulting to 1000 [ 540.096179][T11559] lo speed is unknown, defaulting to 1000 [ 540.214318][T11556] syzkaller1: entered promiscuous mode [ 540.219799][T11556] syzkaller1: entered allmulticast mode [ 541.940378][T11574] ntfs3(nullb0): Primary boot signature is not NTFS. [ 541.947536][T11574] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 543.433759][ T30] audit: type=1400 audit(1756268988.493:677): avc: denied { append } for pid=11576 comm="syz.3.1395" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 543.959569][T11578] SELinux: failed to load policy [ 544.420298][ T6031] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 544.584769][ T6031] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.596100][ T6031] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.606137][ T6031] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 544.647066][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.735545][ T6031] usb 4-1: config 0 descriptor?? [ 545.062925][T11605] syz.3.1398 (11605): drop_caches: 4 [ 545.674202][ T6031] usb 4-1: USB disconnect, device number 31 [ 548.061160][ T975] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 548.069566][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 548.304459][T11638] ------------[ cut here ]------------ [ 548.309933][T11638] kernel BUG at fs/buffer.c:1582! [ 548.315010][T11638] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 548.321415][T11638] CPU: 1 UID: 0 PID: 11638 Comm: syz.1.1410 Not tainted syzkaller #0 PREEMPT(full) [ 548.330772][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.340815][T11638] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 548.346091][T11638] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 87 9d 73 ff 90 <0f> 0b e8 0f fa d9 ff e9 a5 fe ff ff 4c 89 ef e8 12 f9 d9 ff e9 cf [ 548.365679][T11638] RSP: 0018:ffffc9000db978d8 EFLAGS: 00010287 [ 548.371729][T11638] RAX: 0000000000002024 RBX: ffffea000154e600 RCX: ffffc900110f7000 [ 548.379684][T11638] RDX: 0000000000080000 RSI: ffffffff8247ee79 RDI: 0000000000000006 [ 548.387633][T11638] RBP: ffff88806882a658 R08: 0000000000000006 R09: 0000000000004000 [ 548.395588][T11638] R10: 0000000000004000 R11: 0000000000000000 R12: 0000000000004000 [ 548.403543][T11638] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 548.411498][T11638] FS: 00007f8687f196c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 548.420410][T11638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.426980][T11638] CR2: 00007f8687f18f98 CR3: 0000000058a26000 CR4: 00000000003526f0 [ 548.434938][T11638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.442900][T11638] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 548.450855][T11638] Call Trace: [ 548.454115][T11638] [ 548.457026][T11638] folio_alloc_buffers+0x295/0x6c0 [ 548.462126][T11638] __getblk_slow+0x1f4/0x560 [ 548.466705][T11638] bdev_getblk+0xd4/0xe0 [ 548.470930][T11638] __bread_gfp+0x86/0x3c0 [ 548.475251][T11638] ntfs_bread+0xd9/0x210 [ 548.479481][T11638] ntfs_fill_super+0x64f/0x4270 [ 548.484318][T11638] ? __pfx_vsnprintf+0x10/0x10 [ 548.489062][T11638] ? snprintf+0xc7/0x100 [ 548.493282][T11638] ? __pfx_snprintf+0x10/0x10 [ 548.497934][T11638] ? __pfx_ntfs_fill_super+0x10/0x10 [ 548.503208][T11638] ? do_raw_spin_lock+0x12c/0x2b0 [ 548.508212][T11638] ? find_held_lock+0x2b/0x80 [ 548.512872][T11638] ? sb_set_blocksize+0x188/0x1d0 [ 548.517893][T11638] ? setup_bdev_super+0x369/0x730 [ 548.522907][T11638] get_tree_bdev_flags+0x38c/0x620 [ 548.527997][T11638] ? __pfx_ntfs_fill_super+0x10/0x10 [ 548.533265][T11638] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 548.538878][T11638] ? bpf_lsm_capable+0x9/0x10 [ 548.543538][T11638] ? security_capable+0x7e/0x260 [ 548.548456][T11638] vfs_get_tree+0x8b/0x340 [ 548.552858][T11638] path_mount+0x1513/0x2000 [ 548.557344][T11638] ? __pfx_path_mount+0x10/0x10 [ 548.562176][T11638] ? kmem_cache_free+0x2d1/0x4d0 [ 548.567089][T11638] ? putname+0x154/0x1a0 [ 548.571315][T11638] ? putname+0x154/0x1a0 [ 548.575540][T11638] ? __x64_sys_mount+0x28d/0x310 [ 548.580459][T11638] __x64_sys_mount+0x28d/0x310 [ 548.585215][T11638] ? __pfx___x64_sys_mount+0x10/0x10 [ 548.590482][T11638] do_syscall_64+0xcd/0x4c0 [ 548.594966][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.600838][T11638] RIP: 0033:0x7f868718ebe9 [ 548.605229][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.624814][T11638] RSP: 002b:00007f8687f19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.633203][T11638] RAX: ffffffffffffffda RBX: 00007f86873b6270 RCX: 00007f868718ebe9 [ 548.641151][T11638] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 548.649098][T11638] RBP: 00007f8687211e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.657043][T11638] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000000 [ 548.665004][T11638] R13: 00007f86873b6308 R14: 00007f86873b6270 R15: 00007ffdd4715268 [ 548.672961][T11638] [ 548.675960][T11638] Modules linked in: [ 548.680589][T11638] ---[ end trace 0000000000000000 ]--- [ 548.686040][T11638] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 548.691769][T11638] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 87 9d 73 ff 90 <0f> 0b e8 0f fa d9 ff e9 a5 fe ff ff 4c 89 ef e8 12 f9 d9 ff e9 cf [ 548.711570][T11638] RSP: 0018:ffffc9000db978d8 EFLAGS: 00010287 [ 548.712337][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 548.717630][T11638] RAX: 0000000000002024 RBX: ffffea000154e600 RCX: ffffc900110f7000 [ 548.717646][T11638] RDX: 0000000000080000 RSI: ffffffff8247ee79 RDI: 0000000000000006 [ 548.717657][T11638] RBP: ffff88806882a658 R08: 0000000000000006 R09: 0000000000004000 [ 548.717667][T11638] R10: 0000000000004000 R11: 0000000000000000 R12: 0000000000004000 [ 548.717677][T11638] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 548.717688][T11638] FS: 00007f8687f196c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 548.750480][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 548.758416][T11638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.758433][T11638] CR2: 00007f8687f18f98 CR3: 0000000058a26000 CR4: 00000000003526f0 [ 548.789680][ T975] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 548.795714][T11638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.795730][T11638] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 548.795744][T11638] Kernel panic - not syncing: Fatal exception [ 548.795966][T11638] Kernel Offset: disabled